application backup and recovery made easy · 2012-12-09 · symantec vision 2012 convert stream...

1

Application Backup and Recovery Made Easy

Gareth Fraser-King, @GFK

Bill Felt, @bill_felt

Application Backup And Recovery Made Easy

SYMANTEC VISION 2012

Agenda

Application Backup And Recovery Made Easy 2

Understanding Backup Exec 1

How does it work? 2

Demo 3

Best practices 4

Q & A 5


Architecture of Backup Exec



Backup Exec 2012 Core Components

4

Options

• Enterprise Server with Centralized Management

• Data Deduplication

• File/E-mail Archiving

• NDMP

Agents (Physical servers)

• Protects remote systems • Windows, Linux, and Mac • Databases and applications

• VMware/Hyper-V (agent-less or agent-assisted)

3

Backup Exec Server

• Backup data sent from agents to media server for storage

• Disk or tape backup devices

1

2

A B

C D

1

3 Symantec Backup Exec™ 2012 Server

Physical Servers

2

Virtual Servers


SYMANTEC VISION 2012 Application Backup And Recovery Made Easy

• Integrated bare metal, dissimilar hardware recovery (SDR)

• No additional license required; included in Backup Exec 2012

• Eliminates the need to have two separate solutions for data protection and disaster recovery

5

Original Server Dissimilar Hardware Symantec Backup Exec™

2012 Server

New! Integrated Disaster Recovery


New! Integrated Bare Metal Disaster Recovery

• Integrated bare metal recovery (SDR)

• No additional license required; included in Backup Exec 2012

6

Backup Exec™ 2012 Server

Server Protected Server Fails Server Recovered

Symantec

SRD

Recovery Disk



Convert Stream

New! Backup And Convert To Virtual Environments


Convert to Virtual (P2V) – Parallel data streams

– One stream to media server

– Other stream to hypervisor

– Result is full VM (not just the virtual disk)

Backup to Virtual (B2V) – Serial data streams – Backup stream to media server – Conversion job runs after or on

different schedule – Result is full VM (not just the

virtual disk)

Protected Server Backup Exec 2012

Server Hypervisor

Parallel Data Streams

Backup Stream Convert Stream

Protected Server Backup Exec 2012

Server Hypervisor

Serial Data Streams

Backup Stream

Symantec V-Ray


Deduplication and Replication Solution: Backup Exec w/Deduplication Option

• Deduplication?

• When is the time right?

– Data volumes are exceeding your backup window

– Replicating remote office backups and eliminate tape

– Backing up both physical and virtual environments

8

Before Backup Exec After Backup Exec

8 Application Backup And Recovery Made Easy


Powerful and flexible data deduplication technology

9

Client/Source Deduplication

Backup Exec

2012 Server

File & Application

Servers

Server Deduplication

File & Application

Servers

Backup Exec

2012 Server

Requires Deduplication Option on Backup Exec server and Remote Agent on each client/source

Requires Deduplication Option on Backup Exec server

Appliance Deduplication

Backup Exec

2012 Server

OST

Powered

Storage

Catalog Data

File & Application

Servers

Requires Deduplication Option on Backup Exec server and OST certified deduplication appliance



Benefits of how Backup Exec protects applications



Some of the benefits

• Very easy to use

• Seamless integration with all major Windows applications and databases

• VSS snapshot integration enables consistent application/database protection

• Works in both physical and virtual environments

• One backup allows multiple types of restore

• Allows restore of individual items from backups for which you enable the patented Granular Recovery Technology



The Unique Power of Granular Recovery Technology

SharePoint Agent Exchange Agent Active Directory Agent

Backup Exec 2012 With Patented

Granular Recovery Technology

• Recovery of Exchange – Individual email, mailboxes, calendar objects direct into Exchange

• Recovery of SharePoint - Individual documents, sites, list items in seconds!

• Recovery of Active Directory - Individual users or attributes of users without multiple reboots!



Active Directory



Active Directory - Overview

• Part of the Agent for Applications and Databases

• Allows granular restores of users, objects and attributes

• Allow restores without reboots

• Provides granular view and selection of Active Directory objects in restore view

• Licensed per Domain Controller



Why do we need AD Agent?

