业务永续-数据中心的业务连续性规划与设计.ppt

《业务永续-数据中心的业务连续性规划与设计.ppt》由会员分享，可在线阅读，更多相关《业务永续-数据中心的业务连续性规划与设计.ppt（52页珍藏版）》请在三一办公上搜索。

1、业务永续数据中心的业务连续性规划与设计,客户需求,这个世界比过去有着更多的风险,环境在不断变化风险接触范围在不断扩大全球及区域间的依存关系在不断增大供应链每时每刻都存在中断的风险业务中断将导致更大的影响宕机可能导致更大的财务影响宕机可能对品牌造成伤害宕机可能导致数据失去完整性更繁杂的规范产业和监管标准在不断变化产业分工在地理分布上更趋分散每个国家都可能有自己相应的规范更多的灾害经济危机、恐怖主义、飓风、地震、停电、火灾和疾病的大规模威胁,灾难的分类,每年的发生频率,每次发生的结果(单次发生损失)（美元）,1,0001001011/101/1001/1,0001/10,0001/100,000,

2、1美元10美元100美元1千美元1万美元10万美元100万美元1000万美元1亿美元,病毒,蠕虫,磁盘故障,组件故障,电源故障,常见,不常见,低,高,自然灾害,应用中断,数据损坏,网络问题,建筑火灾,恐怖行动/国内动荡,与可用性相关的,与恢复相关的,业务连续运营,业务连续性问题和挑战,更多的业务在线更多的应用和数据增长的需要,更多复杂的系统更少的恢复时间窗口更小的对停机时间的容忍度,备份与恢复 vs.HA高可用重新运行批处理日终作业手动的应用与数据的恢复丢失数据最好的意图 vs.RTO,RPO,SLA规范的设计,收入和利润受损失 负面的社会影响罚款和罚金涉及法律依从及会计的问题员工的劳动强度和

3、费用对日常的业务规划和运作产生影响,60%的客户正在关注如何提高可用性 接近50%的客户希望有显著的安全提升 超过25%的客户希望实施高可用集群,业务延续运性之考虑Consideration for Business Continuity,Fault-tolerant hardware,redundancy,automatic detection and isolation,predictive analysis,call-home,Real-time replication of data over metropolitan and/or continental distances,Auto

4、mated protection against unplanned outages with meeting recovery point and recovery time objectives,高可靠性High Availability,数据复制Data Replication,灾备技术Disaster Recovery,业务延续运性Business Continuity,IBM Power Systems高可用性解决方案,HA和DR 的差别,High Availability,自动的接管一般适用发生在本地的错误针对物理设备的保护服务器硬盘适配器卡网络针对致命的软件错误的保护操作系统数据

5、库应用服务,基本,可用性,无,数据丢失,恢复点目标,Data Currency,Latest,持续可用性,数据传输（每个交易的价值）,可用水平,恢复时间目标,和,缩短的,计划内,停机时间,Availability Level,SAN 磁盘,备份服务,多服务器,解决方案,iSeries,single-server,单服务器,solutions,解决方案,备份,周-日,场外,存储,RAID-5,日志,组合,磁盘,镜像,SAN,AIX,Linux,Intel 群集,连续数据,复制群集,可切换集群,在线,维护,CUoD,高速,磁带,LPAR,TSM,BCRS,SWA,支持业务连续性与灾备的系统组件,面

6、向开放平台的高可用(High Availability)解决方案的架构,Availability by 应用按照高可用的要求来设计应用架构Availability by 中间件DB2 HADR、WAS 集群,CICS 集群Oracle RACAvailability by 操作系统AIX LVM 镜像、HACMP for AIXAvailability by 硬件冗余服务器冗余的处理器/I/O适配器卡/电源/内置磁盘RAID技术保护外置磁盘,I/O 总线、SAN 交换机、LAN、LAN 交换机冗余的部件磁盘 RAID多路径(Multi-Path)软件（SDD、RDAC)通过磁盘复制的可用性Fl

7、ashCopy,Metro/Global mirror网络,HardwarePower Systems(RAS)Live Partition Mobility,PowerSystems SoftwarePowerHA PowerHA/XD,Application,Operating SystemAIX,ILive Application Mobility,IBM Power Systems High Availability Solution,Impact of Maint on Availability,IT Availability 24 x 7,Time for Planned Main

8、tenance,Is this you?Your users demand continuous availability(24x7),Do you agree?As IT availability approaches 24x7,top-notch maintenance practices become more critical,Is this your problem?As IT availability approaches 24x7,the time for maintenance work approaches zero!,The Power Systems High Avail

9、ability Solution can show you how POWER6 processors and AIX 6 help to address the maintenance crunch!Learn how Live Partition Mobility,Live Application Mobility,Workload Partitions and PowerHA can enable non-disruptive maintenance anytime!,Do you want more availability and less work on weekends?,Hig

