Testing and Restoring the Nasuni Filer in a Disaster Recovery Scenario

Transcription

1 Testing and Restoring the Nasuni Filer in a Disaster Recovery Scenario Version 7.0 July Nasuni Corporation All Rights Reserved

2 Document Information Testing Disaster Recovery Version 7.0 July 2015 Copyright Copyright by Nasuni Corporation. All rights reserved. Information in this document is subject to change without notice and does not represent a commitment on the part of Nasuni. The software described in this document is furnished under a license agreement. The software may be used only in accordance with the terms of the license agreement. It is against the law to copy the software on any medium. No part of this manual may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording, for any purpose without the express written permission of Nasuni Corporation. Notice Although Nasuni Corporation has attempted to ensure the accuracy of the content of this manual, it is possible that this document may contain technical inaccuracies, and typographical or other errors. Nasuni assumes no liability for any error in this publication, and for damages, whether direct, indirect, incidental, consequential or otherwise, that may result from such error, including, but not limited to loss of data or profits. Nasuni provides this publication as is without warranty of any kind, either express or implied, including, but not limited to implied warranties of merchantability or fitness for a particular purpose. Trademarks NASUNI, UNIFS, and the ovals logo are Nasuni trademarks and service marks. All other names, brands and products are the property of their respective owners. Contacting Nasuni Corporation Nasuni Corporation 313 Speen Street Natick, MA Telephone: Sales: Fax: info@nasuni.com Technical Support Telephone: NASUNI ( ) support@nasuni.com Technical support is available 24/7/365 for full production customers.

3 Contents Testing Disaster Recovery Purpose Prerequisites Simulating a Disaster Scenario Scenario Overview Considerations for the Nasuni Management Console Downloading Encryption Keys Simulating a Disaster Downloading and Installing the Nasuni Filer Software Configuring the Nasuni Filer Recovering the Nasuni Filer Index Testing Disaster Recovery iii

4 Purpose This document explains the steps for testing the Disaster Recovery process for restoring the Nasuni Filer in a simulated Disaster Recovery scenario. The Nasuni Filer allows data recovery from the cloud to be nearly instantaneous. In a Disaster Recovery scenario, the Nasuni Filer can reduce the total time to recover data to approximately 15 minutes. The Disaster Recovery test process consists of: Downloading generated encryption keys Identifying the account with which the Nasuni Filer is associated Re-installing the Nasuni Filer We assume that you are performing this test on a Nasuni Filer installed on a virtual machine. We further assume that you are testing the Disaster Recovery process using generated encryption keys. Prerequisites Before you begin testing the Disaster Recovery procedure, you should meet the following prerequisites: The Nasuni Filer is installed and properly configured on your network Data is copied to a volume in the Nasuni Filer At least one snapshot has been successfully completed on a volume with data Testing Disaster Recovery 1

5 Simulating a Disaster Scenario Simulating a Disaster Scenario This section describes how to simulate a disaster scenario for the Nasuni Filer, to illustrate the process of disaster recovery. Note: You can also simulate a disaster scenario for the Nasuni Management Console. The procedure is similar. Scenario Overview This section explains how to simulate a disaster recovery by shutting down the Nasuni Filer. Before you shut down the Nasuni Filer, make sure you know the names of your volumes and the data stored in them. After the disaster recovery is complete, you can confirm that your new Nasuni Filer has the correct volumes and associated data. Considerations for the Nasuni Management Console If this Nasuni Filer is under the control of the Nasuni Management Console, first remove the Nasuni Filer from the control of the Nasuni Management Console. Click Services, then select Nasuni Management Console from the list. Select disabled from the NMC Management is drop-down list, then click Save. Downloading Encryption Keys Follow this procedure to download your generated encryption keys: 1. Click Configuration, then select Encryption Keys from the list. The Encryption Keys page appears. Figure 1-1: Encryption Keys page. Testing Disaster Recovery 2

