HP StoreOnce VTL, CIFS share and OST/Catalyst integration guide with Symantec NetBackup 7.5
Getting the best out of HP StoreOnce technology and Symantec NetBackup 7.x
Contents
Executive Summary
Key learnings
3
3
4
4
5
5 6 7
10
10 11 12 12 13
16 17
17 17 18 18 18
20
20 20 21 27 29 29 30 31 31 32
33
33 33 34 36
To grant AD access permissions to StoreOnce shares (optional) To test data access Configuring the StoreOnce NAS Share devices as NetBackup Storage Units To configure storage devices Configurable options and when to use them Incorporating StorageNAS into the backup policy Setting up NAS (CIFS) replication Blackout windows NAS NFS Shares
36 38 39 39 40 41 42 43 44
45
45 46 47 47 47 50 52 54 55 60 64 64 67 67 68 73 74 75 76 76 77 78
Using HP StoreOnce VTL autonomic restart scripts with NetBackup 7.x Backup applications and Autonomic Restart
Job status in NetBackup Device up scripts Checkpoints Autonomic Restart Script for Windows Installation Configuration Logging Autonomic Restart Script for Linux Installation Configuration Logging Checkpoints
82 84
84 84 84 84 84 85 85 85 85 85 85 85
Executive Summary
The following implementation guide provides readers with a comprehensive overview of how to integrate various HP StoreOnce Backup System emulation types with Symantec NetBackup 7.x enterprise backup software. As well as showing How to, the guide also explains the configuration options that are available and provides recommendations for getting the best functionality and performance out of the hardware/software combination. The examples in this integration guide were all performed on the HP StoreOnce B6200 Enterprise Backup System with Symantec NetBackup V7.5.
Key learnings
For all emulation types HP StoreOnce throughput performance is directly related to the number of parallel backup streams that are run concurrently this sometimes requires a new approach to specifying backup jobs. A maximum of 16 concurrent backup streams to a device (the backup target on the HP StoreOnce appliance) is recommended. Configuring NetBackup parameters and device configurations to support multiple stream backups is the key to successful integration. For all emulations HP recommends the creation of specific devices for specific data types in order to ensure that similar data is stored in the same device hence improving the deduplication ratio. For example: VTL1 for File/Print data, VTL2 for SQL databases, and so on. For VTL emulations HP recommends using the D2DBS emulation type because it offers flexible emulations (almost unlimited drive counts and slot counts), and can easily be distinguished as an HP StoreOnce product. It is important to note that Symantec requires the D2DBS emulation type to be used in order to properly support and license the device. Failure to comply with this could result in an unsupported configuration. For VTL emulation a block size of 256K is recommended because this provides the highest throughput (measured on the HP StoreOnce appliance) See how to implement this parameter in Integrating StoreOnce VTL emulation with NetBackup 7.x. For VTL emulations do not use multiplexing because this technique is intended for slow clients and physical tape drives. Using multiplexing on HP StoreOnce systems will reduce deduplication ratios and reduce restore speed. For NAS (CIFS) emulations there is a file limit of 25000 files per share. To maximize the storage capacity per share, a fragment size of 500GB is recommended with Symantec NetBackup. For VTL and NAS low bandwidth replication, the replication process is controlled by the StoreOnce device itself and, NetBackup has no inherent knowledge of multiple copies of the data. This means in a disaster recovery scenario, NetBackup data import techniques must be used to update the NetBackup Master Server so that it is aware of the datas existence. This is not required for Catalyst/OST implementations where the Master Media Servers are aware of the data locations that reside within the same domain as the original backup Media Servers*. Configuring StoreOnce Catalyst devices into OST for source-side deduplication or target-side deduplication requires the Catalyst stores to be configured in different ways. o o Source-side deduplication on the NetBackup Media Servers is generally used for remote site backups into Catalyst stores or within data centers where network bandwidth usage is to be minimized. Target-side deduplication on the StoreOnce appliance is typically deployed when deduplication load processing impedes on the Media Server performance during a running backup.
