Security in a DISA Architecture Systems Management in a DISA Architecture DISA Testing and Evaluation DISA: Small Business to Enterprise Summary

Transcription

1

2 Internet Application Trends The Need for High Availability and Scalability DISA Architecture Overview Load Balancing Layer Application Services Layer Data Resources Layer Security in a DISA Architecture Systems Management in a DISA Architecture DISA Testing and Evaluation DISA: Small Business to Enterprise Summary

3 Key trends show that scalability and availability of Internet/Intranet applications is an increasingly important concern Compaq has documented and tested best practice architectures and approaches to scalability/availability for Internet applications Compaq testing confirms that the Distributed Internet Server Array (DISA) Architecture delivers linear scalability and extremely high availability The DISA architecture allows enterprises and ISPs to build reliable, high performing Internet applications using industry standard platforms

4 The Internet Enabled Business Mail WebServer Enterprise Hosts SQL Database SQL*NET SQL Production Database Object Services Open Sys OLTP Intranet HTTP SMTP MAPI NNTP IMAP4 Pub. Firewall Internet Customers Mail ECOM PUB. Partners Competitors Suppliers

5

6 (()!* +#(,-!!!"#$% &'

7

8 !!!) # * /!0!*!).((*!!! Core Application Stack Clients Load Balancing Application Servers Data Resources Global Components Security Management

9

10 ! " 1 /!0!*! +/! +/! *

11 ! /!0!*!).((*! 2*03!! 4/ 5!*

12 !# "" - NT / MS Cluster Server / SQL/SVR - UNIX / Oracle - IBM Mainframe / MVS / DB2 - ERP Systems - Other Applications

13 $! Balancing load across multiple application servers is preferred over deploying a single server with lots of memory and processors Centralizing content on amply configured, clustered servers is preferred over replication on application servers Use redundancy at all potential single points of failure Build applications so that user state information is not maintained on a single application server

14 Load Balancing Layer

15 !%& " Intelligent load balancing technology offers three major benefits: SCALABILITY: intelligently distribute the aggregate load across multiple servers AVAILABILITY: accommodate planned and unplanned server downtime without system downtime MANAGEMENT: monitor system performance/availability Round Robin DNS addresses scalability but not availability or management No feedback mechanism to know if servers are down Manual intervention does not take effect immediately Intelligent load balancing offers significant benefits over RRDNS

16 *!6/!0!*!) 78*) *!6/!0!*!) *!6/!0!*!) 78*) 78*) 61!!0 61!!0 61!!0!0!0!0 18!0 18!0 18!0!!!.1+ 9!*8.* !*8 9!*8.*.* )87) )87) )87)... : : : & & & 3/! 3/! 3/! 9#0! 9#0! 9#0! %& % '%&( %& % %& % '%&( '%&(

17 %& % '%&( (!8.*)8!" # $#%" "

18 %& % '%&(,-! (*;!*+.00 /!#<7+=>+ &'()(&(* % & /!#?+,&-.,-$!, )((( )(((& )(((* )(((+

19 %& % '%&( 61!,-! (*!!*(!8 +!# 0!#.).)

20 Central Dispatch Scheduler Physical IP: a.b.c.1 & a.b.c.3 (VIP) Loopback IP: a.b.c.3 (VIP) Central Dispatch Server Node Physical IP: a.b.c.2 Loopback IP: a.b.c.3 (VIP) Web Server bound to:.2 &.3 CD Agent Application Layer CD Agent Web Server 3 OS TCP/IP Stack Central Dispatch RXP Network Layer OS TCP/IP Stack Central Dispatch RXP NIC Driver Data Link Layer NIC Driver 2 Any Network Any Network 1 4 Any Network Client Browser Apparent Path to Client TCP Connection Hop Agent to Agent Communication

21 %& % '%&( 18,-! (*.((*!>/ & %& /!#<7+=>+ /!#?+ /!#/",-$!,

22

23 % & +,.((*! )* )

24 % +,.((*!.((*!/) &#! 9.97

25

26 #% ( "" - NT / MSCluster Server / SQL/SVR - UNIX / Oracle - IBM Mainframe / MVS / DB2 - ERP Systems - Other Applications

27 Data Resources Layer To avoid replication nightmares, file-based resources can be safely stored on a highly-available, centralized file server rather than replicated on application server drives

28 Load Balancer App. Servers LU6.2 LU6.2 Browser IIS ASP Com / DCOM Complex Internet Enabled Application Example Data Resources SQL/SVR File Share Mainframe App.