6 Simulating a Disaster Scenario 2. Click Download Generated Keys. Depending on your browser, a message box may appear; if so, navigate to an appropriate folder and save this file. The key is saved with a.pgp extension. For more details, refer to Chapter 11 of the Nasuni Filer Administration Guide. You can download this guide at Simulating a Disaster Follow this procedure to simulate a disaster scenario: 1. Click Status, then select Subscription Status from the list. The Subscription Status page appears. Figure 1-2: Subscription Status page. The following subscription information is displayed: Account Name: Name of the account. Serial Number: The serial number for this subscription. Note the Account Name and the Serial Number for this Nasuni.com account. You can also obtain serial numbers on the Account Status page of the Nasuni Management Console. 2. If you have defined data migrations that you want to use after the disaster recovery, ensure that you record information about the data migrations before shutting down the Nasuni Filer. Click Services, then click View Migrations. 3. It is important to ensure that all data has been protected in cloud storage before shutting down the Nasuni Filer. You can do this manually by performing snapshots on all volumes: select each volume from the Volumes list, then click Take snapshot now. Wait until the New Data in Cache (not yet protected) chart on the Home page shows that there is no unprotected data. This process can take considerable time, depending on the size of the cache and the amount of changed and new data in the cache. Alternatively, during the shutdown process you can specify performing a snapshot before shutting down. Testing Disaster Recovery 3

7 Simulating a Disaster Scenario 4. Click Power on the navigation bar at the top of the page. The Shutdown Filer dialog box appears. Figure 1-3: Shutdown Filer dialog box. Note: To exit and return to the previous page, click the x at the top of the page, or click Cancel. 5. Enter a Username (case-sensitive) and Password (case-sensitive) that has permission to perform this operation. 6. Select Perform snapshot before shutting down. This option performs a snapshot before shutting down the Nasuni Filer. This ensures that data is fully protected in cloud storage before shutting down. However, this process can take considerable time, depending on the size of the cache and the amount of changed and new data in the cache. 7. Click Shutdown. The message The system is shutting down. Click here to cancel the shutdown. appears at the top of the Home page. 8. To stop the shutdown, click the hyperlink marked here. You have 60 seconds to cancel the shutdown. The message Shutdown cancelled at user request. appears at the top of the Home page. The shutdown stops. 9. If you do not stop the shutdown, the Nasuni Filer shuts down and the Nasuni Filer user interface is no longer accessible. At this point, the Nasuni Filer that has been shut down simulates a Nasuni Filer after a disaster. The remainder of this document describes how to recover from a disaster. Testing Disaster Recovery 4

8 Downloading and Installing the Nasuni Filer Software Downloading and Installing the Nasuni Filer Software The first step in recovering from a disaster is to download and install the Nasuni Filer software. To download the Nasuni Filer software from the Nasuni Web site: 1. Obtain the Serial Number and Authorization Code for your Nasuni Filer. You use these in step 2 on page 14. If you have the credentials to log in to your Nasuni.com account ( account.nasuni.com/account/login/), you can obtain the Serial Number and Authorization Code there. If you do not have these credentials, obtain the Serial Number and Authorization Code from the person who has the credentials. You can also obtain the Serial Number and Authorization Code on the Account Status page of the Nasuni Management Console. 2. Download the Nasuni Filer software appropriate for your platform. Regardless of which version of the Nasuni Filer software that you used originally, you can download the latest version. Note: You can perform the disaster recovery process to the same version of the software that you were running, or to a newer version than you were running, but not to an older version. Note: If you already have the software installation file, you do not have to download it again. However, the software installation file must not be older than the version you are recovering. 3. Unzip the Nasuni Filer software file. 4. Install the Nasuni Filer. For details, see the Nasuni Filer Virtualization Guide. You can download this guide at Testing Disaster Recovery 5

9 Downloading and Installing the Nasuni Filer Software 5. Launch the Nasuni Filer. The Nasuni Filer screen appears with a plain white bar on the bottom that indicates the progress of the installation. Figure 1-4: Nasuni Filer installation progress screen. Tip: You can force a file system check (fsck) by holding down the Shift key during this screen. When the file system check (fsck) is done, the usual processing continues. 6. After a few moments, the Nasuni Filer console screen appears, including the initial IP address. Figure 1-5: Nasuni Filer console screen. Tip: If you ever must log into the console service screen, press Enter and sign in. The default login username is service, and the default password is service. 7. Record the Assigned IP Address displayed on the console screen. Testing Disaster Recovery 6