When implementing Catalyst stores into Symantec OST, the NetBackup Storage Lifecycle Policy (SLP) is used to create multiple copies of the Catalyst stores. This is all controlled from within NetBackups management console. The HP StoreOnce B6200 Backup System supports autonomic failover in the event of a node in a couplet failing. This feature allows backup jobs to restart and continue on the remaining node in the couplet. By utilizing the "checkpoint" capability in the backup policies, the backup job can restart from the last known good checkpoint instead of having to restart from the very beginning of the job. This ensures that backup jobs will complete as quickly as possible even in the event of failover. To take full advantage of the Autonomic restart High Availability feature of the HP StoreOnce B6200/NetBackup implementation with VTL emulation some additional NetBackup scripts are required. These are described in NBU Autonomic restart scripts. The scripts are only required for VTL emulations; NAS and StoreOnce Catalyst restart automatically without any additional scripting. Overall the integration of HP StoreOnce products with Symantec NetBackup is very robust, with both companies doing significant In-house testing and certification in extensive configurations. * A second technical whitepaper in this series will cover StoreOnce/NetBackup DR recovery scenarios in more detail.
Comparison table of emulations; showing key features and when to use Emulation Key Features Uses virtual tape drives and virtual slots to emulate physical tape libraries Best used in Enterprise FC SAN environment (B6200 and 4xxx series). HP StoreOnce also supports iSCSI VTL (4xxx and 2xxx series) Specific environments that do not support tape emulation backup or prefer to backup directly to disk. In some cases the licensing may be lower cost for NAS shares as a backup target. Environments that require a single management console for all backup and replication activities and the ability to implement federated deduplication* Comments Tried and tested, well understood but lacks sophistication. Uses NetBackup Robot and Drives device type This is a NAS target for backup - not recommended for random NAS file type access. Uses NetBackup Basic Disk device type Requires HP OST 2.0 plugins to be installed on NetBackup Media servers Uses NetBackup OpenStorage device type
Virtual Tape
NAS shares can be easily configured and viewed by the operating system
NetBackup has total control over the HP StoreOnce appliance, providing source based deduplication, replication control, improved DR etc.
Table 1: HP StoreOnce Emulations * Federated deduplication is an HP term referring to the ability to distribute the deduplication load across NetBackup Ss. This feature is sometimes known as source-based deduplication or low bandwidth backup.
NetBackup Terminology
NetBackup Master Server: Manages backups, archives and restores. A Master Server manages all policies for a NetBackup domain and is required for all backup and restore operations. It is responsible for all media (can be tape or disk) selection and maintains an internal database called a Catalog. The catalog tracks backups and media and is used to quickly locate the correct media and backup items. There is one Master Server per NetBackup domain, but can be clustered for redundancy. NetBackup Media Server: Distributes the backup load across large deployment configurations. Storage devices are attached to Media Servers via SCSI, SAN or network connection. It is possible for a Media Server to be present on the same physical server as the master. A Master Server can control many Media Servers and also function as a Media Server. It is possible in large enterprise scale operations to have multiple Master Servers. Storage Server: When disks are connected directly to the Media Server I/O. In this configuration, disks can be configured in an OpenStorage Disk Pool. Storage Units: The logical unit that is used as the target device for policies and Storage Lifecycle Policies. Disk Pool: A collection of disk volumes presented to multiple Media Servers. Clients: Servers or workstations that have the NetBackup client software loaded and will back up over the network to their designated Media Server. Policy: Backup job Storage Lifecycle Policy (SLP): This is a policy that can be overlaid onto a standard policy. It controls creation, and duplication (multiple copies) of backup data and maintains where backups are stored and their retention period. Figure 1 shows how the NetBackup components are interconnected. NetBackup is extremely scalable and can support a large, complex backup solution. Symantec provides multiple guides on how to configure performance and these must be considered when planning a robust solution. NetBackup Master and Media Server software is available for Windows, Linux, HP-UX and Solaris platforms.
