Director of the IT Department Director of Strategic ICT Development Executive Committee Member of the UAE Higher Education CIO Council

Size: px

Start display at page:

Download "Director of the IT Department Director of Strategic ICT Development Executive Committee Member of the UAE Higher Education CIO Council"

Jason Warner
8 years ago
Views:

1 DR Plan for Private-Cloud Based Data Center over Ankabut Dr Alaeddine El Fawal Director of the IT Department Director of Strategic ICT Development Executive Committee Member of the UAE Higher Education CIO Council 10th Sept., th September, 2013 Doha, Qatar 1

Strategic ICT Development Executive Committee Member of the UAE

2 Interaction: Ankabut University IT Departments Close collaboration between Ankabut and University IT Departments UAE Higher Education CIO Council: Ankabut service Board: for inter-communication and manage common working groups Project examples: Disaster Recovery (DR): implemented by EPFL ME and supported by Ankabut, which put to use its network and data center. eduroam: TERENA, Ankabut and EPFL ME. Implemented within a working group of the CIO Council. National First Level Radius in the UAE Some issues for universities having abroad main campuses 10th Sept.,

by EPFL ME and supported by Ankabut, which put to use its network and data center. eduroam: TERENA, Ankabut and EPFL ME.

3 DR Plan: Objective Production site EPFL ME, RAK 1 Gbps access 10 Gbps backbone DR site Ankabut, Abu Dhabi Ankabut network 250 km In case of a disaster: Recover data Recover IT services and applications Low RTO (Recovery Time Objective): less then 10 minutes 10th Sept.,

case of a disaster: Recover data Recover IT services and

4 System Architecture and Replication Technology Private cloud: Vmware vsphere Microsoft Machines: Domain Controler, SQL, Sharepoint Veeam is our choice: Dedicated to Virtual Environment, in particular VMware Full support to Microsoft Virtual Machines Transactionally Consistent backup image on live of Domain controller, Exchange, SQL it uses the VSS feature of Microsoft machines 10th Sept.,

particular VMware Full support to Microsoft Virtual Machines Transactionally Consistent backup

5 Replication Process and Characteristics Production Site (Ras Al Khaimah) DR Site (Abu Dhabi) Proxy Deduplication, data processing, replication Ankabut Backbone Backup server Bare-metal backup: VM-based replication HW independent Easy testing without service disruption Low RTO: booting time Centralized Solution Standardized for all applications Low cost 10th Sept.,

backup: VM-based replication HW independent Easy testing without service disruption Low RTO:

6 Network Design for Smooth Failover/Failback VLAN 101: X Normal situation VLAN 102: X VLAN 103: X User subnets VLAN 11: X VM replicas keep the same IP addresses as original VMs VLAN 12: X Server subnets: not accessible in DR situation Production Site (RAK) VLAN 11: X VLAN 12: X Server subnets: accessible only in DR situation Extension of the production private network VLAN 200: X Permanently assigned to DR site (e.g. for Veeam server) DR Site (Abu Dhabi) 10th Sept.,

192.168.12.X Server subnets: not accessible in DR situation Production Site (RAK) VLAN 11: 192.168.11.X VLAN 12: 192.168.12.X Server subnets: accessible only in DR situation Extension of the production private network VLAN 200: 192.

7 Network Design for Smooth Failover/Failback Disaster situation VLAN 101: X VLAN 102: X VLAN 103: X User subnets VLAN 11: X Failover steps (less than 10 minutes): 1- patch the router on production site (less than 1 minutes) 2- patch the router on DR site (less than 1 minutes) 3- reboot the replicas on DR site VLAN 12: X Server subnets: not accessible in DR situation Production Site (RAK) Advantages: Complete transparency for the end-user Complete transparency for all services Smooth and quick failover/failback Less maintenance overhead VLAN 11: X VLAN 12: X Server subnets: accessible only in DR situation VLAN 200: X Permanently assigned to DR site (e.g. for Veeam server) DR Site (Abu Dhabi) 10th Sept.,

X Failover steps (less than 10 minutes): 1- patch the router on production site (less than 1 minutes) 2- patch the router on DR site (less than 1 minutes) 3- reboot the replicas on DR site VLAN 12:

8 Security Measures Secure Communications: Production site Site-to-site IPSec tunnel DR site SSL VPN Tunnel (at home) Ankabut network Secure Storage: we deploy SED (Self-Encrypted Discs) for storage at the DR site Secure virtual environment (OS) Secure storage (VMs) Transparent for users Does not entail considerable overhead (hardware-based) 10th Sept.,

(Self-Encrypted Discs) for storage at the DR site Secure virtual environment (OS) Secure

9 Remote Control and Monitoring Remote monitoring and management of the physical server (even booting it in case it was shutdown: click here): Our server is a PowerEdge DELL server with idrac7 Remote access to the DR site: IPSec and SSL VPN tunnels Remote control and monitoring of the whole environment: administration, failover, failback. 10th Sept.,

server with idrac7 Remote access to the DR site: IPSec and SSL VPN tunnels Remote control

10 Conclusions DR plan over the Ankabut backbone and hosted by the Ankabut data center DR for Private Cloud based data center: Centralized, standardized, secure, flexible, cost-effective low RTO Generic an complete solution: extendable for larger settings White paper available upon request 10th Sept.,

secure, flexible, cost-effective low RTO Generic an complete solution:

11 10th Sept.,

VMware System, Application and Data Availability With CA ARCserve High Availability

Solution Brief: CA ARCserve R16.5 Complexity ate my budget VMware System, Application and Data Availability With CA ARCserve High Availability Adding value to your VMware environment Overview Today, performing