Symantec 2010 @ BJ

1. 和NetBackup一起进入云备份时代
邱锡锋
资深系统工程师
Presentation Identifier Goes Here 1

2. Cloud – 云基本概念定义
云计算 多用户
定义: 通过互联网提供IT服务的计算模式 定义: 在同一硬件，存储，应用环境下为多个客户
•可以动态调节 及组织提供服务:
•对资源进行虚拟化 • 为不同组织提供虚拟分区
•可以适应低带宽高时延 • 安全复杂程度大大提高
•降低拥有成本 • 对敏感数据的访问控制更加困难
部署模式 供应商
共有云: 通过互联网提供的外部动态资源 Managed Service Providers (MSP):
•提供完整的解决方案
私有云: 在内部网模拟共有云架构以取得云计算的优点， •以服务形式提供
同时又没有安全性方面的问题. Solutions •提供white labels 标识.
Hosting Providers:
混合云: 同时使用云计算架构和传统架构，包括共有云和 •提供Saas, Iaas 或 Paas
私有云 •订阅收费模式
IMG and the Cloud – Cloud 101 SYMANTEC VISION 2010
2

3. 云计算对客户的意义?
• 客户在云计算采用上的现状
– 成本的节省是大多数客户研究和对云计算感兴趣的主要原因
– 但实际的云计算采用并不顺利，主要是技术选择方面的困难和系统转
换的麻烦
– 最终的情况应该是一部分应用完全在云中，而另外的应用将保持传统
的数据中心运行方式.
• 赛门铁克备份解决方案的定位
– 同时为云计算应用和传统应用提供备份恢复解决方案
– 提供更多的功能，并与更多的第三方解决方案集成.
IMG and the Cloud – Cloud 101 SYMANTEC VISION 2010 3

4. 客户需求的目标
• Transparency
• SLA Driven
服务等级 有效资源 • Cost of Expertise
SLA • Staff Turnover
• Training/new features
• Quicker Deployment
• Realize Investment
有效部署 可控的成本
• Predictable Cost
• Business vs. Tech
• CAPEX to OPEX
IMG and the Cloud – Cloud 101 SYMANTEC VISION 2010
4

5. 云计算部署中的困难
• 安全性
– 数据传输加密
– 数据中心安全
– 数据访问 – 谁能访问，如何销毁….
• 数据所有属性
– 数据实际存放位置
– 如何拿回数据
– 如何更换服务提供商
• 性能和用户感知
– 搜索和数据存取的性能
– 归档的时间和性能
– 对客户端影响
IMG and the Cloud – Cloud 101 SYMANTEC VISION 2010 5

6. Symantec 数据保护的云计算策略
To The Cloud From The Cloud With The Cloud
Data Center Data Center Data Center
数据保护, 归档 & 数据检索
SYMANTEC VISION 2010

7. 赛门铁克数据保护 – To The Cloud
to The Cloud
Data Center
Data Center
• 把存储云服务提供商作为备份和归档的目的地
Data Center
• 把云存储作为备份和归档的离线副本，无需维护出
库磁带
IMG and the Cloud – Cloud 101 SYMANTEC VISION 2010 7

8. 常规使用场景
数据出库管理
• 减少异地磁带出库管理的成本
• 减低磁带出库运输的数据丢失风险
容灾
• 以较低成本提供灾难情况下异地离线数据存储
归档
• 减少不常用归档数据的存储成本
SYMANTEC VISION 2010 8

9. 云存储提供商示例Nirvanix Storage Delivery
NetworkTM (SDN)
• 5 globally distributed nodes under a single namespace
• Fully redundant infrastructure with integrated load balancing
– 99.9% - 99.999% availability depending on SLA policy selected
• SAS 70 Type II, physical security, encryption, SSL
• Multi-tenant file system with full directory structure, storage pools, and
child accounts
• Recurring background data integrity checking
Symantec and Nirvanix SYMANTEC VISION 2010 9

10. 赛门铁克数据保护 – From The Cloud
From The Cloud
Data Center
Data Center
• 客户将邮件系统迁移到邮件服务提供商如Microsoft, Google 和
Data Center Lotus Live.
• 但客户需要在本地保存邮件归档副本用于检索和法规遵从
• 使客户可以保留对 EV 的投资，使其支持混合应用
IMG and the Cloud – Cloud 101 SYMANTEC VISION 2010 10

