KPN - Trusted Services Business Continuity Hoe Snel€¦ · Code voor informatiebeveiliging (ISO...

Voor intern gebruik Voor intern gebruik

KPN - Trusted Services – Business Continuity

Hoe Snel

is uw “Private Cloud”

weer “up & running”

na een calamiteit

DataCenter KPN Almere, 25 Juni 2015

0

1 BCM Event

Agenda

12:00 uur Lunch

13.00 uur Welkom en agenda 13.10 uur Recovery uit de KPN "Private Cloud" (KPN)

Is Business Continuity gegarandeerd bij het afnemen van ICT diensten uit de Cloud? KPN deelt haar visie en gaat daarover met u in gesprek.

13:50 uur Business Continuity unique Tooling (Zerto)

Huidige functionaliteit en roadmap ontwikkeling Hypervisor onafhankelijke replicatie.

14:30 uur Pauze

14.50 uur Cisco approved Validated Design (Cisco)

Voordelen in de dienst door gebruik te maken van Automation in Cisco Powered Infrastructuur.

15.30 uur Rondleiding Datacenter Almere 16:00 uur Afsluiting en borrel

2 BCM Event

Trusted Services Ondersteunt veiligheid en continuïteit

3 BCM Event

Recovery uit de KPN “Privat Cloud”

Michel Scheepers

5 BCM Event

Waarom KPN / Zerto / Cisco

Klant vraagt om:

een premium DR oplossing (voor meest kritische systemen) :

Een cloud gebaseerde oplossing

Zerto & Cisco zijn ook partner van elkaar op gebied van DR

Zerto wordt ook intern bij KPN veelvuldig gebruikt (+/- 650 VM’s)

Cisco is prefered supplier van KPN

Cisco kennis van Netwerking en cloud

6 BCM Event

KPN: Blik op de markt

Wij zien de volgende klantuitdagingen:

Wet- en regelgeving (o.a. lokale overheid / Financiële instelling)

Code voor informatiebeveiliging (ISO 27001)

Steeds verdere digitalisering van zaken vragen om 24/7 beschikbaarheid

Feiten:

73% van Nederlandse ondernemingen test het Disaster Recovery scenario

zelden of nooit

48% van de ondervraagde Nederlandse ondernemingen hebben geen data-

recovery plan

46% van ondervraagde Nederlandse ondernemingen verwachten

imagoschade in geval niet te recoveren bedrijfsdata

7 BCM Event

KPN: Blik op de markt

Business verandert, IT verandert; daarmee verandert

Business continuity ook.

Hanteer de “3-2-1 rule”

3 copies of data

2 different type of storage

1 off-site copy

0 Testing!

Calamiteiten Procedures / plan

Hoe lang kan mijn ICT niet beschikbaar zijn?

Wat is er als eerste nodig?

Wanneer is er een DR?

Wie is waar verantwoordelijk voor?

En wie…..

8 BCM Event

Trusted Services Ondersteund veiligheid en continuïteit

9 BCM Event

Waarom KPN Trusted Services - Continuity

Bijna 35 jaar ervaring

150 testen per jaar samen met onze klanten

Tientallen uitwijkmeldingen en uitwijken per jaar

Merk onafhankelijk

Locatie onafhankelijk

DR - Crisis management

We stoppen pas als het werkt

10 BCM Event

Portfolio Business Continuity Overzicht

Advies

Continuïteits-

management

systeem

DR Testing

Werkplek &

Contact Center

Uitwijk

Systeem Uitwijk

Media Transport

& Opslag

Bedrijfsproces Applicatie &

Data ICT-

Infrastructuur

Per 1 september ook op

locatie Eindhoven en Houten

VM Continuity

(DRaaS)

Back-up Online

XL (BaaS)

Archief en

Restore

Archive Online

http://www.kpn.com/itsolutions/themas/security-services/business-continuity-centre/bedrijfsproces.htm

http://www.kpn.com/itsolutions/themas/security-services/business-continuity-centre/applicatie-data.htm

http://www.kpn.com/itsolutions/themas/security-services/business-continuity-centre/ict-infrastructuur.htm

11 BCM Event

Klant vraag:

Wat voor een oplossing zoekt u bij een Private (DR) cloud?