(NAS)
HP StoreOnce emulations roughly translate into the following Symantec device terminology: StoreOnce VTL = NetBackup Robots and Drives Device StoreOnce NAS CIFS shares = Basic Disk. Locally attached disk storage or network attached disk storage are presented as file systems to the Media Server. The directory structure is specified when the storage unit is created. This is the standard configuration for StoreOnce NAS. Basic Disk cannot be used in a Storage Lifecycle Policy. StoreOnce Catalyst Stores = OpenStorage (HP StoreOnce Catalyst). This is used for intelligent storage devices that are OST protocol aware. This option is vendor specific and requires the creation of a Symantec Storage server and disk pool.
The specific HP implementation is shown in Figure 2, note the following: The StoreOnce Catalyst plugin to the OST API provides the bridge between Symantec standard OST commands and Catalyst store commands. A Catalyst store created on the StoreOnce B6200 Backup System can be configured as either high bandwidth or low bandwidth. If configured as high bandwidth, all data is passed from the NetBackup Media Server (using either a 1Gbe or 10GbE interface) to the B6200 high bandwidth catalyst store; and all processor intensive deduplication is performed on the B6200 Backup System and not the Media Server. If the Catalyst store on the B6200 is configured as low bandwidth, the OST/catalyst API integration ensures that the processor intensive part of deduplication (called hashing, chunking and compression) is performed on the Media Server. Low bandwidth has the advantage of transferring only a fractional amount of data over the network to the Catalyst store on the B6200 Backup System. This technique can be used to reduce network backup traffic in the Data Center or can be used to allow remote sites to backup over WAN links to a low bandwidth Catalyst store at a centralized Data Center. Catalyst stores can be copied (replicated (HP), duplicated (Symantec)) using OST commands and defined NetBackup Storage Lifecycle Polices using low bandwidth techniques. This copy is done without having to rehydrate the data as it is sent from one location to another. Significant savings on time and bandwidth provide a very cost-effective Disaster Recovery solution for customers.
Each node has two 8Gb FC connections (used for VTL only), two 10GbE and four 1GbE Ethernet connections (used for NAS shares or Catalyst stores). Figure 4 illustrates these physical connections.
The network must be configured using one of four different templates depending on the customers environment. This is important because the network template used will affect the way certain emulations are configured, such as NAS (CIFS shares) and replication, and the way authentication works with Active Directories.
The most popular template is Template 1 (figure 5), which uses the 1GbE network for device management and the 10GbE network for data (backup and replication). Only one Gateway is supported and that may be on either the Management Network or the Data Network. For more details on template configurations see the B6200 Backup System Recommended Configuration Guidelines.
Figure 5: StoreOnce B6200 Network connections template 1 showing two options where the Gateway can be connected.
10
Not recommended Taking multiple streams from a single drive, as shown in Figure 7, creates I/O contention that can actually slow down backup throughput, and taking multiple client streams and multiplexing them together reduces deduplication ratio and increases restore times.
Figure 7: Multiple stream configurations not recommended Multiplexing was relevant in the past where slow clients were backed up to fast physical tape drives; in order to stream the fast physical tape drives multiple streams needed to be interleaved to improve throughput. With modern virtual tape emulations this requirement does not apply because disk drives do not suffer from repositioning like physical tape drives. With VTL, multiplexing should be avoided because it reduces deduplication ratios and causes restores to be slower.
11
12
Configure backup policies appropriately Certain backup policy types have the option to enable multiple data streams. Check the box and apply as shown below.
Figure 11 - Enable multiple streams in the backup policy The Limit jobs per policy attribute (which can apply to many clients) limits the number of jobs that NetBackup performs concurrently when the policy is run. By default, the box is unchecked, and NetBackup performs an unlimited number of backup jobs concurrently. Other resource settings can limit the number of jobs. So, for example, if we had a policy that backed up 64 clients, 8 virtual tape drives with no multiplexing, and the limit jobs per policy value set to 8, as each client finished backups and one of the 8 devices became free the next client would take that device. Of course, one of the benefits of virtualization is the fact that adding extra tape drives is easy so why not increase the number of VTL drives to 16 and jobs per policy to 16 and then we are running at the sweetspot for the HP StoreOnce VTL appliance.
