NetBackup Appliance Technical Deep Dive
Noel Winter
Appliance Product Lead EMEA
Symantec Appliances Deep Dive 1
Alex Lowe Regional Product Manager
SYMANTEC VISION 2012 SYMANTEC VISION 2012
Aspects of the NetBackup appliance we will cover
Symantec Appliances Deep Dive 2
NetBackup Appliance Architecture 1
Selecting the right model - example Use Cases 2
Disaster Recovery readiness made fast and easy 3
Protecting virtual environments 4
SYMANTEC VISION 2012 SYMANTEC VISION 2012
NetBackup Appliance Architecture
Symantec Appliances Deep Dive 3
SYMANTEC VISION 2012 SYMANTEC VISION 2012
What is a NetBackup Appliance?
NetBackup with Intelligent Deduplication
Symantec Hardened Operating System
VERITAS Storage Foundation
Optimized Hardware
Redundant Storage
Sym
ante
c C
riti
cal S
yste
m
Pro
tect
ion
Bu
ilt-i
n W
AN
Op
tim
izat
ion
Symantec Backup Appliances
vSphere Backup Integration
SYMANTEC VISION 2012 SYMANTEC VISION 2012
Symantec NetBackup Appliances – Intel Inside
• Strong collaboration for hardware & software differentiation
• Intel® SR2625UR Server System Selected for:
– Intel® Xeon 5620 Processing Power
– Scalable Architecture allowing Symantec to meet customer needs
• Optimized for energy efficiency
– Intel’s architecture significantly lowers overall operating costs and increases rack density
– Intel® Intelligent Power Node Manager reduces power and cooling costs
• Business-critical Reliability, Availability, and Serviceability (RAS)
– Industry leading support
• Flexibility and scalability through integrated RAID Controller
Symantec Appliances Deep Dive 5
Intelligent Performance, Consolidation, Power Efficiency, Scalability
SYMANTEC VISION 2012 SYMANTEC VISION 2012
NetBackup 5220 Appliance - Complete, Versatile Backup Solution
• 2U Head Unit – Dual quad core E5620
– RAM: 48GB (4TB) / 96GB (24TB+) DDR3-1333
– 2 x 1 TB SATA OS disks – RAID 1
– 6 x 1 GbE NICs
– 4 TB Usable Storage
• 8 x 1 TB SAS disks – HW RAID 6 + 1 hot spare
• 3U Optional Storage Shelves – 24 or 36 TB Usable Storage
• 2 or 3 TB SAS data disks, HW RAID 6
• I/O Options – Up to 6x 8Gb FC
• Tape out/VMware/SAN Client & Opt Dup
– Up to 2 x 10 GbE and/or 6x 1GbE NIC
6
• Deploy as NetBackup Master/Media Server with Deduplication and/or Advanced Disk Pools
Symantec Appliances Deep Dive
SYMANTEC VISION 2012 SYMANTEC VISION 2012
NetBackup 5220 Rear View – “A” Model 4TB
Version A-4 NETBACKUP 5220 - 4TB - 6 x 1GbE ETHERNET
1G
NIC
NIC1/ETH0 NIC2/ETH1
IPMI
7 Symantec Appliances Deep Dive
SYMANTEC VISION 2012 SYMANTEC VISION 2012
NetBackup 5220 Rear View – “B” Model 4TB
1G
NIC
NIC1/ETH0 NIC2/ETH1
IPMI
Version B-4 NETBACKUP 5220 - 4TB - 6 x 1GbE ETHERNET, 2 x 8 Gbit FC
PO
RT
1
8 4
2
8 4
2
PO
RT
2
PCIe x8 8Gb FC
8G
FC
8 Symantec Appliances Deep Dive
1G
NIC
NIC1/ETH0 NIC2/ETH1
IPMI
Version B-24/36/72 NETBACKUP 5220 – xxTB, 6 x 1 GbE ETHERNET, 2 x 8 Gbit FC
RAID Controller
PO
RT
1
8 4
2
8 4
2
PO
RT
2
PCIe x8 8Gb FC
8G
FC
NetBackup 5220 Rear View – “B” Model 24/36/72TB
SYMANTEC VISION 2012 SYMANTEC VISION 2012
1G
NIC
NIC1/ETH0 NIC2/ETH1
IPMI
GR
N 1
0G
AC
T/L
INK
A
GR
N 1
0G
AC
T/L
INK
B
10
G
NIC
P
OR
T 1
8 4
2
8 4
2
PO
RT
2
PCIe x8 8Gb FC
8G
FC
NetBackup 5220 Rear View – “C” Model 4TB
