Recomendados
Recomendados
Mais conteúdo relacionado
Mais procurados
Mais procurados (20)
Destaque
Destaque (17)
Semelhante a AWS Summit Barcelona - Backup & Disaster Recovery
Semelhante a AWS Summit Barcelona - Backup & Disaster Recovery (20)
Mais de Amazon Web Services
Mais de Amazon Web Services (20)
Último
Último (20)
AWS Summit Barcelona - Backup & Disaster Recovery
- 1. BACK UP & DISASTER RECOVERY Vadim Zendejas Solutions Architect
- 2. AGENDA Why AWS for disaster recovery AWS services that can be employed Common DR architectures Customer example Where to go next
- 4. HOT TOPIC FOR ENTERPRISES Floods in Europe Hurricane Sandy in USA Typhoons in South East Asia Earthquake in New Zealand Tsunami and flooding in Japan
- 5. « Everything fails all the time » Werner Vogels CTO of Amazon
- 6. WHY AWS FOR DISASTER RECOVERY?
- 7. REDUCE COSTS Reduce DR budgets considerably
- 8. REDUCE ON-PREMISE Reduce on-premise physical equipment
- 9. CONSOLIDATE SITES Eliminate the need to run a secondary site
- 10. REMOVE AGING TECHNOLOGIES Eliminate tape for backup and archive
- 11. FAST, SECURE AND COST EFFECTIVE BACKUP AND DR FOR ORACLE APPS
- 13. DR IS PART OF A WIDER SET OF POLICIES AND CONTROLS HIGH AVAILABILITY Keep your applications running 24x7
- 14. DR IS PART OF A WIDER SET OF POLICIES AND CONTROLS HIGH AVAILABILITY BACKUP Keep your applications Make sure you data is running 24x7 safe
- 15. DR IS PART OF A WIDER SET OF POLICIES AND CONTROLS HIGH AVAILABILITY BACKUP DISASTER RECOVERY Keep your applications Make sure you data is Get your applications running 24x7 safe and data back after a major disaster
- 16. DR IS PART OF A WIDER SET OF POLICIES AND CONTROLS HIGH AVAILABILITY BACKUP DISASTER RECOVERY Keep your applications Make sure you data is Get your applications running 24x7 safe and data back after a major disaster IT’S NOT AN ALL OR NOTHING THING
- 17. EACH SET OF IT ASSETS WILL HAVE DIFFERENT REQUIREMENTS RECOVERY TIME OBJECTIVE (RTO) RECOVERY POINT OBJECTIVE (RPO) How quickly you need this How fresh the recovery asset to be recovered? must be for the asset? e.g. 1min? 15min? 1hr? e.g. zero data loss, 15mins 4hrs? 1day? out of date?
- 18. LEVEL OF AVAILABILITY REQUIRED REBUILD WHEN REQUIRED FROM OFFSITE BACKUP RUN HOT-HOT CONFIGURATION WITH AUTOFAILOVER
- 19. UTILITY, ON-DEMAND DATACENTER PRIMARY SITE SECONDARY SITE Routers Routers Firewalls Firewalls Network Network Application Licenses Application Licenses Operating Systems Operating Systems Hypervisor Hypervisor Servers Servers SAN SAN Primary Storage Primary Storage Backup Backup Archive Archive
- 20. UTILITY, ON-DEMAND DATACENTER PRIMARY SITE AWS Routers Routers Firewalls Firewalls Network Network Application Licenses Application Licenses Operating Systems Operating Systems Hypervisor Hypervisor Servers Servers SAN SAN Primary Storage Snapshot Storage Backup Backup Archive Archive
- 21. UTILITY, ON-DEMAND DATACENTER PRIMARY SITE Routers Firewalls Network Application Licenses Operating Systems $ AWS Routers Firewalls Network Application Licenses Operating Systems Hypervisor Hypervisor Servers Servers SAN SAN Primary Storage Snapshot Storage Backup Backup Archive Archive
- 22. AWS IS GLOBAL US-WEST (Oregon) EU-WEST (Ireland) GOV CLOUD ASIA PAC (Tokyo) US-EAST (Virginia) ASIA PAC (Sydney) US-WEST (N. California) ASIA PAC (Singapore) SOUTH AMERICA (Sao Paulo)
- 23. BACKUP AND DISASTER RECOVERY SYSTEM FOR ITS REMOTE SALES OFFICES
- 24. BUILT TO ENTERPRISE SECURITY STANDARDS CERTIFICATIONS PHYSICAL SECURITY HW, SW, NETWORK ISO 27001 Datacenters in nondescript Systematic change SOC 1 Type 2 (formerly facilities management SAS70), SOC 2, SOC 3 Physical access strictly Phased updates deployment PCI DSS Level 1 controlled Safe storage decommission DIACAP, FISMA, FIPS 140-2 Must pass two-factor Automated monitoring and HIPAA & ITAR Compliant authentication at least twice for self-audit Architecture floor access Advanced network protection Physical access logged and audited http://aws.amazon.com/security
