VMware Data Recovery Presented by Kroll Ontrack at WI Area VMware User’s Group Presented by Kroll...

VMware Data RecoveryVMware Data RecoveryPresented by Kroll Ontrack atWI Area VMware User’s Group

Presented by Kroll Ontrack atWI Area VMware User’s Group

Kroll Ontrack TeamKroll Ontrack Team

Robert BloomquistPrinciple Data Recovery Engineer

Jodi BredemeierBusiness Development Team Lead

Ben GoluskaPartnership Account Manager

David LogueSr. Remote Data Recovery Engineer

Robert BloomquistPrinciple Data Recovery Engineer

Jodi BredemeierBusiness Development Team Lead

Ben GoluskaPartnership Account Manager

David LogueSr. Remote Data Recovery Engineer

Common Data Loss Scenarios

Common Data Loss Scenarios

RAID/Drive problemsVMFS File system corruption

Format/reinstallDeleted virtual disks Internal VMDK or file corruption

SQL, Exchange and OracleDeleted files inside a Virtual

Machine

RAID/Drive problemsVMFS File system corruption

Format/reinstallDeleted virtual disks Internal VMDK or file corruption

SQL, Exchange and OracleDeleted files inside a Virtual

Machine

RAID/Drive problemsRAID/Drive problems

Scenario 1RAID 5 – 3 (500GB) drives

MS SQL data RAID Controller diedReplaced controller and rebootedDrives all offlineForced drives onlineNo volumes

Scenario 1RAID 5 – 3 (500GB) drives

MS SQL data RAID Controller diedReplaced controller and rebootedDrives all offlineForced drives onlineNo volumes

Customer’s planCustomer’s plan

Force drives online and rebuildRestore from backupRecreate the data

Force drives online and rebuildRestore from backupRecreate the data

Additional optionsAdditional options

Customer called Ontrack Data RecoveryOntrack suggested:

Image the drives before rebuildIf the rebuild fails

Start a remote recoveryShip drives to Ontrack

Customer called Ontrack Data RecoveryOntrack suggested:

Image the drives before rebuildIf the rebuild fails

Start a remote recoveryShip drives to Ontrack

Customer’s challengesCustomer’s challenges

RAID config damgedOne drive out of date

Rebuild would cause additional damage

Backups did not include SQL dataTime to recreate data

3 months to 2 years

RAID config damgedOne drive out of date

Rebuild would cause additional damage

Backups did not include SQL dataTime to recreate data

3 months to 2 years

Data Layout – RAID 5HEALTHY


DRIVE1 Pointer 1 - VM 1 Pointer 3 PARITY

VM 1 - 1 VM1 - 3 PARITY VM 2 - 1 VM2 - 3

DRIVE2 Pointer 2 - VM2 PARITY Pointer 5

VM1 - 2 PARITY VM1 - 5 VM2 - 2 PARITY

DRIVE3 PARITY Pointer 4 Pointer 6

PARITY VM1 - 4 VM1 - 6 PARITY VM2 - 4

Contiguous Files




VM 1 - 1 VM1 - 3 PARITY VM1 - 4 VM1 - 2


VM 2 - 1 PARITY VM1 - 5 VM2 - 3 PARITY



Fragmented Files

Data Layout – RAID 5 DISORDERED

Data Layout – RAID 5 DISORDERED




VM 1 - 1 VM1 - 3 PARITY VM 2 - 1 VM2 - 3



FILE1

VM 1 - 1 VM1 - 2 VM1 - 4 VM1 - 3 VM1 - 6 VM1 - 5

FILE2 VM 2 - 1 VM2 - 2 VM2 - 4 VM2 - 3

ResolutionResolution

Ontrack used the original drives and was able to rebuild array

100% of data recovered

If customer had proceeded with plansParity would have been overwrittenData loss would have occurredUp to 1/3 of data would be missing or out

of date

Ontrack used the original drives and was able to rebuild array

100% of data recovered

If customer had proceeded with plansParity would have been overwrittenData loss would have occurredUp to 1/3 of data would be missing or out

of date

File System CorruptionFile System Corruption

Scenario 22 SAN LUNs - RAID 5LUNs was accidentally formatted

NTFS

Scenario 22 SAN LUNs - RAID 5LUNs was accidentally formatted

NTFS


Restore from backup to same volume

Recreate the data


Recreate the data


Customer called Ontrack Data Recovery

Ontrack suggested:Restore data to different volume

If the restore failed:Start a remote recoveryShip drives and/or tapes to Ontrack


Ontrack suggested:Restore data to different volume



Backups corruptGood backups did not include SQLTime to recreate data

2 months

Backups corruptGood backups did not include SQLTime to recreate data

2 months


Ontrack was able to rebuild the VMFS volume

100% of critical data recovered

If customer had proceeded with plansExisting structures would have been

overwrittenData loss would have occurredNo recovery from DR company

Ontrack was able to rebuild the VMFS volume


If customer had proceeded with plansExisting structures would have been

overwrittenData loss would have occurredNo recovery from DR company

Deleted Virtual MachineDeleted Virtual Machine

Scenario 3Windows 2003 Server2 virtual disksVirtual machine was deleted

Scenario 3Windows 2003 Server2 virtual disksVirtual machine was deleted



Recreate the data


Recreate the data



Ontrack Suggested:Restore data to different volume



Ontrack Suggested:Restore data to different volume



Backups corruptTime to recreate data - 6 months

Backups corruptTime to recreate data - 6 months

Data Recovery - DeletedData Recovery - Deleted

What happens when a VM is deleted

What happens when a VM is deleted




VM 1 - 1 VM1 - 3 PARITY VM 2 - 1 VM2 - 3





Contiguous Files

Data Recovery - DeletedData Recovery - Deleted

What happens when a VM is deletedPointer is deleted or zeroed outData area is marked as free space

