《双活数据中心解决方案课件.pptx》由会员分享，可在线阅读，更多相关《双活数据中心解决方案课件.pptx（93页珍藏版）》请在taowenge.com淘文阁网|工程机械CAD图纸|机械工程制图|CAD装配图下载|SolidWorks_CaTia_CAD_UG_PROE_设计图分享下载上搜索。
1、双活数据中心与灾备解决方案双活数据中心与灾备解决方案-技术部分技术部分议程议程1同城双活技术方案2异地灾备技术方案2基于虚拟化技术的业务连续性解决方案概览基于虚拟化技术的业务连续性解决方案概览资源池源池vSpherevSpherevSphere本地站点灾备站点基于虚拟化层的异步复制基于虚拟化层的异步复制基于硬件设备的同异步复制基于硬件设备的同异步复制自动化应用切换管理自动化应用切换管理城域集群城域集群应用感知的高可用性应用感知的高可用性关键应用零停机保护关键应用零停机保护在线迁移虚拟机，动态调配计算与存储资源在线迁移虚拟机，动态调配计算与存储资源VMotion and Storage VMot
2、ion高效的数据备份与恢复高效的数据备份与恢复可通过运行计划与脚本实现自动化操作可通过运行计划与脚本实现自动化操作资源池源池vSpherevSphereDev/TestDev/TestDev/Test灾难恢复灾难恢复本地高可用本地高可用数据保护数据保护方案特点 与应用程序和操作系统无关与硬件设备无关 完善的保护 简单，经济3议程议程1同城双活技术方案2异地灾备技术方案4双活数据中心在各个级别上全面保障可用性双活数据中心在各个级别上全面保障可用性vMotion&DRSHA&FT服务器Storage vMotion，Storage DRS存储VMFSVMFS硬件热添加多网卡绑定存储多路径组件数据D
3、ata ReplicationMetro Cluster站点5双活数据中心总体架构双活数据中心总体架构双活存储集群站点A站点B延伸的vSphere集群 200 km行为与单个vSphere相同延伸距离最大200KM，通常小于50KM通过VMware HA与vMotion实现自动的DR保护需要双活存储集群，如EMC的vPlex，NetApp的MetroCluster等6计算资源设计计算资源设计Making an Application Service Highly AvailablevSphereHAvSphereAppHA8VMwarevFabrictcServervSphere App HA
4、Policy-basedProtectoff-the-shelfapps9Fault Tolerance vs.High AvailabilityFaulttoleranceAbilitytorecoverfromcomponentlossExample:HarddrivefailureHighavailabilityUptime percentage in one yearDowntime in one year993.65days99.98.76hours99.9952minutes99.999“fivenines”5minutesX10支持多支持多vCPU的容错技术的容错技术Instan
5、taneousFailover4vCPU4vCPUvSpherePrimarySecondaryFastCheckpointingFTsupportforupto4vCPUsProtectionforhighperformance,multi-vCPUVMsNew,morescalabletechnology:fastcheck-pointingtokeepprimaryandsecondaryinsyncOverviewProtectmission-critical,high-performanceapplicationsregardlessofOSContinuousavailabilit
6、y:zerodowntime,zerodatalossforinfrastructurefailuresFullyautomatedresponseBenefits11Targetingcross-continentaldistancesupto100msRTTsMaintainstandardvMotionguaranteesLeaderinVMflexibility功能简介功能简介PermanentmigrationsbetweendatacentersDisasteravoidance(DA)DR/DAtestingMulti-siteloadbalancingFollowthesunB
7、enefits长距离长距离vMotionvSphere6.0支持跨三层网络和跨vCenterServer的vMotions12vCenter AvailabilityRunvCenterServerapplicationinaVMRunvCenterServerdatabaseinaVMRunbothinsameVM?ProtectwithvSphereHAvCenterandDBVMrestartprioritysettoHighEnableguestOSandAppmonitoringAppHAcanprotectSQLServerdatabaseBackupvCenterServerVM
8、anddatabaseImage-levelbackupforvCenterServerVMApp-levelbackupusingagentfordatabasebackup13网络资源设计网络资源设计双活数据中心网络架构双活数据中心网络架构物理二层物理二层(裸光纤裸光纤)逻辑二层逻辑二层层叠网络层叠网络/VPN 二层分段VMVMVM二层分段VMVMVM二层网络扩展的二层网络(二层内容在数据中心互连链路上传递)站点A站点B二层网络15NSX vSphere Multi-Site Use CasesNSX for vSphere supports 3 different Multi-Site
9、Deployment Models1.VXLANwithStretchedClusters(vSphereMetroStorageCluster)2.VXLANwithSeparateClusters3.L2VPNAll solutions provide L2 extension over an L3 network,enabling workload&IP mobility without the need to stretch VLANsLocal egress is supported,however it does add complexityThe appropriate depl
10、oyment model will depend on customer requirements and their environmentNSX利用层叠网络实现双活数据中心利用层叠网络实现双活数据中心双活存储双活存储vSphere城域存储集群城域存储集群数据存数据存储1数据存数据存储2vCenterServer三层网络站点站点A站点站点BVM1VM2VM3逻辑交交换机机A172.16.10.0/24VM4VM5逻辑交交换机机B172.16.20.0/24分布式逻辑路由器分布式逻辑路由器站点站点A边界网关边界网关上联网络上联网络A站点站点B边界网关边界网关上联网络上联网络B17VMware
