Journey  through  the  Cloud:    

Disaster  Recovery  

Ryan  Shu3leworth  –  Technical  Evangelist  @ryanAWS  

Common  use  cases  &  stepping  stones  into  the  AWS  cloud  Learning  from  customer  journeys  

Best  pracFces  to  bootstrap  your  projects  

Journey  through  the  cloud  

Explore  AWS  for  a  ‘non-­‐producFon’  use  case  Phase  systems  into  ‘live’  DR  use  with  relaFve  ease  

Choose  your  success  objecFves  for  a  cloud  project  ‘out  of  band’  

Disaster  recovery  

Why  AWS  for  disaster  recovery?  AWS  services  that  can  be  employed  Common  DR  architectures  Customer  example  Where  to  go  next      

Agenda  

 Why  AWS  for  Disaster  Recovery?  

AWS  is  used  in  a  variety  of  ways…  

AWS  &  Disaster  Recovery  

Backup  and  disaster  recovery  system  for  its  remote  sales  offices  

Fast,  secure  and  cost  effec@ve  backup  and  DR  for  Oracle  Apps  

Disaster  recovery  solu@on  to  backup  and  store  cri@cal  medical  image  data  

DR  and  tes@ng  environment  reducing  IT  overhead  and  increasing  availability  

You  might  be  able  to:  

Business  &  technical  drivers  

Reduce  costs    

Slash  DR  budgets  by  up  to  50%  

Reduce  on-­‐premise    

Eliminate  30%+  of  on-­‐premise  physical  equipment  

Consolidate  sites    

Eliminate  the  need  to  run  a  secondary  site  

Remove  aging  technologies  

 Eliminate  tape  for  backup  and  

archive        

DR  is  part  of  a  wider  set  of  policies  and  controls…  

DR  &  business  conFnuity  

High  availability   Backup   Disaster  recovery  

Keep  your  applica@ons  running  24x7  

Make  sure  you  data  is  safe   Get  your  applica@ons  and  data  back  aPer  a  major  

disaster  

DR  is  part  of  a  wider  set  of  policies  and  controls…  

DR  &  business  conFnuity  

It’s  not  an  all  or  nothing  thing  Choose  what  needs  to  failover  and  what  does  not  

Some  things  more  important  than  others  Some  things  will  s@ll  be  working  

High  availability   Backup   Disaster  recovery  

Keep  your  applica@ons  running  24x7  

Make  sure  you  data  is  safe   Get  your  applica@ons  and  data  back  aPer  a  major  

disaster  

Each  set  of  IT  assets  will  have  different  requirements…  

DR  &  business  conFnuity  

Recovery  Time  ObjecFve  (RTO)  

 How  quickly  you  need  this  asset  to  be  

recovered?  e.g.  1min?  15min?  1hr?  4hrs?  1day?  

Recovery  Point  ObjecFve  (RPO)  

 How  ‘fresh’  the  recovery  must  be  for  the  

asset?  e.g.  zero  data  loss,  15mins  out  of  date?  

 

Assets  will  sit  on  a  spectrum  of  technical  complexity…  

DR  &  business  conFnuity  

Rebuild  when  required  from  offsite  backup  

Run  hot-­‐hot  configuraFon  with  

auto-­‐failover  

The  fundamental  economic  model…  

UFlity,  on-­‐demand  datacenter  

Primary  Site  

Routers  Firewalls  Network  

Applica@on  Licenses  Opera@ng  Systems  

Hypervisor  Servers  SAN  

Primary  Storage  Backup  Archive  

           

Secondary  Site  

Routers  Firewalls  Network  

Applica@on  Licenses  Opera@ng  Systems  

Hypervisor  Servers  SAN  

Primary  Storage  Backup  Archive  

The  fundamental  economic  model…  

UFlity,  on-­‐demand  datacenter  

Primary  Site  

Routers  Firewalls  Network  

Applica@on  Licenses  Opera@ng  Systems  

Hypervisor  Servers  SAN  

Primary  Storage  Backup  Archive  

           

