混合雲的資料安全保護 架構與策略 資深技術顧問藍基能

Transcription

1 混合雲的資料安全保護 架構與策略 資深技術顧問藍基能

2 AGENDA XtrmeIO&DD 20 倍速備份 EMC Cloud Data Protection Cloud Storage Hybrid Model Born In The Cloud Model VMware vrealized Data Protection Extension

3 Technology Underlying ProtectPoint w/ XtremIO App Integration: Agents 1. File Systems Agent 2. Application Agent Change Block Tracking/ Data Movement Engine XtremIO and RecoverPoint technology New Block New Block Point in Time Copy Production Protection Storage Data Domain Block 1. Dedupe 2. Compress 3. Write to File System Full Backup

4 BACKUP WITH PROTECTPOINT FOR XTREMIO FULL BACKUPS EVERY TIME, ONLY UNIQUE BLOCKS SENT Application Owner 1 Application Server 2 Agent Catalog 3 Backup 1. App owner triggers backup at an application consistent checkpoint 2. Only changed blocks sent directly to Data Domain 3. Data Domain uses the changed blocks to create full backups in native format Production

5 BACKUP WITH PROTECTPOINT FOR XTREMIO INFRASTRUCTURE DRIVEN BACKUPS NEW! Production 1 Application Server 2 Agent Catalog 3 Backup 1. Infrastructure policy initiates triggers backup at an storage consistent checkpoint 2. Only changed blocks sent directly to Data Domain 3. Data Domain uses the changed blocks to create full backups in native format

6 RECOVERY WITH PROTECTPOINT FOR XTREMIO FULL RECOVERY DIRECTLY FROM DATA DOMAIN 1 Catalog 1. App owner triggers recovery 3 Application Owner Application Server 2 Agent Backup 2. The backup image is read from the Data Domain 3. Primary storage replaces production LUN with the recovered copy Backup Production

7 RECOVERY WITH PROTECTPOINT FOR XTREMIO GRANULAR RECOVERY VIA INSTANT ACCESS 1 Catalog 1. App owner triggers recovery Application Owner Agent Application Server 3 2. App server connects to the backup image from the Data Domain 2 Backup 3. App owner recovers the specific object(s) to the production database Production Backup

8 EMC CLOUD DATA PROTECTION ENABLING CLOUD DATA PROTECTION FOR ALL CONSUMPTION MODELS On Premise Virtual Hybrid 30 Retention (LTR) BaaS & DRaaS Archive Born In The Cloud EMC Data Protection Data Protection Services Availability Compliance Recovery Security Platform Integration Data Management Services Policy-based Automation Catalog Monitoring Analytics On-Premise Storage Cloud Storage 3 rd Party Partner Clouds 3 rd Party Clouds

9 EMC CLOUD DATA PROTECTION ENABLING CLOUD DATA PROTECTION FOR ALL CONSUMPTION MODELS On Premise Virtual Hybrid 30 Retention (LTR) BaaS & DRaaS Archive Born In The Cloud EMC Data Protection Data Protection Services Availability Compliance Recovery Security Platform Integration Data Management Services Policy-based Automation Catalog Monitoring Analytics On-Premise Storage Cloud Storage 3 rd Party Partner Clouds 3 rd Party Clouds

10 ELASTIC CLOUD STORAGE Lower OpEx with no Vendor Lock-in No Single points of Failure Broad Industry Standard Support Documents (XLS, PPT, DOC) Rich Media (PDF, JPG, Video, Streaming) Sensor Data (GPS, measurements) Unstructured Content (Web Server logs, etc.) Scale Effortlessly - Store Efficiently - Access Globally

11 參考建置架構 Hsinchu Taichung Tainan Authentication OpenLDAP OpenLDAP Authentication SAO SAO JBOSS JBOSS GSLB Server Load Balancer Active Storage Access Object Home Grown Application OpenLDAP OpenLDAP Authentication Standby GSLB Global Server Load Balancer SAO SAO JBOSS JBOSS GSLB Server Load Balancer Active Storage Access Object Home Grown Application Standby SAO SAO JBOSS JBOSS GSLB Server Load Balancer Active SolrCloud OpenLDAP OpenLDAP Authentication G3-Flex Nodes with 4TB Disks RAW Capacity: 960TB Hsinchu G3-Flex Nodes with 4TB Disks RAW Capacity: 960TB Taichung G3-Flex Nodes with 4TB Disks RAW Capacity: 960TB Tainan