Version C-4 NETBACKUP 5220 - 4TB – 6 x 1GbE & 2 x 10GbE ETHERNET, 2 x 8Gbit FC
1G
NIC
NIC1/ETH0 NIC2/ETH1
IPMI
GR
N 1
0G
AC
T/L
INK
A
GR
N 1
0G
AC
T/L
INK
B
10
G
NIC
P
OR
T 1
8 4
2
8 4
2
PO
RT
2
PCIe x8 8Gb FC
8G
FC
Version C-24/36/72 NETBACKUP 5220 - xxTB, 6 x1GbE & 2 x 10G ETHERNET, 2 x 8Git FC
RAID Controller
9 Symantec Appliances Deep Dive
NetBackup 5220 Rear View – “C” Model 24/36/72TB
SYMANTEC VISION 2012 SYMANTEC VISION 2012
NetBackup 5220 Rear View – “D” Model 4TB
1G
NIC
NIC1/ETH0 NIC2/ETH1
IPMI
PO
RT
1
8
4
2
8
4
2
PO
RT
2
PCIe x8 8Gb
FC
8G
FC
Version D-24/36/72 NETBACKUP 5220 – xxTB, 6 x 1GbE ETHERNET, 6 x 8Git FC
PO
RT
1
8 4
2
8 4
2
PO
RT
2
PCIe x8 8Gb FC
8G
FC
PO
RT
1
8 4
2
8 4
2
PO
RT
2
PCIe x8 8Gb FC
8G
FC
RAID Controller
Version D-4 NETBACKUP 5220 - 4TB - 6 x 1GbE ETHERNET, 6 x 8Gbit FC
1G
NIC
NIC1/ETH0 NIC2/ETH1
IPMI
PO
RT
1
8
4
2
8
4
2
PO
RT
2
PCIe x8 8Gb
FC
8G
FC
PO
RT
1
8 4
2
8 4
2
PO
RT
2
PCIe x8 8Gb FC
8G
FC
PO
RT
1
8 4
2
8 4
2
PO
RT
2
PCIe x8 8Gb FC
8G
FC
10 Symantec Appliances Deep Dive
NetBackup 5220 Rear View – “D” Model 24/36/72TB
SYMANTEC VISION 2012 SYMANTEC VISION 2012
NetBackup 5220 Rear View – “E” Model 4TB
11
Version E-4 NETBACKUP 5220 4TB – 2 x 1GbE ETHERNET, 2 x 10GbE ETHERNET, 6 x 8Gbit FC
Version E-24/36/72 NETBACKUP 5220 xxTB, 2 x 1GbE ETHERNET, 2 x 10GbE ETHERNET, 6 x 8Gbit FC
RAID Controller
Symantec Appliances Deep Dive
NetBackup 5220 Rear View – “E” Model 24/36/72TB
SYMANTEC VISION 2012 SYMANTEC VISION 2012
Example Use Case: VMware Backup
Symantec Appliances Deep Dive 12
Fibre Channel
Ethernet
Tape Out
• Direct vSphere Backup
• Over Fibre Channel or LAN
• Tape out via Fibre Channel
Select any model with FC connectivity for VMware backup over SAN or if requiring tape out
•For higher port connectivity (eg. tape out)
– Select Model “D”
– 6 1GbE, 6 8Gb Fibre Channel
– OR Model “E”
– 2 1GbE , 2 10 GbE , 6 8Gb Fibre Channel
SYMANTEC VISION 2012 SYMANTEC VISION 2012
Example Use Case: Replace Tape Library/VTL – Backup Over Fibre Transport
Select Model “D”
•6 1GbE, 6 8Gb Fibre Channel
OR Model “E”
•2 1GbE , 2 10 GbE , 6 8Gb Fibre Channel
Symantec Appliances Deep Dive 13
Fibre Channel
Tape Out
Optimized Duplication
Ethernet
• SAN Client backup
• Tape out via Fibre Channel
• Replication over FC
SYMANTEC VISION 2012 SYMANTEC VISION 2012
Example Use Case: All-Purpose Media Server
Select “C” Model
•6 1Gb Ethernet
•2 10Gb Ethernet
•2 8Gb Fibre Channel
Symantec Appliances Deep Dive 14
1Gb Ethernet
10Gb Ethernet
Tape Out Fibre Channel
• Clients connected over Ethernet
– 10GbE (2 ports)
– 1GbE (4 ports)
• Tape out via Fibre Channel
SYMANTEC VISION 2012 SYMANTEC VISION 2012
Capacity Growth on the NetBackup 5220
• NetBackup starts at 4 TB of usable Storage
Symantec Appliances Deep Dive 15
6X8GB DIMM
• Capacity can be expanded in 24 or 36 TB Increments
• When we first expand we add a RAID controller, Battery Backup, additional RAM and a Disc Drive “Shelf” • To increase to up to 64TB of Deduplication Storage, we simply add another Disc Drive Shelf
• Current maximum usable storage capacity is 76TB
• 2 shelves
SYMANTEC VISION 2012 SYMANTEC VISION 2012
Protecting Your Data Protection Solution - Embedded Symantec Critical System Protection
