VMware based DR, waarom niet met een hyperscaler?

Transcriptie

1 VMware based DR, waarom niet met een hyperscaler?

2 Agenda: Hyperscalers en Hypervisors Schaalbaarheid iland DR proces Veiligheid en Regelgeving Wat kost het

3 Agenda: Hyperscalers en Hypervisors Schaalbaarheid iland DR proces Veiligheid en Regelgeving Wat kost het

4 Rudy Arts Regional Sales EMEA

5 25 14 Years delivering IT services ISO and SSAE16 compliant cloud regions Years cloud and disaster recovery expertise Leader in Gartner Magic Quadrant for DRaaS, 2016, 2017 and 2018 Leader The Forrester Wave : DRaaS Providers,

6 Hypervisor: Flexibiliteit & Beschikbaarheid RTO & het iland DR proces Prijsstelling en verborgen kosten VM performance, schaalbaarheid & sizing Security & Compliancy, Onboarding & Training

7

8 Hyperscale Hoog beschikbaar als optie 99.95% SLA (Azure) 99.99% SLA (Azure SSD managed disks) 99.99% AWS Availability Sets (Azure) Availability Zones (AWS)

10 Hoe schaal je je omgeving in de cloud (IaaS of DR)? On premises 2 vcpu 2.6 Ghz 2 vcpu 2.6 Ghz 16 GB RAM 16 GB RAM? 100 GB Disk 50 GB Disk 100 GB Disk 50 GB Disk 50 GB SSD 50 GB SSD

11

12 Manage VM resources in IaaS zoals in productie Volledige controle over CPU, RAM, Disk en Netwerk resources voor alle VMs, net als on-premise. CPU CPU sockets en cores toevoegen of verwijderen per socket Hot-add van CPU is supported RAM RAM toevoegen of verwijderen Voorgedefinieerde waarden of volledig eigen keuzes Hot-add van RAM is supported Disk Zelf toevoegen van additionele disken van maximaal 6 TB Disken tot maximaal 62 TB beschikbaar Disken toevoegen of verwijderen zonder down te hoeven Network Maximaal 10 vnics kunnen toegevoegd worden aan een single VM IP and MAC adres te configureren vanaf de Cloud Console Power Control Verschillende opties voor het controleren van de VM power state Guest OS reboot en shutdown Suspend VMs om de status veilig te stellen en later te resumen

14 Enterprise Performance, Visibility & Availability Disaster Recovery Failover & Testing Compliance Reporting Automated VM Backup Software Defined Networking Core Security Essentials iland Secure Cloud Stack & Console Veeam Backup & Replication Zerto Virtual Replication Trend Micro Deep Security VMware NSX - Network Virtualisation VMware vcloud Director - Tenant Orchestration Layer VMware vsphere Hypervisor - Virtualisation Layer Cisco UCS High Performance - UCS Blades with Intel CPUs Secure - Cisco Validated Reference Architecture Resilient - Redundant Hardware & Software Nimble Storage High Performance - Flash Accelerated Secure - Encrypted at Rest Resilient - Redundant Hardware & Software Cisco Networking High Performance - Cisco Nexus & ASR Secure - Cisco Validated Resilient - Redundant Hardware & Software

15 iland DRaaS Producten Bescherming van virtuele omgevingen Met Veeam (VCC-R) Met Zerto Bescherming van fysieke servers Met DoubleTake (Carbonite)

16 iland Secure Disaster Recovery as a Service Platform Near-real-time recovery op het moment van een disaster Zeer lage RPO/RTOs Extreem veilig target platform met ingebouwde compliancy Betaal alleen voor wat je gebruikt Self-service testing en failover met 24x7 support Ondersteuning van virtuele, fysieke en legacy systemen Netwerk flexibiliteit voor het ondersteunen van hybrid cloud

17 Console Functionaliteit voor Self Service Self service megelijkheden zijn beschikbaar vanaf source en destination site voor alle devices. 2. SELECT APPLICATION AN D CH ECKPOIN T 1. SELECT FAILOVER TYPE 3. TRACK PROGRESS iland s cloud services team is 24 x 7 beschikbaar mocht u ons nodig hebben om de failover voor u te starten

