1. StorSimple Řešení hybridního úložiště
Matouš Rokos
Infrastructure Consultant
Mainstram Technologies

2. Rethink your approach to storage
3/31/2017
Windows Azure Storage
4 trillion objects
Keep in mind the value of Windows Azure storage.
Windows Azure Storage has over 4 trillion objects, processes an average of 270,000 requests per second, and reaches peaks of 880k requests per second!
Windows Azure Storage system is the underpinning to everything in Azure that requires storage. The Windows Azure storage system provides a solid robust data platform for different services that make use of it – Blobs, Tables and Drives.
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Rethink your approach to storage
3/31/2017
Windows Azure Storage
Like a GIANT hard drive—only better
Highly durable and scalable.
Multiple copies of your data.
It’s important to keep in mind the benefits of the Azure storage connected to that StorSimple device.
Azure storage has more than 4 trillion objects, processes an average of 270,000 requests per second, and reaches peaks of 880k requests per second! In fact, the Windows Azure Storage system is the underpinning to everything in Azure that requires storage. It is a solid and robust data platform for the many services that make use of it—like Blobs for unstructured data or NoSQL datastore for structured non-relational data.
So you can imagine that Windows Azure Storage is built to be durable and scalable. Every file or object that you put in Azure is replicated three times within a reason. As a result, you’ll get high availability even if a rack or storage server is down. In addition, Azure Storage includes a lot of technology that ensures data stays protected. For instance, data is constantly scanned against “bit rot” and provides strong consistency, which is vital for enterprise customers who want to move their line of business applications to the cloud. These all contribute to the 99.9 percent financially-backed SLA.
Windows Azure Storage also provides storage for hybrid apps and supports REST APIs, so you can get a flexible solution that meets your exact business needs.
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4. Defend against regional disasters
Build 2012
3/31/2017
Geo-replication
Windows Azure Storage
Defend against regional disasters
So you can be sure that every piece of data that you store in the Azure Blob is available as well as protected against regional disasters (we call this geo-replication).
Data is asynchronously copied to another datacenter that’s at least 400 miles away.
Geo replication is a unique feature, that differentiates us.
Hearing about cloud services and giant datacenters, it’s easy to become inured to the numbers. But think for a moment how much complexity and cost you’d introduce to your environment if you tried to implement a solution involving 6 copies of your data, and two datacenters 400 miles apart!
East DC
> 400 miles
West DC
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. Security Only you have your key.
Windows Azure Backup
3/31/2017
Security
Only you have your key.
Data cannot be recovered without your key.
Microsoft does not have your key.
… and remains encrypted while stored.
The first stage in the transfer process is the encryption of your data on premise using your key.
Your data stays encrypted with your key while in transit over the wire to Windows Azure storage.
Your data stays encrypted while in Windows Azure storage. It is never decrypted while it resides in Windows Azure storage.
Your data can only be decrypted once it’s restored on your premises. Only you have the decryption key to do this.
To this end, it’s very important to protect this key. Make sure you back up your key, keep it safe, and store a copy offsite. Your data cannot be decrypted without it. In the event of key loss, Microsoft cannot help you as Microsoft does not keep a copy of your key and has no access to it. The key is never passed to Windows Azure during any Windows Azure backup.
…encrypted on the network…
Data is encrypted on-premises…
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. Storage Account

7. StorSimple: Cloud-integrated Storage Technical Overview
Matouš Rokos
Infrastructure Consultant
Mainstram Technologies

8. Agenda Overview Primary Storage & Platform Cloud-integrated Tiering
Backup/Restore & Disaster Recovery
Security
Support
Why customers are buying
Qualifying questions
Case Studies

9. Online protection: StorSimple
Microsoft Consumer Channels and Central Marketing Group
3/31/2017
DATA PROTECTION
Online protection: StorSimple F:
StorSimple iSCSI Cloud Volume
Applications in physical or virtual servers
What is it
Appliance that connects Windows servers to Azure storage in minutes with no application modification.
Benefits
Data tiered to Azure depending on usage patterns.
Fast on-ramp to the cloud.
Seamlessly integrates cloud based archive, backup, DR with primary storage.
Reduce enterprise storage TCO by 60-80%.
Ideal for File server workloads, SharePoint Archives, VM Archives
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