10 Configuring the Nasuni Filer Configuring the Nasuni Filer Now that the Nasuni Filer software is installed, you must configure the new Nasuni Filer. Follow this procedure to configure the Nasuni Filer: 1. Open a Web browser and enter the IP address of the Nasuni Filer using this command: address>:8443 where <IP address> is the IP address. When you attempt to access the Nasuni Filer Home page for the first time, a message may appear indicating that the security certificate is not trusted. You can still access the site to proceed with the initial configuration procedure. Testing Disaster Recovery 7

11 Configuring the Nasuni Filer 2. The Enter the Network Parameters for this Filer page appears. Figure 1-6: Enter the Network Parameters for this Filer page. 3. In the Host Name box, a default hostname for the Nasuni Filer appears. You can accept the default hostname or change it to a customized hostname. The name that you enter is the name you provide to users so they can access the Nasuni Filer. You can use ASCII letters a through z, digits 0 through 9, and hyphens. Note: The Nasuni Filer attempts to register the hostname in the DNS server, so that users can access this host by name. Testing Disaster Recovery 8

12 Configuring the Nasuni Filer 4. In the Network Interface Settings area, for each Device in the list, select the Traffic Group from the drop-down list. Figure 1-7: Network Interface Settings area. You can define your own traffic groups. See step 5 below. 5. Also in the Network Interface Settings area, to configure each Traffic Group, click Edit beside the Traffic Group. The Network Settings page appears. Figure 1-8: Network Settings page. From the Network Type drop-down list, select either Static or DHCP. If you select DHCP (Dynamic Host Configuration Protocol), the IP Address, Netmask, and MTU Value fields become unavailable. Note: DHCP may not be enabled on more than one traffic group. If you select Static, you must provide Network Interface Settings and System Settings. See your IT administrator for assistance. Enter the following information: Enter the static IP address in the IP Address text box. The address of a static device must not already be present on the network. The Nasuni Filer verifies this and displays an error if a collision is detected. Note: If you define more than one static device, the Nasuni Filer checks that the subnets specified do not appear more than once. If this is a high-availability hardware appliance Nasuni Filer, enter the Node 1 IP Address and the Node 2 IP Address in their text boxes. Enter a netmask address in the Netmask text box. Testing Disaster Recovery 9

13 Configuring the Nasuni Filer Enter the MTU value in the MTU Value text box. MTU settings above 1500 are supported. The maximum transmission unit (MTU) is the size (in bytes) of the largest protocol data unit that the layer can pass onwards. A larger MTU brings greater efficiency, because each packet carries more user data, while protocol overheads, such as headers, remain fixed; the resulting higher efficiency means a slight improvement in the bulk protocol throughput. A larger MTU also means processing fewer packets for the same amount of data. However, large packets can occupy a slow link for some time, causing greater delays to following packets, and increasing lag and minimum latency. (Optional) You can specify a gateway for each traffic group. This gateway is used to return traffic for clients outside one of the Nasuni Filer's local networks that do not use the default gateway. In the Gateway text box, enter the IP address for the gateway. Click OK to use these values. Click Cancel to exit this page without making any changes. 6. In the System Settings area, from the Settings Source drop-down list, select either Static or DHCP as the source for system-wide configuration. Figure 1-9: System Settings page. DHCP (Dynamic Host Configuration Protocol): Provides a network IP address for a host on an IP network automatically. The Default Gateway, Search Domain, Primary DNS Server, and Secondary DNS Server fields become unavailable. Testing Disaster Recovery 10

14 Configuring the Nasuni Filer DHCP with custom DNS: Provides a network IP address for a host on an IP network automatically. The Default Gateway field becomes unavailable. Enter the following information: Enter one or more local search domains in the Search Domain text box, each separated by a space. You must enter valid hostnames. You can use search domains to avoid typing the complete address of domains that you use frequently. The search domains that you enter are automatically appended to names that you specify for purposes such as Active Directory configuration, data migration sources, HTTPS proxy, and NTP server. For example, if you specify the search domain mycompany.com, then typing server1 for one of these purposes would connect to server1.mycompany.com. Enter the IP address for your primary DNS server in the Primary DNS server text box. You must enter a valid hostname or IP address. Enter the IP address for your secondary DNS server in the Secondary DNS server text box (if applicable). You must enter a valid hostname or IP address. Static: Address information must be entered manually. Enter the following information: Enter a default gateway address in the Default Gateway text box. The gateway address must match a subnet of a defined static network. Enter one or more local search domains in the Search Domain text box, each separated by a space. You must enter valid hostnames. You can use search domains to avoid typing the complete address of domains that you use frequently. The search domains that you enter are automatically appended to names that you specify for purposes such as Active Directory configuration, data migration sources, HTTPS proxy, and NTP server. For example, if you specify the search domain mycompany.com, then typing server1 for one of these purposes would connect to server1.mycompany.com. Enter the IP address for your primary DNS server in the Primary DNS server text box. You must enter a valid hostname or IP address. Enter the IP address for your secondary DNS server in the Secondary DNS server text box (if applicable). You must enter a valid hostname or IP address. 7. To configure a proxy in order to reach HTTPS resources on the Internet, select the Configure A Proxy check box. 8. Click Continue to proceed. Testing Disaster Recovery 11