19 iland Compliance Postures & Framework

20 Project Roadmap Deployment, On-Boarding en Support Cloud Deployment Replication Setup & beheer Cloud On-Boarding Acceptatie test Het speciaal aan u toegewezen team van projectmanager en engineers ontwikkelt uw disaster recovery omgeving op basis van de aangevraagde specificaties. On-boarding en training wordt verzorgd voor alle aspecten van uw DRaaS oplossing om het gebruik en beheer na de overdracht mogelijk te maken. iland biedt on-boarding en assitentie bij het configureren van de Zerto Replicatie technologieen. Iland zal tevens assiteren bij het koppelen van de twee sites via een VPNtunnel of MPLS oplossing. Daarna helpen iland-engineers bij het instellen van de 1e replicatiegroepen om ervoor te zorgen dat de replicatie van de huidige productiefaciliteit van de klant succesvol is. iland biedt uitgebreide onboarding sessies om optimaal te profiteren van het cloudplatform en de console van iland. Het doel hiervan is om u volledig op de hoogte te stellen van de DR functionaliteiten en ook gebruik te kunnen maken van andere use-cases voor DR, waaronder on-demand beveiligingsscans, Ontwikkel, test & development en Patch testen. Een op zichzelf staande testfailover functionaliteit biedt de mogelijkheid om uw DR oplossing te testen op performance, gegevensintegriteit, eindgebruikerstoegang en de tijd die nodig is om te herstellen na eendisaster (RTO). Iland helpt uw team bij het uitvoeren van de eerste DR-failovertest.

22 Keep Control of Cost at Every Level Billing Summary Last Month Current Month Previous Hour Current Hour Estimated Billing for Current Month Cost component breakdown Monthly / Hourly granularity View costs associated with individual components CPU, RAM, Storage, Bandwidth, & other costs Export / Snapshot this information and share Usage Summary Monthly Cost Breakdown Monthly Estimate Breakdown Attribute spend to Pool / Application /VM Track & Alert Track Burst/Ad-hoc usage in real-time or historical Set cost threshold alerts to control spend across teams

23 iland and VMware. Better together! Vertrouwde Partner Vertrouwen geeft de resultaten die u nodig hebt Native VMware platform Neem bestaande VM s en vaardigheden mee. Single Unified Interface Self-service console voor efficientie, controle & inzicht. Concierge On-boarding Naadloos en eenvoudig overstappen met een minimale verstoring. Consumption based billing Betaal voor wat je gebruikt End-to-end networking Vereenvoudig en verzeker u van goede integratie voor uw hybride cloud strategy Compliance and Reporting Minimaliseer risico s en krijg de informatie die u nodig hebt. Expert support iland: klaar om u te helpen bij elke stap van de reis. Het is ons dagelijks werk.

24 Vragen?

25 How to Find a Cloud That Fits Your VMware Infrastructure: iland.com/wp-how-to-find-a-cloud-that-fits Dank je wel!

26 Backup slides

27 Define Orchestrated Disaster Recover Runbook s Define Disaster Recovery Runbook Scenarios within software to orchestrate macro and micro disasters Define Disaster Recovery Scenarios Create your own company / user defined failover scenarios Define Full Site, Tier1/2/3, business unit or other plans. Drag and Drop recovery groups and applications. Re-order to orchestrate the order in which specific applications are brought up within a DR scenario Test Once plans have been defined, test and validate runbook & application orchestration as well as virtual machine boot order. Full on-boarding on this functionality is provided via our dedicated project management and deployment team, along with 24/7/365 support Report iland includes automatic reporting on any runbook failover/test including data around virtual machine availability, networking and VMware tool status.

28 Monitor the Health of your solution at anytime, anywhere Through desktop and mobile devices at a glance information & alerting capabilities Protection Summary Current View of all workloads protected Application & VM Total Storage Utilized Application replication health & status against SLA Current RPO metrics Export metrics to CSV Download Protection Summary via PDF Active Failovers / Tests Get at a glance views as to current failover actions in progress Recent Failover Tasks Review timelines and success of previous failovers and tests Fulfill auditing documentation by downloading a failover report Drill deeper into any area to discover granular information regarding any metric or action taken by your IT teams.