Voldoet DRaaS (Disaster recovery as an Service) en BaaS

(Backup as an Service)?

12 BCM Event

12

RPO

RTO

Klant

Replicatie

Backup systeem

Systeem Virtueel Fysiek

Applicatie

& Data

SAN

KPN

Shared platform

Systeem Uitwijk Virtueel Fysiek

Storage replicatie

RTO < 8 uur

Applicatie Database Document

Kantoor Telefoon Werkplek Locatie

Applicatie

& Data

Uitwijk Applicatie Database Document

Kantoor

Uitwijk Telefoon Werkplek Locatie

Replicatie

Traditionele

Uitwijk

RTO > 24 uur

VM Continuïteit

< 4 uur

Backup platform

Backup Archief

Backup Online XL

RTO < 24 uur

Backup Archief

13 BCM Event

Voorbeeld - Use case

Gebruik de producten waar deze tot zijn recht komt

Totale omgeving bestaat uit 76 VM’s en 20 TB aan data.

Prio 1: VM Cont. (bestaat uit 46 VM’s)

Prio 2: BOL XL icm System recovery (10 VM’s)

Prio 3: BOL XL (20 VM’s)

Prio 4: Archive Online (10 TB Archief data)

Voor offline Copy MTO (Data gijzeling protectie)

14 BCM Event

VM Continuïteit - Specifiek Binnen Tier 1 Prioriteit aan te brengen

Virtuele Protectie Groepen

Replicatie RPO < 1 uur RTO < 4 uur

RPO < 2 uur RTO < 6 uur


Replicatie

Replicatie

15 BCM Event

Hybride oplossing

VM Continuity Replicatie




Backup Online Replicatie


16 BCM Event

Klant Locatie

Hybride in de praktijk

Productie

Tier 1:

VM Replicatie

Tier 4:

Archive Online

KPN Locatie

Tier 1:

VM Replicatie

Back-up Online XL

Tier 4:

Archive Online

Tier 3:

Tier 2:

Back-up Online XL

Tier 3:

Tier 2:

17 BCM Event

KPN Locatie

Klant

Tier 1

hersteld

Klant

T/m Tier 2

hersteld

Klant

Volledig

hersteld

Hybride Recovery in de praktijk

Activatie

VM Continuity

System recovery

Tier 2

Recovery Archive

online koppeling

18 BCM Event

C3 - Command- and Control Center de kenmerken

Volledig dashboard

(voor crisisteam / techneuten)

Automatische proces/taak distributie

Geautomatiseerde rapportage

Knowlegde base

Dashboard in de Portal

19 BCM Event

Portal de kenmerken

Contact informatie (autorisaties)

Contract inzien

Testverslagen

Systeem informatie

Aanmelding bezoekers

Dashboard C3

(Management samenvatting, …)

https://oportal.uitwijkinfo.nl/

20 BCM Event

Wrap up

Bijna 35 jaar ervaring, 150 testen per jaar

DR is altijd hybride op te oplossing. (bevat meerdere diensten)

Tooling en software voor duidelijk/effectief proces (C3 & Portal)

KPN maakt zelf ook gebruik van de VM Continuity

mogelijkheden.

Voor een snel herstel van uw ICT bedrijfsproces.

21 BCM Event

Bedankt voor uw aandacht

Informatie Michel Scheepers

Mobiel: 06 - 4609 2112 [email protected]

www.uitwijkinfo.nl

22 BCM Event

Business Continuity unique Tooling

Gijsbert Janssen van Doorn

Business Continuity unique Tooling

PRIVATE AND CONFIDENTIAL

About Zerto

24

• Established in 2009

• Corporate Headquarters in Boston, MA and Herzliya, Israel

• Global Sales offices in Sydney, Australia and London, UK

• First Product: Zerto Virtual Replication 1.0 introduced in 2011

• Over 200 employees

• Doubling revenue Y/Y

• Doubling customer base Y/Y


Our Growing Ecosystem

25

1000+ Customers 27 Countries - Across

Industries

200+ Cloud Service Providers

600+ Channel Partners


Continuing to Win Awards

26


Cisco Certified Solution

27

• Cisco’s Disaster Recovery as a Service Virtualized Multiservice Data Center and Zerto Virtual Replication

• Complete implementation guide for DRaaS Architecture leveraging Zerto and Cisco solutions

• Key player in Cisco Inter-cloud


Nearly half the companies that lose their data through disaster, never re-open and 90% are out of

business within two years.

