NetBackup 7.6 Best Practices: Protecting Virtual Environments Suwat Saelim

Transcription

1 NetBackup 7.6 Best Practices: Protecting Virtual Environments Suwat Saelim Sr. Technical Consultant

2 Virtualization Environments 2

3 General Concepts for Better Virtualization Backups Understand virtualization backup API s New API s significantly change backup dynamics You have lots of ESXi hosts use them! Spread backup streams across ESXi hosts NetBackup can help! First NBD stream per ESXi is fastest (~ 100 MB/sec 10GbE) Subsequent streams from same ESXi will be slower Large redo logs are bad We ll tell you how to design backups to avoid large redo Never assume your servers, storage, network, SAN is performing at optimal levels Test your environment to ensure that hardware is performing correctly 3

4 VADP Transport Mode & Heat Map Which Is Best? 4

5 NBD Transport Mode Data Path LAN VMkernel Port VMware ESXi SAN ESXi Datastore Media Server Simplest, most popular transport mode No SW req d on VMware All data through VMkernel port VMkernel port limit (~100MB/sec) 5

6 NBD Transport Mode Load/Heat Path LAN VMkernel Port VMware ESXi Media Server SAN ESXi Datastore 6

7 SAN Transport Mode Data Path True off-host backups Lowest impact on ESXi host LAN No VMkernel perf limits Fastest transport method VMware ESXi Media Server SAN ESXi Datastore 7

8 SAN Transport Mode Load/Heat Map LAN VMware ESXi Media Server SAN ESXi Datastore 8

9 HotAdd Transport Mode Data Path LAN VMware ESXi Bypasses VMkernel port Media Server SAN ESXi Datastore No VMkernel perf limit Requires dedicated VM(s) Most impactful Transport Mode 9

10 HotAdd Transport Mode Load/Heat Map LAN VMware ESXi Media Server SAN ESXi Datastore 10

11 Which Transport Mode To Use? NBD Transport Easiest and most commonly used Need to understand performance implications (VMkernel QoS) VMware s VVOL may mandate this SAN Transport (Fibre and iscsi) Lowest impact on ESXi Typically used on more important VM s Explicit access to SAN & Datastore required HotAdd All backup processing load placed on ESXi hosts Additional HotAdd VM s to install, maintain ESXi hosting HotAdd VM must have direct access to Datastores Makes sense in certain environments e.g. remote office 11

12 vstorage API for Data Protection (VADP) Snapshots

13 Problems With VADP Snapshots? VM Admin complaining about snapshots? Stuck snapshots? Failed snapshots & backups? Datastores filling up? Too much I/O impact? Let s look at snapshots in more detail You can t fix what you don t understand VMDK REDO LOG

14 VADP Snapshot Process & Redo Log VMDK 1. Backup initiated 2. VADP creates snapshot of VM 3. VMware redo log created All writes sent to redo during backup 4. Backup processed 5. Backup finished Lock Released 6. Redo consolidated REDO LOG Important to understand how redo impacts backup.

15 NBD Transport NetBackup VIP Resource Limits Set ESXi & Datastore Resource limits to 1 Balance backups across ESXi hosts Minimize load on each ESXi host Maximize throughput to NetBackup media server Redo smaller at any given time I/O spread out across Datastores Less is more backups are actually faster and more reliable

16 The Resource Limit setting is the single best feature in NetBackup for VMware Unpaid customer testimonial

17 How does this improve the redo log process?

18 NetBackup 7.6 VMware Accelerator Eliminate full backups Media server synthesizes a full image using data from previous backups Only the blocks that have changed are transferred from client to media server Key Benefits: Significantly reduce backup impact on VMware environment Shorten backup windows by over 90% Zero loss of any restore functionality Zero modifications to VMware environment Less backup hardware required increases scalability of existing env. Supported with any NetBackup deduplication technology Integrated with V-RAY, AIR, SLP, applications

19 NBU for Accelerator: Non-Accelerator Backup Time Backup of 6 TB VM 104 MB/sec Backup is to NBU Appliance dedupe target Backup perf is limited by VMkernel throttling Note backup performance of 105 MB/sec Significantly slower than 10 GbE nominal throughput

20 NBU for Accelerator: Accelerator Enabled Backup Enabled via simple checkbox selection Zero modification to VMware environment Zero loss of any restore functionality Enables incremental database backups

21 NBU for Accelerator: Accelerator Enabled Backup Time 1,749 MB/sec effective backup rate Effectively bypass the VMkernel performance limitation After initial full, all subsequent backups are effectively incrementals Zero loss of any restore functionality Search and restore files, folders, DB objects (e.g. individual mail message)

22 35x faster Backup with NetBackup 7.6 Accelerator for VMware

23 Virtual Application Backup Methods Agentless, Agent-assisted, or Agent-based Agentless Image-level backup (agentless) Restore full virtual machine or files/folders VMware vstorage API for Data Protection (VADP) integration Agent-assisted Image-level backup (agentless) Agent within VM adds application-level intelligence Restore full virtual machine Restore application Restore application objects Restore files/folders Integrated with VDAP Agent-based Legacy agent-based backup Not image-based Local agent gathers and transmits data to backup server No integration with VDAP

24 NetBackup 7.6 vsphere Plug-in Plug-in Screenshots 24

25 Hyper-V Backup Technologies

26 Configuring Hyper-V Backups Currently no resource limits Hyper-V backups configured at host/cluster level Limit backups within the policy Significant improvements to Hyper-V are in the works Resource limits Hyper-V Intelligent Policy Etc.

