StorSimple Řešení hybridního úložiště Matouš Rokos Infrastructure Consultant Mainstram Technologies

Rethink your approach to storage 3/31/2017 Windows Azure Storage 4 trillion objects Keep in mind the value of Windows Azure storage. Windows Azure Storage has over 4 trillion objects, processes an average of 270,000 requests per second, and reaches peaks of 880k requests per second! Windows Azure Storage system is the underpinning to everything in Azure that requires storage. The Windows Azure storage system provides a solid robust data platform for different services that make use of it – Blobs, Tables and Drives. © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Rethink your approach to storage 3/31/2017 Windows Azure Storage Like a GIANT hard drive—only better Highly durable and scalable. Multiple copies of your data. It’s important to keep in mind the benefits of the Azure storage connected to that StorSimple device. Azure storage has more than 4 trillion objects, processes an average of 270,000 requests per second, and reaches peaks of 880k requests per second! In fact, the Windows Azure Storage system is the underpinning to everything in Azure that requires storage. It is a solid and robust data platform for the many services that make use of it—like Blobs for unstructured data or NoSQL datastore for structured non-relational data. So you can imagine that Windows Azure Storage is built to be durable and scalable. Every file or object that you put in Azure is replicated three times within a reason. As a result, you’ll get high availability even if a rack or storage server is down. In addition, Azure Storage includes a lot of technology that ensures data stays protected. For instance, data is constantly scanned against “bit rot” and provides strong consistency, which is vital for enterprise customers who want to move their line of business applications to the cloud. These all contribute to the 99.9 percent financially-backed SLA. Windows Azure Storage also provides storage for hybrid apps and supports REST APIs, so you can get a flexible solution that meets your exact business needs. © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Defend against regional disasters Build 2012 3/31/2017 Geo-replication Windows Azure Storage Defend against regional disasters So you can be sure that every piece of data that you store in the Azure Blob is available as well as protected against regional disasters (we call this geo-replication). Data is asynchronously copied to another datacenter that’s at least 400 miles away.   Geo replication is a unique feature, that differentiates us. Hearing about cloud services and giant datacenters, it’s easy to become inured to the numbers. But think for a moment how much complexity and cost you’d introduce to your environment if you tried to implement a solution involving 6 copies of your data, and two datacenters 400 miles apart! East DC > 400 miles West DC © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Security Only you have your key. Windows Azure Backup 3/31/2017 Security Only you have your key. Data cannot be recovered without your key. Microsoft does not have your key. … and remains encrypted while stored. The first stage in the transfer process is the encryption of your data on premise using your key. Your data stays encrypted with your key while in transit over the wire to Windows Azure storage. Your data stays encrypted while in Windows Azure storage. It is never decrypted while it resides in Windows Azure storage. Your data can only be decrypted once it’s restored on your premises. Only you have the decryption key to do this. To this end, it’s very important to protect this key. Make sure you back up your key, keep it safe, and store a copy offsite. Your data cannot be decrypted without it. In the event of key loss, Microsoft cannot help you as Microsoft does not keep a copy of your key and has no access to it. The key is never passed to Windows Azure during any Windows Azure backup. …encrypted on the network… Data is encrypted on-premises… © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Storage Account

StorSimple: Cloud-integrated Storage Technical Overview Matouš Rokos Infrastructure Consultant Mainstram Technologies

Agenda Overview Primary Storage & Platform Cloud-integrated Tiering Backup/Restore & Disaster Recovery Security Support Why customers are buying Qualifying questions Case Studies

Online protection: StorSimple Microsoft Consumer Channels and Central Marketing Group 3/31/2017 DATA PROTECTION Online protection: StorSimple F: StorSimple iSCSI Cloud Volume Applications in physical or virtual servers What is it Appliance that connects Windows servers to Azure storage in minutes with no application modification. Benefits Data tiered to Azure depending on usage patterns. Fast on-ramp to the cloud. Seamlessly integrates cloud based archive, backup, DR with primary storage. Reduce enterprise storage TCO by 60-80%. Ideal for File server workloads, SharePoint Archives, VM Archives © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

StorSimple CiS Overview

Storage Challenges Are Broad Equipment Sprawl Data Growth and Footprint Data Management Complexity Backup Issues Untested Disaster Recovery Primary Storage Archival Storage Disk-Based Backup Storage Tape Infrastructure and Management Replicated Storage for DR Offsite Facility for Georesilience Ask yourself if you are looking for a way to: Manage explosive Storage growth by moving to a “Pay-as-you-Grow” utility model Replace Tape as a means of offsite data protection Effectively Manage BIG File Shares and BIG File Archives Simplify Storage by using a single box for all your enterprise storage needs Manage VM Sprawl in your environment and optimize primary storage utilization Leverage Cloud for Disaster Recovery, Cloud Bursting and running apps in the cloud Storage Today = Complex & Expensive