Source: University of Texas Centre for Research on Information Systems

28


Causes of Downtime

29

May 2014 “The State Of Business Technology Resiliency, Q2 2014”


The Impact of Disruption

30

May 2014 “The State Of Business Technology Resiliency, Q2 2014”


Daily Backups

Data Loss

31

0 6 12 24

0 6 12 24

0 6 12 24

GAP = 24 hours

GAP = 4 hours

GAP = seconds

$273,972.60

$45,662.10

$7,610.35

Snapshot-based Replication

Zerto Continuous Replication


Key Motivations for Disaster Recovery

• Business Continuity & Risk Mitigation

• Regulatory Compliance

• Customer or Investor Requirements

32


DRaaS to ZCSP Overview

33

+200

Utilizing power, cooling, hardware, licenses

Expensive Physical BC/DR Site Locked into datacenter lease

Server & storage refreshes Unpredictable High CAPEX costs

Hidden costs of management

Only pay for what you need DRaaS BC/DR Site

Flexibility to migrate

No cost of Server & storage refreshes

Predictable Low OPEX cost Managed service removing hidden

costs


What are the benefits of Cloud-Based BC/DR services?

34

•Most of the time, you essentially only pay for storage resources, turning on VMs only in the event of a disaster invocation or a test

•Little to no upfront investment is required

Better functionality for less cost

Better functionality for less cost

•Testing can be automated and non-disruptive. DRaaS contracts usually include testing services and failover assistance

Easier, more frequent, and less expensive testing

Easier, more frequent, and less expensive testing

•Gives you the ability to adapt to changing IT environment and business needs.

•Deployments are measured in weeks, not months to years

More flexible short-term contracts with fast time to market

More flexible short-term contracts with fast time to market

•On-demand pay-per-use resource that removes the initial investment costs and inflexible contractual agreements, while still delivering recovery capabilities

Pay-as-you-go pricing

Pay-as-you-go pricing

PRIVATE AND CONFIDENTIAL 35

Zerto provides an enterprise-class platform for cloud service providers to deliver a complete set of BC/DR services for the cloud.


How Zerto Revolutionized BC/DR

36

VM

VM

Storage Based Replication

Zerto Hypervisor

Based Replication Replication was in the

wrong place – the physical layer

The first Enterprise-class, Software-

Defined Replication &

Recovery Automation solution

Production Site

BC/DR Site

VM

VM

VM

VM

VM VM

VM VM


Small & Scalable VM-level replication

Compression, Throttling & Resiliency

Zerto Architecture

37

Production Site

vCenter

VM

VM

VM

VRA

VM

VM

VM

VRA

BC/DR Site

SCVMM

VM

VM

VM

VRA

VM

VM

VM

VRA

>5 Mbps

VM-Level

Replication

ZVM ZVM

No downtime, no impact install Zerto Virtual Replication Appliances (VRA) One per host in source & target cluster

For each vCenter/SCVMM Zerto Virtual Manager (ZVM) install in minutes DR Mgmt & VM level integration

Point in time recovery Replica VM & Recovery Site

Journaling Only 7-10% additional space


Building a Complete BC/DR Solution

38

Disaster Recovery Automation

Continuous Data

Protection

Offsite Backup

Simplicity

Enterprise Class

Virtual Replication


Enterprise Class Virtual Replication

39

No performance impact No snapshots

Enterprise-class protection

Production Site

vCenter

VM

VM

VM

VRA

VM

VM

VM

VRA

BC/DR Site

Mgmt

VM

VM

VM

VRA

VM

VM

VM

VRA

WAN

VM-Level

Replication

ZVM ZVM

Storage agnostic Any Storage to Any Storage Removing complexity & lock-in

Continuous block-level replication Recovery Point Objective = Seconds Minimize data loss, meet SLAs