12 ECS Software Enterprise & SPs DIY with Third Party Commodity Hardware ECS Appliance Enterprise & SPs Hyperscale Cloud Storage Platform EMC Service and Support

13 EMC CLOUD DATA PROTECTION ENABLING CLOUD DATA PROTECTION FOR ALL CONSUMPTION MODELS On Premise Virtual Hybrid 30 Retention (LTR) BaaS & DRaaS Archive Born In The Cloud EMC Data Protection Data Protection Services Availability Compliance Recovery Security Platform Integration Data Management Services Policy-based Automation Catalog Monitoring Analytics On-Premise Storage Cloud Storage 3 rd Party Partner Clouds 3 rd Party Clouds

14 CLOUDBOOST ENABLES AN ALTERNATIVE SOLUTION IN CLOUD TO AVOID TAPE HEADACHES Primary storage EMC Data Protection Suite 支援備份資料長期保留 Cloud 作為 Remote Site *future ROBO Files VMware & Hyper-V Desktops Laptops NAS/NDMP DB Databases Veritas NetBackup LAN LAN CloudBoost Appliance (Virtual or Physical) Site Cache 3 rd Party Clouds Public Cloud Partner Clouds Metadata Applications Private Cloud

15 SUPPORTED CLOUDS Public AT&T Synaptic Storage Amazon S3 Microsoft Azure Google Cloud Storage Private EMC ECS OpenStack Swift EMC Atmos

16 建議備份架構示意圖及規劃重點 涵蓋虛擬 實體機及各種資料庫的完整備份方案 Private Cloud Public Cloud VM DB File Web Client Direct BBB VSF 提供 3-5 倍的備份效能提升 引用 Cloud Storage 降低建置成本 單一備份 Server, 管理維護容易 Client Direct, 不需 Media Server 備份速度比一般備份軟體快 3-5 倍 架構簡單, 維護容易, 具成本效益 Metadata & Command NetWorker& Avamar Server Backup Data 1 st Copy Clone To Cloud CloudBoost Virtual or Physical Appliance 加密去重複雲端複製 去重複率優, 儲存及複製頻寬成本低 擴充容易, 只需增加硬碟櫃 2 nd Copy 以 Cloud Storage 降低成本支援長期保存 並提供異地方案 一個 CloudBoost 可管理 6PB 以 DD 作第一階備份儲存設備, 加速備份及回復速度, 也降低 Cloud 成本 Data Domain 以去重複技術降低與 Cloud 的資料傳輸費用及儲存成本 Cloud Storage

17 DATA DOMAIN CLOUD TIERING FOR THE LONG TERM RETENTION (LTR) USE CASE S Dedupe Data copied to Cloud. Jut Meta Data moved to Cloud Tier Dedupe Data copied to Cloud. Jut Meta Data moved to Cloud Tier Networker /Avamar 3 rd Party DDBoost Enabled Backup Apps DDBoost for Enterprise Apps Backup Server Data movement Policy Active Dedupe Cloud Tier* What ever dedupe rate you get in Active = Dedupe in the Cloud ECS OnPrem ECS² Service*8 ATMOS EMC Partner Clouds 3 rd Party Public Clouds Data Domain * DD Cloud Tiering Targeted for 2H 2016 ** ECS² Is a Object storage as a Service Solution targeted for 1 st Half 2016

18 ECS HARDWARE AND UPGRADE PATH

19 備份儲存設備評估報告 Gartner & IDC EMC Data Domain EMC Data Domain Gartner IDC

20 EMC CLOUD DATA PROTECTION ENABLING CLOUD DATA PROTECTION FOR ALL CONSUMPTION MODELS On Premise Virtual Hybrid 30 Retention (LTR) BaaS & DRaaS Archive Born In The Cloud EMC Data Protection Data Protection Services Availability Compliance Recovery Security Platform Integration Data Management Services Policy-based Automation Catalog Monitoring Analytics On-Premise Storage Cloud Storage 3 rd Party Partner Clouds 3 rd Party Clouds