10、h Availability Hardware-Reliability,Availability and Serviceability,IBM Power Systems RAS架构,Processor Instruction Retry Alternate Processor Recovery First Failure Data CaptureDDR Chipkill memoryBit-steering/redundant memoryService Processor Failover*Dynamic Firmware Maintenance*Hot I/O Drawer Add*I/

11、O error handling extended beyond base PCI adapterECC extended to inter-chip connections for the fabric/processor busesMemory and L3 Cache soft scrubbingHardware AssistedL2&L3 Cache Line DeleteHardware Assisted Memory ScrubbingLive Partition Migration570 Concurrent Add&Cold Repair,Primary POWER RAS F

12、eatures,HMC required to enable these functions.,Primary POWER RAS Features-Continued,HMC required to enable these functions.,Redundant power,fansDynamic Processor DeallocationDynamic processor sparing ECC memoryPersistent memory deallocationHot-plug PCI slots,fans,powerInternal light path diagnostic

13、sHot-swappable disk bays,Core System DesignHigh quality partsFewer parts=Fewer failuresDesigned for low power consumption(less heat=fewer failures)Manufacturing methods,packaging,coolingContinuous System and Commodity Quality ActionsIntegrated RAS featuresFailure Avoidance MethodologyDesigned for Ea

14、se of Service,Fault ResilienceN+1 Power Supplies,regulators,power cordsDual redundant fansDynamic Processor Deallocation and sparingChipkill TechnologyPredictive Failure AnalysisAuto Path Reassignment-data paths,powerProcessor Instruction Retry,Fault Isolation&Diagnosis First Failure Data CaptureRun

15、 Time Self DiagnosticsService ProcessorRifle-shot repairs(no plug and pray parts replacement approach),System RestoreDeferred RepairConcurrent RepairLED Service IdentificationService ConsolesMigration to Guided Maintenance,Summary of key Power Systems RAS features,World-class Hardware RAS,High Avail

16、ability Hardware-Live Partition Mobility,Live Partition Mobility with POWER6*,Allows migration of a running LPAR to another physical server,Reduce impact of planned outages Relocate workloads to enable growth Provision new technology with no disruption to service Save energy by moving workloads off

17、underutilized servers,Movement toa different server withno loss of service,Virtualized SAN and Network Infrastructure,*All statements regarding IBM future directions and intent are subject to change or withdrawal without notice and represent goals and objectives only.Any reliance on these Statements

18、 of General Direction is at the relying partys sole risk and will not create liability or obligation for IBM.,Continuous Application Availability,With Live Partition Mobility and Live Application Mobility,planned outages for hardware and firmware maintenance and upgrades can be a thing of the past,R

19、elocate all partitions from one server to another when performing maintenance.Move the partitions back when maintenance is complete,*All statements regarding IBM future directions and intent are subject to change or withdrawal without notice and represent goals and objectives only.Any reliance on th

20、ese Statements of General Direction is at the relying partys sole risk and will not create liability or obligation for IBM.,Workload Balancing with Live Partition Mobility*,As computing needs spike,redistribute workloads onto multiple physical servers without service interruption,As one server gets

21、overtaxed from a spike in demand,relocate partitions to other servers,*All statements regarding IBM future directions and intent are subject to change or withdrawal without notice and represent goals and objectives only.Any reliance on these Statements of General Direction is at the relying partys s

22、ole risk and will not create liability or obligation for IBM.,High Availability Operating System-AIX,UNIX Reliability,Availability and Serviceability,The“Number One”Customer Requirement,Competition,AIX-2007,AIX-2006,AIX 2005,Enterprise Continuous Availability Capability,Time,AIX FunctionalityKernel

23、Storage KeysConcurrent AIX updatesCross System Workload MobilityDynamic Tracing with probevueFunctional Recovery RoutinesComponent TraceMemory Overlay ProtectionParallel DumpLightweight Malloc debugLightweight Memory TraceConsistency CheckersComponent RAS infrastructureAIX errorlogSubsystem Resource

24、 Controller,Exploitation of a POWER6 processor hardware feature to provide additional isolation of kernel and application dataStorage keys can prevent invalid changes to memory cause by programming errorsApplication use of POWER6 storage keys is enabled in AIX V5.3 AIX Kernel exploitation of POWER6

25、storage keys is included in AIX V6.1,What is it?,AIX exclusive feature not available in UNIX,Linux,or Windows!,AIX Storage Keys,AIX 6 Concurrent Maintenance,Kernel Space,User Space,Interim Fix,Concurrent updatevmmove()patch,emgr,vmmove(),getgidx(),sleepx(),Non-disruptive fixes to executable code in