Automatic VM Disk & Setting Conversion

Any Hypervisor to Any Hypervisor Migration & Disaster Recovery


Enterprise Class Virtual Replication

40

Virtual Protection Group = Complete Application Protection Consistent Multi-VM application recovery Meet Application level SLAs & prioritize replication Protect across any host or storage configuration Pre-seed feature to VMware & Hyper-V to reduce initial sync

Virtualization feature support: vMotion, svMotion, HA etc

Production Site

Enterprise Applications

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

vDisk

vDisk

vDisk

vDisk

vDisk

vDisk

vDisk

vDisk

vDisk

vDisk

vDisk

vDisk

CRM, ERP, SharePoint, Exchange, SQL, Oracle

4 seconds RPO VPG 1 VM

VM

VM

VM

VM

VM


VM

VM

VM

VM


VM

VM

VM

VM

VM


Continuous Data Protection

41

Simply re-wind to Any Point in Time

Recovery Site Journaling DVR like functionality Protection against Logical Failures, not just disasters Recover from Seconds ago, not the last Backup or Snapshot Application Consistency and write-order fidelity Recover Multi-VM Apps consistently down to the second



42



43

Automatic VM Recovery, boot order

Recovery Time Objective = Minutes

Re-IP & MAC, Scripts & Commit Policy

Production Site

vCenter

VRA

VM

VM

VM

VM

VM

VM

VRA

BC/DR Site

Mgmt

VRA

VRA

WAN

Recovery

ZVM ZVM

Automated Failback configuration Replication of Only Changes AWS failback V2V export process

Click to test in isolated bubble network Non-disruptive failover testing

Not just for DR & Offsite Clone

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

Failover Test

VM migration automation Migration Time Objective = Minutes Seconds of lag, test before move

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

VM

Move Failback


BC/DR Site

SCVMM

VM

VM

VM

VRA

VM

VM

VM

VRA

ZVM

v

Offsite Backup

Offsite Backup

44 44

Offsite Backup

ZVM Disk, SMB Share

Deduplication Device

AWS S3, Glacier

No impact, no production window Backup to Offsite repository

in any site or public cloud

Protection against BC/DR site failure Always Recover, portable compressed file Restore to anything

VPG backup in BC/DR site 3rd Copy using Replicated Data Daily, Weekly or Monthly schedule

Extend journal protection Long term data retention

Keep forever


Before Zerto - Complexity

45

VM

VM

Production Site

BC/DR Site

VM VM

VM VM VM

VM VM VM

VM VM

Recovery Automation

Continuous Data Protection

Offsite Backup

Replication


Single Zerto Software Solution - Simplicity

46

VM

VM

Production Site

BC/DR Site

VM VM

VM VM VM

VM VM VM

VM VM

Recovery Automation

Recovery Automation Continuous Data

Protection Offsite Backup

Replication


ZVM ZVM

Zerto DRaaS & Intra Cloud Architecture

47

Customer A

vCenter

VM

VRA

VM

VRA

ZVM

Customer B

SCVMM

VM

VRA

VM

VRA

ZVM

DRaaS Cloud

vCenter

VRA

VRA

BC/DR Cloud

vCenter

VRA

VRA

ZCM

ZCC

ZCC

vCD

For each customer & cloud vCenter/SCVMM Zerto Virtual Manager (ZVM) & VRAs Install in minutes

Manager of managers Zerto Cloud Manager

vCD, multi-tenancy, resource mgmt

For DRaaS multi-tenancy, 1 per customer Zerto Cloud Connector (ZCC) 2 IPs, 1 customer facing 1 replication network

VPN, MPLS


Journal – point in time:

Jayme Williams with TenCate had a corrupted VM and he had to

restore from a backup … his old process took 2 days! With the

ZVR journal, he would have been able to rollback the

application and it would be ready in about 10 minutes.

Customer Success Stories

48


Non-disruptive DR Testing:

With his previous DR solution, Henry at Barron Funds and his

team were coming in at 2 AM on Saturday and they had come in

several weekends in a row. After he installed Zerto, he was

amazed at the simple DR Testing. It is non-disruptive and can be

executed during trading hours … much better than at 2 AM on a

Saturday.

