NEXGEN N5 AND VORMETRIC DATA SECURITY

Transcription

1 NEXGEN N5 AND VORMETRIC DATA SECURITY Slutin Validatin Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7, 2015

2 Overview NexGen has validated the functinality f NexGen N5 hybrid flash arrays as a back-end strage slutin within an infrastructure that utilizes Vrmetric Data Security delivering data at rest encryptin. The bjective was t demnstrate and dcument the cmpatibility f NexGen hybrid flash strage in this envirnment. Test Cmpnents The slutin cmpnents included in the base architecture: Cisc: Cisc infrastructure cnsists f a pair f Cisc UCS 6248 Fabric Intercnnects. The Fabric Intercnnects will be cnnected t 2 upstream Cisc Nexus 5548 switches and t a UCS 5108 chassis. The slutin cmpnents included in the base architecture include: UCS Blade Chassis mdel: x Fabric Extender IO Mdule (FEX): 2208XP 2x Nexus Switches mdel: 5548UP 2x Fabric Intercnnect mdel: 6248UP Blade Server mdel: B200-M3 Blade VIC: 1240 LOM Blade Mezzanine Card: Empty Blade Memry: 256GB Blade Prcessr: quantity 2 f Xen E (2GHz, 16 cres ttal) NexGen: NexGen N5 Hybrid Flash Array Virtualizatin Platfrm: VMware vsphere 5.1 with ESXi 5.1 ( ) vcenter 5.1 management platfrm Vrmetric: Vrmetric Data Security v Vrmetric Data Security Manager Vrmetric Transparent Encryptin Agents Micrsft: Windws Server 2012 R2 Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7,

3 SQL Server 2012 Enterprise Editin x64 with SP1 Architecture Figure 1: Slutin Cmpnents Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7,

4 VM and Strage Cnfiguratin VM name Qty. OS Rle vcpus Mem (GB) vdisk (GB) SQL1 1 Windws Server 2012 R2 SQL 2012 Server x 50 SQL2 1 Windws Server 2012 R2 SQL 2012 Server x 50 File 1 Windws Server 2012 R2 Generic Server x 100 Vrmetric 1 Data Security Manager Details Figure 2: Detailed VM and strage cnfiguratin Three virtual servers were created as per this dcument and testing cnsisted f NexGen N5 snapshts, clning and replicatin f Vrmetric prtected vlumes. Unlike prir Fusin imemry testing which utilized PCIe imemry cnfigured as lcal strage and fcused n File & SQL perfrmance wrklads 1, this test utilized traditinal ISCSI SAN cnnectivity and fcused strictly n cmpatibility. TEST CONFIGURATIONS Three virtual servers were created as per this dcument and validatin testing was be perfrmed as fllws. SQL Testing: VM Parameters: Each SQL VM was built utilizing a unique VMDK file fr each vlume Each SQL VM was cnfigured as per best practices: C:\binaries, E:\SQL Database, L:\SQL Lgs Vrmetric data encryptin was cnfigured fr E:\ and L:\ SQL Database Parameters: Database size: 25GB Number f databases: 1 per VM 1 Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7,

5 Test Runs: Test #1 entailed a full SQL install and custm database creatin n server SQL1 and subsequent snapsht f E:\ and L:\ in a pristine state. Database vlumes were then quiesced and a NexGen N5 snapsht was taken. After creatin f a new ppulated table within the custm database, the vlumes were then reverted t the snapsht previusly taken. Output: Pass/Fail Test #2 entailed a full SQL install n servers SQL1 and SQL2 with unique ppulated databases n each server. A flat-file SQL backup was made f a SQL1 database via SQL Server backup utility. The SQL1 backup file was placed n an encrypted vlume, a NexGen N5 snapsht was taken and the snapsht was clned t a new vlume. The new vlume was munted n SQL2 and a database restre was perfrmed via SQL Server backup utility using the flat-file backup n the clned vlume Test #3 entailed a full SQL install n server SQL1 with a unique ppulated database n SQL1. Database vlumes were then quiesced and replicatin was setup t a secnd NexGen N5 hybrid flash array. The SQL1 vlumes were unmunted frm SQL1 and the replicated vlumes n the secnd NexGen N5 were then munted t SQL1. SQL was then brught back nline n SQL1. File Server Testing: VM Parameters: VM was built utilizing a unique VMDK file fr each vlume VM was cnfigured as per best practices: C:\binaries, E:\File Vrmetric data encryptin was cnfigured fr E:\ Test Runs: Test #1 entailed creatin f standard wrd, Excel & PDF files n E:\ drive. The drive was then quiesced and unmunted, a NexGen N5 snapsht was taken and the snapsht was clned t a new vlume. The new vlume was munted t the File Server and integrity f dcuments was validated Output: Pass/Fail Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7,

6 Validatin and Test Results SQL TEST #1: PASSED Figure 3: Vrmetric GUI prtected vlumes Figure 4: SQL DB after reverting t snapsht Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7,

7 SQL TEST #2: PASSED Figure 5: SQL DB flat file restre Figure 6: SQL DB successful restre Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7,

8 SQL Test #3: Passed Figure 7: NexGen N5 replicatin f DB vlumes Figure 8: NexGen N5 replicated snapsht f DB vlume Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7,

9 Figure 9: NexGen N5l replicated snapsht f Lg vlume Figure 10: Windws Server manager shwing munted replicated vlumes Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7,

10 Figure 11: SQL DB back nline with replicated vlumes File Test #1: Passed Figure 12: File Server dcuments n clned vlume Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7,

11 Summary All test scenaris passed, cnfirming that Vrmetric Data Security is fully cmpatible with NexGen N5 hybrid flash strage. The testing fcused n a subset f typical applicatins and validated applicatin data integrity when utilizing NexGen N5 array features such as snapshts, clning and intra-array replicatin. Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7,