11、NSX Multi-Site Single VC,Stretched ClusterSolution DetailRequiresasupportedvSphereMetroStorageClusterconfigurationInavMSCdeployment,storageisActive/Activeandspansbothsites.ExamplesofActive/Activestorageare:EMCVPLEX,NetAppMetroCluster(seeVMwareHCLformoreinformation)StretchedclusterssupportLivevMotion
12、ofworkloadsUseL3forallVMkernelnetworks:Management,vMotion,IPStorageAllmanagementcomponentssuchasvCenterServer,NSXManagerandControllersarelocatedinSiteALatencyandbandwidthrequirementsaredictatedbyvMSCstoragevendor,eg10msRTTforVPLEXwhichalsoalignswithvMotionusingEnterprisePlusvMSCenablesdisasteravoida
13、nceandbasicDisasterRecovery(withouttheorchestrationortestingcapabilitiesofSRM)LossofeitherNSXComponentsortheDatacenterInterconnectwillresultsinafallbacktodataplanebasedlearningusingexistingnetworkstate.ThereforethereisnooutagetodataforwardingandwithoutvCenterServer,therearenoVMprovisioningormigratio
14、noperationsNSXandvMSCarecomplimentarytechnologiesthatfitasweetspotforNSX(SinglevCenterServer)VMware NSX Multi-Site Single VC,Stretched ClusterVMware ESXiVMware ESXiVMware ESXiVMware ESXiSite ASite BStretched Workload ClusterVMware ESXiVMware ESXiVMware ESXiVMware ESXiSite ASite BStretched Edge Clust
15、erCluster ConfigurationvMSC enables stretched clusters across two physical sitesIn an NSX deployment Management,Edge and Workload clusters are all stretchedUnder normal conditions all Management Components run in a Site A and are protected by vSphere HAThey are automatically restarted at Site B in t
16、he event of a site outage.The management network is not stretched and must be enabled on Site B as part of the recovery run bookDependent on design,NSX Edge Services Gateways are either active in both sites or a single site and can also leverage HAVMs in the Workload Clusters are automatically recov
17、eredVMware ESXiVMware ESXiVMware ESXiVMware ESXiSite ASite BvCenterServerStretched Management Cluster19VMware NSX Multi-Site Single VC,Stretched ClusterIn a vMSC environment,DRS is used to balance resource utilization,provide site affinity,improved availability and ensure optimal traffic flowUse Sho
18、uld rules,rather than Must as this allows vSphere HA to take precedenceExample DRS Groups,Rules and Settings for NSX Edges:VMware NSX Multi-Site Single VC,Stretched ClusterNSX Configuration(Option 1-Preferred)Transport Zone spans both Sites and VXLAN Logical Switches provide L2 connectivity to VMsDi
19、stributed Logical Routing is used for all VMs to provide consistent default gateway vMACLocal Egress is provided by using separate Uplink LIFs and Edge GWs per site.Hosts on Site A have DLR default gateway configured via Site A Edge GW using net-vdr CLI.While Site B DLR default gateway is via Site B
20、 Edge GWCaveat:Dynamic Routing cannot be enabled on DLR,or a static route set via NSX ManagerNSX Edge Gateways will have a static route for any networks directly connected to DLR.Consistent IPaddressing will simplify routing by allowing a supernet to be usedDFW provides vNIC policy enforcement indep