Mark Montagna at the Philadelphia has run several DR tests and

he is able to tell his management team that he can recover

SharePoint in 2 minutes and 43 seconds. This level of precise,

DR testing ensures predictability in BC/DR operations.


49


Automation and Orchestration:

Premier Inc, a major healthcare organization with a 600 VM

production environment was previously using ABR with SRM,

with an RTO of 10 – 12 hours - it took hours to reconstruct the

VMs and have the applications team go through and QA the

VMs.

With the automation and orchestration features in Zerto, their

RTO went from 12 hours to 30 – 60 minutes. The VMs are up

and running in a matter of minutes, and it takes a few extra

minute for the QA team to go through and ensure the VMs are

ready for use.


50


Today’s Enterprise IT Infrastructure Landscape

Public Cloud Storage/IaaS

MSP Next Gen Apps PaaS

SaaS

Home Grown Apps

Enterprise IT

On Premise Production Workloads

51


Today’s Enterprise IT Infrastructure Landscape

Enterprise IT

Zerto Cloud Continuity

Platform

Next Gen Apps PaaS

SaaS

MSP

Public Cloud Storage/IaaS

Home Grown Apps

On Premise Production Workloads

52

PRIVATE AND CONFIDENTIAL 53

Scalable

Software

24/7 Global

Support

Market

Leader

Strategic

Solution

Protect Any

Cloud

Join the Zerto

Revolution


Bedankt

54

Gijsbert Janssen van Doorn Solutions Engineer, Benelux / Nordics [email protected] +31 628788897

mailto:[email protected]

55 BCM Event

Pauze

56 BCM Event

Cisco approved Validated Design

Marc Samson

DRaaS

Marc Samsom

Manager Data Center Architecture

June 2015

Highly Secure, Reliable, Cost-Effective Disaster Recovery for Cloud Providers and Their Customers

Cisco Confidential 58 C97-733264-00 © 2015 Cisco and/or its affiliates. All rights reserved.

Disaster Recovery

Is noodzakelijk

Wordt door veel bedrijven niet uitgevoerd vanwege complexiteit en kosten

Vaak is een security issue de trigger

DRaaS van KPN

Maakt DR eenvoudig en schaalbaar

Is makkelijk te beheren

Kan goed worden getest

Werkt op hyperV/vmware omgeving

Tot nu toe


Advanced Malware Protection geeft je een tweede kans

Cisco Security: before – during - AFTER


Cisco Validated Designs

Programma voor end-to-end testen van veel gebruikte oplossingen

Reduceert risico’s bij implementatie en operatie

Levert end-to-end support

DRaaS met Zerto en Cisco bouwt op Validated Design voor multi-tenant omgeving


Multi-tenancy

• U vertrouwt uw data en applicaties toe aan een third-party

• Multi-tenancy design scheidt uw omgeving van die van andere tenants en van het beheer

• Network container voor security, quality of service en beschikbaarheid

• Traditioneel gedaan met hardware componenten met virtualisatie mogelijkheden (bijv. Virtuele firewalls)

• Voor DRaaS met Zerto nu software componenten, voor elke nieuwe tenant nieuwe software component

• Network policies die herhaalbaar zijn

© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 63

IOS

IOS

IOS

IOS

IOS

IOS

IOS

IOS

NaaS Offering on “Steroids”

IOS

CSR

1000V

• RESTful APIs (leverages OnePK) for Automated Management

• Elastic Capacity (10 Mbps to 1 Gbps Throughput, 2 to 16 GB RAM)

• Small Footprint

• Selected Features of IOS XE primarily for Cloud Use Cases

• Server, Switch, Multi-Hypervisor (ESXi, KVM, Xen, AMI)

CSR 1000V Overview

Enterprise-class networking with rapid deployment and scalability


Overlay Transport Virtualisation

• Verlengt uw netwerk naar uw eigen netwerk container in de KPN omgeving

• Op basis van laag 2 (transparant) over IPsec tunnel

• Geen netwerk hernummering

• Maakt partial failover mogelijk

• Werkt voor alle applicaties


Andere netwerk functies in DRaaS

• Beschikbaarheid

• Cloud services routers zijn enkel uitgevoerd, redundantie wordt geleverd door vmware HA