13
Maximum Jobs per client is a property of the host and applies to all clients in all policies . This is the Tier 1 setting to enable multiple streams at an individual client level.
To accommodate weaker clients (ones that can handle only a small number of jobs concurrently), consider using one of the following approaches: Set the Maximum Data Streams property to a low value for weaker client(s) and Media Servers appropriately. Note how a list of clients can be created with different maximum data streams settings.
14
Use the NEW_STREAM directive. The backup selection list determines the total number of streams that are started. The NEW_STREAM directive within the backup selection part of a policy lets you configure a fixed number of streams, or you can allow the client to dynamically define the streams (using the maximum data streams property above). In our StoreOnce VTL backup policy below we have added the NEW_STREAM directive and selected different directories from our 2GB_Datasets directory to back up to two separate streams (this, of course, relies on the maximum data streams per client also having been increased to 2 or greater). The circled area indicates how the DIRECTIVE is entered into the backup selection list. This is best used if you have a long backup selection list that you may want to partition.
Figure 15: NEW_STREAM Directive in backup policy Figure 16 below illustrates the relationship between all the areas of NetBackup that can influence the number of streams writing to a device. It shows how, when evaluating the total number of streams for any device - VTL, NAS or Catalyst - on the StoreOnce Backup System you need to take into account not only the number of streams that have been configured for each job, but also the number of clients and the number of jobs per client.
15
Integration environment
The environment that was used to produce this integration guide (and a subsequent guide on Disaster Recovery) is shown below. It aims to reproduce a typical NetBackup environment: NetBackup Master server (Saratoga) and two Media Servers (Heartofgold) and (Deathstar) in different data centers. Another server (Valiant) will be used for disaster recovery in a future guide. Devices were configured and performance parameters set for VTL, NAS (CIFS) and Catalyst stores at the Primary Data Center. Backups were run to each device to prove connectivity; the backup policy configuration is not shown explicitly in this implementation guide because most NetBackup administrators are familiar with creating policies and selecting the correct storage device for the policy. In these examples we use a randomly generated 2GB_Dataset to backup. The main focus of this integration guide is to show how to configure and connect the various device emulations to NetBackup. Three backup policies were created StoreOnceVTL, StoreOnceNAS and StoreOnceCatalyst to represent the different device types created. The content of each device was then replicated to the Secondary Data Center by the appropriate method (StoreOnce mappings for VTL and NAS shares) and NetBackup Storage Lifecycle policy for Catalyst stores.
16
Licensing considerations
Symantec licensing
Licensing modes Symantec operates two licensing models: a) Standard Licensing (Traditional): This is based around the number of clients being protected. This approach is component-based on processor tiers, and separate licenses are required for each server running in the Backup Domain. Integrating a StoreOnce product into a NetBackup traditional licensing environment requires no additional NetBackup licenses. Platform Base Licensing (Capacity): This is based on a concept of Front-End Terabytes (FETB). A Front- End Terabyte (FETB) is one terabyte of protected data. The data can either be on clients or devices where the software is installed or where the software is used to provide backup functionality. The total amount of protected data is calculated based on the backup image header information in the NetBackup catalog. The good news is that this capacity licensing is not related to the efficiency of the backup devices so there is no extra cost for using deduplication appliances such as HP StoreOnce B6200 unless special features like OST are involved.
b)
In both licensing models Symantec provide a utility (nbdeployutil) that scans the environment, analyses the set up and produces either a report or an xls spreadsheet which shows the licensing configured and required. For more information on nbdeployutil go to http://www.symantec.com/docs/TECH145972
Figure 18: NetBackup licensing overview The table above shows the main NetBackup Licensing components based around architectures and advanced features. The Enterprise Disk license is particularly relevant in this whitepaper and is delivered in units of 1 FETB.
