NEXGEN N5 AND VORMETRIC DATA SECURITY Slutin Validatin Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7, 2015
Overview NexGen has validated the functinality f NexGen N5 hybrid flash arrays as a back-end strage slutin within an infrastructure that utilizes Vrmetric Data Security delivering data at rest encryptin. The bjective was t demnstrate and dcument the cmpatibility f NexGen hybrid flash strage in this envirnment. Test Cmpnents The slutin cmpnents included in the base architecture: Cisc: Cisc infrastructure cnsists f a pair f Cisc UCS 6248 Fabric Intercnnects. The Fabric Intercnnects will be cnnected t 2 upstream Cisc Nexus 5548 switches and t a UCS 5108 chassis. The slutin cmpnents included in the base architecture include: UCS Blade Chassis mdel: 5108 2x Fabric Extender IO Mdule (FEX): 2208XP 2x Nexus Switches mdel: 5548UP 2x Fabric Intercnnect mdel: 6248UP Blade Server mdel: B200-M3 Blade VIC: 1240 LOM Blade Mezzanine Card: Empty Blade Memry: 256GB Blade Prcessr: quantity 2 f Xen E5-2650 (2GHz, 16 cres ttal) NexGen: NexGen N5 Hybrid Flash Array Virtualizatin Platfrm: VMware vsphere 5.1 with ESXi 5.1 (1065491) vcenter 5.1 management platfrm Vrmetric: Vrmetric Data Security v5.1.3.1074 Vrmetric Data Security Manager Vrmetric Transparent Encryptin Agents Micrsft: Windws Server 2012 R2 Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7, 2015 1
SQL Server 2012 Enterprise Editin x64 with SP1 Architecture Figure 1: Slutin Cmpnents Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7, 2015 2
VM and Strage Cnfiguratin VM name Qty. OS Rle vcpus Mem (GB) vdisk (GB) SQL1 1 Windws Server 2012 R2 SQL 2012 Server 2 4 3 x 50 SQL2 1 Windws Server 2012 R2 SQL 2012 Server 2 2 3 x 50 File 1 Windws Server 2012 R2 Generic Server 2 4 2 x 100 Vrmetric 1 Data Security Manager 2 2 100 Details Figure 2: Detailed VM and strage cnfiguratin Three virtual servers were created as per this dcument and testing cnsisted f NexGen N5 snapshts, clning and replicatin f Vrmetric prtected vlumes. Unlike prir Fusin imemry testing which utilized PCIe imemry cnfigured as lcal strage and fcused n File & SQL perfrmance wrklads 1, this test utilized traditinal ISCSI SAN cnnectivity and fcused strictly n cmpatibility. TEST CONFIGURATIONS Three virtual servers were created as per this dcument and validatin testing was be perfrmed as fllws. SQL Testing: VM Parameters: Each SQL VM was built utilizing a unique VMDK file fr each vlume Each SQL VM was cnfigured as per best practices: C:\binaries, E:\SQL Database, L:\SQL Lgs Vrmetric data encryptin was cnfigured fr E:\ and L:\ SQL Database Parameters: Database size: 25GB Number f databases: 1 per VM 1 http://www.fusini.cm/white-papers/vrmetric-encryptin-at-rest Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7, 2015 3
Test Runs: Test #1 entailed a full SQL install and custm database creatin n server SQL1 and subsequent snapsht f E:\ and L:\ in a pristine state. Database vlumes were then quiesced and a NexGen N5 snapsht was taken. After creatin f a new ppulated table within the custm database, the vlumes were then reverted t the snapsht previusly taken. Output: Pass/Fail Test #2 entailed a full SQL install n servers SQL1 and SQL2 with unique ppulated databases n each server. A flat-file SQL backup was made f a SQL1 database via SQL Server backup utility. The SQL1 backup file was placed n an encrypted vlume, a NexGen N5 snapsht was taken and the snapsht was clned t a new vlume. The new vlume was munted n SQL2 and a database restre was perfrmed via SQL Server backup utility using the flat-file backup n the clned vlume Test #3 entailed a full SQL install n server SQL1 with a unique ppulated database n SQL1. Database vlumes were then quiesced and replicatin was setup t a secnd NexGen N5 hybrid flash array. The SQL1 vlumes were unmunted frm SQL1 and the replicated vlumes n the secnd NexGen N5 were then munted t SQL1. SQL was then brught back nline n SQL1. File Server Testing: VM Parameters: VM was built utilizing a unique VMDK file fr each vlume VM was cnfigured as per best practices: C:\binaries, E:\File Vrmetric data encryptin was cnfigured fr E:\ Test Runs: Test #1 entailed creatin f standard wrd, Excel & PDF files n E:\ drive. The drive was then quiesced and unmunted, a NexGen N5 snapsht was taken and the snapsht was clned t a new vlume. The new vlume was munted t the File Server and integrity f dcuments was validated Output: Pass/Fail Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7, 2015 4
Validatin and Test Results SQL TEST #1: PASSED Figure 3: Vrmetric GUI prtected vlumes Figure 4: SQL DB after reverting t snapsht Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7, 2015 5
SQL TEST #2: PASSED Figure 5: SQL DB flat file restre Figure 6: SQL DB successful restre Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7, 2015 6
SQL Test #3: Passed Figure 7: NexGen N5 replicatin f DB vlumes Figure 8: NexGen N5 replicated snapsht f DB vlume Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7, 2015 7
Figure 9: NexGen N5l replicated snapsht f Lg vlume Figure 10: Windws Server manager shwing munted replicated vlumes Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7, 2015 8
Figure 11: SQL DB back nline with replicated vlumes File Test #1: Passed Figure 12: File Server dcuments n clned vlume Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7, 2015 9
Summary All test scenaris passed, cnfirming that Vrmetric Data Security is fully cmpatible with NexGen N5 hybrid flash strage. The testing fcused n a subset f typical applicatins and validated applicatin data integrity when utilizing NexGen N5 array features such as snapshts, clning and intra-array replicatin. Slutin Validatin: NexGen N5 and Vrmetric Data Security January 7, 2015 10