AWS  Routers  Firewalls  Network  

Applica@on  Licenses  Opera@ng  Systems  

Hypervisor  Servers  SAN  

Snapshot  Storage  Backup  Archive  

The  fundamental  economic  model…  

UFlity,  on-­‐demand  datacenter  

Primary  Site  

Routers  Firewalls  Network  

Applica@on  Licenses  Opera@ng  Systems  

Hypervisor  Servers  SAN  

Primary  Storage  Backup  Archive  

           

AWS  Routers  Firewalls  Network  

Applica@on  Licenses  Opera@ng  Systems  

Hypervisor  Servers  SAN  

Snapshot  Storage  Backup  Archive  

Secondary  site  costs  

Availability  Zone  

AWS  is  global   Region  

Cer6fica6ons    

SOC  1  Type  2  (formerly  SAS70)  

ISO  27001  

PCI  DSS  for  EC2,  S3,  EBS,  VPC,  RDS,  ELB,  IAM  

FISMA  Moderate  Compliant  Controls  

HIPAA  &  ITAR  Compliant  Architecture  

Physical  Security  

Datacenters  in  nondescript  faciliFes  

Physical  access  strictly  controlled  

Must  pass  two-­‐factor  authenFcaFon  at  least  twice  

for  floor  access  

Physical  access  logged  and  audited  

HW,  SW,  Network  

SystemaFc  change  management  

Phased  updates  deployment  

Safe  storage  decommission  

Automated  monitoring  and  self-­‐audit  

Advanced  network  protecFon  

 

 

Built to enterprise security standards

http://aws.amazon.com/security

 AWS  services  that  can  be  

employed  

Amazon Simple Storage

Service (S3)

AWS Import/Export

AWS Storage Gateway Service

AWS Direct Connect

Amazon Virtual Private Cloud

(VPC)

Amazon Route 53

Amazon Elastic Compute Cloud

(EC2)

Amazon Relational Database Service (RDS)

Amazon Elastic Block

Storage (EBS)

Object  storage  &  transfer  services  

Networking  services   FoundaFon  services  

S3  and  Elas@c  Block  Store  

AWS  storage  is  ideal  for  DR    

Simple  Storage  Service  

Highly  scalable  object  storage  

1  byte  to  5TB  in  size  

99.999999999%  durability  

ElasFc  Block  Store  

High  performance  block  storage  device  

 1GB  to  1TB  in  size  

Mount  as  drives  to  instances  with  snapshot/cloning  func@onali@es  

0.000  

250.000  

500.000  

750.000  

1000.000  

1 Trillion

750k+  peak  transacFons  per  second  

Objects in S3

Direct  Connect  Dedicated  connec@on  between  your  IT  

infrastructure  and  the  AWS  datacenters  

Extend  your  network  infrastructure  and  VLANs  into    AWS  

VPN  ConnecFon  A  Hardware  VPN  connec@on  connects  

amazon  environment  to  your  datacenter  

Internet  Protocol  security  (IPsec)  VPN  connec@on  

Commonly  used  hardware  supported  

Virtual  Private  Cloud  Private,  isolated  sec@on  of  the  AWS  Cloud  

Launch  resources  in  a  virtual  network  that  you  

define  complete  control  over  your  virtual  networking  

environment  

Internet  

Internet  

Networking options

 Common  DR  architectures  

4  main  paherns  

Common  DR  architectures  

Backup  &  Restore   Pilot  light  

Warm  standby  in  AWS  

Mul6-­‐site  solu6on  in  AWS  &  on-­‐

premise      

We’ll  focus  on  2  of  them…  

Common  DR  architectures  

Backup  &  Restore   Pilot  light  

Warm  standby  in  AWS  

Mul6-­‐site  solu6on  in  AWS  &  on-­‐

premise      

Let’s  start  with  Backup  &  Restore  

Common  DR  architectures  

Backup  &  Restore   Pilot  light  

Warm  standby  in  AWS  

Mul6-­‐site  solu6on  in  AWS  &  on-­‐

premise      

Advantages  to  star@ng  a  journey  with  this  pahern  

Backup  &  Restore  pa3ern  

Simple  to  get  started    

Easy  star@ng  point  for  exploring  the  AWS  cloud  

Low  technical  barrier  to  entry  

Focus  on  incorpora@ng  cloud  into  your  DR  strategy,  not  on  complex  technical  issues  related  to  hot-­‐hot  systems  