15 Configuring the Nasuni Filer 9. The Review the Network Settings page appears. Figure 1-10: Review the Network Settings page. To accept the network settings, click Confirm. To return to the previous page to change network settings, click Back. 10. The Configuring Network Settings page appears. Figure 1-11: Configuring Network Settings page. Testing Disaster Recovery 12

16 Configuring the Nasuni Filer 11. For high availability Nasuni Filer hardware appliances, such as the NF-400H, the Filer HA-Pair Synchronization page appears. Figure 1-12: Filer HA-Pair Synchronization page. It can take some time for the synchronization process to complete. When the process completes, click Continue. 12. You are automatically directed to the specified IP address (or you can click the link here ). Testing Disaster Recovery 13

17 Recovering the Nasuni Filer Recovering the Nasuni Filer After configuring the network settings for the new Nasuni Filer, you must enter your Nasuni.com serial number and authorization code, accept the end-user license agreement, and enter a user name and password for the user who is a Filer Administrator of the Nasuni Filer. Important: Internet connectivity (HTTPS port 443) is a prerequisite for setting up the Nasuni Filer, or to update software during the installation. To recover your Nasuni Filer, follow these steps: 1. After you have configured your network, open the specific URL to continue. The Enter your serial number and authorization code wizard page appears. Figure 1-13: Enter your serial number and authorization code wizard page. 2. Enter a Filer Serial Number and Authorization code, found under the Account section of or on the Account Status page of the Nasuni Management Console. For a new installation, choose an unused Filer Serial Number. To recover a prior installation, such as during disaster recovery, choose the Filer Serial Number of the prior installation. Click Continue to proceed. Note: If this Nasuni Filer was reset, and this Nasuni Filer was under the control of the Nasuni Management Console, and if you are using the Filer Serial Number of a prior installation, you must wait 1 hour from the time that you reset the Nasuni Filer before entering the Filer Serial Number and Authorization code and clicking Continue. Testing Disaster Recovery 14

18 Recovering the Nasuni Filer 3. The Perform Disaster Recovery on existing Filer page appears. Figure 1-14: Perform Disaster Recovery on existing Filer page. Enter Perform Disaster Recovery in the Confirmation text box, then click Continue to proceed. Testing Disaster Recovery 15

19 Recovering the Nasuni Filer 4. The second Perform Disaster Recovery on existing Filer page appears. Figure 1-15: Second Perform Disaster Recovery on existing Filer page. If you escrowed your encryption keys with Nasuni, and do not have your encryption keys, and you need Nasuni to de-escrow your encryption keys, select Yes from the drop-down list. Contact Nasuni to receive your encryption keys, then enter your recovered encryption keys and click Continue. Otherwise, select No from the drop-down list, then click Continue. Important: If you have previously escrowed your encryption keys with Nasuni, and you use these escrowed encryption keys as part of the disaster recovery process, you MUST reescrow those encryption keys with Nasuni if you want those encryption keys to continue to be escrowed with Nasuni. After the disaster recovery is complete, the Nasuni Filer treats all encryption keys as if they were not created by this Nasuni Filer. For details, see, Escrowing Encryption Keys with Nasuni on page If you selected No, the Upload Encryption Keys page appears. Figure 1-16: Upload Encryption Keys page. Click Choose File to navigate to your encryption key file, enter the Key Passphrase if necessary, then click Upload Key(s). If several encryption key files are necessary, this page could appear several times. Testing Disaster Recovery 16

20 Recovering the Nasuni Filer 6. The Ready to perform disaster recovery! page appears. Figure 1-17: Ready to perform disaster recovery! page. Click Continue. Disaster recovery of the Nasuni Filer begins. 7. After recovery, the Filer Recovery Complete page appears. Figure 1-18: Filer Recovery Complete page. Testing Disaster Recovery 17