…and are Challenges with using Cloud Storage Application Servers Integration HTTP/REST API Integration with existing backup apps & processes Performance WAN latency performance impact WAN bandwidth costs Traditional WAN optimization does not work with public clouds Security Data security & compliance risk All volume data is dynamically broken into “chunks”, analyzed and weighted based on frequency of use, age, and others Frequently-used data chunks stored in SSD for fast access Less frequently-used data chunks can be Optimized and stored on integrated SATA Optimized, encrypted and stored in the cloud Real-time data deduplication enables capacity scalability StorSimple deploys easily in the data center and provides servers with block volume access and snapshots Capacity comprised of integrated and cloud storage Weighted Storage Layout (WSL) preserves app performance Integrated SSD for high performance/important data chunks Integrated SATA for local storage scalability Cloud storage used for remaining data and data protection Dedupe, compression reduce WAN bandwidth cost by 90% All data stored in a storage cloud is encrypted HTTP/REST API

Cloud-integrated Storage (CiS) Can Help Azure + StorSimple = 60–80% Lower TCO Cloud-Integrated SAN Storage Automated Cloud-as-a-Tier Thin, Reduced Snapshots Cloud Snapshots Recover in Cloud or Any DC Use Cloud as Secondary DC Primary Storage Archival Storage Disk-Based Backup Storage Tape Infrastructure and Management Replicated Storage for DR Offsite Facility for Georesilience Storage Today = Complex & Expensive

Focused CiS Applications and Workloads Target Use Cases File Share CIFS NFS File servers NAS SharePoint Business intelligence Collaboration Content and records management Archives EMR/PACS Legal Construction Media Engineering Logs, records VMs Regional office storage VM sprawl VM archives CapEx, OpEx of Traditional Storage Data Grows Exponentially (50–60% Annually) Cloud Storage Capacity CapEx, OpEx of StorSimple However, Most I/O Happens to the “Working Set” Data Local Storage Time

StorSimple Cloud-Integrated Storage Connects Windows and VMware Servers to Azure Storage in Minutes with No Application Modification Application Servers Most Active Data on SSD Benefits Consolidates primary, archive, backup, DR thru seamless integration with Azure Cloud snapshots = revolutionary speed, simplicity and reliability for backup and recovery Reduces enterprise storage TCO by 60–80% SAS Local Tier Speed of SSD/SAN + Elasticity of Cloud Inactive Data + Backup Copies on Azure storage

StorSimple Solution Characteristics 7520 20-100TB* usable local 500TB max capacity Scalability / Performance 5520 10-50TB* usable local 300TB max capacity 7020 4-20TB* usable local 200TB max capacity 5020 2-10TB* usable local 100TB max capacity Capacity * Denotes usable local storage capacity with compression and de-duplication, varies by use case. * Additional details about appliance specifications can be found at: http://storsimple.xyratex.com/storsimple/specifications

Enterprise-class Hardware Platform Highly available - no single point of failure 1. Full MPIOs 2. Dual controllers with auto-failover 3. Dual power 4. Dual cooling 5. RAID drives 6. Hot-spare drives 7. Non-disruptive software upgrades 8. Certified by Microsoft & VMware * 5020, 7020, 5520 and 7520 appliances are built and distributed by Xyratex

Primary Storage & Platform

StorSimple Cloud-integrated Architecture SAN Storage With Cloud Data Management iSCSI SAN with auto-tiering (SSD/SAS) Automated snapshots Primary dedupe/compress Seamless Cloud Integration for: Tiered primary + archives Cloud snapshots: mountable for DR On an Enterprise-Class Platform Certified: VMware-ready and Microsoft Windows Server-certified HA: full redundancy + hot swaps + non-disruptive upgrades Seamless iSCSI integration Highly efficient storage Thin provisioning Primary storage de-duplication High performance + cloud elasticity Integrated tiering: SSD, SAS & cloud Full security for the cloud Local keys + encryption of all cloud data Protecting both data-in-motion and data at rest Fast, automated data protection + recovery Automated snapshots to cloud Fast online restores and elimination of tape Integrated disaster recovery – lowest cost & complexity

De-dupe and compression Total data capacity required = 10TB Maximizes storage of ‘hot or warm data’ on- premise for higher IOPS and/or lower response times for application access. Minimizes size of data transfer and storage in Azure Works at the block-level and replaces duplicate data blocks with a meta data map (pointers to the original block) Data is de-duped in the SSD tier and compressed in the SAS tier before being tiered to Azure On-premise data capacity can be increased by 2x – 5x based on the type of data stored Backup de-dupe: Cloud snapshots are differential and thereby eliminate copies of redundant blocks across backups E F E F Data blocks A A B B D A C A D C C B D C D C 5x de-dupe ratio Data blocks Metadata map Capacity used = 2TB A + B C D E F De-duped Compressed

