z Ç } z } À } z o } µ m ^ µ } } v ] d z d z ] v p & ] · î ì í õ ^ µ v p À ] o ] o ]...

1© 2019 Sungard Availability Services, all rights reserved© 2019 Sungard Availability Services, all rights reserved

Ready to Recover to the Cloud? Be Sure to Consider These Things FirstJoseph George, Vice President, Product Management, Global Recovery Services

2© 2019 Sungard Availability Services, all rights reserved 2© 2019 Sungard Availability Services, all rights reserved

Ready to recover to the cloud? Be sure to consider these things first.You recognize the advantages of cloud recovery. You’re ready to get started. But before you jump in, there are a number of questions you should ask and changes you should prepare for.In this presentation, we’ll take an in-depth look at these questions and other key factors to consider when adopting a cloud recovery strategy.

Session Abstract

3© 2019 Sungard Availability Services, all rights reserved 3

Overview What Does It Mean to Recover to the Cloud? How is Cloud Recovery

related to Disaster Recovery as a Service

(DRaaS)?

What Does It Mean to Recover to the Cloud? How is Cloud Recovery

related to Disaster Recovery as a Service

(DRaaS)?

Should I Recover Myself or Partner With a Provider? What Am I Responsible for When I

Use a Service Provider?

Should I Recover Myself or Partner With a Provider? What Am I Responsible for When I

Use a Service Provider?

What are the Cost and Performance

Implications of Cloud Recovery? What

About Recovering to the Public Cloud?

What are the Cost and Performance

Implications of Cloud Recovery? What

About Recovering to the Public Cloud?

Will Cloud Recovery be Faster? Are There Multiple Ways to

Recover to the Cloud?

Will Cloud Recovery be Faster? Are There Multiple Ways to

Recover to the Cloud?

If I have High Availability (HA), Do I

Still Need a Cloud Recovery Solution?

If I have High Availability (HA), Do I

Still Need a Cloud Recovery Solution?

Can Cloud Recovery Help Me If I am Impacted by a

Ransomware / Cyber Attack?




How Important Is Your Recovery Solution? 93% of respondents have experienced tech-related business disruption in the past two years

State-of-IT-Resilience, IDC, August 2018

50% of organizations have either no disaster recovery plan or an inadequate plan … would not survive … a true disaster

Organizations that take longer than 30 days to resume normal business operations have a <20% chance of surviving

IDC PlanScape: Getting Started with Disaster Recovery as a Service, IDC, July 2019


94% of companies that suffer catastrophic data loss in a disaster do not survive – 43% are forced to close immediately, while 51% are forced out of business within two years

University of Texas Research


What Does It Mean to Recover to the Cloud?


What is Cloud Disaster Recovery?

Backup of Data Backup of Data

OR

Replication of Data

Replication of Data

CLOUD INFRASTRUCTURE

Flexible / On Demand Flexible / On Demand

Shared Virtualized Infrastructure

Shared Virtualized Infrastructure

Reduces Capital Outlay (Service Provider Cloud)Reduces Capital Outlay

(Service Provider Cloud)

Usage Based PricingUsage Based Pricing


Market Definition of DRaaS

“…a service offering that includes replication of server workloads and recovery of such workloads, as needed, to a cloud… may be fully managed or self service… high touch or automated…” - Gartner

Global IT DR Market Research Response

“…cloud-based service … leverages on-demand computer resources (hardware, software, and services) ... facilitate failover from on-premise to cloud or cloud to cloud” - IDC

DRaaS is a Cloud Based Disaster Recovery Solution – It uses Data Replication to Protect your Data in the Cloud


Cloud Disaster Recovery – DRaaS

Cloud Based Delivery

Faster Recovery Point Objectives

Faster Recovery Time Objectives

From self-service to fully managed application recovery

Data Replication and Recovery Orchestration Technologies

“It is not an overstatement to say that DRaaS is a game changer for organizations looking to improve their DR capabilities” - IDC


Cloud Disaster Recovery

• Both physical and virtual servers are recovered as virtual servers. Works well for most virtualized, x86 workloads.