- 25. AWS SERVICES THAT CAN BE EMPLOYED
- 26. STORAGE & TRANSFER SERVICES NETWORKING SERVICES FOUNDATION SERVICES Amazon Simple Storage Service (S3) AWS Direct Connect Amazon Elastic Compute Cloud (EC2) AWS Import/Export Amazon Virtual Private Cloud (VPC) Amazon Relational Database Service (RDS) AWS Storage Gateway Service Amazon Route 53 Amazon Elastic Block Storage (EBS)
- 27. AWS STORAGE IS IDEAL FOR DR SIMPLE STORAGE SERVICE ELASTIC BLOCK STORAGE Highly scalable object storage High performance block storage device 1 byte to 5TB in size 1GB to 1TB in size 99.999999999% durability Mount as drives to instances with snapshot/cloning functionalities
- 28. AWS STORAGE IS IDEAL FOR DR SIMPLE STORAGE SERVICE ELASTIC BLOCK STORAGE Highly scalable object storage High performance block storage device 1 byte to per GB/Month From $0.095 5TB in size 1GB to 1TB GB/Month From $0.10 per in size 99.999999999% durability Mount as drives to instances with snapshot/cloning functionalities
- 29. LONG TERM ARCHIVE AMAZON GLACIER Long term cold storage From $0.01 per GB/Month 99.999999999% durability
- 30. NETWORKING OPTIONS Internet Internet DIRECT CONNECT VPN CONNECTION VIRTUAL PRIVATE CLOUD Dedicated connection between your A Hardware VPN connection Private, isolated section of the AWS Cloud IT infrastructure and the AWS connects amazon environment to Launch resources in a virtual network that datacenters your datacenter you define Extend your network infrastructure Internet Protocol security (IPsec) Complete control over your virtual and VLANs into AWS Commonly used hardware supported networking environment
- 31. DISASTER RECOVERY SOLUTION TO BACKUP AND STORE CRITICAL MEDICAL IMAGE DATA
- 33. 4 MAIN PATTERNS Backup & Restore Pilot light Hot standby in AWS Multi-site solution in AWS & onpremise
- 35. ADVANTAGES TO STARTING A JOURNEY WITH THIS PATTERN SIMPLE TO GET STARTED Very high levels of data durability Easy starting point for exploring the at low price AWS cloud COST EFFECTIVE Cost of storing snapshots in S3 Low technical barrier to entry Archiving possibilities beyond Focus on incorporating cloud into tape using Glacier your DR strategy, not on complex technical issues related to hot-hot systems
- 36. THE PREPARATION PROCESS TAKE BACKUPS OF CURRENT SYSTEMS
- 37. THE PREPARATION PROCESS TAKE BACKUPS OF CURRENT SYSTEMS STORE BACKUPS IN S3
- 38. THE PREPARATION PROCESS TAKE BACKUPS OF CURRENT SYSTEMS STORE BACKUPS IN S3 MOVE TO LONG TERM ARCHIVE IN GLACIER
- 39. THE PROCESS TAKE BACKUPS OF CURRENT SYSTEMS STORE BACKUPS IN S3 MOVE TO LONG TERM ARCHIVE IN GLACIER DETAIL HOW YOU WILL BE RESTORING FROM BACKUP OR RECOVER FROM ARCHIVE
- 40. PUSH BACKUPS TO AWS
- 41. STORE AMIS FOR SERVERS
- 42. RECOVER SERVERS DURING DR
- 43. AWS STORAGE GATEWAY AND BACKUP MANAGEMENT
- 44. RDS AND ORACLE RMAN
- 45. RESTORE TIMES REDUCED FROM 15 TO 2½ HOURS
- 47. MOVING ALONG THE DR SPECTRUM BUILD RESOURCES AROUND REPLICATED DATASET Keep pilot light on by replicating core databases Build AWS resources around dataset and leave in stopped state
- 48. MOVING ALONG THE DR SPECTRUM BUILD RESOURCES AROUND REPLICATED DATASET SCALE RESOURCES IN AWS IN RESPONSE TO A DR EVENT Keep pilot light on by replicating Start up pool of resources in AWS core databases when events dictate Build AWS resources around dataset Match current production capacity and leave in stopped state through auto-scaling policies
- 49. MOVING ALONG THE DR SPECTRUM BUILD RESOURCES AROUND REPLICATED DATASET SCALE RESOURCES IN AWS IN RESPONSE TO A DR EVENT Keep pilot light on by replicating Start up pool of resources in AWS core databases when events dictate Build AWS resources around dataset Match current production capacity and leave in stopped state through auto-scaling policies SWITCH-OVER TO SYSTEM IN AWS
- 52. DR AND TESTING ENVIRONMENT REDUCING IT OVERHEAD AND INCREASING AVAILABILITY