26、a running AIX kernelBase AIX Kernel(/unix),kernel extension,or device driverNo downtime(reboot)required to apply fix and make it activeConcurrent updates will be packaged as Interim Fixes,Fix selected AIX kernel problems without a service outage,vmmove(),AIX 6 dynamic tracing with probevue,Trace exi

27、sting programs without recompiling Dynamic placement of trace probesFor debugging and performance analysisTracable Calls:AIX system calls,application functions,and application calls to library functionsDynamic tracing language called VueInitial support only for“C”programs,#!/usr/bin/probevue/*countr

28、eads.v*/syscall.$1.read.entry count+;interval.*.clock.100 printf(“Number of reads=%dn”,count);count=0;,#countreads.v 404Number of reads=22Number of reads=0Number of reads=1Number of reads=17.,Formatted I/O,User,Kernel,Probe Location,User Process Code,Some thread hits probe point(1),Branches to probe

29、 code(2),Probe code(3),Returns to probe point(4),Thread continues execution(5),Trace Consumer,Trace File,or,Trace Output,Trace Buffers,E-code,“Vue”probe code example,The AIX answer to Solaris dtrace,This information is intended only for IBM sellers and Business Partners,AIX V6.1 Workload Partitions(

30、WPAR),Virtualized AIX operating system environments within a single AIX imageEach WPAR shares the single AIX operating system but can be separately managed Applications and users inside a WPAR cannot affect resources outside the WPAREach WPAR can have a regulated share of processor,memory and other

31、resourcesTwo types of WPARSystem WPARs have separate security and appear like a completely separate OSApplication WPARs are manageability wrappers around a single application,What is it?,This information is intended only for IBM sellers and Business Partners,AIX V6.1 Live Application Mobility,The ca

32、pability to relocate a running Workload Partition from one system to another without restarting the applicationThe application running inside the WPAR resumes running after the relocation is complete Works with systems based on POWER4,POWER5 and POWER6 processorsRequires the IBM Workload Partitions

33、Manager for AIXManual or automatic,policy based relocation,What is it?,操作系统停机时间调查:AIX是业界最稳定的操作系统(27个国家400个用户),The Yankee Group“2007-2008 Global Server Operating Systems Reliability Survey”as quoted in“Windows Server:The New King of Downtime”by Mark Joseph Edwards at,Win2000,Win2003,RHEL,Solaris,HP-U

34、X,SUSE,AIX,We are here!,This information is intended only for IBM sellers and Business Partners,According to a recent Yankee Group study*of 400 Windows,Linux and UNIX users,AIX was the most reliable server operating system:“IBMs AIX achieved the highest level of reliability,with corporate enterprise

35、s reporting an average of only 36 minutes of downtime per server in a 12-month period”,*Source:“Unix,Linux Uptime and Reliability Increase;Patch Management Woes Plague Windows”2008 Yankee Group Research,Inc.All rights reserved,AIX is“Most Reliable”,High Availability System Software-PowerHA-PowerHA/X

36、D,IBM PowerHA,PowerHA for AIX,PowerHA Cluster Management Monitors,detects and reacts to eventsEstablishes a heartbeat between the systemsEnables automatic switch-overIBM shared storage clustering Can enable near-continuous application serviceHelps eliminate impact of planned&unplanned outagesEase of

37、 use for HA operationsPowerHA managing integrated IBM data resiliencyLogical Volume Manager(LVM)Shared switchable disk topologyXD(optional feature of PowerHA)GLVM(Global LVM)AIX based replication over IPMetro Mirror IBM storage based synchronous mirroringSVCIBM DS8000Smart Assists Application deploy

38、ment and configuration,34,PowerHA for AIX V5.5,PowerHA V5.5 FeaturesSimplified Management Manage multiple clusters from a single graphical user interfaceCan run on a server outside of the cluster Support for TCP/V6 connections to clients New focus on IPV6 from US governmentPowerHA/XD V5.5 Disaster R

39、ecovery Global Logical Volume Manager*Global Logical Volume Manager(GLVM)asynchronous mode mirroringAsynchronous mode enables geographic dispersion San Volume Controller Global MirrorAsynchronous replication for geographic dispersion,*GLVM Asynchronous mode generally available March 2009,Shared stor

40、age clustering Topology,Network Clients,Serial Heartbeat,Power Cluster Node,Power Cluster Node,IP Network,Service&Standby Network Adapters,Shared Disk,IP Heartbeats,Switched Disk Cluster(Local only),本地存储双机LVM基于AIX功能（软件免费）完全冗余，无切换中断时间特别适合24X7环境存储可靠性几何级提高双存储可轮流定期修整维护,PowerHA/XD(HACMP/XD)延伸PowerHA的概念到更