• Some providers support DRaaS for iSeries and AIX – otherwise you may need to use shared physical recovery or colocation for dedicated non-x86 assets

• Some applications that run on physical servers (e.g. large in-memory database applications) may require physical recovery targets for performance reasons

Physical Servers

Virtual Servers

Production

Recovery Cloud


Should I Recover Myself or Partner With a Provider? What

Am I Responsible for When I Use a Service Provider?


DR Outsourcing Trends (Computer Economics Apr 2018)

Sungard Availability Services Privileged and Confidential

• 34% of organizations outsource disaster recovery

• 95% of organizations experience same or better service outsourcing disaster recovery


Service Provider or DIY DRaaS? Service Provider Solution Customer DIY Implementation

CAPEX No Hardware, Software(Internal Data Center or Colocation)

RTO SLA Typically with Financial Penalties No

Infrastructure SLA Most: At Least 99.99% Dependent on investment

Switching Storage Tiers Some Providers Purchase required

Locked in Technology Provides Service not Technology Yes

Design/Installation Yes DIY / Contract Resources

Initial Configuration Yes DIY/ Contract Resources

ATOT support Yes / Post-test Reporting DIY – Internal DR Team

ATOD support Yes / Resources Not Impacted by Disaster

DIY – Internal DR Team (subject to availability)

Failback support Yes DIY– Internal DR Team


What type of Cloud Recovery is a Better Fit?


• Do you have a “DIY” mindset or are you looking for a DRaaS alternative to an existing DIY solution?

• Do you have a large IT / DR team with the confidence you can successfully recover yourself?

• Do you value self-service portal capabilities and want to keep control?

• You do not want to pay the premium for an SLA backed service?

• Do you have a smaller IT team and lack of DR experience?

• Are you looking for higher level of service for Infrastructure DRaaS –from design & implementation to steady state operations & ATOT/D?

• Are you willing to pay the price premium for an SLA backed service?

Self-service DRaaSSelf-service DRaaS Fully Managed DRaaSFully Managed DRaaSAssisted DRaaSAssisted DRaaS


What is included in a Cloud Recovery Service?

TechnologyComponents

Software License Target Infrastructure

Design andImplement

Discover & Design recovery plans

Implement recovery plans

Steady StateMaintenance

Monitor replication Change & Incident

Management Upgrade & Update

Disaster Recovery & Test Execution

Plan & Execute test Execute at time of event

• Make sure you understand who is responsible for each element: Does your provider have a well-defined RACI?

• What RTO Service Level Agreement (SLA) is being provided? Is this RTO SLA for a single VM or for a group of VMs? Are these technology RTO’s (published based on lab environments) or actual achievable RTO’s? Are there financial penalties?

• What are the network connectivity options and costs?

15© 2019 Sungard Availability Services, all rights reserved© 2019 Sungard Availability Services, all rights reserved 15

Consider All the Elements of your DR Program

ASSESSAssess & Design Recovery Strategy

• Analyze Discovered Information and Apply Recovery Best Practices

• Design Recovery Solution Architecture

DEFINE Define Recovery Plans & Procedures

• Define Core Recovery Configuration • Define Application Recovery

Configuration • Generate Application Recovery

Plans and Procedures

DESIGNDISCOVER

DISCOVERDiscover Production

• Infrastructure and Application Discovery

• Populate & Managed Recovery Configuration

• Baseline Scope for Recovery • Understand Change

Management Process

IMPLEMENT & TEST Recovery Implementation and Execution

• Build Recovery Solution• Test Execution• Test Management and

Reporting

RUN

RLCMRecovery Lifecycle Management

• Analyze Production Changes for Impact on Recovery

• Update Recovery Design, Plans and Procedures

• Ongoing Recovery Optimization Recommendations

MANAGE

Most service provider DRaaS solutions only provide a subset of what you need for a successful DR program


Will Cloud Recovery be Faster? Are There Multiple

Ways to Recover to the Cloud?


