Discover the Power of your Virtual Environments with ... · •During recovery, the administrator...
Transcript of Discover the Power of your Virtual Environments with ... · •During recovery, the administrator...
Discover the Power of your Virtual Environments with Backup Exec 2012
Gareth Fraser-King
Kelly Smith
SYMANTEC VISION 2012
The Symantec V-Ray Advantage Symantec V-Ray technologies provide:
• Patented visibility into virtual machines and applications
• Transparent backup and recovery across physical and virtual machines
• Third-generation granular recovery
• Unifies physical and virtual backups
Unified Protection, File & Application Recovery, Deduplication, Automated Protection – ALL IN A SINGLE PRODUCT.
2 Virtual Protection with Backup Exec
SYMANTEC VISION 2012
Agent for Applications and
Databases Deduplication
Option
Agent for VMware and
Hyper-V
Backup Exec 2012
Symantec V-Ray
Protection For Virtualized Infrastructures
A C B A
D C A B
B D D C
A B
C D
3 Virtual Protection with Backup Exec
SYMANTEC VISION 2012
Challenges
• VM sprawl
• Low tolerance for downtime
• Data redundancy
• Higher storage cost
• Protection and Monitoring
• Low visibility into VM contents
• Existing investments into physical infrastructure
• Licensing
4 Virtual Protection with Backup Exec
SYMANTEC VISION 2012
Underlying Principles of Backup Exec Virtual Environment Protection
Virtual Protection with Backup Exec 5
SYMANTEC VISION 2012
Advanced VMware and Hyper-V Support
6
Symantec V-Ray
Single pass backup, all recovery options
Data reduction technologies
Virtual machine protection
• Optimized data deduplication • Block optimization • Changed Block Tracking • Incremental, differential backups
Backup Exec 2012 Server
Virtual Servers & Machines
vSphere Hyper-V
• Full virtual machine recovery • Application recovery • Granular application recovery • Granular file/folder recovery • Redirected recovery
• Image-level virtual machine protection • Direct backup; no proxy server • Application protection through Volume Shadow Copy
Service (VSS) • Dynamic Inclusion
Virtual Protection with Backup Exec
SYMANTEC VISION 2012
VMware Platform Integration Overview
7 Virtual Protection with Backup Exec
VMware “Ready” Certified Integration • Enables backup of all virtual machines • Backup of VMware virtual machines over SAN infrastructures
vSphere Changed Block Tracking • Differential : backup of only what has changed since the last full • Incremental: backup of only what has changed since the last backup
Block Optimization Support • Intelligent skipping of unused blocks within a virtual disk file • Greatly reducing backup sizes and increasing backup speed
Integrated V-Ray Recovery Technology • Entire virtual machine • Individual files and folders* • Entire applications and granular application objects
Advanced V-Ray Data Deduplication Support • VMDK Stream Handler enables increased deduplication efficiency • Significant reduction of storage requirements for backup
Improved Microsoft VSS Integration • Proper protection of Microsoft applications (Exchange, SQL, SharePoint, etc) • Application quiescence and log truncation
SYMANTEC VISION 2012
VMware Virtual Machine Discovery
8 Virtual Protection with Backup Exec
LAN (Discovery)
SAN (Data Transport)
vSphere Server
Virtual Machines
Backup Exec Server +Agent for VMware and Hyper-V
Data Store
VMware Virtual Machine Discovery Methods:
• Enter vSphere/vCenter hostname or IP address into Backup Exec interface
• Virtual machines then available for backup selection
SYMANTEC VISION 2012
Virtual Machine Dynamic Inclusion
• Dynamically Protects New VMs Found at Job Run-time
• Applies to Folders (nodes) that Hold VMs / VM data
• Ability to Exclude VMs that are Powered Off
• Global/job Exclusion Can Also Be Used to Exclude VMs
9 Virtual Protection with Backup Exec
Virtual Host
NEW
APP
OS
DATA
APP
OS
DATA
APP
OS
DATA
APP
OS
DATA
Backup Exec™ 2012 Server
New Virtual Machines Automatically Protected
Virtual Machines
SYMANTEC VISION 2012
Virtual Machine Backup Methods
• Image-level Backups – Capture entire snapshots of virtual machines
– Enables full virtual machine recovery and granular file/folder recovery
• Agent-assisted Backups (for virtualized applications) – A form of image-level backup
– Includes application recovery and granular application recovery support
– Requires AWS to be installed to virtual machine
