1. ClusterLion Automatic switchover for NetApp MetroCluster Robert Graf
CEO

2. 1001110110101110100111111001 We care about your data! protect manage
analyze

4. High Availability in IT
High availability is a MUST in today’s IT world!
Most businesses depend on their critical applications!
“Always ON” became mandatory for many companies!
Downtime cost productivity, money and image!
Worst Ransomware Strains

5. Is system uptime important to your business?
Cost of Downtime
Is system uptime important to your business?
File Activity
The cost by industry and studies vary…
However, IT downtime causes significant damage!
Source:
ServiceMax, from GE Digital, commissioned Vanson Bourne to conduct a global study into unplanned downtime, “After The Fall: Cost, Causes and Consequences of Unplanned Downtime. “The Study surveyed 450 IT & field services decision makers in the UK, US, France and Germany across the manufacturing, medical, oil and gas, energy & utilities, telecoms, distribution, logistics and transportation sectors, among others.

6. 8am @ Sixt Car Rental Service

7. Mercedes Factory

8. voestalpine

9. always-ON availability
The Main Question is:
Do you need
always-ON availability
for your
IT applications?
File Activity
if YES:
Automatic Switchover is needed!
if NO:
Manual Switchover is a valid solution!

10. SRV1 SRV2 SRV2 Ethernet Fabric / ATTO’s Grid UPS Grid UPS Srvc(a)
Srvc(b)
Fabric / ATTO’s
Grid
UPS
Grid
UPS

11. ClusterLion Q Switchover Power-OFF Switchover SRV1 SRV2 Ethernet
Srvc(a)
Srvc(b)
Fabric / ATTO’s
100m
Grid
UPS
100m
Grid
UPS
Telco B
Telco A Q
Switchover
Power-OFF

12. MetroCluster® Management and Disaster Recovery Guide
If all controller modules fail at a site because of power loss, replacement of equipment, or disaster. Typically, MetroCluster configurations can’t differentiate between failures and disasters.
An administrator, or the MetroCluster Tiebreaker software must determine that a disaster has occurred and perform the MetroCluster switchover.
Tie-Breaker should only be used for monitoring an alerting!
AUSO (automatic unscheduled switchover) is not supported on MetroCluster- IP configurations.
Execute command: switchover -override-veto true -forced-on-disaster true
Ransomware Attack
Data source:

13. Tiebreaker Installation and Configuration Guide
Potential risks: Power loss, Panic, Halt or reboot, loss of MC switches
Tie-Breaker should only be used for monitoring an alerting!
Switchover happens automatically, with Tiebreaker in active mode.
When you implement MetroCluster Tiebreaker in active mode, there are known issues that might lead to data loss!
NetApp is not responsible for any damages that may arise out of use of MetroCluster Tiebreaker in active mode.
Do not use MetroCluster Tiebreaker in active mode if the risks and limitations are not acceptable to you.
Ransomware Attack
Data source:

14. Ransomware Attack
Data source:

15. Why is ClusterLion the right solution?
Running on totally independent infrastructure (mobile network and batteries)!
Switchover actions will be disabled if NVRAM or Plexes are not in sync!
Storage controllers are physically powered-OFF before switchover is triggered!
Due to Cloud-Quorum no 3rd Datacentre is needed!
Application integration into SAP, vmWare, etc. (trigger post-scripts)!
Switchover in case of Network failure – (NFO on Ethernet)!
Tamper-proof! High End security due to Layer-1 “Firewall”!
Automatic guidance through giveback process!
Proactive ProLion Support and MetroCluster expertise!
Proactive MetroCluster configuration checks!
Ransomware Attack

16. (Network Failover Option) NFO
Switchover
SRV1
SRV2
Ping
Ping
Ethernet
Ping
Ping
Srvc(a)
Srvc(b)
Fabric / ATTO’s
Grid
100m
UPS
100m
Grid
UPS
Telco B
Telco A Q
Power-OFF

17. NO! automatic unplanned switchover
MetroCluster IP
SRV1
SRV2
Ethernet
Action required
to switchover!!!
Srvc(a)
Srvc(b)
Fabric / ATTO’s
no AUSO!!!
100m
Grid
UPS
100m
Grid
UPS
Telco B
Telco A Q
NO! automatic unplanned switchover

18. Solutions for MetroCluster Switchover
Manual Switchover
Tie-Breaker / Mediator
ClusterLion
Lowest TO because NO 3rd Datacentre needed for: Quorum Server, Network, Patch Management, etc. ✔ X
Always-ON Availability
Only two Datacentres needed
Highly secure against Split-Brain and data loss (local Power-OFF before Switchover)
Infrastructure independent view on MetroCluster
Very easy to install and operate (Installation in less than 1h)
Automatic switchover in case of Network failure
Application integrated switchover (SAP, vmWare, etc.)
Proactive Support, Calling and Config-Checks
Guidance during Giveback-Process

19. Q Detailed Setup A2 A1 B2 B1 Power-OFF SRV1 SRV2 “Giveback”
Customer Support during Giveback
Switchover
Ethernet / SAN
2x RS232
2x Ethernet
2x RS232
2x Ethernet
Srvc(a)
Srvc(a)
Srvc(b)
Srvc(b)
Fabric / ATTO’s A2 A1 B2 B1
100m
Grid
UPS
100m
Grid
UPS
Telco B
Telco A
1. Reporting:
A2: Active Controller Heartbeat
A1: Lost Cluster Partner, NVRAM etc.
B2: No Controller Heartbeat
B1: Controller Error
Monitoring:
Power Supply
Storage Controller
Partner Status
Heart-Beat
Use Case: Power Outage
2. Action:
B2: Power Off
B1: Power Off
A2: Active Controller Heartbeat
A1: Force Switchover
Q: Open Helpdesk Ticket Q
Power-OFF
Open Ticket
Helpdesk

20. ClusterLion Hardware (front)
ClusterLion without Front Cover
„Hot Swap“ Battery

21. ClusterLion Hardware (rear)
4x Power Input
Reset Button
4x Power Output
2x Serial Consol Port
Cooling Fan
4x Ethernet Connectivity
PoE Output for Gateways
Fuse

22. ClusterLion Premium Support
Premium support contract:
24x7 Support
Proactive customer notification
Proactive configuration check
Support during MetroCluster switchback
3rd Party maintenance in EMEA

23. Do you need always-ON availabilty?
…the question is if you can afford to run your MetroCluster without ClusterLion?
The question is not if you can afford ClusterLion…

24. ...we go the extra mile...