Cloud-integrated Tiering

Weighted Storage Layout (WSL Weighted Storage Layout (WSL*) Core of the StorSimple Hybrid Storage Appliance * Pronounced ‘whistle’ SCSI data from application servers StorSimple Cloud-integrated Storage Frequently-used working set data Infrequently used non-working set data BlockRank™ All volume data is dynamically broken into “chunks”, analyzed and weighted based on frequency of use, age, and others Frequently-used data chunks stored in SSD for fast access Real-time data deduplication enables capacity scalability Less frequently-used data chunks can be: Optimized and stored on integrated SAS Optimized, encrypted and stored in the cloud High performance local storage (SSD, SAS) Optimized cloud storage access

StorSimple Tiered Architecture SSD Performance, Deduplication and Auto-Tiering to Cloud Linear Tier A B C A B D E SSD Deduplicated E SAS Deduplicated Compressed C D E Data is written to the volume and stored persistently in raw/linear form on SSD Maximizes throughput, IOPS Minimizes response time Transparent movement of data across tiers of storage to optimize for performance and cost 85% utilization threshold causes spilling downward toward lower-performance, lower-cost tiers of storage Similarly, reading from slower storage causes data to be stored in faster tiers of storage Spilling is based on a number of factors related to the data, including: Frequency of use, reference counts Age of the data or fingerprint Spilling will be able to be influenced per-volume via a volume priority setting Local-preferred Normal Cloud-preferred WSL is automatic (no configuration) and transparent (no change to server’s view of storage) Cloud Deduplicated Compressed Encrypted D E

Backup/Restore & Disaster Recovery

Cloud Snapshots: Simplicity in Data Protection & Recovery Backup, Restore & DR Today: Inefficient, Complex, Laborious, and Risky Primary Volume Virtual Tape/ Replication Physical Tape Offsite Tape Storage Snapshot Backup, Restore & DR with StorSimple: Automated, Optimized, Reliable Snapshots Backup copy of data volume created in cloud Changes to local volume automatically transferred Cloud snapshots mountable for restore Primary Volume Benefits Backup now as easy as snapshots Very fast restores from off-site backups Integrated, easy to test disaster recovery Truly eliminates tape Cloud Snapshots

…Enables Seamless Scalability and Rapid Recovery Cloud Snapshots Production Data Production Data Enterprise Data Center 1 Enterprise Data Center 2 Connect Many Servers to Cloud Storage and Scale Data Sets with StorSimple Solution Rapidly Recover to Any Data Center, Location-Independent, via Mounting the Cloud

Disaster Recovery Behind the Scenes Configuration import process populates DR appliance with all information from original appliance Registry restore downloads available backup information from the cloud Clone operation fetches volume metadata from the cloud and creates the volume on the DR appliance As and when data is requested, blocks are downloaded from the cloud Benefits Quick restore Download only the required data

Cloud Snapshots: Up to 100x Faster RTO Application Recovery Times from Offsite Backups in a Disaster 90 Days Regular Cloud Backup With 100 Mbps WAN Link 30 Days Recovery Time 7 Days Tape 1 Day StorSimple Cloud Snapshots With 50 Mbps WAN Link 1 Hour 15 Min. 1 TB 5 TB 20 TB 50 TB 100 TB Primary Data

Security

Industry-leading Security for Cloud Storage Multiple layers of obfuscation through the system Original data is broken to storage blocks Blocks are fingerprinted + deduplicated with data from other volumes Obfuscated blocks are stored in compressed form Encrypt everything before sending to Azure AES-256 CBC encryption is applied before transmission using customer key Additional SSL encryption of all data + meta-data operations with Azure Encryption keys stay only with customer Microsoft/StorSimple doesn’t have access to customer encryption keys Keys can be imported from customer’s secure key mgmt system or generated from pass phrases Encrypted / compressed / obfuscated blocks stored in Azure Data is secure even if account gets compromised Application Servers Local Data Broken into storage blocks, then: Obfuscated Deduplicated Compressed Blocks encrypted with customer key SSL communication: Authentication Metadata Data transfer Data in cloud Deduplicated Compressed Encrypted with customer key

Cloud Storage Access Security Scenario 1: Access key got compromised Scenario 2: Storage admin employee leaves company Risk mitigation and best practices Compartmentalize information Azure subscription can have multiple storage accounts Recommended to use different storage accounts to compartmentalize info – e.g. per dept, project, role, etc. Periodical key rotation Each account has two 256-bit access keys  allows easy key rotation without service disruption Only requests with valid access keys are allowed to access stored blocks Data fragments accessed are still obfuscated and encrypted Frequent key rotation (e.g. every 90 days) is recommended Ad-hoc/emergency key rotation if a key is compromised StorSimple allows use of up to 64 storage accounts per system