21 Recovering the Nasuni Filer 8. Click Continue. The Accept the Terms of Service and License Agreement page appears. Figure 1-19: Accept the Terms of Service and License Agreement page. You can print or download a copy of the Terms of Service and License Agreement by clicking the appropriate icon. Select I accept the Terms of Service, then click Continue. Testing Disaster Recovery 18

22 Recovering the Nasuni Filer 9. The Enter a username and password for Administration of this Filer page appears. Figure 1-20: Enter a username and password for Administration of this Filer page. Set up your account by creating a Username (case-sensitive) and a Password (case-sensitive). Click Continue. 10. The recovery and restoration process is complete. The Configuration Complete page appears. Figure 1-21: Configuration Complete page. You can reboot the Nasuni Filer, or click the link here to proceed directly to the Login page. Testing Disaster Recovery 19

23 Recovering the Nasuni Filer 11. The Nasuni Filer becomes available in a few moments. The Login page appears. Figure 1-22: Nasuni Filer Login page. Log in to the Nasuni Filer with your Username (case-sensitive) and Password (case-sensitive). Click Log in. Important: If the previous Nasuni Filer was in Active Directory mode, you must re-join Active Directory to maintain ACL support. With the new instance of the Nasuni Filer running, you have regained access to your volumes and data. You can access volumes and data using the CIFS shares, NFS exports, or FTP directories that you created before the disaster. Folders and files are available. Important: If this Nasuni Filer used a CIFS migration source to perform data migrations, you might need to manually reconnect to that CIFS migration source. See Configuring a CIFS Migration Source on page 192. Tip: If this Nasuni Filer previously accessed a volume with custom permissions for Remote Access, you must explicitly set the permissions of that volume for this Nasuni Filer. Important: If you have previously escrowed your encryption keys with Nasuni, and you used these escrowed encryption keys as part of the disaster recovery process, you MUST re-escrow those encryption keys with Nasuni if you want those encryption keys to continue to be escrowed with Nasuni. After the disaster recovery is complete, the Nasuni Filer treats all encryption keys as if they were not created by this Nasuni Filer. For details, see, Escrowing Encryption Keys with Nasuni on page 280. Tip: A best practice for Nasuni Filers is to join an Active Directory domain as soon as disaster recovery is complete. For details, see Joining a Nasuni Filer (that has not previously joined any domain) to a domain on page 261. Testing Disaster Recovery 20

24 Recovering the Nasuni Filer Tip: If this Nasuni Filer was under the control of the Nasuni Management Console, return it to the control of the Nasuni Management Console. Click Services, then select Nasuni Management Console from the list. Select disabled from the NMC Management is drop-down list, then click Save. 12. After verifying that the new Nasuni Filer is running and includes all the expected data, you can delete the old Nasuni Filer. Testing Disaster Recovery 21

25 Index 8443 port 7 account name 3 ACL 20 Active Directory 11, 20 Authorization Code 5 authorization code 14 creating password 19 username A C D DHCP 9, 10, 11 network type 9, 10 disaster recovery encryption key 16 file 16 downloading software Nasuni.com account 5 encryption key disaster recovery 16 file 3 disaster recovery 16 E F file encryption key 3 file disaster recovery 16 Filer Administrator 14 fsck 6 gateway traffic group 10 high availability network configuration 9 HTTPS proxy 11 G H IP address 9, 11 primary DNS server 11 secondary DNS server 11 I Testing Disaster Recovery 22

26 M maximum transmission unit 10 MTU 10 N name account 3 Nasuni.com account downloading software 5 netmask 9 network configuration high availability 9 Network Time Protocol NTP 11 network type DHCP 9, 10 static 9, 10, 11 NTP Network Time Protocol 11 time server 11 traffic group gateway 10 username creating 19 for shutdown 4 T U password creating 19 shutdown 4 port primary DNS 11 primary DNS server IP address 11 P secondary DNS 11 secondary DNS server IP address 11 serial number 5, 14 setting up Nasuni Filer 14 shutdown 4 password 4 power 4 username 4 shutdown window 4 snapshot before shutdown 4 static network type 9, 10, 11 S Testing Disaster Recovery 23