2

Transcription

1 1

2 2

3 3

4 4

5 5

6 6

7 7

8 8

9 9

10 10

11 11

12 12

13 13

14 14

15 15

16 Here is our agenda. We have a lot to fit in over the next hour and 45 minutes so please hold questions until the end if you wouldn t mind. We will try to have about 15 minutes at the end for questions and we will stay around after the session for any we missed during that time. When we developed this content we wanted to make sure we touched on both the technology involved in helping solve the problem and also the business policies and processes that are required. We also have our solution demos interspersed throughout the presentation. All of our data points will be included in the download of the session which will be available for free at Cisco Live 365 in a couple of weeks. Everything we discuss is documented and URL s provided to all of the supplemental material including the demo videos. 16

17 17

18 Why did we decide on data protection as a topic for Cisco Live? The big idea here is that we ve seen a lack of focus on this topic in general. There have been no Cisco Live sessions regarding data protection and it s not something we generally talk about to our customers. Much of this is changing as we continue to build relationships with data protection partners and since we ve developed the dense storage server the C3160 and C3260. Both Tim and I come from the customer side and have lots of experience with having to develop and deploy DR plans, we ve also both seen how disasters can affect these businesses and why there needs to be more focus on this topic. As we said during the intro, we both support service provider customers and many of them have service offerings in this space. It s something we wanted to cover and make sure everyone is aware of as a method of off-siting your data even if you don t have a secondary data center. Finally we believe we have some interesting ideas around how to build the DR plan and choose the tools that will help you protect your business. 18

19 19

20 Over the next few slides we will provide some relevant data points around why companies need to come up with ways to protect data. Through our research we found that a shockingly low number of SMB s have a DR plan even given the fact that there are a fair number of businesses that simply cease to exist if they do experience a disaster. Often times we see that even when a plan is in place all of the data is housed in a single site and there is no redundancy or replication of that data. The virtualization movement has definitely helped us with our backup and DR requirements. As many of us know, backing up a virtual machine is much easier than protecting a physical server but many larger companies still have physical assets that need protected and this can complicate tool selection and DR planning a8af62a

21 The fact of the matter is, disasters do still happen but disaster recovery isn t typically a top of mind activity for a company, it s considered insurance at best and no one wants to ever have to use that insurance. Disasters don t have to be the big tornado or hurricane, they can come in all shapes and sizes. In fact, the majority of data loss happens from regular system and hardware failure along with human error and software corruption. Case in point being that we actually had an array failure in our lab, we had 2 drives go bad and experienced some significant downtime because of this. The following data point is a little bit dated but the fact remains that hard drives fail, SSD s fail also and when they do companies need to have an assured method for providing protection for the data that lives on these devices. A quick question to our audience Google data is 2007 reliability has increased but number of hard drives has also increased Downtime costs range from thousands to tens of thousands per hour averages range greatly between reports 21

22 Finally, another way to look at data loss and the need for some sort of backup and recovery capabilities in the data center. We re seeing a dramatic spike of ransomware in the wild. We won t talk about other viruses in this session we re only pointing this one out because of it s capabilities and the effect it s having in the world today. Also, McAfee has actually been seeing ransomware-as-a-service purchasable via the Tor network using bitcoin. In 2015 we saw ransomware-as-a-service hosted on the Tor network and using virtual currencies for payments McAfee Labs 2016 Threat Predictions

23 Vendors were independently chosen. We did work with them in the lab however data given on the following "The Tools" slides is from the manufacturers. The goal for the session was to minimize the marketing aspect and they could not provide wording or verbiage to any other parts of the presentation. 23

24 *Indicates item where we have partial compliance **Indicates item not included in the lab environment Demos may support more but we have listed one bullet on each as an example Use these as a starting point for your own DR/BC Strategy Can be prioritized to allow for best use of funding and time (what you need immediately and what can be assigned to later phases) 24

25 25

26 26

27 27

28 Ability to adopt newer processes and find efficiencies is the key to staying relevant both to internal and external customers Have to get away from the mentality of we spent so much money on XYZ product over the years and we aren t Facebook or Google Challenge the politics within your organization the best employees effect change Technology is constantly changing and your processes and tools should change with it Depending on procurement model leverage RFP to ensure response is limited to appropriate technology Consider investing in POC or leverage partners who can facilitate an evaluation of technology 28

29 It is normally the path of least resistance the do nothing approach Oracle DB, MS SQL/Exchange, and many applications have built in tools that can be automated via scripting (but beware the mad scripter who comments for no man) Oracle has Point in Time Restore feature (requires DB restore) and Flashback (uses Flashback redo logs more efficient than PITR) MS SQL in Azure offers point in time restores (5 min RPO) Exchange has LAG database (supposed to be easier to manage in 2016) and single item restore functionality