           

Cost  effecFve    

Very  high  levels  of  data  durability  at  low  price  

Cost  of  storing  snapshots  in  S3  

Archiving  possibili@es  beyond  tape  using  Glacier  

The  prepara@on  process…    

Backup  &  Restore  pa3ern  

Take  backups  of  current  systems  

Store  backups  in  S3  

Move  to  long  term  archive  in  Glacier  

The  process…    

Backup  &  Restore  pa3ern  

Take  backups  of  current  systems  

Store  backups  in  S3  

Detail  how  you  will  restoring  from  backup  or  recover  from  archive  

Move  to  long  term  archive  in  Glacier  

Push  backups  to  AWS  

Store  AMIs  for  servers  

Recover  servers  during  DR  

Glacier Long  term  cold  storage  

From  $0.01  per  GB/Month  

99.999999999%  durability  

Long  term  archive  Amazon  Glacier  

AWS  Storage  Gateway  and  backup  management  

RDS  and  Oracle  RMAN  

Let’s  look  at  the  Pilot  Light  pahern…  

Common  DR  architectures  

Backup  &  Restore   Pilot  light  

Warm  standby  in  AWS  

Mul6-­‐site  solu6on  in  AWS  &  on-­‐

premise      

Moving  along  the  DR  spectrum…  

Pilot  light  architecture  

Build  resources  around  replicated  dataset  

 Keep  ‘pilot  light’  on  by  replica@ng  core  

databases  

Build  AWS  resources  around  dataset  and  leave  in  stopped  state  

         

Moving  along  the  DR  spectrum…  

Pilot  light  architecture  

Build  resources  around  replicated  dataset  

 Keep  ‘pilot  light’  on  by  replica@ng  core  

databases  

Build  AWS  resources  around  dataset  and  leave  in  stopped  state  

         

Scale  resources  in  AWS  in  response  to  a  DR  event  

 Start  up  pool  of  resources  in  AWS  when  

events  dictate  

Match  current  produc@on  capacity  through  auto-­‐scaling  polcies  

Moving  along  the  DR  spectrum…  

Pilot  light  architecture  

Build  resources  around  replicated  dataset  

 Keep  ‘pilot  light’  on  by  replica@ng  core  

databases  

Build  AWS  resources  around  dataset  and  leave  in  stopped  state  

         

Scale  resources  in  AWS  in  response  to  a  DR  event  

 Start  up  pool  of  resources  in  AWS  when  

events  dictate  

Match  current  produc@on  capacity  through  auto-­‐scaling  policies  

Switch-­‐over  to  system  in  AWS  

Pilot  light  

Stopped instances

Pilot  light  

Running instances

 Customer  example  

EU  region  DR  site  for  range  of  business  applicaFons  

All  running  in  a  Virtual  Private  Cloud  (VPC)  

DR  provision  for  applicaFons  dependent  on  Oracle  and  SQL  Server  databases  