11. 赛门铁克数据保护 – With The Cloud
Discovery With The Cloud
Data Center
Data Center
• 对归档数据进行初审并进行剔除.
Data Center
• 然后通过 EV Discovery Accelerator 将数据送到 CaseCentral之
类的检索服务提供商
• 满足大型法律诉讼中的对外审计要求.
IMG and the Cloud – Cloud 101 SYMANTEC VISION 2010 11

12. 赛门铁克数据保护 – With The Cloud
With The Cloud – MSP’s
Data Center
Data Center
Data Center
• MSP 整合赛门铁克数据保护工具以服务形式提供.
Data Center
• 提供多节点远程维护管理能力
IMG and the Cloud – Cloud 101 SYMANTEC VISION 2010 12

13. NetBackup对虚拟化的支持
Symantec Confidential SYMANTEC VISION 2010 13

14. NetBackup 7 for VMware
14 SYMANTEC VISION 2010

15. vStorage API
• 在vSphere 4中引入
• vStorage API 代替了VCB的功能
• NetBackup 7 提供和vStorage API的直接集成
• 优势
– 不需要脚本
– 不需要安装VCB 组件
– 不需要Backup Proxy
• 升级过程很简单
– 升级到NetBackup 7
– 无需额外配置
15 SYMANTEC VISION 2010

16. VCB和vStorage的比较
VM1 VM2 VM3
Backup Proxy VMDK VMDK VMDK VMDK VMDK VMDK
ESX / ESXi
ESX
Datastore
VM4 VM5 VM6
VMDK VMDK VMDK VMDK VMDK VMDK
ESX / ESXi
VCB Framework installed
Dedicated Backup Proxy system
Tape Holding Additional disk – holding tank
Tank
16 SYMANTEC VISION 2010

17. VCB的备份过程
VM1 VM2 VM3
Backup Proxy VMDK VMDK VMDK VMDK VMDK VMDK
ESX / ESXi
ESX 1
Datastore
VM4 VM5 VM6
VMDK VMDK VMDK VMDK VMDK VMDK
ESX / ESXi
1. Snapshot is created
Tape Holding
Tank
17 SYMANTEC VISION 2010

18. VCB的备份过程
VM1 VM2 VM3
Backup Proxy VMDK VMDK VMDK VMDK VMDK VMDK
ESX / ESXi
ESX
Datastore
VM4 VM5 VM6
2 VMDK VMDK VMDK VMDK VMDK VMDK
ESX / ESXi
1. Snapshot is created
VMDK VMDK 2. VMDK’s copied to Holding Tank
Tape Holding
Tank
18 SYMANTEC VISION 2010

19. VCB的备份过程
VM1 VM2 VM3
Backup Proxy VMDK VMDK VMDK VMDK VMDK VMDK
ESX / ESXi
ESX 3
Datastore
VM4 VM5 VM6
VMDK VMDK VMDK VMDK VMDK VMDK
ESX / ESXi
1. Snapshot is created
VMDK VMDK 2. VMDK’s copied to Holding Tank
Tape Holding 3. Snapshot released
Tank
19 SYMANTEC VISION 2010

20. VCB的备份过程
VM1 VM2 VM3
Backup Proxy VMDK VMDK VMDK VMDK VMDK VMDK
ESX / ESXi
ESX
Datastore
VM4 VM5 VM6
VMDK VMDK VMDK VMDK VMDK VMDK
ESX / ESXi
4
VMDK 1. Snapshot is created
VMDK
2. VMDK’s copied to Holding Tank
Tape Holding 3. Snapshot released
Tank
4. VMDK’s moved to tape
20 SYMANTEC VISION 2010

21. NetBackup 7 for VMware 的改进
VM1 VM2 VM3
Backup Proxy VMDK VMDK VMDK VMDK VMDK VMDK
ESX / ESXi
ESX
Datastore
VM4 VM5 VM6
VMDK VMDK VMDK VMDK VMDK VMDK
• Simpler configuration ESX / ESXi
• Holding tank removed
• VCB Framework software removed
Tape Holding • Dedicated server or hardware no longer required
Tank
• Use existing backup servers
21 SYMANTEC VISION 2010