10. StorSimple CiS Overview

11. Storage Challenges Are Broad
Equipment Sprawl
Data Growth and Footprint
Data Management Complexity
Backup Issues
Untested Disaster Recovery
Primary
Storage
Archival Storage
Disk-Based Backup Storage
Tape Infrastructure and Management
Replicated Storage for DR
Offsite Facility for
Georesilience
Ask yourself if you are looking for a way to:
Manage explosive Storage growth by moving to a “Pay-as-you-Grow” utility model
Replace Tape as a means of offsite data protection
Effectively Manage BIG File Shares and BIG File Archives
Simplify Storage by using a single box for all your enterprise storage needs
Manage VM Sprawl in your environment and optimize primary storage utilization
Leverage Cloud for Disaster Recovery, Cloud Bursting and running apps in the cloud
Storage Today = Complex & Expensive

12. …and are Challenges with using Cloud Storage
Application Servers
Integration
HTTP/REST API
Integration with existing backup apps & processes
Performance
WAN latency performance impact
WAN bandwidth costs
Traditional WAN optimization does not work with public clouds
Security
Data security & compliance risk
All volume data is dynamically broken into “chunks”, analyzed and weighted based on frequency of use, age, and others
Frequently-used data chunks stored in SSD for fast access
Less frequently-used data chunks can be
Optimized and stored on integrated SATA
Optimized, encrypted and stored in the cloud
Real-time data deduplication enables capacity scalability
StorSimple deploys easily in the data center and provides servers with block volume access and snapshots
Capacity comprised of integrated and cloud storage
Weighted Storage Layout (WSL) preserves app performance
Integrated SSD for high performance/important data chunks
Integrated SATA for local storage scalability
Cloud storage used for remaining data and data protection
Dedupe, compression reduce WAN bandwidth cost by 90%
All data stored in a storage cloud is encrypted
HTTP/REST API

13. Cloud-integrated Storage (CiS) Can Help
Azure + StorSimple = 60–80% Lower TCO
Cloud-Integrated SAN Storage
Automated Cloud-as-a-Tier
Thin, Reduced Snapshots
Cloud Snapshots
Recover in Cloud or Any DC
Use Cloud as Secondary DC
Primary
Storage
Archival Storage
Disk-Based Backup Storage
Tape Infrastructure and Management
Replicated Storage for DR
Offsite Facility for
Georesilience
Storage Today = Complex & Expensive

14. Focused CiS Applications and Workloads
Target Use Cases
File Share
CIFS
NFS
File servers
NAS
SharePoint
Business intelligence
Collaboration
Content and records management
Archives
EMR/PACS
Legal
Construction
Media
Engineering
Logs, records
VMs
Regional office storage
VM sprawl
VM archives
CapEx, OpEx of Traditional Storage
Data Grows Exponentially (50–60% Annually)
Cloud Storage
Capacity
CapEx, OpEx of StorSimple
However, Most I/O Happens to the “Working Set” Data
Local Storage
Time

15. StorSimple Cloud-Integrated Storage
Connects Windows and VMware Servers to Azure Storage in Minutes with No Application Modification
Application Servers
Most Active Data on SSD
Benefits
Consolidates primary, archive, backup, DR thru seamless integration with Azure
Cloud snapshots = revolutionary speed, simplicity and reliability for backup and recovery
Reduces enterprise storage TCO by 60–80%
SAS Local Tier
Speed of SSD/SAN + Elasticity of Cloud
Inactive Data + Backup Copies on Azure storage

16. StorSimple Solution Characteristics
7520
20-100TB* usable local
500TB max capacity
Scalability / Performance
5520
10-50TB* usable local
300TB max capacity
7020
4-20TB* usable local
200TB max capacity
5020
2-10TB* usable local
100TB max capacity
Capacity
* Denotes usable local storage capacity with compression and de-duplication, varies by use case.
* Additional details about appliance specifications can be found at:

17. Enterprise-class Hardware Platform
Highly available - no single point of failure
1. Full MPIOs
2. Dual controllers with auto-failover
3. Dual power
4. Dual cooling
5. RAID drives
6. Hot-spare drives
7. Non-disruptive software upgrades
8. Certified by Microsoft & VMware
* 5020, 7020, 5520 and 7520 appliances are built and distributed by Xyratex

18. Primary Storage & Platform

19. StorSimple Cloud-integrated Architecture
SAN Storage
With Cloud Data Management
iSCSI SAN with auto-tiering (SSD/SAS)
Automated snapshots
Primary dedupe/compress
Seamless Cloud Integration for:
Tiered primary + archives
Cloud snapshots: mountable for DR
On an Enterprise-Class Platform
Certified: VMware-ready and Microsoft Windows Server-certified
HA: full redundancy + hot swaps + non-disruptive upgrades
Seamless iSCSI integration
Highly efficient storage
Thin provisioning
Primary storage de-duplication
High performance + cloud elasticity
Integrated tiering: SSD, SAS & cloud
Full security for the cloud
Local keys + encryption of all cloud data
Protecting both data-in-motion and data at rest
Fast, automated data protection + recovery
Automated snapshots to cloud
Fast online restores and elimination of tape
Integrated disaster recovery – lowest cost & complexity

20. De-dupe and compression
Total data capacity required = 10TB
Maximizes storage of ‘hot or warm data’ on- premise for higher IOPS and/or lower response times for application access.
Minimizes size of data transfer and storage in Azure
Works at the block-level and replaces duplicate data blocks with a meta data map (pointers to the original block)
Data is de-duped in the SSD tier and compressed in the SAS tier before being tiered to Azure
On-premise data capacity can be increased by 2x – 5x based on the type of data stored
Backup de-dupe: Cloud snapshots are differential and thereby eliminate copies of redundant blocks across backups E F E F
Data
blocks A A B B D A C A D C C B D C D C 5x
de-dupe ratio
Data blocks
Metadata map
Capacity used = 2TB A + B C D E F
De-duped
Compressed

21. Cloud-integrated Tiering

22. Weighted Storage Layout (WSL
Weighted Storage Layout (WSL*) Core of the StorSimple Hybrid Storage Appliance
* Pronounced ‘whistle’
SCSI data from application servers
StorSimple Cloud-integrated Storage
Frequently-used working set data
Infrequently used non-working set data
BlockRank™
All volume data is dynamically broken into “chunks”, analyzed and weighted based on frequency of use, age, and others
Frequently-used data chunks stored in SSD for fast access
Real-time data deduplication enables capacity scalability
Less frequently-used data chunks can be:
Optimized and stored on integrated SAS
Optimized, encrypted and stored in the cloud
High performance local storage (SSD, SAS)
Optimized cloud storage access

23. StorSimple Tiered Architecture SSD Performance, Deduplication and Auto-Tiering to Cloud
Linear Tier A B C A B D E
SSD
Deduplicated E
SAS
Deduplicated
Compressed C D E
Data is written to the volume and stored persistently in raw/linear form on SSD
Maximizes throughput, IOPS
Minimizes response time
Transparent movement of data across tiers of storage to optimize for performance and cost
85% utilization threshold causes spilling downward toward lower-performance, lower-cost tiers of storage
Similarly, reading from slower storage causes data to be stored in faster tiers of storage
Spilling is based on a number of factors related to the data, including:
Frequency of use, reference counts
Age of the data or fingerprint
Spilling will be able to be influenced per-volume via a volume priority setting
Local-preferred
Normal
Cloud-preferred
WSL is automatic (no configuration) and transparent (no change to server’s view of storage)
Cloud
Deduplicated
Compressed
Encrypted D E