• Agent-based Backups – Legacy backup method
– Backups are captured by a local agent installed to a virtual machine
– Recommended only in situations where image-level backups are not optimal, such as Physical Compatibility Mode RDM disk configurations
10 Virtual Protection with Backup Exec
SYMANTEC VISION 2012
VMware Backup Transport Modes
• SAN
– Uses iSCSI or Fiber Channel shared storage for data transfers
• HOTADD
– Uses a virtualized Backup Exec server that exists as a virtual machine
• NBD
– Uses the LAN/Ethernet for data transfers
• NBDSSL
– Uses the encrypted LAN/Ethernet for data transfers
11 Virtual Protection with Backup Exec
SYMANTEC VISION 2012
Virtual Disk Types
VMware Virtual Disk Types
• Both thick and thin virtual disks (VMDK) are supported
• During recovery, the administrator can select to restore as either a thick or thin virtual disk
Hyper-V Virtual Disk Types
• Both dynamically expanding and fixed size virtual disks (VHD) are supported
• When recovered, a virtual machine will have the same VHD type as it had when it was backed up
12 Virtual Protection with Backup Exec
SYMANTEC VISION 2012
Virtual Machine Proxy-less Backup
13 Virtual Protection with Backup Exec
Virtual Host
APP
OS
DATA
APP
OS
DATA
APP
OS
DATA
APP
OS
DATA
Backup Exec™
2012 Server
Backup Data
No Proxy Server “Middle Man”
• Backup data travels directly to Backup Exec server
• Simplifies backup topology
• Increases backup performance
SYMANTEC VISION 2012
VMware Storage Distributed Resource Scheduling (SDRS)
14 Virtual Protection with Backup Exec
VMDK
Datastore_1 Datastore_2 Datastore_3 Datastore_4
Pod_1
Backup Exec 2012 and SDRS
• For SDRS events during active backup/restore temporary “lock” place on VMDK file
• Backup/restore operation completes
• Lock is released, SDRS event continues
SYMANTEC VISION 2012 15
New! Backup and Convert to Virtual
Convert Stream
Convert to Virtual (P2V) – Parallel data streams
– One stream to media server
– Other stream to hypervisor
– Result is full virtual machine (not just the virtual disk)
Backup to Virtual (B2V) – Serial data streams – Backup stream to media
server – Conversion job runs after or
on different schedule – Result is full virtual machine
(not just the virtual disk)
Protected Server Backup Exec 2012
Server Hypervisor
Parallel Data Streams
Backup Stream Convert Stream
Protected Server Backup Exec 2012
Server Hypervisor
Serial Data Streams
Backup Stream
Symantec V-Ray
Virtual Protection with Backup Exec
SYMANTEC VISION 2012
Storage Optimization Features for Virtual Backups
Virtual Protection with Backup Exec 16
SYMANTEC VISION 2012
Block Optimization
17 Virtual Protection with Backup Exec
Used Block
Unused Block
Used blocks captured during backup
Empty blocks ignored
Virtual Disk (VMDK/VHD) Block Map
Only Used Blocks Captured During Backup
• Greatly reduces size of virtual backups
• Increases backup performance
• Reduces backup storage requirements
Symantec V-Ray
SYMANTEC VISION 2012
Changed Block Tracking (CBT)
CBT Enables Differential and Incremental Backups
– Incremental: captures blocks that have changed since the last backup operation
– Differential: captures blocks that have changed since the last full backup operation
18 Virtual Protection with Backup Exec
Symantec V-Ray
Used Block
Unused Block
Tracks blocks that have changed since last backup operation
Virtual Disk (VMDK/VHD) Block Map
Changed Block
SYMANTEC VISION 2012
Data Deduplication
Client Deduplication
• Deduplication calculations happen at the client
• Greatly reduces data transferred to the Backup Exec server
• Greatly reduces data stored by the Backup Exec server
• Improves backup performance
• Usually optimal for Hyper-V environments
Server Deduplication
• Deduplication happens at the Backup Exec server
• Greatly reduces data stored by the Backup Exec server
• Usually optimal for VMware environments
19 Virtual Protection with Backup Exec
Client
Server
Symantec V-Ray
SYMANTEC VISION 2012
VMware and Hyper-V Enhanced Deduplication
• Block Optimization
– Backup process ignores empty space within a VHD
• Change Block Tracking
– Enables differential and incremental backups
• VMDK and VHD Stream Handler
– Increases deduplication efficiency, especially across virtual machines
20
VHD Backup With Deduplication Stream Handler
File Segment File Segment
Block
128k
File Seg.