17
VTL licensing In September 2008, NetBackup licensing of VTLs (and all disk-based backup options such as OpenStorage and AdvancedDisk) changed. There are now two options available for licensing VTLs. Both of these are based on the amount of primary storage (Front- End Terabytes) that are backed up to the VTL. This capacity is the total sum of data, from a NetBackup perspective, included in the largest set of full backups to the VTL. If the VTL can perform deduplication and/or replication, the Enterprise Disk Option license is required. If the VTL cannot perform deduplication or replication, the Basic Disk license is included at no extra charge and the Shared Storage option license (per drive) is only required for sharing physical tape drives in a FC SAN. These licenses allow a customer to configure as many virtual tape drives as desired and allows sharing of these virtual tape drives among Media Servers. Sharing of virtual tape drives is typically not necessary or wise when using a VTL. This was useful when VTLs were first introduced and some of them supported only four to six drives, but support for configuring hundreds of virtual drives has alleviated the need for sharing the drives. NOTE: The Library Based Tape Drive Option for NetBackup is ONLY for licensing physical tape drives with NetBackup, not virtual tape drives. How this relates to our integration example For the integration environment in this guide let us adopt the NetBackup Platform Base capacity licensing model and assume we are protecting 16 FETB. Let us also assume that the Master Servers and Media Servers are four core processer servers. We will show the licensing requirements for backing up the 16 FETB to different device emulations on the HP StoreOnce B6200 Backup System. Additional licenses may also be required depending on the backup technique used to backup the flat files in our Integration environment. Simple disk agent backup VSS snapshot backup To keep things simple we are ignoring additional licenses that would be required for special agent based backups for SQL, Oracle etc. and other special options like bare metal restore or open file backup options, we simply want to explain how to license the HP StoreOnce emulations.
18
In these examples we used the disk agent backup not the snapshot method of backup. NetBackup License required
1 Enterprise server License
Component
Comment
We are using four core Windows processors in our Master and Media Servers, which attracts the NetBackup Tier 3 licensing for 4-7 socketed processors. Any system with two or more Media Servers and all Media Server licenses have to be Enterprise Server class licenses.
N/A
N/A
N/A
N/A
Application server
DR Recovery server
16 x1 FETB Enterprise Disk licenses 16 x1 FETB Enterprise Disk licenses 16 x1 FETB Enterprise Disk licenses Standard Client license if disk agent backup OR Enterprise client License if snapshots are used Standard Client license if disk agent backup OR Enterprise client License if snapshots are used
1 couplet replication license 1 couplet replication license 1 couplet catalyst License N/A
NO replication license on target required if target already licensed for Catalyst To avoid downtime, high-availability systems may instead perform the backup on a snapshota read-only copy of the data set frozen at a point in timeand allow applications to continue writing to their data.
N/A
N/A
N/A
19
6.
Click on the Interface information tab to see the FC WW Names of the medium changer and drives you have created so that these can be configured into your Fibre Channel zoning configurations.
20
7.
Finally click on the Cartridges tab to see the virtual barcodes of the virtual media you have created. In this example we have created a single-drive LTO5 virtual tape library with 8 x 1600GB cartridges. The information on this tab will be useful when performing an inventory on the virtual tape library. The barcodes that are currently created are a random number format; however a template barcode format will be available in a release planned for late 2012. In terms of cartridge size a best practice is to make the cartridge size no bigger than the physical tape that the virtual cartridges might be copied to. For example, here we have configured Virtual 1600GB tapes but if we wish to off load these to LTO4 physical tapes at some point, we should re-configure the cartridge size (using Edit) to a capacity of 800GB.
21
1.
From the Media and Device Management label in the NetBackup navigation pane, launch the Configure Storage Devices wizard.
2.
Select the Media Server on which you wish to discover the device(s) in this case heartofgold and click Next >.
22
3.
Scanning takes place and, in our example, one tape drive and one robot have been discovered on Media Server heartofgold. Click Next>
4.
In this example the only SAN client is the "heartofgold" Media Server itself which automatically includes the SAN client functionality.
23
5.
Click Next > and review the FC VTL devices that NetBackup has found.
Click Next > to see the NetBackup Drag and Drop configuration screen. This may be used to reconfigure drive location, if the robot and drive assignments are not aligned as they should be.