21、endent of the VMs locationVM1VM2VM3Web Logical Switch172.16.10.0/24Site ASite BDistributed Logical RouterVM4VM5App Logical Switch172.16.20.0/24Site A NSX Edge GW192.168.10.1Site B NSX Edge GW192.168.20.1Uplink Net A 192.168.10.0/29Uplink A LIF 192.168.10.2Uplink Net B 192.168.20.0/29Uplink B LIF 192
22、.168.20.2VM6VM7DB Logical Switch172.16.30.0/24Internal LIFs.1VMware NSX Multi-Site Single VC,Stretched ClusterNSX Configuration(Option 2)As per Option 1 Transport Zone spans both Sites and VXLAN Logical Switches provide L2 connectivity for VMsNSX Edge Gateways are deployed per site with the same int
23、ernal IP addressNSX DFW L2 Ethernet Rules are defined to block ARP to the remote GW using MAC Sets,which provides Local Egress as only the site local Edge GW is learnt.Future enhancement planned to enable ESXi host object for DFW*Caveats:Traffic flow between application tiers may be asymmetric if th
24、ey are split across sites and DRS rules arent used Does not leverage Distributed Logical Routing and is limited to 10 vNICs per EdgevMotion will result in network interruption as VM ARP cache entry for site specific GW needs to time outCan be used if Option 1 isnt a fit(eg,require Dynamic Routing or
25、 vSphere 5.1 support)Site ASite BVM1VM2VM3VM3Site A NSX Edge GW192.168.10.1Site B NSX Edge GW192.168.10.1Logical Switch192.168.10.0/24VMware NSX Multi-Site Single VC,Separate Clusters(2)Datastore 1Datastore 2vCenterServerL3NetworkSite ASite BVM1VM2VM3Logical Switch A172.16.10.0/24VM4VM5Logical Switc
26、h B172.16.20.0/24Distributed Logical RouterSite A NSX Edge GWUplink Net ASite B NSX Edge GWUplink Net BStorage vMotion Required for VM Mobility23VMware NSX Multi-Site Single VC,Separate ClustersSolution DetailSeparatevSphereClustersareusedateachsite,thereforeDRSrules&groupsarenotrequiredStorageisloc
27、altoasiteEnhancedvMotion(simultaneousvMotionandsvMotion)canprovidelivevMotionwithoutsharedstorageUseL3forallVMkernelnetworks:Management,vMotion,IPStorageAllmanagementcomponentssuchasvCenterServer,NSXManagerandControllersarelocatedinSiteASupportedlatencyrequirementforEnhancedvMotionis100msRTT(vSphere
28、6).vMotionrequires250MbpsofbandwidthperconcurrentvMotionThissolutionprovidesDisasterAvoidancewherelivevMotionissupported,byenablingworkloadstobemovedproactivelybetweensitesDoesnotprovideautomatedDisasterRecoveryVMware NSX Multi-Site Single VC,Separate ClustersVMware ESXiManagement ClusterVMware ESXi
29、Site AvCenterServerCluster ConfigurationClusters do not span beyond a physical siteAll Management Components run in Site A,and will not be automatically recovered in the event of a site outage.Storage replication to a standby Cluster in Site B and a manual recovery process could be implementedSepara
30、te Edge and Workloads Clusters are used per siteNSX Edge Services Gateways are active in a single site,with HA is local to the siteWorkloads are active across both sites and can optionally support live vMotionDRS affinity rules for workloads are not requiredVMware ESXiEdge Cluster AVMware ESXiSite A