27 Deduplication On Hyper-V Host Deduplicate data on the Hyper-V host Transfer less data over LAN More load on Hyper-V host LAN Traffic NetBackup Hyper-V

28 Deduplication On NetBackup Host Deduplicate data on the NetBackup host Transfer more data over LAN Less load on Hyper-V host LAN Traffic NetBackup Hyper-V

29 Media Server On Hyper-V Host Connect backup target to Hyper-V host Zero LAN traffic More load on Hyper-V host Special use case remote offices LAN Traffic NetBackup Hyper-V

30 NetBackup SAN Client On Hyper-V Host Direct Fibre connection for Hyper-V to NetBackup Zero LAN traffic Average load on Hyper-V host Dedicated, FAST Fibre connection Fibre Traffic NetBackup Hyper-V

31 VSS Transportable Snapshots Snapshot created quickly Backup snapshot mounted on alternate host Zero LAN traffic from Hyper-V host Array must support VHDX NetBackup Hyper-V

32 Recovery Challenges 32

33 Accelerator: Files and Folders and VMware Optimize Recovery, Reduce RPO/RTO, Decrease Backup Window Meet RTO & RPO objectives with Accelerator Application Client Track Log File System NTFS Change Journal Dedupe Engine NBU Catalog Master Server Media Server Synthesis Engine 4 Backup engine Decreased backup time allows for more frequent full backups low I/O and CPU cost on client, network bandwidth and storage cost decreases CapEx Reduce RTO by recovering from a full rather than a series of incremental backups Optimize Type of Recovery Slow Recovery Time (RTO) Tighter Recovery Points (RPO) Tight Backup Window Data Loss Downtime 33

34 SAN Client Reduce RTO, Decrease Backup Window Meet RTO objectives with NetBackup SAN Client SAN Clients load-balanced media servers fc fc fc fc fc fc fc os fc fc fc os Fast SAN Backup 150 MB/sec backups, up to 500 MB/sec aggregate through a media server fc fc fc fc Remove Backup Impact from the LAN dedicated SAN backup Adv Disk Pool OpenStorage Devices NetBackup Appliance High Availability can configure redundant Fibre Channel paths Optimize Type of Recovery Slow Recovery Time (RTO) Tighter Recovery Points (RPO) Tight Backup Window Data Loss Downtime 34

35 Replication Director Optimize Recovery, Reduce RPO/RTO, Decrease Backup Window, Improve DR Meet RPO & RTO objectives with Replication Director NAS File Services Oracle on NFS DB2 NetBackup Admin Console SAP VMware on NFS Catalog MS Exchange, SQL Server (on VMware) Snapshot copies and replication fully integrated into backup data life-cycle Snapshot copies on primary offer low impact SnapMirror/SnapVault Storage efficient blocklevel incremental Snapshot replication Streaming Tape Backup NDMP Tape Backup NDMP Disk Backup Hyper V Tape Disk Leverage Accelerator with final disk backup using Windows Policy Protect entire volumes of data with Hardware Snapshots, while still maintaining GRT Application consistency for supported workloads Manage replication and long-term copies from a single policy so data is where you want it, when you need it Optimize Type of Recovery Slow Recovery Time (RTO) Tighter Recovery Points (RPO) Tight Backup Window Disaster Recovery requires data to be available Data Loss Downtime 35

36 Application Protection with NetBackup Agents Optimize Recovery, Reduce RTO, Decrease Backup Window Meet RTO objectives with Application Agents Backup Transport Network SAN Application Integration API Application Protection Policies Storage Target Local Snapshot Instant Recovery Off Host Recover entire database or inidividual components from a single backup Eliminate 2-step recovery process required by database dumps Leverage transport and storage options that match your RPO and RTO SLAs Optimize Type of Recovery Slow Recovery Time (RTO) Tighter Recovery Points (RPO) Tight Backup Window Data Loss Downtime 36

37 Automated Physical to Virtual Conversion Reduce RPO/RTO Meet RTO & RPO objectives with VMware P2V Master server Media server Storage containing backup Eliminate need for stand by hardware decrease CapEx Have instant access to servers without recovery Data store that contains converted virtual instances Virtual Instance Convertor (NB-Proxy Host) VMware ESX or vcenter server Virtual Environment Setup Optimize Type of Recovery Slow Recovery Time (RTO) Tighter Recovery Points (RPO) Disaster Recovery requires data to be available Data Loss Downtime 37