Different Technologies (and Costs) for Recovery Tiers

MONTH WEEK DAY HOUR MIN Sec MONTHWEEKDAYHOURMINSec

Traditional Tape Backup

Backup Replication

Snapshot replication

Data Replication

High Availability

Snapshot replication

Data Replication

Traditional Tape Backup

Backup Replication

RPORPO RTORTO

Acceptable Amount of Data Loss

Acceptable Amount of Downtime

Cloud Recovery - DRaaS

Backup as a Service - BaaS

Traditional Recovery


Data Protection Options: At Different Cost Points


Physical Servers

Virtual Servers

Host

Storage Replication

ServerReplication

Hypervisor Based Replication

Backup / Offsite Vaulting

Production

DRaaS: Cloud Recovery


What are the Cost and Performance Implications of

Cloud Recovery?


Understanding Production Application Tiers

KEY RULES

1. There is an economic balance between risk and the investment to mitigate.

2. Application interdependencies default to the least aggressive tier.

3. Application mapping enables optimal boot order sequencing.

4. Tiered application solutions allow for the most cost effective availability program.

Best Effort

LOW

Criticality and Cost

HIGH

Business Critical

Mission Critical

Always Available


Optimizing your Costs with Multi-Tiering (Scenario 1)

Note: Pricing shown for illustrative purposes only

Tier 1 RTO typically 2 hrs.RPO: <15 mins


Optimizing your Costs with Multi-Tiering (Scenario 2)

Note: Pricing shown for illustrative purposes only


Other Cost Optimization Considerations

• The type of storage can significantly impact costs - Magnetic storage (SATA or SAS) vs. high performance SSD

• Note that there is a potential trade-off with recovery RTO’s and post-recovery application performance

• Understand your Minimal Acceptable Recovery Configuration (MARC) requirements

• Consider how much risk you can take if you have multiple sites / locations – Do you need to be recoverable across all sites at the same time?

• Further justify ROI in DR by Supporting Non-DR use cases: Use your DR protected data and resources to support dev/test, analytics, backup/compliance etc.


What are the Considerations in Recovering to the Public

Cloud? What about Workloads Running in Public Cloud?


DR to the Public Cloud: New Cost Economics

Public Cloud provides a usage based approach to addressing your DR needs – You pay for storage consumed at steady state and compute resources consumed At Time of Test / Disaster

Public Cloud provides a usage based approach to addressing your DR needs – You pay for storage consumed at steady state and compute resources consumed At Time of Test / Disaster

Recover On-premise x86 workloads to AWS: Your Recovery to AWS solution becomes a good path to public cloud adoption


Resiliency Options for Production Workloads in AWS


Up to 2x Single AZ costLowest Cost Typically 1.3x Single AZ cost

Single AZ Managed + Cloud Recovery Fully-HA

• Fully HA and SLA-backed, including SQL and terminal servers

• AD integration

• No SLA; No HA• No failover for terminal, SQL or

AD servers• AD integration needs to be

investigated• AWS Auto Recovery enabled

for all servers to handle hardware failures (expect 15-20 minute downtime)

• SLA-backed recovery with 2-hour recovery time

• AWS Auto Recovery enabled for all servers to handle hardware failures (expect 15-20 minute downtime)

• Replication of all instances to another region

• Managed failover on disaster or test

Least Protection Most Protection


Public Cloud Considerations

• Increased flexibility in terms of target recovery location (e.g. AWS Cloud spans 69 Availability Zones within 22 geographic Regions around the world)

• Understand the network connectivity options and bandwidth requirements to public cloud e.g. AWS Direct Connect / Site to Site VPNs etc.

