Disaster Recovery. VMware Cloud on AWS

Transcriptie

1 Disaster Recovery & VMware Cloud on AWS

2 Introductie Robert Verdam Consultant BCONN ICT vexpert / vexpert NSX RobertVerdam.nl Dennis van der Aalst Consultant BCONN ICT vexpert 2019

3 Agenda Disaster Recovery (SRM) VMware Cloud on AWS - Use Cases Disaster Recovery as a Service Connecting on-prem <-> VMC DRaaS Deployment

4 Wat is Disaster Recovery Herstel van dienstverlening Human Error Hackers Terrorisme Operationele storing

5 Uitdagingen Disaster Recovery Complex Handmatig configureren Raakt meerdere infra componenten Kostbaar Rekening houden met worst-case scenario Onderhouden DR kost tijd en geld Betrouwbaarheid Onmogelijk/lastig testen Onduidelijk hoe lang recovery duurt Failback vaak niet aan gedacht

6 Site Recovery Manager

7 Wat is? VMware Cloud Service SDDC as a Service ESXi Bare-Metal op AWS Hardware Lifecycle Management uitgevoerd door VMware VMware Cloud on AWS vsphere vsan NSX AWS global infrastructure

8 Overzicht

9 VMware Cloud on AWS Voordelen Lage beheerskosten Geen hardware-/software onderhoud Lage leercurve Bekende vsphere platform en tooling Configuratie veelal met wizards Single pane of glass via Cloud Gateway / Hybrid Linked mode Flexibel Snel (initiele / additionele) capaciteit beschikbaar Meedere storage opties beschikbaar (NVMe / EBS)

10 Disaster Recovery as a Service

11 Disaster Recovery as a Service Voordelen Elastic site As a Service Geen eigen DR-site te onderhouden Bekende oplossing op basis van vcenter/srm Storage agnostic Inter-region DR (VMConAWS naar andere VMConAWS site)

12 Connecting on-prem <-> VMC Opties IPSEC Route based (NSX-T) Policy Based (NSX-T / NSX-V) Direct Connect L2VPN

13 IPSEC IPSEC VPN naar T0- router (NSX-T) IPSEC VPN naar MGW/CGW (NSX-V) IPSEC Route-based (NSX-T): Redundant (BGP) VTI Automatische routes propageren

14 L2VPN On-Premises Data Center VMware Cloud on AWS SSL-VPN Requirements On-Premises Geen NSX -> Geen nood! Stand-alone NSX Edge HA Pair Geen NSX-licentie benodigd Requirements WAN connectivity RTT < 150ms Bandwidth >250 Mbps Remote Gateway NSX Standalone Edge L2 VPN Client Compute Logical Networks L3 Network SSL VPN Tunnel Tunnel ID 10 Tunnel ID 20 L2 Extensions Tunnel ID 10 Tunnel ID 20 VMC on AWS Compute Gateway VMC on AWS L2VPN Server

15 Walkthrough / Demo

16 On-Premises Ravello VMware Cloud on AWS EU.Central.Frankfurt vsphere Web Client Domain Controller vsphere Web Client vcenter Server vcenter Server esxi01 esxi02 esxi03 ESXi x 10.2.x.x NFS Storage vsan Storage NLVMUGDEMO x x

17

18 On-Premises Ravello VMware Cloud on AWS EU.Central.Frankfurt vsphere Web Client Domain Controller vsphere Web Client vcenter Server vcenter Server SRM Server vsphere Replication Appliance esxi01 esxi02 esxi03 ESXi NFS Storage x Stap 1 Enable VMware Site Recovery for VMware Cloud on AWS 10.2.x.x vsan Storage NLVMUGDEMO x x

19

20 On-Premises Ravello VMware Cloud on AWS EU.Central.Frankfurt vsphere Web Client Domain Controller vsphere Web Client vcenter Server Hybrid Linked Mode vcenter Server IPSEC VPN Connection SRM Server vsphere Replication Appliance esxi01 esxi02 esxi03 ESXi NFS Storage x Stap 12 Enable Configure VMware VPN and Site Recovery Firewall for VMware Rules Cloud on AWS 10.2.x.x vsan Storage NLVMUGDEMO L2 VPN Tunnel ID: x x

21

22 On-Premises Ravello VMware Cloud on AWS EU.Central.Frankfurt vsphere Web Client Domain Controller vsphere Web Client vcenter Server SRM Server vsphere Replication Appliance Hybrid Linked Mode IPSEC VPN Connection vcenter Server SRM Server vsphere Replication Appliance esxi01 esxi02 esxi03 ESXi NFS Storage x Stap 23 Download and Deploy Configure VPN and Firewall vsphere Replication and Site Rules Recovery Manager 10.2.x.x vsan Storage NLVMUGDEMO L2 VPN Tunnel ID: x x

23

24 On-Premises Ravello VMware Cloud on AWS EU.Central.Frankfurt vsphere Web Client Domain Controller vsphere Web Client vcenter Server SRM Server vsphere Replication Appliance Hybrid Linked Mode IPSEC VPN Connection vcenter Server SRM Server vsphere Replication Appliance esxi01 esxi02 esxi03 ESXi NFS Storage x Stap 34 Download and Deploy Pair Sites, Map resources, vsphere Replication and Site Configure placeholder Recovery Manager 10.2.x.x vsan Storage NLVMUGDEMO L2 VPN Tunnel ID: 20 NLVMUGDEMO x x

25

26 On-Premises Ravello VMware Cloud on AWS EU.Central.Frankfurt vsphere Web Client Domain Controller vsphere Web Client vcenter Server SRM Server vsphere Replication Appliance Hybrid Linked Mode IPSEC VPN Connection vsphere Replication vcenter Server SRM Server vsphere Replication Appliance esxi01 esxi02 esxi03 ESXi NFS Storage x Stap 54 Pair Sites, Map resources, Replicate and protect VM's Configure placeholder 10.2.x.x vsan Storage NLVMUGDEMO L2 VPN Tunnel ID: 20 NLVMUGDEMO x x

27

28 Failover in case of Disaster On-Premises Ravello VMware Cloud on AWS EU.Central.Frankfurt vsphere Web Client Domain Controller vsphere Web Client vcenter Server SRM Server vsphere Replication Appliance Hybrid Linked Mode IPSEC VPN Connection vsphere Replication vcenter Server SRM Server vsphere Replication Appliance esxi01 esxi02 esxi03 ESXi x 10.2.x.x NFS Storage vsan Storage NLVMUGDEMO L2 VPN Tunnel ID: 20 NLVMUGDEMO x x

29

30 Lessons learned Documentatie (NSX-V vs NSX-T) Support Jumpbox benodigd in AWS (SRM) Single pane of glass alleen via on-prem vcenter L2VPN NSX-T niet te koppelen met NSX-V -> Standalone NSX-Edge

31 Vragen

32 Meer weten? Robert Verdam Consultant BCONN ICT Dennis van der Aalst Consultant BCONN ICT SRM AWS Replicatie mogelijkheden DRaaS Verbinden on-prem -> AWS (AWS Transit Gateway, HCX, VeloCloud)