Includes  DR  for  AcFve  Directory  and  Windows  file  shares  

VPC Subnet B

Region

Availability Zone

Client-to-site VPN Site-to-site VPN

S3 Bucketswith Objects

Bastion Host

Internet

On-premiseData Centre A

RemoteDesktops

AWS Direct Connect

On-premiseData Centre B

VPC Subnet D VPC Subnet F

Databases

VPC Subnet E

Applications

VPC Subnet A

SmartSentinel

VPC Subnet G

FileServers

VPC Subnet C

ActiveDirectory

Proxy Server

VPC Subnet B

Region

Availability Zone

Client-to-site VPN Site-to-site VPN

S3 Bucketswith Objects

Bastion Host

Internet

On-premiseData Centre A

RemoteDesktops

AWS Direct Connect

On-premiseData Centre B

VPC Subnet D VPC Subnet F

Databases

VPC Subnet E

Applications

VPC Subnet A

SmartSentinel

VPC Subnet G

FileServers

VPC Subnet C

ActiveDirectory

Proxy Server

Dual route connectivity

VPC Subnet B

Region

Availability Zone

Client-to-site VPN Site-to-site VPN

S3 Bucketswith Objects

Bastion Host

Internet

On-premiseData Centre A

RemoteDesktops

AWS Direct Connect

On-premiseData Centre B

VPC Subnet D VPC Subnet F

Databases

VPC Subnet E

Applications

VPC Subnet A

SmartSentinel

VPC Subnet G

FileServers

VPC Subnet C

ActiveDirectory

Proxy Server

Active Directory Replication

VPC Subnet B

Region

Availability Zone

Client-to-site VPN Site-to-site VPN

S3 Bucketswith Objects

Bastion Host

Internet

On-premiseData Centre A

RemoteDesktops

AWS Direct Connect

On-premiseData Centre B

VPC Subnet D VPC Subnet F

Databases

VPC Subnet E

Applications

VPC Subnet A

SmartSentinel

VPC Subnet G

FileServers

VPC Subnet C

ActiveDirectory

Proxy Server

Bastion Host

VPC Subnet B

Region

Availability Zone

Client-to-site VPN Site-to-site VPN

S3 Bucketswith Objects

Bastion Host

Internet

On-premiseData Centre A

RemoteDesktops

AWS Direct Connect

On-premiseData Centre B

VPC Subnet D VPC Subnet F

Databases

VPC Subnet E

Applications

VPC Subnet A

SmartSentinel

VPC Subnet G

FileServers

VPC Subnet C

ActiveDirectory

Proxy Server

Database replication

VPC Subnet B

Region

Availability Zone

Client-to-site VPN Site-to-site VPN

S3 Bucketswith Objects

Bastion Host

Internet

On-premiseData Centre A

RemoteDesktops

AWS Direct Connect

On-premiseData Centre B

VPC Subnet D VPC Subnet F

Databases

VPC Subnet E

Applications

VPC Subnet A

SmartSentinel

VPC Subnet G

FileServers

VPC Subnet C

ActiveDirectory

Proxy Server

Application images

VPC Subnet B

Region

Availability Zone

Client-to-site VPN Site-to-site VPN

S3 Bucketswith Objects

Bastion Host

Internet

On-premiseData Centre A

RemoteDesktops

AWS Direct Connect

On-premiseData Centre B

VPC Subnet D VPC Subnet F

Databases

VPC Subnet E

Applications

VPC Subnet A

SmartSentinel

VPC Subnet G

FileServers

VPC Subnet C

ActiveDirectory

Proxy Server

Desktop environments

VPC Subnet B

Region

Availability Zone

Client-to-site VPN Site-to-site VPN

S3 Bucketswith Objects

Bastion Host

Internet

On-premiseData Centre A

RemoteDesktops

AWS Direct Connect

On-premiseData Centre B

VPC Subnet D VPC Subnet F

Databases

VPC Subnet E

Applications

VPC Subnet A

SmartSentinel

VPC Subnet G

FileServers

VPC Subnet C

ActiveDirectory

Proxy Server

Durable data backups

 Where  to  go  next  

Technology  and  services  organisa@ons  

Rich  partner  ecosystem  

h3p://aws.amazon.com/backup-­‐storage      

h3p://aws.typepad.com      

h3p://aws.amazon.com/whitepapers    

 Summary  

The  cloud  makes  backup  and  recovery  easy  

You  can  get  started  for  pennies  per  month  

The  cloud  will  scale  to  accommodate  all  of  your  data  

You  retain  visibility  and  control  of  your  informaFon  

aws.amazon.com  get  started  on  the  free  Fer