Policy Based Control
Restrict access to critical system resources
Easily integrates with Symantec Critical System Protection Server Manage appliance from SCSP console for
centralized monitoring and auditing
Intrusion Detection
Out of the box superior granular monitoring and auditing capabilities
Intrusion Prevention
Proactively prevent against zero day attacks and malicious insider threats when used with SCSP Server
16
Provide audit evidence and forensics via detailed logging and reporting
Symantec Appliances Deep Dive
SYMANTEC VISION 2012 SYMANTEC VISION 2012
Disaster Recovery Readiness Enhanced
Symantec Appliances Deep Dive 17
AIR & WAN Optimisation
SYMANTEC VISION 2012 SYMANTEC VISION 2012
Catalog
Fast, Easy, Secure Disaster Recovery with Automatic Image Replication
Symantec Appliances Deep Dive 18
Catalog
Optimised duplication of image to a second NetBackup domain
2 Catalogue info is attached to backup image
1
Off-site catalogue is automatically updated immediately after backup image arrives.
• EASY – Appliances are AIR-Ready
• FAST – No time-consuming catalog import. DR restore ready in MINUTES.
• EASY – No need to take down production domain for a DR drill.
• FASTER with the appliance! Built-in WAN Optimization
3
SYMANTEC VISION 2012 SYMANTEC VISION 2012
Improves network performance by optimizing outbound traffic
Symantec Appliances Deep Dive 19
Transparent Implementation
No overhead
Enabled by default
Set it and forget it - no tuning
WAN Optimization
Faster replication between sites
Faster restores to remote clients
Appliance-only capability
Built into the appliance kernel
SYMANTEC VISION 2012 SYMANTEC VISION 2012
Understand the differences between WAN Resiliency and WAN Optimization
They solve different problems.
WAN Resiliency reduces frequency of
failed backups of remote clients
by automatically re-establishing network
connecting.
NBU Client
PDDO or MSDP W
AN
R
esili
ency
WA
N
Res
ilien
cy
WAN Optimization accelerates replications by optimizing how fast the appliance transfers data over the network.
Replication target (52xx, 50xx, or software
MSDP/PDDO) *
WAN Optimization
* Or restoring to remote clients.
And have different deployment dependencies
WAN Resiliency relies upon source & destination components
Both client and target software needs to be updated.
WAN Optimization is available only on the 5220 appliance.
Available from N2.0.2 onwards.
Symantec Appliances Deep Dive
SYMANTEC VISION 2012 SYMANTEC VISION 2012
WANs and LANs – 3 Primary Characteristics
– WAN <= 100 Mb <= LAN
– LANs are comprised of network segments under direct control (generalization)
Symantec Appliances Deep Dive 21
Bandwidth
Latency
Loss LAN < .01 %
High quality WAN .01 % to .1 %
Average WAN .1 % to .5 %
Poor WAN > .5 %
(1/10000)
(1/1000)
(1/200)
20 msecs 70 msecs 150 msecs 0
LAN
Intra-continental Extremely remote Inter-continental
WAN New York Los Angeles London Sydney
SYMANTEC VISION 2012 SYMANTEC VISION 2012
How WAN Optimization Works
Symantec Appliances Deep Dive 22
TCP
IP
network
• When enabled it intercepts and manages TCP traffic
• When disabled traffic completely bypasses the technology
No tunable parameters. Completely heuristic
driven logic!!!