24. Backup/Restore & Disaster Recovery

25. Cloud Snapshots: Simplicity in Data Protection & Recovery
Backup, Restore & DR Today: Inefficient, Complex, Laborious, and Risky
Primary
Volume
Virtual Tape/ Replication
Physical Tape
Offsite Tape Storage
Snapshot
Backup, Restore & DR with StorSimple: Automated, Optimized, Reliable
Snapshots
Backup copy of data volume created in cloud
Changes to local volume automatically transferred
Cloud snapshots mountable for restore
Primary Volume
Benefits
Backup now as easy as snapshots
Very fast restores from off-site backups
Integrated, easy to test disaster recovery
Truly eliminates tape
Cloud Snapshots

26. …Enables Seamless Scalability and Rapid Recovery
Cloud
Snapshots
Production Data
Production Data
Enterprise Data Center 1
Enterprise Data Center 2
Connect Many Servers to Cloud Storage and Scale Data Sets with StorSimple Solution
Rapidly Recover to Any Data Center, Location-Independent, via Mounting the Cloud

27. Disaster Recovery Behind the Scenes
Configuration import process populates DR appliance with all information from original appliance
Registry restore downloads available backup information from the cloud
Clone operation fetches volume metadata from the cloud and creates the volume on the DR appliance
As and when data is requested, blocks are downloaded from the cloud
Benefits
Quick restore
Download only the required data

28. Cloud Snapshots: Up to 100x Faster RTO
Application Recovery Times from Offsite Backups in a Disaster
90 Days
Regular Cloud Backup With 100 Mbps WAN Link
30 Days
Recovery Time
7 Days
Tape
1 Day
StorSimple Cloud Snapshots With 50 Mbps WAN Link
1 Hour
15 Min.
1 TB
5 TB
20 TB
50 TB
100 TB
Primary Data

29. Security

30. Industry-leading Security for Cloud Storage
Multiple layers of obfuscation through the system
Original data is broken to storage blocks
Blocks are fingerprinted + deduplicated with data from other volumes
Obfuscated blocks are stored in compressed form
Encrypt everything before sending to Azure
AES-256 CBC encryption is applied before transmission using customer key
Additional SSL encryption of all data + meta-data operations with Azure
Encryption keys stay only with customer
Microsoft/StorSimple doesn’t have access to customer encryption keys
Keys can be imported from customer’s secure key mgmt system or generated from pass phrases
Encrypted / compressed / obfuscated blocks stored in Azure
Data is secure even if account gets compromised
Application Servers
Local Data
Broken into storage blocks, then:
Obfuscated
Deduplicated
Compressed
Blocks encrypted with customer key
SSL communication:
Authentication
Metadata
Data transfer
Data in cloud
Deduplicated
Compressed
Encrypted with customer key

31. Cloud Storage Access Security
Scenario 1: Access key got compromised
Scenario 2: Storage admin employee leaves company
Risk mitigation and best practices
Compartmentalize information
Azure subscription can have multiple storage accounts
Recommended to use different storage accounts to compartmentalize info – e.g. per dept, project, role, etc.
Periodical key rotation
Each account has two 256-bit access keys  allows easy key rotation without service disruption
Only requests with valid access keys are allowed to access stored blocks
Data fragments accessed are still obfuscated and encrypted
Frequent key rotation (e.g. every 90 days) is recommended
Ad-hoc/emergency key rotation if a key is compromised
StorSimple allows use of up to 64 storage accounts per system

32. Cloud Storage Data-at-Rest Security
Scenario 3: Cloud Provider decommissions server hardware or loses physical hard drives in maintenance process.
Risk mitigation and best practices
Data at-rest is obfuscated
Data is broken to individual small blocks and fingerprinted to comprise a global de-duplication dictionary – no volume, file system or file context
~16 Million obfuscated blocks per 1TB of Azure storage, spread across multiple hard drives
Data at-rest is encrypted
StorSimple systems encrypt data stored in cloud with a customer-provided encryption key. Federal standard AES-256 encryption used.
Up to 64 different encryption keys can be used in one appliance for data-at-rest isolation to complement access compartmentalization practice.
Encryption key is derived from Customer Passphrase or Key generated by Key Management System. Only entered input is accessible in appliance UI.
Microsoft or 3rd parties cannot read data when physical drives are lost, replaced, or repaired in Azure DC

33. Support

34. Support Offerings
Support for the StorSimple solution is provided by the ODM (Xyratex)
Complete detail about the StorSimple warranty and support services can be found at:

35. Support Offerings Platinum Support Gold Support
The ODM (Xyratex) will provide customers with Platinum support and onsite spares kit (includes all field serviceable components)
Field engineers are in place to go onsite and help with replacements (4 hour SLA)
For international countries, ODM (Xyratex) has a contract to help with replacement (4 hour SLA)
Gold Support
Gold support customers get replacement parts shipped from UK
Parts replacement will be done NBD (Next Business Day)
Customs or other port-of-entry processing may delay shipments

36. Case Studies

37. Customer Case Study: Major Semiconductor Co.
Needs
Large data storage footprint for storing engineering docs and chip designs for various products
Rapid data growth single location)
95% of data not used
Eliminate expensive on-premise storage
Total data size = 300TB
Total data size = 300TB …
Vol1
Vol2
VolN
DR site …
Vol1
Vol2
VolN
7520
appliance
Proposed
Solution
3x 7520 StorSimple systems with Azure
Systems in two different locations for providing file share/archive across multiple volumes (~600TB)
5-week PoC
7520
appliance
7520
appliance
Chandler, AZ
Austin, TX
Phoenix, AZ
Impact
$900K Azure commit over 3 years
Dramatic cost savings, ease-to-use, secure data storage in Azure
Adoption of additional use cases
Live archives
Automatic Backup
Disaster Recovery

38. Customer Case Study: Fortune 500 Global Contractor
Needs
Massive unstructured, geographically- dispersed data
Struggled to deploy SharePoint for data consolidation and sharing
On-premise storage needed for specific performance and scalability requirements
Proposed
Solution
Multi-tiered BLOB storage and data management with StorSimple
Optimized database layout with SSDO (SharePoint Database Optimizer)
Data stored across 5 appliances
Impact
$600K Azure commit over 3 years
Azure Storage footprint to double to >400TB over 2 years

39. Appendix
Appliance configuration and Use

40. Initial Appliance Configuration
Use serial console for initial setup
Connect serial console to the Active controller
Run setup command and enter the network info for MGMT interface
Run show command to display current configuration of MGMT interface
Access StorSimple Web UI using MGMT IP address

41. Managing WAN Bandwidth
WAN bandwidth usually a scarce and expensive resource for most customers
At the same time there’s often a surplus capacity after regular work hours and over weekends
StorSimple Quality of Service (QoS) feature can help control how much bandwidth available during what periods
StorSimple QoS supports multiple schedules
Example:
7AM – 7PM on Mon, Tue, Wed, Thur Fri  40 Mbps
7AM – 7PM on Sat, Sun  60 Mbps
All other times  Full WAN bandwidth consumable

42. Alerts and Notifications
Alerts and Notifications helps in determining any deviation from the normal working of StorSimple appliance
Alert s are sent to administrators and optionally to StorSimple Support for proactive support
SNMP traps are sent to monitor any change in the network interface settings

43. Alerts
Alerts can be enabled or disabled for specific alerts
Hardware Status – Change notification for hardware changes
Licensed capacity consumption – Capacity consumption thresholds
Cloud Access – Cloud connectivity issues
Upgrade state change Alerts related to upgrade state changes
Appliance restart - Controller restart or cluster failover alerts

44. Reports
Reports provide charts for monitoring current and historical metrics. Some key metrics are;
Capacity Metrics
De-duplication Ratio
Host Capacity Consumption
Storage
IO Latency
IOPS
Read Write Bytes per Second
System
CPU
Network Utilization

45. Reports
Current stats can be automatically refreshed on the displayed chart
Historical stats are averaged over a period of time for time resolution
Enabling monitoring on Volume or Cloud allows collection of metrics for individual objects

46. Disaster Recovery Process
1. Import configuration on the new appliance using configuration file 2. Restore registry settings to bring all backup information from the cloud

47. Disaster Recovery Process
Select latest backup and clone the required volumes
Create new ACR for hosts in DR data center and modify volumes to reflect this information
Mount the volumes on new host servers after establishing iSCSI connections to the StorSimple appliance