- 54. WHY USE HOT STAND BY? LOW RESTORING TIME EXPECTED CONSISTENT DATA SET When the Recovery Time Objective And when the Recovery Point has a low time for recovery policy Objective has a higher level of consistency expected
- 55. HOT STANDBY
- 57. MULTI-SITE SOLUTION ON AWS AND ON PREMISE ARCHITECTURE
- 58. OBJECTIVES OF A MULT-SITE SOLUTION DOWNTIME IS CRITICAL SCALABILITY IS REQUIRED When almost no downtime is When primary site can not handle expected heavy loads
- 61. CUSTOMER EXAMPLE
- 62. EU region DR site for range of business applications All running in a Virtual Private Cloud (VPC) DR provision for applications dependent on Oracle and SQL Server databases Includes DR for Active Directory and Windows file shares
- 63. On-premise Data Centre A Internet On-premise Data Centre B AWS Direct Connect Active Directory Bastion Host SmartSentinel Client-to-site VPN VPC Subnet A Remote Desktops VPC Subnet D Proxy Server Site-to-site VPN VPC Subnet B Applications VPC Subnet C Databases VPC Subnet E VPC Subnet F Availability Zone Region S3 Buckets with Objects File Servers VPC Subnet G
- 64. On-premise Data Centre A On-premise Data Centre B Dual route connectivity Internet AWS Direct Connect Active Directory Bastion Host SmartSentinel Client-to-site VPN VPC Subnet A Remote Desktops VPC Subnet D Proxy Server Site-to-site VPN VPC Subnet B Applications VPC Subnet C Databases VPC Subnet E VPC Subnet F Availability Zone Region S3 Buckets with Objects File Servers VPC Subnet G
- 65. On-premise Data Centre A On-premise Data Centre B Active Directory Replication Internet AWS Direct Connect Active Directory Bastion Host SmartSentinel Client-to-site VPN VPC Subnet A Remote Desktops VPC Subnet D Proxy Server Site-to-site VPN VPC Subnet B Applications VPC Subnet C Databases VPC Subnet E VPC Subnet F Availability Zone Region S3 Buckets with Objects File Servers VPC Subnet G
- 66. On-premise Data Centre A Bastion Host Internet On-premise Data Centre B AWS Direct Connect Active Directory Bastion Host SmartSentinel Client-to-site VPN VPC Subnet A Remote Desktops VPC Subnet D Proxy Server Site-to-site VPN VPC Subnet B Applications VPC Subnet C Databases VPC Subnet E VPC Subnet F Availability Zone Region S3 Buckets with Objects File Servers VPC Subnet G
- 67. On-premise Data Centre A Internet On-premise Data Centre B AWS Direct Connect Active Directory Bastion Host SmartSentinel Client-to-site VPN VPC Subnet A Proxy Server Site-to-site VPN VPC Subnet B VPC Subnet C Database replication Remote Desktops VPC Subnet D Applications Databases VPC Subnet E VPC Subnet F Availability Zone Region S3 Buckets with Objects File Servers VPC Subnet G
- 68. On-premise Data Centre A Internet On-premise Data Centre B AWS Direct Connect Active Directory Bastion Host SmartSentinel Client-to-site VPN VPC Subnet A Proxy Server Site-to-site VPN VPC Subnet B VPC Subnet C Application images Remote Desktops VPC Subnet D Applications Databases VPC Subnet E VPC Subnet F Availability Zone Region S3 Buckets with Objects File Servers VPC Subnet G
- 69. On-premise Data Centre A Internet On-premise Data Centre B AWS Direct Connect Active Directory Bastion Host SmartSentinel Client-to-site VPN VPC Subnet A Remote Desktops VPC Subnet D Proxy Server Site-to-site VPN VPC Subnet B Applications VPC Subnet C Databases VPC Subnet E VPC Subnet F Availability Zone Region Durable data backups S3 Buckets with Objects File Servers VPC Subnet G
- 70. WHERE TO GO NEXT
- 71. RICH PARTNER ECOSYSTEM TECHNOLOGY AND SERVICES ORGANIZATIONS
- 73. INFRASTRUCTURE IS NO LONGER A BARRIER
- 74. NO UP-FRONT EXPENSE On-Premise $ $ $ $ $ Physical Space Power Network Servers Certification Amazon Web Services 0 $ To get started
- 75. THE CLOUD MAKES BACKUP AND RECOVERY EASY ✔
- 76. YOU CAN GET STARTED FOR CENTS PER MONTH
- 77. THE CLOUD WILL SCALE TO ACCOMMODATE ALL OF YOUR DATA
- 79. aws.amazon.com get started on the free tier