• Filter driver technology
WAN Optimization
SYMANTEC VISION 2012 SYMANTEC VISION 2012 Symantec Appliances Deep Dive 23
Test With WAN
Optimization Without WAN Optimization
1 43.6 Mb/sec 24.3 Mb/sec
2 50.1 Mb/sec 23.9 Mb/sec
3 55.1 Mb/sec 25.3 Mb/sec
4 63.2 Mb/sec 19.7 Mb/sec
5 55.7 Mb/sec 25.9 Mb/sec
Very Good
• 5 hops
• 51 msec latency
• .05% loss
Excellent
• 10 hops
• 54 msec latency
• < .01% loss
• Opt dupe of 1GB backup from Minnesota to California
Scenario #2 WAN Conditions Results
Scenario #1 WAN Conditions Results
• 500 MB backup to Nirvanix cloud storage
Test With WAN
Optimization Without WAN Optimization
1 5.421 Mb/sec 2.038 Mb/sec
2 3.912 Mb/sec 1.982 Mb/sec
3 4.553 Mb/sec 2.042 Mb/sec
4 1.845 Mb/sec 1.301 Mb/sec
Consistent 2X performance increase with WAN Optimization
1.5 to 2.5x performance increase with WAN Optimization
SYMANTEC VISION 2012 SYMANTEC VISION 2012
Complete the promise of virtualization
Symantec Appliances Deep Dive 24
Direct vSphere Backup
SYMANTEC VISION 2012 SYMANTEC VISION 2012
Bringing Business Critical Applications into vSphere
25
Traditional backup approach is time consuming and resource intensive.
Critical systems require on and offsite protection.
Downtime is measured in minutes not hours or days.
Symantec Appliances Deep Dive
SYMANTEC VISION 2012 SYMANTEC VISION 2012
Symantec V-Ray
Symantec V-Ray
– Patented visibility into virtual machines and applications
– Transparent backup and recovery across physical and virtual environments
– 3rd Generation Granular Recovery Technology (GRT)
Symantec Appliances Deep Dive 26
Don’t Let Poor Visibility and Silos Slow You Down
Unified Protection, File & Application Recovery,
Deduplication & Automated Protection
SYMANTEC VISION 2012 SYMANTEC VISION 2012
NetBackup 5220 - Turnkey Protection for Virtualized Enterprise
•Protect up 3,000 virtual machines in one appliance
•Direct vSphere backup
• – No proxy server required
•Equipped with Symantec V-Ray
•Multiple types of recovery from a single backup pass – single file, applications, application objects and DR image
•Protect through SAN or Ethernet
27 Symantec Appliances Deep Dive
SYMANTEC VISION 2012 SYMANTEC VISION 2012
VMware vStorage® Application Programming Interfaces (APIs) for Data Protection (VADP)
• Not a backup application–a true API
– Backup vendors use this API to access advanced VMware backup capabilities
• VADP is a replacement (not enhancement) of VMware Consolidated Backup (VCB)
– VCB still supported with vSphere 4
– VCB no longer supported with vSphere 5
28 Symantec Appliances Deep Dive
SYMANTEC VISION 2012 SYMANTEC VISION 2012
What Happens During a Backup?
• During virtual machine backups, VMware creates temp snapshot of the Virtual Machine. Process is as follows:
– Volume Shadow Copy Service (VSS) provider flushes operating system (OS) buffers in the virtual machine
– Snapshot of the Virtual Machine is taken (Virtual Machine Disks (VMDKs) are frozen)
– Redo log created–all writes redirected to redo log
– Virtual machine is backed up
– Redo log data applied to original VMDK(s)
– Snapshot released—backup completed
• Every one of these steps involves I/O
• Reducing I/O impact improves backup performance and reliability
• Incrementals are quick and can reduce snapshot impact
A closer look at the VADP Snapshot Process
29
ESX/ESXi
VMDK VMDK VMDK VMDK VMDK VMDK
VM1 VM2 VM3
Symantec Appliances Deep Dive
SYMANTEC VISION 2012 SYMANTEC VISION 2012
vStorage API Backup Process with NetBackup 5220
1. Snapshot is created
ESX/ESXi
VMDK VMDK VMDK VMDK VMDK VMDK
VM1 VM2 VM3 ESX
Datastore
ESX/ESXi
VMDK VMDK VMDK VMDK VMDK VMDK
VM4 VM5 VM6
1
1
30 Symantec Appliances Deep Dive
SYMANTEC VISION 2012 SYMANTEC VISION 2012
vStorage API Backup Process with NetBackup 5220
1. Snapshot is created
2. Virtual Machine data copied directly to backup storage while V-Ray processes the stream inline for content mapping
ESX/ESXi
VMDK VMDK VMDK VMDK VMDK VMDK
VM1 VM2 VM3 ESX
Datastore
ESX/ESXi
VMDK VMDK VMDK VMDK VMDK VMDK
VM4 VM5 VM6
2
2
31 Symantec Appliances Deep Dive
SYMANTEC VISION 2012 SYMANTEC VISION 2012
vStorage API Backup Process with NetBackup 5220
1. Snapshot is created
2. Virtual Machine data copied directly to backup storage while V-Ray processes the stream inline for content mapping
3. Virtual Machine snapshot released
ESX/ESXi
VMDK VMDK VMDK VMDK VMDK VMDK
VM1 VM2 VM3 ESX
Datastore
ESX/ESXi
VMDK VMDK VMDK VMDK VMDK VMDK
VM4 VM5 VM6
3
3
32 Symantec Appliances Deep Dive
SYMANTEC VISION 2012 SYMANTEC VISION 2012
vSphere SAN Transport
100 percent off-host backups for all virtual machines
• Recommended for SAN/iSCSI based Virtual Machine File System (VMFS) data stores
• VMware Backup Host is NetBackup 5220 (no Windows® proxy host required!)