31、VMware ESXiVMware ESXiSite BEdge Cluster BVMware ESXiWorkload Cluster AVMware ESXiSite AVMware ESXiVMware ESXiSite BWorkload Cluster B25VMware NSX Multi-Site Single VC,Separate ClustersNSX ConfigurationOption 1 with Distributed Logical Routing is unchanged from Stretched Cluster configuration and is
32、 still recommendedFor option 2,as vCenter objects are not shared we can leverage NSX DFW L2 Ethernet Rules with a scope of the Datacenter to provide Local Egress.as only the site local Edge GW is learnt.No enhancements requiredSame caveats with Option 2 for Stretched Clusters also applySite ASite BV
33、M1VM2VM3VM3Site A NSX Edge GW192.168.10.1Site B NSX Edge GW192.168.10.1Logical Switch192.168.10.0/24To Local Egress/Ingress or not to.As a first step,ask the customer if they have stateful services for traffic entering and exiting the Datacenter?This is generally the case and if so they will require
34、 a solution to provide Local Ingress for their applications.Eg,NATGSLBAnycastLISP,RHIetcIf they can address this,then a Multi-Site NSX solution providing Local Egress is a good fitIf they do not,other questions to ask are:Do they have high bandwidth between sites?and is reducing operational complexi
35、ty a goal?AnactiveNSXEdgeGatewayatonesite,withfailovertothesecondarysitemaymeetthecustomersrequirementsandismuchsimplerthanprovidingLocalEgress&IngressVMware NSX Multi-Site L2 VPN(3)Datastore 1Datastore 2vCenterServerSite A orOn PremSite B orOff PremVM1VM2Network A 172.16.10.0/24Site A NSX Edge GWSi
36、te A Uplink NetworkvCenterServerVM3VM4Network B172.16.10.0/24Site B NSX Edge GWSite B Uplink NetworkSSLSSLL3Network28存储资源设计存储资源设计存储需求存储需求Site ASite BDarkFiber =200 kmMetro ClusterAggrXPlex0AggrYPlex1AggrYPlex0DWDMDWDMAggrXPlex1时延要求：vSphere要求RTT100ms存储同步复制要求RTT5ms30Metro Storage的两种实现方式：的两种实现方式：Unifor
37、m与与Non-Uniform31vSphere Metro Storage Cluster工作原理工作原理vSphereHAClusterStretched across campus or metro areavMSCCertifiedStorageMetro ClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSArray basedsynchronousreplicationPlex0Plex032vSphere Metro Storage Cluster工作原理工作原理Standard
38、vMotion of Virtual MachinesvMotionvMSCCertifiedStorageMetro ClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSArray basedsynchronousreplicationPlex0vSphereHAClusterPlex033vSphere Metro Storage Cluster工作原理工作原理vSphereHAClusterStorage takeovervMSCCertifiedStorageMetro Cluster
39、Plex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1Plex0Plex0Plex0APPOSAPPOSAPPOSAPPOSAPPOSAPPOSSite shutdownfor maintenance34vSphere Metro Storage Cluster工作原理工作原理vSphereHAClustervMSCCertifiedStorageMetro ClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPO
40、SAPPOSPlex0Plex0APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1Plex0AutomaticresyncMaintenance performed,site restored35vSphere Metro Storage Cluster工作原理工作原理vSphereHAClustervMSCCertifiedStorageNetApp MetroClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex0Plex0APPOSAPPOSAPPOSAPPOS