• Current recovery process tedious and/or difficult

• Requires a full restore of System State

• Typically takes a lot of time

• Requires at least 2 reboots of the Domain Controller

• Authoritative restores require the use of other system tools (NTDSUTIL)

• Authoritative restores also require you to disconnect the DC from the network



Traditional AD Recovery Process

• Non-authoritative restore (bare metal)

1.Reboot in AD recovery mode (F8)

2.Restore System State

3.Reboot

4.Inbound replication occurs

• Authoritative restore (corruption or deletion)

1.Reboot in AD recovery mode (F8)

2.Restore System State

3.Pull network cable

4.Reboot

5.Use NTDSUTIL to elevate objects to recover

6.Attach to network

7.Outbound and inbound replication occur



Exchange, SQL & Sharepoint



Application and Database Agent - Overview

• Allows backing up applications and databases local or network without separate administration or dedicated hardware

• Allows Restore of individual items from backups for which you enable Granular Recovery Technology

• The ability to select storage groups for backup and restore jobs, or to select one or more databases within the storage group for backup and restore jobs

• BE can facilitate the seeding of an Exchange 2010 database

• Supports Physical Machines & Virtual Machines

• Supported by all versions of BE 2012



Protecting Virtualized Servers

19

• Backups Captured Through Virtual Host

• For VMware, VADP

• For Hyper-V, AWS installed to Hyper-V host

• Image-level Backups Fully Supported (“agentless”)

Backup Exec Server

Hyper-V Server

AWS Agent

VM

VM

VM

Backup Exec Server

VMware Server

VM

VM

VM

Image Backup VADP Backup



Protecting Virtualized Servers

20

• Exchange Virtual Machines and Granular Application Recovery

• Requires AWS to be installed into Exchange virtual machine

• AWS detects Exchange application and collects metadata

• Backups still image-level, snapshot backups

• Without AWS, recovery limited to full virtual machine, file/folder

Backup Exec Server

Hyper-V Server

AWS Agent

VM

VM

VM

Backup Exec Server

VMware Server

VM

VM

VM

Image Backup VADP Backup

AWS Agent within VM enables Exchange granular Recovery AWS Agent within VM enables Exchange granular Recovery



Protecting Virtualized Exchange Servers

21

• Exchange Virtual Machines Protected Through VSS

• For VMware, this is done through VADP calls

• For Hyper-V, this is done through local AWS on Hyper-V host

• VSS “Full” Backup is Used

• Truncates Exchange transaction logs

• If AWS is installed to Exchange virtual machine, can be changed to VSS “Copy” (logs not truncated)

http://www.symantec.com/business/support/index?page=content&id=HOWTO74082





Protecting Physical Servers

22

• Protected via Agent for Windows Servers (AWS)

• AWS Installed to Each Exchange Server Requiring Protection

• Snapshot Backups Captured Using VSS Writer

• AWS Also Used for Direct Recovery Operations

Physical Exchange Server

Backup Exec Server

AWS Agent

NDMP Protocol


SYMANTEC VISION 2012 23

Backup Methods

• Full - Backs up everything selected for protection

• Differential - Backs up everything that has changed since the last full backup event

• Incremental - Backs up everything that has changed since the last full or incremental backup event



Exchange 2007 High Availability Configurations

• Backup Exec Supports Exchange 2007 HA Configurations

• Single Copy Cluster (SCC)

• Clustered Continuous Replication (CCR)

• Local Continuous Replication (LCR)

• Standby Continuous Replication (SCR)

Mailbox Server (Active)

DB, Logs

Mailbox Server (Passive)

DB, Logs

Basic SCR Example



Exchange 2010 Database Availability Groups

• Backup Exec Supports Exchange 2010 HA Configurations

• Database Availability Groups (DAG)

Basic DAG Example

Mailbox Server 1

DB 1 (Active)

DB 2 (Active)

DB 3 (Passive)

Mailbox Server 2

DB 1 (Passive)

DB 2 (Passive)

DB 3 (Active)



Application Recovery

• Ability To Restore All Application Components Back to Original Server

• Includes Ability to Recover Information Store

• Application Restore Jobs Configured and Run from Backup Exec Interface

• Important to Protect Active Directory Alongside Exchange

• Exchange stores important data in Active Directory database



Granular Object Recovery

• For Granular Object Recovery, Install the Agent for Windows on all Client Access Servers

• For Exchange Virtual Machines, Client Access Server Role Must Be Present on Exchange Virtual Machine

• For Exchange 2010, Mailbox/Mailbox Item Recovery Operations are Performed via Exchange Web Services

• Recovery operations are directed to a Client Access Server

• Users can select which Client Access Server to use in configurations where multiple* Client Access Servers are available