• High speed transport and deduplication handled by physical system or appliance
• Encryption backup streams at VMware backup host for additional security
VMware Data Store SAN Data Path
= Backup Impact / Path
Local Area Network
33 Symantec Appliances Deep Dive
SYMANTEC VISION 2012 SYMANTEC VISION 2012
vSphere Network Block Device (NBD) Transport
Use ESX/ESXi networks for backups
• Works for all kind of data stores (widely used for Network File System (NFS) data stores and Direct Attached Storage (DAS) environments)
• The VMware Backup host is NetBackup 5220 (no Windows proxy host required!)
• Encrypt backup streams for additional security
= Backup Impact / Path
ESX Datastore
34
Local Area Network
Symantec Appliances Deep Dive
SYMANTEC VISION 2012 SYMANTEC VISION 2012
Symantec NetBackup Appliance In Summary
• Resilient hardware & software stack optimised for data protection
• Turnkey protection for Virtualization
• Take the pain out of DR with Auto Image Replication & WAN Optimization
• Flexible and scalable integrated platform for building a complete data protection solution
Symantec Appliances Deep Dive 35
Thank you!
Copyright © 2011 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.
Thank you!
Copyright © 2012 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.
Symantec Appliances Deep Dive 36
SYMANTEC VISION 2012 SYMANTEC VISION 2012
Other Suggested Sessions
Day Time NBU Sessions Room Type ID
Wed 14:30-15:30 Best Practices for Backup and Recovery of VMware 112 Breakout IM B09
Thurs 09:00-10:00 Still Putting Tapes on Trucks? New adventures in
Automated Disaster Recovery 131/132 Breakout IM B15
Thurs 10:30-11:30 NetBackup Accelerator: Taking Your Backups to
Ultrafast Lanes 116 Breakout IM B16
Thurs 10:30-11:30 What’s New in NetBackup: The Vision and Roadmap 131/132 Breakout IM B18
Thurs 10:30-11:30 NetBackup Appliances: Configuration and
Deployment Use Cases 121 Lab IM L09
Thurs 11:45-12:45 The Business Case to Deploy NetBackup Appliances
and Deduplication Versus Other Approaches 116 Breakout IM B17
Day Time Other Suggested Sessions Room Type ID
Wed 17:15-18:15
VMWare: The Virtualization Journey: Managing and
Proving Compliance with VMware and Symantec 114 Breakout SS B12
Don’t miss out on the opportunity to win a Samsung Galaxy Tab2 Visit the Symantec Appliances Lounge on Floor P2, Meeting Area for an in-depth look at the latest range of NetBackup and Backup Exec Appliances.
Symantec Appliances Deep Dive
SYMANTEC VISION 2012 SYMANTEC VISION 2012
Time Topics (7 solution tables) Location
Tue 5:30pm-6:30pm
Wed 5:15pm-6:15pm
1. Data Protection (NetBackup) 2. Data Protection (Backup Exec) 3. Archiving/e-Discovery (Enterprise Vault) 4. Storage & Availability Management
(Storage Foundation) 5. Infrastructure Security (SEP, SPS, CSP,SMG,
SWG) 6. Infrastructure Management (IT
Management Suite, Mobile Management) 7. Information & Identity Protection (DLP,
Encryption, MPKI, VIP…) 8. Threat & Risk Management (Managed
Security Services, Control Compliance Suite, Deepsight, Security Information Manager)
CCIB - P2 Banquet Hall
Customer Feedback Forum @ Vision EMEA 2012
38 Symantec Appliances Deep Dive