41、APPOSAPPOSPlex1Plex0Standard vMotionto return VMsAccess returned36存储设备选型存储设备选型兼容性网站：http:/ VPLEX for Stretched Metro ClustersRoadmapStretchedvSphereClusterSite A(Active)Site B(Active)10ms,IPorFCvCenterEstablishedVPLEXActive-ActiveSolutionInstantvMotionacrossdistanceVMwareHAautomaticallyrestartsVMsat
42、eithersiteforsystemorsitefailureBalanceworkloadsacrossbothsiteswithVMwareDRSSupportsVMwareFToutoftheboxAdditionalflexibilityofVPLEXMetroDoesntRequireFCCross-ConnectChooseIPorFCConnectivitybetweensitesThirdSiteIPconnectivitytoWitnessVMNoSPOFIfyouloseaDirector,nolossofaccessatanysiteVPLEXVPLEXDualSite
43、DRSDualSiteHAInstantvMotionSite C(Optional Witness)VPLEXDistributedVirtualVolumes38Stretched Storage with IBM SAN Volume ControllerSinglesystemimageacrosstwositesprovidessinglepaneofglassmanagementforday-to-daystoragemanagementactivitySimplifymanagementofyourenvironmentatsametimeasdeployingactive-ac
44、tivestorageBaseduponarichandmatureplatformProvideReal-timeCompression,EasyTier,Non-disruptivemigrations,Longdistancereplication40,000enginesinstalledworldwide,11yearsfieldexperience250+storagedevicessupportedtoprovideback-endcapacityRetainyourexistinginvestmentinstoragedevicesKeepflexibilityforthefu
45、tureActivequorumdeviceenablesautomaticfailoverNoexternalmanagementsoftwarePreventssplit-brainSupportsrecoveryincaseoffullunplannedsitefailurescenariosQuorumStoragePool1StoragePool2Site 1Site 1Site 2Site 2Site 3SVCStretchedCluster39来自存储厂商的参考指南来自存储厂商的参考指南ImplementingVMwarevSphereMetroStorageClusterwit
46、hHPLeftHandMulti-Sitestoragehttp:/ ImplementingvSphereMetroStorageClusterusingHP3PARPeerPersistencehttp:/ DeployVMwarevSphereMetroStorageClusteronHitachiVirtualStoragePlatformhttp:/ for Metro Cluster 2015Q3 (计划计划)SiteAFault Domain AFault Domain BFault Domain CVirtual SAN ClusterSiteCSIteBvmdkwitness
47、vmdkvmdkwitnessvmdk从机架感知升级到站点感知：1，迷你容错站点专用于witness2，优先从本地站点读取数据以提升性能41议程议程1同城双活技术方案2异地灾备技术方案42RTO,RPO,and MTD RecoveryTimeObjective(RTO)HowlongitshouldtaketorecoverRecoveryPointObjective(RPO)AmountofdatalossthatcanbeincurredMaximumTolerableDowntime(MTD)Downtimethatcanoccurbeforesignificantlossisincu
48、rredExamples:Financial,reputation43The Three Building Blocks For Disaster RecoveryvSphereVirtual SANEcosystemVDP AdvancedvSphere ReplicationSite Recovery ManagerVMwareArray-basedBackup copiesExternal StorageStorageComputeBackupandRecoveryReplicationDROrchestration44异地异地(同城同城)灾备解决方案总体架构灾备解决方案总体架构45异地
49、异地(同城同城)灾备解决方灾备解决方案案多种映射关系多种映射关系主备式切换双活切换双向切换双活数据中心ProductionRecoveryProductionRecoveryProductionProduction最常见的场景花销较大灾备架构主要用于测试，开发和培训等非生产应用有效降低开销两个站点均有生产应用每个站点为对方提供容灾支持两个站点的应用可以跨站点自由移动计划内事件零停机限制在城域范围内Site1Site2Production46网络资源设计网络资源设计“Protected”Site“Recovery”SiteStorageStorageVMFS/NFSVMFS/NFSStorage
50、VMFS/NFSVMFS/NFSReplicationSRM with NSX for vSphereNSX ManagerNSX Controller ClustervCenter+SRMvCACNSX ManagerNSX Controller ClustervCenter+SRMvCACFirewallRules&SecurityGroups48SRM with NSX for vSphereWhat has been validatedSRMcanmapVMsfromoneVXLANLogicalSwitchonthePrimarySitetoadifferentLogicalSwit