29 Review your Application protection status & settings On an application by application basis always keep up to date, with the latest status of your systems Application Replication Settings Overview Review quantity of VMs protected Priority: Set and Verify based on application criticality Review the Target Site leveraged Keep track of Storage utilized Review Target SLA for RPO goals Status Monitor and Track RPO against SLA Status Review current Actual RPO Track when the last test occurred on the application Test Reminders Define the desired test frequency per application iland s console will automatically alert you when your next test is due Via the console, alerting, or via Rest API customers can verify the health and status of protection on a per application group basis at any time. Drill deeper at a granular level to view and demonstrate current & historical RPO s being achieved with the solution.

30 Audit your RTO & DR Success at the push of a button On-demand failover report s verify and prove your RTOs and DR solution success Recovery Operation Details Tasks and actions tracked per user Time & date s of actions taken Achieved Recovery Time Objective Metrics Custom user recorded notes Success / Failure status Verify Recovery Settings Recovery Site utilized Resource Pool tested Network Segment testing Virtual Machine Boot Order Detailed Recovery Steps Each recovery step is recorded with the following detail: - Start Time - End Time - Success Organizations benefit from these built in reporting capabilities to verify that their orchestrated recovery plan is setup correctly from a boot order, network, and site perspective. Overall and individual component part RTOs can be verified and proven to the business.

31 Define & Verify DR End User Access Self service perimeter firewall visibility, control, management and verification Edge Gateway Firewall By default iland includes a dedicated virtual firewall appliance for replication and a separate firewall for end user access. Through the iland Cloud Console interface, you can set and create: DHCP & Static Routing Load Balancing configurations SSL Client VPN access for up to 100 concurrent users IPSec Site to Site VPN with up to 10 Peers SNAT, DNAT & Firewall Statements Internal segmented network creation Configuration is simple and accessible, with built in restore points for every configuration change. Configure, and then verify end user access through non intrusive self service DR testing all through a single interface. Note also 3rd party virtual and physical firewall appliances are supported as alternatives, along with direct circuits, and MPLS connections.

32 Secure your Cloud Console with Role based Access All users can utilize 2-factor authentication, and can be given just the specific permissions they need Create User Accounts First Name, Last Name, Username, Password Assign Role Full access: Organization Administrator Read only access: Read Only Organization Administrator Granular specific access: Organization User Granular Permissions (Organization User) vdc Administrator: Provide access to a specific resource pool i.e. DR/TestDev vapp Administrator Provide application owners with specific access just to their applications for DR testing Network Administrator DNS Administrator Assign Network administration to a specific team for end user access control, auditing and testing Compliance Administrator Delegate access to security & compliance data Disaster Recovery Administrator Restrict who can Failover/Test, and view DR setup Catalog Administrator For test and development manage who maintains templates

33 Keep Control of Cost at Every Level Billing Summary Last Month Current Month Previous Hour Current Hour Estimated Billing for Current Month Cost component breakdown Monthly / Hourly granularity View costs associated with individual components CPU, RAM, Storage, Bandwidth, & other costs Export / Snapshot this information and share Usage Summary Monthly Cost Breakdown Monthly Estimate Breakdown Attribute spend to Pool / Application /VM Track & Alert Track Burst/Ad-hoc usage in real-time or historical Set cost threshold alerts to control spend across teams

34 Do More with iland Secure DRaaS On-Demand, Non-Intrusive Penetration Testing Customers can perform non-intrusive testing at any time without impact on replication and Production servers. On-demand vulnerability scans can be performed at the DR site, without affecting their production site. A report can then be generated that details any areas that may require addressing. OS / Application Patch Testing Customers can leverage the test failover capabilities of their DR solution to bring online exact copies of their production workloads. These can be leveraged for testing the latest OS and Application patches they may be rolling out ahead of rolling these out within their production site. UAT / Testing / Training Labs Leveraging exact copies of VMs in a Test Failover, customers can perform non-intrusive UAT testing with their user/customer base, including adjusting and monitoring performance, testing network access, security amongst other things. This can also be leveraged to deliver non-intrusive training environments to end users. These VMs can also be used as a test bed for development of new projects / ideas.

35 Hypervisor & Flexibiliteit & Beschikbaarheid RTO & het iland DR proces Prijsstelling en verborgen kosten VM performance, schaalbaarheid & sizing Security & Compliancy, Onboarding & Training