41、远的距离,利用 SVC or DS8000/DS6000/ESS镜像技术,Router,Router,DS8/6/ESS Mirroring,PrimaryESS/DS,SecondaryESS/DS,生产站点,恢复站点,SVC,SVC,SVC Mirroring or,GLVM Mirroring,利用 Global Logical Volume Manager(GLVM)技术,IBM AIX Multi System Data Resiliency,PowerHA for AIX,Strategic building block for IBM AIX High Availability

42、and Disaster Recovery solutionsIntegrated and optimized with IBM AIX Cluster Resources,Switched DiskStorage agnosticLVM mirrored copy of data HA(Local only),Switched Disk Cluster,Basic San Copy Services,Metrol MirrorBoot From SAN DR/Tape BackupDR only,FlashCopy,Global Mirror,高可用性整体解决方案,数据库服务器,高可用性的实

43、现层次,高性能高可靠性的并行文件系统-GPFS,什么是GPFS,集群:可以扩展至4096节点，高速、稳定地通讯，单点管理与控制；共享磁盘：可以从集群中的任一节点直接访问磁盘上的数据；并行访问：所有节点访问所有磁盘的数据流并行实现；,IBM为AIX和Linux集群系统设计的共享磁盘的并行文件系统,为什么要用GPFS并行文件系统,应用需求:多个节点访问同一个数据文件或数据库高性能文件访问故障恢复文件系统需求:可访问：从任一节点访问所有文件；动态扩展：能动态地增加或减少节点与存储；文件唯一存在：使得在集群环境中的应用开发更加容易；高容量：TB级文件，PB级的文件系统，测试过2PB；高吞吐率：单文件的

44、访问可达GB/s，现最高记录为102GB/s；数据并行访问：并行访问单个文件或多个文件；可靠和容错：当某个节点、磁盘或连接出现问题时，仍然可以提供服务；,GPFS的主要优势,高性能条带化文件读写提高并发访问性能，实测带宽可达数百GB智能预取机制和客户端数据缓存机制降低读写延迟分布式的元数据服务器和字节锁管理可自定义数据块大小可，从16K到4MNSD支持InfiniBand RDMA高可用性仲裁管理和自动故障切换支持多路径磁盘访问，每块逻辑盘可支持8个NSD Server支持元数据和用户数据的复制功能在不停止服务的情况下可以动态加入和移除节点或磁盘，支持在线升级支持日志功能，实现系统快速恢复,高

45、可扩展性支持最大299 字节的文件系统和20亿个文件支持数千个节点的集群系统支持不同存储、网络、处理器和操作系统易管理自动在各个节点间同步配置文件和系统信息可在集群内任何一个节点上完成对GPFS的管理任务，命令将在所有节点上生效管理网络和数据网络可以分开其他支持信息生命周期管理支持CNFS支持快照功能和数据备份提供DMAPI,GPFS和其它网络文件系统的本质区别,客户机/服务器方式,SAN文件系统方式,X,X,GPFS的两种基本配置,SAN 组织方式,NSD 组织方式,Database ApplicationsDB2Oracle RACSAP,Grid ApplicationsScientif

46、ic ComputingLife SciencesAnalytics,Web ApplicationsEmail servicesWeb Server FarmOnline Data Storage,Digital MediaAnimationBroadcastingVideo Surveillance,Highly Available Scalable File Storage User File storage Multi-Site installations Disaster Recovery,GPFS 适用于多种应用,Oracle RAC 10g/11g的典型架构,不同级别的IT业务延

47、续性方案及技术Tiers of IT Business Continuity and Technology,Recovery Time Objective,15 Min.,1-4 Hr.,4-8 Hr.,8-12 Hr.,12-16 Hr.,24 Hr.,Days,Cost,Tier 4-Point in Time disk copy,Tier 3-Electronic Vaulting,Tier 2-Hot Site,Restore from Tape,Tier 5 Software replication,Tier 1 Restore from Tape,Recovery from a d

48、isk image,Recovery from tape copy,Tier 7 Site Mirroring with automated recovery,Tier 6-Disk mirroring(with/without automation),TAPE,DISK,MANAGEMENT SW,NETWORK,D/R AUTOMATION,REPLICATION SW,SERVICES,Best business continuity practice is to blend solutions in order to maximize application coverage at o

49、ptimum cost,DS8000/4000,HACMP,Backup Server,Active Server,SAN,方案一：HACMP+磁盘间数据镜像,LVM,LVM,Copy 1,Copy 2,DS8000/4000,HACMP,Backup Server,Active Server,方案二：HACMP+磁盘间数据复制,Primary Copy,Target Copy,PPRC(Metro Mirror),本地高可用性整体解决方案,业务延续性方案-Storage HA Business Continuity through Storage HA,Note:(1)Recovery Time Objective(2)Assume all cache data on server is hardened.(3)Storage hardware cost comparison at 10TB effective user capacity,