What happens when a VM is deletedPointer is deleted or zeroed outData area is marked as free space

Data Layout – RAID 5 DELETED

Data Layout – RAID 5 DELETED

DRIVE1 DELETED Pointer 3 PARITY

FREE FREE PARITY VM 2 - 1 VM2 - 3

DRIVE2 Pointer 2 PARITY Pointer 5

FREE PARITY FREE VM2 - 2 PARITY


PARITY FREE FREE PARITY VM2 - 4


VM 1 - 1 VM1 - 3 PARITY VM 2 - 1 VM2 - 3





Before

After


Ontrack was able to rebuild deleted virtual disksManually assembled multiple fragments


If customer had proceeded with plansExisting data would have been

overwrittenData loss would have occurredPossibly no recovery from DR company

Ontrack was able to rebuild deleted virtual disksManually assembled multiple fragments


If customer had proceeded with plansExisting data would have been

overwrittenData loss would have occurredPossibly no recovery from DR company

Internal CorruptionInternal Corruption

Scenario 4Large storm, city lost powerUPS engaged and generator startedGenerator ran out of fuelUPS failedSQL server crashed during large

update

Scenario 4Large storm, city lost powerUPS engaged and generator startedGenerator ran out of fuelUPS failedSQL server crashed during large

update


Work with SAN vendorWork with database vendorWork with MicrosoftRestore from backup to same

volumeRecreate the data

Work with SAN vendorWork with database vendorWork with MicrosoftRestore from backup to same

volumeRecreate the data


Customer called Ontrack Data RecoveryMake copy of SQL database to server

2Restore data to different volumeStart a remote recoveryShip drives and/or tapes to Ontrack

Customer called Ontrack Data RecoveryMake copy of SQL database to server

2Restore data to different volumeStart a remote recoveryShip drives and/or tapes to Ontrack


RAID and VMFS volume OKSQL file too corrupt for vendor to

repairSQL file to corrupt for MicrosoftBackups corruptTime to recreate data Could not recreate data

RAID and VMFS volume OKSQL file too corrupt for vendor to

repairSQL file to corrupt for MicrosoftBackups corruptTime to recreate data Could not recreate data


DR Company was able to reconstruct database structures/access row data

100% of critical row data recovered into a new database

If customer had proceeded with plansDatabase would have been further

corrupted (no good copy)Further data loss would have occurredNo recovery from DR company

DR Company was able to reconstruct database structures/access row data

100% of critical row data recovered into a new database

If customer had proceeded with plansDatabase would have been further

corrupted (no good copy)Further data loss would have occurredNo recovery from DR company

Disaster PreventionDisaster Prevention


Create a Disaster Recovery PlanDefine critical systems

Time frames for restoresDefine critical contacts

Internal and externalDefine proceduresDefine alternative options

Backup sitewww.marshriskconsulting.com

Create a Disaster Recovery PlanDefine critical systems

Time frames for restoresDefine critical contacts

Internal and externalDefine proceduresDefine alternative options

Backup sitewww.marshriskconsulting.com

http://www.marshriskconsulting.com/

http://www.marshriskconsulting.com/


Create a Disaster Recovery PlanBackup the Data

Create a Disaster Recovery PlanBackup the Data


Create a Disaster Recovery PlanBackup the DataTest the Backups

Create a Disaster Recovery PlanBackup the DataTest the Backups


Create a Disaster Recovery PlanBackup the DataTest the Backups Include Data Recovery in every

Plan

Create a Disaster Recovery PlanBackup the DataTest the Backups Include Data Recovery in every

Plan

Questions?Questions?

QuestionsQuestions

Toll free – Kroll Ontrack1-800-872-2599Free phone consultation

Toll free – Kroll Ontrack1-800-872-2599Free phone consultation

Thank youThank you

OntrackOntrack

One of the only companies to offer ESX server recovery

Special tools recently developed for these recoveries

Special training provided to engineersDevelopment staff available to assist

if neededAbility to handle complex, high end

recoveries

One of the only companies to offer ESX server recovery

Special tools recently developed for these recoveries

Special training provided to engineersDevelopment staff available to assist

if neededAbility to handle complex, high end

recoveries

What is VirtualizationWhat is Virtualization

Virtualization is:Software that allows the

user to run multiple operating systems at the same time on the same physical computer by “virtualizing” the hardware of a complete physical computer.

Virtualization is:Software that allows the

user to run multiple operating systems at the same time on the same physical computer by “virtualizing” the hardware of a complete physical computer.

Terms to knowTerms to know

Virtual (Guest) MachineA simulated computer in that it runs

on a host computer but behaves as if it were a separate computer

VMDKA single file that contains a virtual disk

VMFSThe VMware file system

ESXThe VMware operating system

Virtual (Guest) MachineA simulated computer in that it runs

on a host computer but behaves as if it were a separate computer

VMDKA single file that contains a virtual disk

VMFSThe VMware file system

ESXThe VMware operating system

VMware Data Recovery Presented by Kroll Ontrack at WI Area VMware User’s Group Presented by Kroll...

Documents

Transcript of VMware Data Recovery Presented by Kroll Ontrack at WI Area VMware User’s Group Presented by Kroll...