29

30 / ;+&* /!*6!!"6*) +*") 58!0) / ;+&(!"!) 58!0) "#(,7 * /!0!*!).((*!!! / ;+& / ;+& 31!**,#( ;+& 31!**

31 %& #! -'.& -' #

32

33 / 0 Function Description Examples Monitor status of load balancers, disks, CPUs, memory, NICs, OS etc. Tivoli TME Hardware/OS Monitoring Remote Administration & Diagnostics Server Recovery Application Service Monitoring Performance Benchmarking Diagnose server problems remotely Remotely control and administer a server Automatically reboot failed servers Determine if an application service (web server) or content resource (database) is operating correctly Test server and site performance Compaq Insight Manager HP OpenView Compaq Integrated Remote Console Compaq Remote Insight Option Microcom Carbon Copy Compaq Automatic Server Recovery Freshwater Software Sitescope BMC Patrol Bright Tiger Cluster Cats NetIQ ZDLabs WebBench

34 1 2/

35

36

37 ! 7.&./5&,,;,? />7, 2 AND 4 NODE BASIC DISA < B 6 NODE DISA W/CLUSTER +/!C +B C. <A?:" +/!C +B C. <A?:" 537., +/! B C.!8 +B!8 38!*!)#!0<++/!C!((*! +/B 3/!:=(*!0!*! &7<A,(,06*=<A,(,0A18;*!66! (* 4/BA B++/!C!((*! *0+/B 00!3/! :=(*!0!*!

38 ! + Scalability Scoring Maximum stable system throughput (pages/sec) Normalized to baseline (standalone 850R system) Availability Scoring Length and nature of application downtime during failure events (network, power, software error) Performance reduction during partial failures Admin intervention required to correct failures System Cost Management and Administration Ranking Ease of setup Ease of administration

39 ! 6 Node DISA w/cluster 4 Node DISA 2 Node DISA Conventional Cluster Standalone 2P 850R Standalone 1P 850R Scalability Scores normalized scalability score (1=capacity of standalone 850R)

40 & Availability Scores 6 Node DISA w/cluster 4 Node DISA 2 Node DISA Conventional Cluster Standalone 2P 850R Standalone 1P 850R weighted average availability score (1=least available)

41 Scalability and Cost Normalized Scalability Score P 850R 2P 850R 4 Node DISA 2 Node DISA Conventional Cluster 6 Node DISA $- $27 $54 $82 $109 $136 $163 $191 Estimated System Cost ($K)

42 !*!*=!!*!* Cost per Unit of Throughput 6 Node DISA w/cluster 4 Node DISA 2 Node DISA $21 $25 $28 Conventional Cluster $62 Standalone 2P 850R $20 Standalone 1P 850R $13 $0 $10 $20 $30 $40 $50 $60 $70 system cost ($K)/unit of normalized throughput

43 $ The DISA architecture is the only effective approach for scaling up this particular application The DISA architecture handles failure events with minimal performance impact and little or no downtime Current NT Clustering technology can significantly improve availability (but not scalability) Multi-server systems require a robust approach to systems management While nothing beats an inexpensive standalone server for value alone, DISA delivers the best price/performance for highly available, highly scalable systems With the DISA architecture, industry standard platforms can provide uncompromising availability, scalability, value, and manageability

44

45 0 /!0!*!).((*!!!

46 " " /!0!*!).((*!!!

47 " /!0!*!).((*!!!

48 !, 3 " " /!0!*!).((*! +)!!

49 1 / 1

50 #

51

52 !4 Internet Applications are becoming business and mission critical Without the right architecture, success means failure What s the plan for handling expected/unexpected temporary traffic spikes? What s the long term scalability plan? You never get a second chance to make a first impression 10 seconds is the response time limit for keeping the user s attention Web users do not have to tolerate poor quality

53 ! 4 Linear Scalability - The Compaq DISA architecture can accommodate the largest Internet application sites: Large, expensive SMP based systems are not the better alternative - Rapidly increase capacity with inexpensive industry standard servers High Availability - Ability to meet business critical uptime requirements - Gracefully accommodates hardware and software failures - No single points of failure

54 ! 4 Compatibility with Prevailing Web Applications - CGIs, Microsoft Active Server Pages, Allaire Cold Fusion - NetDynamics, HAHT Software HAHTsite, and Netscape High Value - More performance and availability per dollar - Leverages the price/performance benefits of industry standard platforms without compromising scalability or availability

55 ! 4 Every customer visit can be an opportunity for increased sales What to look for Internet applications suffering from poor performance Internet applications deployed on architectures with many points of failure Small customers that will be growing rapidly Large customers that are growing rapidly

56 ( !#.8(!( /!0!*!)0!!..8(!( #!) 0!!..8(!(!0 6!% %7 2!'++2