22. NetBackup 7 for VMware 的改进
VM1 VM2 VM3
VMware Backup VMDK VMDK VMDK VMDK VMDK VMDK
Host
ESX / ESXi
ESX
Datastore
VM4 VM5 VM6
VMDK VMDK VMDK VMDK VMDK VMDK
ESX / ESXi
No additional HW (holding tank)
No additional SW (VCB framework)
Tape Holding No dedicated backup system (Backup Proxy)
Tank
22 SYMANTEC VISION 2010

23. NetBackup 7 for VMware 备份过程
VM1 VM2 VM3
VMware Backup VMDK VMDK VMDK VMDK VMDK VMDK
Host
ESX / ESXi
ESX 1
Datastore
VM4 VM5 VM6
VMDK VMDK VMDK VMDK VMDK VMDK
ESX / ESXi
1. Snapshot is created
Tape Holding
Tank
23 SYMANTEC VISION 2010

24. NetBackup 7 for VMware 备份过程
VM1 VM2 VM3
VMware Backup VMDK VMDK VMDK VMDK VMDK VMDK
Host
ESX / ESXi
ESX
Datastore
VM4 VM5 VM6
VMDK VMDK VMDK VMDK VMDK VMDK
ESX / ESXi
2
1. Snapshot is created
2. VM data copied directly to tape (VTL, etc.)
Tape
24 SYMANTEC VISION 2010

25. NetBackup 7 for VMware 备份过程
VM1 VM2 VM3
VMware Backup VMDK VMDK VMDK VMDK VMDK VMDK
Host
ESX / ESXi
ESX 3
Datastore
VM4 VM5 VM6
VMDK VMDK VMDK VMDK VMDK VMDK
ESX / ESXi
1. Snapshot is created
2. VM data copied directly to tape (VTL, etc.)
Tape 3. VM Snapshot released
25 SYMANTEC VISION 2010

26. NetBackup 7 For Vmware 专利的细粒度恢复技术
• Backup VM once – restore anything*
– Single file or entire VM restore – quick, simple, DR
– No client req’d: Granular File Restore built into backup process
De-duplication
NetBackup 7 VTL
VMware VMware VMware
Virtual Tape
VMDK VMDK VMDK
Disk
Tape
*Windows only
26 SYMANTEC VISION 2010

27. NetBackup 7 介质服务器重复数据删除MSDP
• NetBackup 7 Media Server 内置的功能
– Simple to configure – wizard based
– Separate deduplication server no longer required
• 专为Vmware优化的重复数据删除
– Enhanced virtual machine “vmdk aware” deduplication*
– NetBackup deduplicates VM data based on what is inside the vmdk
– Globally deduplicate data between virtual systems and physical
• 比较优势
– Competitors have no idea what is inside virtual machine
– They deduplicate vmdk files like any big file – less efficient
– Global deduplication from virtual to physical, virtual to virtual
*Windows only
27 SYMANTEC VISION 2010

28. 产品愿景
Symantec Confidential SYMANTEC VISION 2010 28

29. OST 云存储插件
App Media Server (or client itself)
• OST 适合云计算场景
OST Core • 和云存储提供商紧密合作
OST Plugins • 有了OST, 云只是另外一个存储类型，
客户使用习惯保持不变.
DataDomain
Amazon S3
Mountain
PureDisk
Nirvanix
Exagrid
AT&T
• NBU/BE 都有 OST功能.
Iron
Pure Disk & NBU 7
DataDomain
Exagrid
IMG and the Cloud – Cloud 101 SYMANTEC VISION 2010 29

30. OST-云计划
• OST针对云的优化:
NBU BE EV – 跨地理区域的数据复制
– 优化的去重
– 广域网传输优化
Cloud Storage • 将 FileStore 作为认证的私有
OST 云存储解决方案.
WAN • 同时提供对其他共有云存储
Enhanced
Integration 的支持.
Data Center
(Private Cloud)
File Store
OST Cloud Store Certified
IMG and the Cloud – Cloud 101 SYMANTEC VISION 2010 30

31. Symantec | Connect – 技术交流社区
论坛 | 博客 | 文章 | 视频 | 活动 | 下载 | 建议
每月 150 万访客
每周 4,000 个新项目
 获得技术问题的答案
 技术内容投稿
 赢得奖励
symantec.com/connect
存储和可用性解决方案更新 - 赛门铁克机密信息 SYMANTEC VISION 2010 31

32. Thank you!
邱锡锋
ryan_qiu@symantec.com
Copyright © 2010 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in
the U.S. and other countries. Other names may be trademarks of their respective owners.
This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied,
are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.
32