30 The TruckBusMinivanLimoSnowplowRV 30

31 Databases: Docker:

32 Bimodal IT: Databases: Docker:

33 Drew from experience as customers as well as from our own customers across a wide range of size and verticals Understand that while we may want customers to use all Cisco we need to consider customer choice Storage based software (with some exceptions) is not very granular we don t store all of our 5 minute RPO on 2 or 3 LUNs Virtual First practice in place and working at many large companies including Cisco 33

34 Normally would have 2 Nexus switches with VPC enabled for redundancy C3260 would have been USC Managed but was not supported at the time the lab was built (could have leveraged storage profiles) Site 2 leveraged UCS Mini with embedded 6324 Fabric Interconnects 34

35 35

36 We would normally recommend using UCS Central to create and manage the backup policy for UCS but can be done easily without 36

37 Gotcha: TCP adjust-mss and IP MTU should be set otherwise you may experience connectivity problems (in our lab we could ping and even use putty but could not open UCSM or vsphere across sites) Session on Thursday BRKDCT-2049 Overlay Transport Virtualization 37

38 38

39 Commvault protecting all physical and select workloads at Site 1 Using server side deduplication Aux Copy to Site 2 Media Agent Can do VM restore, P V restore, or V Azure restore Chose to have virtual CommServe for ease of DR VSA = Virtual Server Agent Proxy 39

40 40

41 41

42 42

43 43

44 44

45

46 Veeam protecting most of the virtual workloads in both sites and demo lab which is all virtual Backup Copy job is sending data to Site 2 and to iland Tier 2 Replication is done on a 4 hour schedule from snapshots Tier 3 Replication is done on a daily schedule from the backup copy data residing at Site 2 Have Veeam virtual lab built out which can be used to test backups and upgrades complete with Internet access (not meant to be static test lab) Considerations for scaling include number of concurrent jobs, modifying defaults in software, IO Control in vsphere, and others 46

47 47

48 48

49 49

50 50

51 51

52 52

53 53

54 54

55 Replicating all Tier I VM to Site 2 Failover can be performed from either Site (could do cross site replication) Site 2 VMs are being replicated to iland to demonstrate the options available many use cases apply VPG Failover testing can be used to ensure functionality of the applications (using isolated network) Can achieve very aggressive RPO with very low RTO ZVRA use DRS rules to stay sticky to the host. Important thing to remember is you must shut down the ZVRA before host will go into maintenance mode and you need to coordinate the upgrade of the Zerto environment with the upgrade of vsphere 55

56 56

57 57

58 58

59 59

60 60

61 61

62 62

63 63

64 Odds are unless you are a very small shop nobody knows all of the moving parts in an application SMB Bob is a single source of information but rarely is it documented /Bob also has his hands in many of the systems and frequently makes changes IT Silos are challenging to deal with on many levels and adds layers to the process App Dev should understand the inner workings of the application but frequently don t have deep infrastructure knowledge Business owners understand things like batch processing and what happens on certain days of the week/month sometimes can be very knowledgeable Remember that in a true disaster having a clear and detailed process document is critical 64

65 SLA creation can be frustrating and time consuming You have to start somewhere so take inventory of the tools you have and come up with realistic SLA based on that remember it s a starting point Remember the best way to eat an elephant.one bite at a time Tip to remember is cushion your SLA if you think you can get 5 minutes obligate to 10 just like sales we can often bring the price down but almost never up 65

66 Business Problems: Getting rid of PST files Deciding how to handle printed material Local files on user PCs Retraining users about the policy 66

67 Example of Industry Specific Requirements: fting_the_costs_of_compliance.html

68 68

69 69

70 70

71 71

72 72

73 73

74 74

75 75

76 76

77 77

78 For regional SP it s very important to understand capacity in the event of a region wide disaster. Do they have enough capacity? How are multiple customer requests serviced during this time? Understand that an SLA cannot always be met and often there are pre-defined refunds which may not equate to the revenue and time lost during an outage. 78

79 Depending on the disaster odds are very high that employees will need to take care of family first or in some cases may be incapacitated and unable to respond Getting the applications up and functional is great but not so great if employees have no way to access them remember if the disaster is regional odds are you are competing for space/bandwidth not just with the DR facility but potentially with the carrier as well (your business and your users) 79

80 For regional SP it s very important to understand capacity in the event of a region wide disaster. Do they have enough capacity? How are multiple customer requests serviced during this time? Understand that an SLA cannot always be met and often there are pre-defined refunds which may not equate to the revenue and time lost during an outage. 80

81 81

82 82

83 Greater uptime, quicker recovery and the peace of mind you deserve 83

84 84

85 85

86 86

87 87

88 88

89 89

90 90

91 91