38 VMware Instant Recovery Optimize Recovery, Reduce RPO/RTO Meet RTO & RPO objectives with Accelerator ESX/ESXi NAS Instantly power on any protected VM from disk backup target No need to restore VM first SAN NetBackup NFS Datastore Uses standard NetBackup backup images Once powered on, VM is 100% available Optimize Type of Recovery Slow Recovery Time (RTO) Tighter Recovery Points (RPO) Disaster Recovery requires data to be available Data Loss Downtime 38

39 Auto Image Replication (A.I.R.) Reduce RPO/RTO, Decrease Backup Window, Improve DR Meet RTO & RPO objectives with Auto Image Replication Production Data Center #1 Domain A Domain B Branch office Domain C Remote office Domain D Production Data Center #2 Data is off site as soon as your backup policy completes Data and applications are backed up, deduped, and replicated immediately Data and applications are available for restore - NOW No tapes to search for and load Optimize Type of Recovery Slow Recovery Time (RTO) Tighter Recovery Points (RPO) Tight Backup Window Disaster Recovery requires data to be available Data Loss Downtime 39

40 Leverage the power of combining solutions Optimize Recovery, Reduce RPO/RTO, Decrease Backup Window Meet RTO & RPO & DR objectives with combined technologies NBU Master Domain A Backup NBU Clients Physical/Virtual Client System Configuration backup NBU BMR Master Domain B Device Notifies NBU NBU Media Server Import image Import client system info NB client which drives conversion Create Clients Virtual Instances AIR + P2V RD + Accelerator VADP + Accelerator + Appliances + AIR + VIR NBU Media Server OST Appliance or PureDisk Image Image OST Appliance or PureDisk Virtual Environment Hypervisor Server: (VMWARE ESX or HyperV) OST Optimized Duplication Production Data Center DR Domain Optimize Type of Recovery Slow Recovery Time (RTO) Tighter Recovery Points (RPO) Tight Backup Window Disaster Recovery requires data to be available Data Loss Downtime 40

41 NetBackup 5230 Appliance Update

42 Who uses these appliances today? Agriculture, forestry & fishing Construction Wholesale Agriculture, forestry & fishing Construction Transportation, communications, electric, gas & Sanitary Services Finance, insurance & Real Estate Health Services Finance, insurance & Real Estate Manufacturing Services - Professional Mining Nonclassifiable Establishments Health Services Public Administration Retail Services - Non Traditional Manufacturing Services - Non Traditional Services - Professional Retail Public Administration Mining Nonclassifiable Establishments Transportation, communications, electric, gas & Sanitary Services Wholesale 42

43 I need my mission critical information to be available. I need to protect a wide variety of data, systems, and applications from accidental deletion, system failure, disasters and for compliance. 43

44 Symantec Critical System Protection Built-in WAN Optimization What is NetBackup Appliance? NetBackup 7.6 with Intelligent Deduplication Veritas Storage Foundation Symantec Hardened Operating System Optimized Hardware Redundant Storage Symantec AutoSupport Architecting the Right Storage Strategy for NetBackup 44

45 Deduplication Simplified Initial Support in (Current Version) 3 rd Expansion Shelf 4 th Expansion Shelf 144 TB Pool First Half 2015 Larger/Denser/Faster Storage Option Significant Continued Performance Increases 45

46 Security Simplified Prior to 2.6 Delivered in 2.6 Integrated OS with security patches Initial Integration of Critical System Protection LDAP or AD Integration Significantly reduced the OS footprint KMS Support Integrated Intrusion Prevention Detection Policies

47 Scenario #1 WAN Conditions Results Opt dupe of 1GB backup from Minnesota to California Excellent 10 hops 54 msec latency <.01% loss Test With WAN Optimization Without WAN Optimization Mb/sec 24.3 Mb/sec Mb/sec 23.9 Mb/sec Mb/sec 25.3 Mb/sec Mb/sec 19.7 Mb/sec Mb/sec 25.9 Mb/sec Consistent 2X performance increase with WAN Optimization Scenario #2 WAN Conditions Results 500 MB backup to Nirvanix cloud storage Very Good 5 hops 51 msec latency.05% loss Test With WAN Optimization Without WAN Optimization Mb/sec Mb/sec Mb/sec Mb/sec Mb/sec Mb/sec Mb/sec Mb/sec 1.5 to 2.5x performance increase with WAN Optimization 47

48 Choice of Form Factor Choice of Places to Dedupe Unlike Other Vendors, Symantec Offers Choice 1 Client Servers 2 Media Server 3 Target Device Built-In Dedupe at the client Built-In Dedupe at the media server Dedupe at backend storage target More Choices on a Single Platform NetBackup 48

49 Capital Expense Operating Expense Service Levels Transformation Symantec NetBackup Appliances Improve C.O.S.T. Innovating Backup and Recovery C O S T FETB Software Licensing Transferable Licensing Scalable Hardware Platforms Acquisition Install & Integration Single-Pane of Glass Upgrades & Patches Improved RPO/RTO Granular Restores Single Point-of- Contact Remote office/branch office Physical/Virtual Environment Tiered Storage Disaster Recovery 49