21 SAAS DATA LOSS IS COMMON 58% of companies using SaaS apps reported they ve lost data Source: IDG and Spanning research

22 SAAS VENDORS CAN T OFFER COMPLETE PROTECTION SaaS data is a business asset and customer responsibility: SaaS backup focus on reliability, availability and security, not on data recovery SaaS providers promise to delete data when you ask them to SaaS vendors can t tell if the delete/edit request is legitimate or not

23 SPANNING IS BORN-IN-THE-CLOUD BACKUP Spanning Backup for Spanning Backup for Spanning Backup for Enterprise-grade backup and restore for Gmail, Drive, Contacts, Calendars and Sites In-app backup and recovery of objects, custom objects, files, attachments, and customizations Enterprise-grade backup and restore for Office 365 Mail, Calendars, People - Launched March, Launched March, Planned GA, May Customers Top Rated Backup Solution on Salesforce AppExchange

24 Virtualization & Cloud VMware, Hyper-V & Azure

25 EMC DATA PROTECTION FOR MICROSOFT CLOUDS Microsoft Private & Hosted Cloud VM protection Disaster recovery Granular file recovery OS & Application consistent protection Hyper-V over CSV Federated Backup Multi-proxy backup for high performance Agentless backup and recovery Automated protection of self-service VMs And now

26 AVAMAR VIRTUAL EDITION FOR VMWARE & HYPER-V AVAMAR VIRTUAL EDITION (AVE) FOR VMWARE & HYPER-V Remote Site 1 Data Center Remote Site N Avamar Avamar VMware Hyper-V Protecting Enterprise Data in a Private & Public Cloud Protection Storage Virtual Appliance for VMware & Hyper-V (.5, 1, 2, 4TB) Replication from remote office to Datacenter for DR

27 NEW FOR AZURE AVAMAR VIRTUAL EDITION FOR MICROSOFT AZURE Backup to Cloud DR: Recover from Cloud Protecting Data Born in the Cloud Avamar Avamar Avamar Operationa l Recovery Disaster Recovery Detects Hyper-V or Azure during install Backup to Cloud, Recover from Cloud, Protect Data Born in the Cloud Superior SLAs with incrementals forever replica copy Ability to access data in the cloud in the case of disaster Simple solution with a virtual appliance

28 VREALIZE DATA PROTECTION EXTENTION AUTOMATED, SELF-SERVICE BACKUP & RECOVERY

29 AVAMAR PLUG-IN FOR VREALIZE Cloud Admin Service Architect End-users Performance Mgr. vrealize Automation Automation Governance Self-Service vrealize Operations, Log Insight Monitoring Troubleshooting Remediation ITBM Cost Analytics vrealize Orchestrator VMware vrealize Suite Data Protection vcloud Air AWS

30 (AVAMAR) PLUGIN FOR VREALIZE AUTOMATION Benefits For End-Users Self-service selection - From pre-defined catalog of blueprints - From predefined set of backup policies Agility: self-managed backup - Ad-hoc and scheduled backups - Browse backup catalog & restore Visibility - Job status monitoring For Data Protection Admins Transform the operating model - Leveraging existing infrastructure & architecture Automation & Operational Efficiency - Automate data protection tasks Governance - Oversight & control of end-user actions - Backup admin retains complete control without managing every action

31 EMC DATA PROTECTION FOR VREALIZE AUTOMATION EMBEDDING PROTECTION POLICIES INTO APPLICATION BLUEPRINTS Backup Admin Cloud Admin End-Users EMC Avamar Gold vrealize Automation vrealize Automation Silver Linux Windows MySQL Linux Windows MySQL Define backup policies Monitor backup infrastructure Bronze Embed backup policies Entitle users to Day 2 actions Provision protected Apps On-Demand/Scheduled Backups & restores

32 SELF-SERVICE DAY 2 ACTIONS Add Policy On Demand Backup Restore Detach Policy View Protection Status File Restore

33 Thank you. 資深技術顧問藍基能