• Security

• Cloud Services Router implementeert Zone based firewall en IPsec voor verkeer naar buiten

• Virtual Security Gateway implementeert firewall tussen zones in uw netwerk container

• Virtual Switch implementeert uw eigen LAN in netwerk container

• Quality of Service

• Zorgt ervoor dat uw QoS implementatie wordt doorgezet naar uw netwerk container

• Automation

• Door KPN of door u zelf, UCS Director


LISP: Locator/ID Separation Protocol

• Scheidt locatie en identificatie voor IP adressen (IPv4 en IPv6)

• Maakt het mogelijk om IP endpoints te verhuizen zonder impact

• Handig voor partial failover

• Essentieel als u moet uitwijken

• Andere toepassingen: cloud bursting


Cisco DRaaS 2.0 System Key Features and Benefits

Software

Defined Storage

Cisco UCS

Service Profiles

Built-in resiliency and

dynamic scalability with

lower TCO

Enables Dynamic Hot

Spare resources to reduce

CAPEX and OPEX

• Affordable and reliable

Storage for Cloud

• Improved data

management and

security

• No Compromise on

performance

• Integrated in to

virtualized environment

OTV & LISP

enabling Partial

failovers

Seamless Enterprise

Network Integration to

Cloud

• Enable partial failover of

enterprise workloads

• Seamless Workload

mobility

• Ability to run distributed

applications

• Enables Hybrid Cloud

• Reduced run book

automation complexity

VMDC VSA

Cloud

Architecture

VMDC Virtual Services

Architecture

• Virtualized Layer 4-7

Services

• Higher Tenancy Scale

• Reduced Service

Orchestration

Complexity

• Reduced CAPEX and

OPEX for Services

Providers

• Operational efficiencies

and cost savings with

unified management

and automation.

• Significant power and

space cost savings

• Infrastructure for secure

and segmented multi-

tenant DR access


Cisco Powered The Industry Standard for Cloud and Managed Services

Platform Benefits:

Built and

delivered on

proven, Cisco®

validated

architectures

Providers meet

strict

qualifications for

delivering Cisco

Powered services

Every service is

third-party audited

Reliable disaster

recovery for

physical, virtual, and

cloud environments

Reduced capital and

operating costs

Real continuous

data protection

(CDP)

Fast recovery times

with reliable

recovery points

Customer Benefits:


InterCloud: een wereldwijde Cloud van Clouds

HCS

Microsoft Suite aaS

DRaaS

PaaS

IaaS

Meraki

Beveiliging

Analyse

vDesktop aaS

WebEx

vManaged Services

Samenwerking en video

Big Data en analyse

Native Cloud-applicaties

Enterprise workloads

Overdraagbare VM’s – Applicatiegericht Beleidsbeheer –

Open Standaarden

Cloud

Services

Catalogus

Public Clouds

InterCloud

Partner Clouds

Private Clouds

Cloud Services en Apps

Energiebeheer

Thank you.

72 BCM Event

Rondleiding datacenter Almere

73 BCM Event

Afsluiting & Borrel

74 BCM Event

Informatie Hans van der Heijden Manager TS-BCM

Mobiel: 06-53962255 [email protected]

www.kpn.com/bcm

www.uitwijkinfo.nl

74

Vragen:

1. Hoe heeft u uw calamiteitenplanning

ingeregeld?

2. Welke rol speelt wet- en regelgeving met

betrekking tot uw continuïteitplanning ?

3. Wat kost het uw onderneming als u een

halve dag niet online bent?

4. Hoe groot is de (imago)schade als

klantdata ‘verdwijnt’?

5. Wanneer hebt u het calamiteitplan voor het

laatst ook echt getest

Bespreek Business Continuity in uw organsiatie

mailto:[email protected]

http://www.kpn.com/bcm

http://www.uitwijkinfo.nl/

KPN - Trusted Services Business Continuity Hoe Snel€¦ · Code voor informatiebeveiliging (ISO...

Documents

Transcript of KPN - Trusted Services Business Continuity Hoe Snel€¦ · Code voor informatiebeveiliging (ISO...