• With public cloud, there are even more options in terms of compute and storage tiers to further optimize recovery costs based on performance trade-offs.

https://aws.amazon.com/ec2/pricing/on-demand/ https://aws.amazon.com/ebs/pricing/





Malware / Ransomware Attacks

84.6% of organization have experience a malware and/or ransomware attack within the past 12 months

Of these, 89% suffered a successful attack and 56% reported and unrecoverable data even with the past three years

34% of businesses hit with malware took a week or more to regain access to their data


Kaspersky Security Bulletin, 2017



Recovering from a Cyber Attack Ransomware and other Cyberattacks can remain undetected on average up to 99 days, raising the threat of having no ‘clean’ copy of data available

Source: FireEye's M-Trends 2017 report: Trends from the Year’s Breaches and Cyber Attacks

Newer Generation DRaaS Cloud Recovery Solutions have evolved

to support longer term data retention (e.g. 30 / 60 days)

If you have to go back more than 60 days, you need to recover

from your backup systems

You need to perform security forensics to determine which clean

data snapshot to recover from

Other advanced approaches involveproactively analyzing & scanning backups

and using immutable / WORM storage

Production

Plan A: DRaaS

Plan B: Backup


If I have High Availability (HA), Do I Still Need a Cloud

Recovery Solution?


High Availability vs. Disaster Recovery

Disaster Recovery• Involves data protection in a geographically (and with cyberattacks, logically)

separated location • More cost effective than HA but comes with some level of downtime (RTO) and

data loss (RPO) • Newer orchestrated recovery DRaaS solutions are starting to approach HA

performance at a lower cost• DR can support multiple points in time snapshots enabling failover to a non-

corrupt snapshot

High Availability • Architectures allow for tolerance of component failures e.g. HA clusters, Load

balanced servers, scalable private clouds • Typically involves synchronous replication of data with limitations on geographic

separation of nodes with focus on uptime • Much more expensive that DR solutions - Targeted for most mission / business

critical applications that cannot afford any level of downtime or data loss • Cannot handle catastrophic failures that take out all the nodes of the HA

solution


In Conclusion …


Future: Hybrid Cloud Recovery Scenario

Your cloud recovery strategy will change as your production evolves. Recover workloads to the cloud that works best – Hybrid scenario where some workloads recovered in public cloud and others in service provider data centers.

Your cloud recovery strategy will change as your production evolves. Recover workloads to the cloud that works best – Hybrid scenario where some workloads recovered in public cloud and others in service provider data centers.


Summary

Cloud recovery provides more flexible and faster recovery from replicated

data to a shared cloud infrastructure

Cloud recovery provides more flexible and faster recovery from replicated

data to a shared cloud infrastructure

Provider options range from self-service to fully

managed. DIY / colocation makes sense if

you have the skills / resources & stable

production architecture

Provider options range from self-service to fully

managed. DIY / colocation makes sense if

you have the skills / resources & stable

production architecture

Multiple cost options depending on approach as well as configuration

(vCPUs / memory / storage performance) and

public cloud is a flexible usage-based option

Multiple cost options depending on approach as well as configuration

(vCPUs / memory / storage performance) and

public cloud is a flexible usage-based option

Multiple technology options for both data backup & replication enable multiple tiers

(RTOs / RPOs) of cloud recovery

Multiple technology options for both data backup & replication enable multiple tiers

(RTOs / RPOs) of cloud recovery

While High Availability (HA) solutions are critical

for your most critical applications, you still

need a DR / cloud recovery solution to

manage risk effectively

While High Availability (HA) solutions are critical

for your most critical applications, you still

need a DR / cloud recovery solution to

manage risk effectively

Traditional replication solutions have evolved to support longer retention

of data for cyber recovery - You still need a (cloud)

backup solution if you need to go back in time

Traditional replication solutions have evolved to support longer retention

of data for cyber recovery - You still need a (cloud)

backup solution if you need to go back in time


[email protected]

“It is not an overstatement to say that DRaaS (Cloud Recovery) is a game changer for organizations looking to improve their DR capabilities”

– IDC (Phil Goodwin)

z Ç } z } À } z o } µ m ^ µ } } v ] d z d z ] v p & ] · î ì í õ ^ µ v p À ] o ] o ]...

Documents