Cloud Storage Data-at-Rest Security Scenario 3: Cloud Provider decommissions server hardware or loses physical hard drives in maintenance process. Risk mitigation and best practices Data at-rest is obfuscated Data is broken to individual small blocks and fingerprinted to comprise a global de-duplication dictionary – no volume, file system or file context ~16 Million obfuscated blocks per 1TB of Azure storage, spread across multiple hard drives Data at-rest is encrypted StorSimple systems encrypt data stored in cloud with a customer-provided encryption key. Federal standard AES-256 encryption used. Up to 64 different encryption keys can be used in one appliance for data-at-rest isolation to complement access compartmentalization practice. Encryption key is derived from Customer Passphrase or Key generated by Key Management System. Only entered input is accessible in appliance UI. Microsoft or 3rd parties cannot read data when physical drives are lost, replaced, or repaired in Azure DC

Support

Support Offerings Support for the StorSimple solution is provided by the ODM (Xyratex) Complete detail about the StorSimple warranty and support services can be found at: https://storsimple.xyratex.com/warranty

Support Offerings Platinum Support Gold Support The ODM (Xyratex) will provide customers with Platinum support and onsite spares kit (includes all field serviceable components) Field engineers are in place to go onsite and help with replacements (4 hour SLA) For international countries, ODM (Xyratex) has a contract to help with replacement (4 hour SLA) Gold Support Gold support customers get replacement parts shipped from UK Parts replacement will be done NBD (Next Business Day) Customs or other port-of-entry processing may delay shipments

Case Studies

Customer Case Study: Major Semiconductor Co. Needs Large data storage footprint for storing engineering docs and chip designs for various products Rapid data growth (1.8TB/month @ single location) 95% of data not used Eliminate expensive on-premise storage Total data size = 300TB Total data size = 300TB … Vol1 Vol2 VolN DR site … Vol1 Vol2 VolN 7520 appliance Proposed Solution 3x 7520 StorSimple systems with Azure Systems in two different locations for providing file share/archive across multiple volumes (~600TB) 5-week PoC 7520 appliance 7520 appliance Chandler, AZ Austin, TX Phoenix, AZ Impact $900K Azure commit over 3 years Dramatic cost savings, ease-to-use, secure data storage in Azure Adoption of additional use cases Live archives Automatic Backup Disaster Recovery

Customer Case Study: Fortune 500 Global Contractor Needs Massive unstructured, geographically- dispersed data Struggled to deploy SharePoint for data consolidation and sharing On-premise storage needed for specific performance and scalability requirements Proposed Solution Multi-tiered BLOB storage and data management with StorSimple Optimized database layout with SSDO (SharePoint Database Optimizer) Data stored across 5 appliances Impact $600K Azure commit over 3 years Azure Storage footprint to double to >400TB over 2 years

Appendix Appliance configuration and Use

Initial Appliance Configuration Use serial console for initial setup Connect serial console to the Active controller Run setup command and enter the network info for MGMT interface Run show command to display current configuration of MGMT interface Access StorSimple Web UI using MGMT IP address

Managing WAN Bandwidth WAN bandwidth usually a scarce and expensive resource for most customers At the same time there’s often a surplus capacity after regular work hours and over weekends StorSimple Quality of Service (QoS) feature can help control how much bandwidth available during what periods StorSimple QoS supports multiple schedules Example: 7AM – 7PM on Mon, Tue, Wed, Thur Fri  40 Mbps 7AM – 7PM on Sat, Sun  60 Mbps All other times  Full WAN bandwidth consumable

Alerts and Notifications Alerts and Notifications helps in determining any deviation from the normal working of StorSimple appliance Alert Emails are sent to administrators and optionally to StorSimple Support for proactive support SNMP traps are sent to monitor any change in the network interface settings

Email Alerts Email Alerts can be enabled or disabled for specific alerts Hardware Status – Change notification for hardware changes Licensed capacity consumption – Capacity consumption thresholds Cloud Access – Cloud connectivity issues Upgrade state change Alerts related to upgrade state changes Appliance restart - Controller restart or cluster failover alerts

Reports Reports provide charts for monitoring current and historical metrics. Some key metrics are; Capacity Metrics De-duplication Ratio Host Capacity Consumption Storage IO Latency IOPS Read Write Bytes per Second System CPU Network Utilization

Reports Current stats can be automatically refreshed on the displayed chart Historical stats are averaged over a period of time for time resolution Enabling monitoring on Volume or Cloud allows collection of metrics for individual objects

Disaster Recovery Process 1. Import configuration on the new appliance using configuration file 2. Restore registry settings to bring all backup information from the cloud

Disaster Recovery Process Select latest backup and clone the required volumes Create new ACR for hosts in DR data center and modify volumes to reflect this information Mount the volumes on new host servers after establishing iSCSI connections to the StorSimple appliance