Block Block Bl.
128k 128k 32k
Block
128k
Block
102k
Block
128k
Symantec V-Ray
Virtual Protection with Backup Exec
SYMANTEC VISION 2012 21
Build Your Backup Exec Franchise With Tools From Symantec
Global
Files
Exchange
SQL
Avg
Global
What Is It? • The Backup Exec Deduplication Assessment Tool (BEDAT) • Tool designed to demonstrate benefits of Backup Exec deduplication technology • Standalone tool; runs with or without Backup Exec installed
How Does It Work? • Installs to, and runs from, Windows x86 and x64 systems • Estimates deduplication results for local and remote (network) servers • Automatic cleanup after scan is complete
Who Is It For? • All Backup Exec partners • Customers interested in using BEDAT should contact a Symantec partner:
http://partnerlocator.symantec.com/public/search/
Where Can Partners Get It? • PartnerNet: https://partnernet.symantec.com/Partnercontent/Product/BEDAT.jsp
Virtual Protection with Backup Exec
SYMANTEC VISION 2012
Virtual Application Protection
Virtual Protection with Backup Exec 22
SYMANTEC VISION 2012
Data and Application Protection, Recovery
23
Restore granular Exchange, SQL, SharePoint, and Active Directory data in seconds: • Individual mailboxes • E-mails • Private or public
Folders • Calendar items • Tasks • User accounts or
attributes • SQL databases
2
Backup Exec 2012 Server + V-Ray
Single-pass Backup of Virtual Guest Systems
VMware Server Running Application Servers
1
Granular Recovery for Physical, Virtual Applications
Symantec V-Ray
Virtual Protection with Backup Exec
SYMANTEC VISION 2012
Application Protection in a VMware Environment
• Image-level Backups Using Virtual Agent – Entire virtual machine, including any applications, protected via VSS
– Ensures applications are in a consistent state at the time of backup
– VMware tools must be installed to the virtual machine
– Recovery options limited to full virtual machine recovery and file/folder recovery
• Agent-assisted Backups Using Virtual Agent – Entire virtual machine, including any applications, protected via VSS
– Ensures applications are in a consistent state at the time of backup
– Backup Exec Agent for Windows Systems must be installed to the virtual machine
– Recovery options include:
• Full virtual machine recovery
• Application recovery*
• Granular application recovery*
• File folder recovery
* requires license of the Agent for Applications and Databases
24 Virtual Protection with Backup Exec
Symantec V-Ray
SYMANTEC VISION 2012
Virtual Machine Recovery Options
25 Virtual Protection with Backup Exec
• Multiple restore options:
• Entire VM
• Entire application/database
• Granular SQL, Exchange, SharePoint, or Active Directory data
• Individual files or folders
• From a fast, single-pass backup!
• Reduce storage requirements with Deduplication: BE 2012 reduces redundant data across multiple VMs and their VHD/VMDK files.