• Database Restores Go Directly to the Exchange Mailbox Server



Redirected Recovery

• Ability to Recover Exchange Components to Alternate Server

• Alternate Exchange Server Must Be Same Version, Have AWS

• Alternate Exchange Server Must Be Licensed for Agent for Applications and Databases

Exchange Server 1 (VM) Exchange

Server 2

Backup Exec Server

Backup

Restore

VMware or Hyper-V Server

VM

VM

VM



Agent for Windows Servers

• Agent for Windows Servers (AWS) Must Be Installed To Exchange Server

• For Exchange 2010 DAG Configurations AWS Should Be Installed to Each Mailbox Server

• AWS Must Be Running As ‘Local System’ Account on Exchange Server and Backup Exec Server

• File Versions of AWS on Backup Exec Server and Exchange Server Should Match



Backup Exec Logon Account

30

• Uniquely Named Mailbox is Accessed by Backup Exec Logon Account

• Mailbox Must Be Uniquely Named and Activated

• To activate, create a new profile for that user and login with Outlook

• Mailbox cannot be hidden in the Global Address List

• Ensuring Exchange mailbox name is unique:

http://www.symantec.com/docs/TECH24691

• Backup Exec Logon Account:

• For Exchange 2003, needs to have Exchange Full Administrator rights • For Exchange 2007, needs to be a member of ‘Organization

Administrator’ group • For Exchange 2010, needs to have the ‘Organization Management’ role • Needs to be member of the local computers Administration group on

the Exchange servers


http://www.symantec.com/docs/TECH24691


Applications in a virtual environment



V-Ray Sees Inside Image Allowing for Granular VMware Deduplication

?

Backup Exec data stream Data stream w/o Backup Exec

What We see What Competitors see

What We Can Do • “Single-Pass” Backup VMDK/VHD file

• “Single-Step” Recovery Image or File

• Granular Recovery of applications/databases

• Intelligent Deduplication Data Aware

What They Have to Do • “Multi-Step” Backup VMDK/VHD and/or files

• “Multi-Step” File Restore From File Backup, or

• “Multi-Step” File Restore 1st Mount VMDK/VHD

• Guess at best way optimize deduplication



Data And Application Protection & Recovery in Virtual Environments

33

Restore granular Exchange, SQL, SharePoint, and Active Directory Data in Seconds: • Individual Mailboxes • E-mails • Private or Public

Folders • Calendar Items • Tasks • User Accounts or

Attributes • SQL Databases

2

Backup Exec™ 2012 Server + Virtual Agent

Single-pass Backup of Virtual Guest Systems

VMwareServer Running Application Servers

1

Granular Recovery for Physical, Virtual Applications

Symantec V-Ray



Full Virtual Machine Recovery

• Recover Entire Virtual Machine

• Back to Original Host or to Alternate Host

• Alternate host must be licensed for Agent for VMware and Hyper-V

• Restore Operation Driven from Backup Exec Interface

Backup Exec Server

VMware or Hyper-V Server

VM

VM

VM



NEW Application Auto-Recovery for VMware Triggered by ApplicationHA

Powered through Backup Exec Management Plug-in for VMware

Application Auto Recovery

Automatically recover applications in VMware that are monitored by Symantec ApplicationHA



Additional Resources



www.backupexec.com/beguide


Build Your Backup Exec Franchise With Tools From Symantec

What Is It? • The Backup Exec Deduplication Assessment Tool (BEDAT)

• Calculates front-end capacity in customer environments

• Demonstrates benefit of Backup Exec deduplication technology in customer environments

How Does It Work? • Installs to, and runs from, Windows x86 and x64 systems

• Standalone tool that can run with or without Backup Exec installed in an environment

• Can analyze current system as well as remote network systems

• Automatic cleanup after scan is complete

Who Is It For? • All Backup Exec partners

• Customers can contact a SYMC partner: http://partnerlocator.symantec.com/public/search/

Where Can Partners Get It? • PartnerNet: https://partnernet.symantec.com/Partnercontent/Product/BEDAT.jsp

Deduplication Assessment Tool Backup Exec

Global

Files

Exchange

SQL

Avg

Global



BackupExec.com

Datasheets and white papers

Flash Tours

Videos



Symantec Connect



Support Resources And Online Trouble Shooting


Thank you!

Copyright © 2011 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.

42

Bill Felt: [email protected]

Follow me on Twitter:@bill_felt

Gareth Fraser-King: [email protected]

Follow me on Twitter:@GFK


mailto:[email protected]





application backup and recovery made easy · 2012-12-09 · symantec vision 2012 convert stream...

Documents