• Reduce backup impact on production VMs: Backup data captured from single backup (single-pass)
Virtual Disk
• Backup Exec 2012 automatically catalogs VMDK/VHD files during standard backup processing
Symantec V-Ray
SYMANTEC VISION 2012
Granular Recovery of Virtualized Applications
26 Virtual Protection with Backup Exec
Symantec V-Ray
• Requirements:
– Application on virtual machine must be supported (see SCL)
– Virtual machine must be protected using agent-assisted backups
– Agent for Windows Systems (AWS) must be installed to virtual machine
– Agent for Applications and Databases must be licensed at the Backup Exec server
SYMANTEC VISION 2012
Management Plug-in for VMware
Virtual Protection with Backup Exec 27
SYMANTEC VISION 2012
Symantec Backup Exec™ Management Plug-in 2.0 for VMware
• Lightweight plug-in to monitor your backups within VMware vCenter™ or vSphere Client
• Includes Virtual Machine-Validator: For true verification of VMware backups
• Resource centric views of virtual machines: For a more manageable monitoring view
• No incremental charge for customers with virtual agents
• Backup Exec Monitor • Virtual Machine Validator • Predictive Recovery for VMware applications
Management Plug-in Download Location
28 Virtual Protection with Backup Exec
SYMANTEC VISION 2012
Monitor Your Backups Within vCenter or vSphere Client
29
Consolidated protection status view of all virtual
machines
Virtual Protection with Backup Exec
SYMANTEC VISION 2012
Virtual Machine Validator for VMware
• Feature of Free Management Plug-in for VMware
• Enables Launching of Virtual Machine Backup Sets from Storage for Validation
• Requires VMware Workstation
• Requires GRT-enabled Backups Stored to B2D or Deduplication Folder
Backup Exec Media Server
VMware Workstation
Validation
30 Virtual Protection with Backup Exec
SYMANTEC VISION 2012
Notes and Best Practices
Virtual Protection with Backup Exec 31
SYMANTEC VISION 2012
VMware Best Practices
• Configuring SAN-based backups for VMware with Backup Exec 2012:
– Zone LUNs with VMFS data store so the Backup Exec server can access them.
– On Backup Exec server ensure “automount disable” and “automount scrub” commands have been run to disable automatic drive letter assignment.
– As a result, VMFS datastore LUN’s should appear in Windows Disk Administrator (on the Backup Exec server) as “unknown”; this is correct.
• Backup performance largely determined by the slowest component; these components are:
– vSphere server system resources: CPU (GHz)
– vSphere system disk I/O capabilities (Gbps)
– Network type (Fiber Channel 1/2/4/8GB, iSCSI, 1/10GB Ethernet, etc)
– Backup Exec server system resources
32 Virtual Protection with Backup Exec
SYMANTEC VISION 2012
VMware Best Practices
• Basic guidelines when configuring Backup Exec in a VMware environment:
– For SAN-based backups, consider installing Backup Exec on a physical machine.
– The internal bus of the Backup Exec server should be fast enough to support the I/O devices that are connected to it; if multiple I/O ports are used, a system with multiple internal buses should be considered.
– Backup Exec server I/O performance is generally more important than CPU performance.
• For more information, see Backup Exec Technote http://seer.entsupport.symantec.com/docs/346047.htm
33 Virtual Protection with Backup Exec
SYMANTEC VISION 2012
VMware Best Practices
• Number of Virtual Machines to Protect with a Single Backup
Exec Server
– No limit to number of VMs that a single Backup Exec server can protect
– Highly dependent on the size of the VMDK files and backup infrastructure
– In large environments, multiple Backup Exec servers can be used to
optimize performance
• Backup Protection Recommendations
– Seven-day rotation with incremental and differential backups
• Full backup is run on the 7th day to avoid long incremental/differential backup chains.
– Use the Backup Exec 2012 Deduplication Option be used in conjunction
with the Virtual Agent
34 Virtual Protection with Backup Exec
SYMANTEC VISION 2012
VMware Notes
• Some Features Require vSphere 4.x or 5.0
– Incremental and Differential backups require vSphere 4.x or later, HW version 7 or later
– Change Block Tracking required for incremental/differential backups
– BE 2012 Server is always the target for vStorage backups • No remote VCB Proxy Servers
• Staging Required for GRT Restores From Tape
– VMDKs are staged from tape back to temporary disk location before granular restore
35 Virtual Protection with Backup Exec
SYMANTEC VISION 2012
VMware Notes
• RDM Physical Compatibility Mode Disks
– RDM (Raw Device Mapping) Physical Compatibility Mode disks bypass the ESX storage infrastructure
• GPT Disks
– Image-level backups are supported, including full, differential, and incremental backups
– Granular file and application recovery is not supported
• vSphere 4.0/5.0 Fault Tolerance
– Fault Tolerance disables snapshots; vStorage backups are snapshot-based
36
Workaround is to Protect VMs via Local Agent for Windows Servers
Virtual Protection with Backup Exec
Thank you!
Copyright © 2011 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.
Gareth Fraser-King, [email protected], +44 7740 832744
Kelly Smith, [email protected], +1 407 357 7613