24
6.
7.
Click Next > to move on to the Storage Unit Configuration. The name of the storage unit is defined as a combination of the Media Server it is attached to, the drive type and the robot number. A storage unit is the target for backup data that is configured in NetBackup policies.
25
8.
Maximum concurrent write drives: In our example we only have one tape drive; but if 20 drives were configured this dictates how many of those 20 drives are allowed to run concurrently, depending on Media Server performance capability or the number of SAN clients configured to write directly to the tape library drives. NetBackup also recommend that if duplication (copy jobs are also being run that the total drive count is split 50:50, with 50% of the drives allocated to backup jobs and 50% of the drives allocated to Duplication jobs Enable Multiplexing: Do NOT check this box. This feature is for physical tape drives (not virtual) where several data streams are supplied from different sources to enable streaming of the physical tape drive. Multiplexing, if set, will reduce restore performance. Multiplexing also reduces deduplication ratios because the backup streams may not be multiplexed in the same way each time the backup is run. Maximum streams per drive: This equates to the limit for the number of streams the physical tape drives would be allowed to multiplex. Fragment size/reduce fragment size: For a media manager device type, such as VTL, the default maximum fragment size is 1000 GB. This is the way the backup is split into transfers to the virtual tape devices. There is no real reason to change this defa ult.
26
9.
This completes the HP StoreOnce VTL discovery process with NetBackup 7.5. Click Finish before configuring the VTL for best performance.
27
2.
In this example we want to inventory the VTL that we created on the heartofgold Media Server, so make sure you select the correct Media Server in the drop down list. The inventory takes place.
3.
Click Yes to update the volume configuration. All the virtual barcodes are now incorporated into the Symantec NetBackup database.
4.
We now need to set the tape format block size and the number of buffers so that they are the optimal size for throughput performance and deduplication. This is done by editing two configuration files as described in the next section.
28
Block size and number of buffers configuration files NetBackup settings for block size and number of buffers are controlled by two configuration files: SIZE_DATA_BUFFERS, which defines the size. For best performance with HP StoreOnce VTLs HP recommends a tape block size of 256K NUMBER_DATA_BUFFERS, which controls how many buffers are reserved for each stream. This is per stream (assuming no multiplexing) and should be set to reflect the number of data streams (drives) you are using simultaneously. HP recommends this value be set to 128. The configuration files must be created on all Media Servers. You do not need to stop and start any daemons; the very next backup will use the new settings. But be careful to set the SIZE_DATA_BUFFERS value right. A misconfigured value will impact performance in a negative way. Always verify the settings by looking at the bptm log. To create the configuration files In Unix create the configuration files as follows: touch /usr/open/netbackup/db/config/SIZE_DATA_BUFFERS touch /usr/open/netbackup/db/config/NUMBER_DATA_BUFFERS echo 262144 >> /usr/open/netbackup/db/config/SIZE_DATA_BUFFERS echo 128 >> /usr/open/netbackup/db/config/NUMBER_DATA_BUFFERS Always verify the settings by looking at the bptm logs in /usr/openv/netbackup/logs/bptm. Look for the io_init messages in the BPTM log. In Windows use a text editor to create the files in C:\Program Files\Veritas\NetBackup\db\config. Create the files SIZE_DATA_BUFFERS and NUMBER_DATA_BUFFERS and insert the correct values. Note for 256K buffer the entry in the Config file is 252144, and for 128 buffers the entry in the Config file is 128 In Windows, look for the correct adoption of the values in C:\Program Files\Veritas\NetBackup\logs\bptm. If not created already, you must create the bptm folder for the logs to be stored in.
29
2. 3.
Right click the StoreOnceVTL policy and click Manual Backup. Tthe backup to VTL job will run immediately. Check the following areas: The correct SIZE_DATA_BUFFERS has been set (256K) and NUMBER_DATA_BUFFERS (128) by looking at the bptm log on heartofgold Media Server as detailed above. The backup job completes successfully in the activity monitor (shown below). The Detailed status in the activity monitor will also show the block size and number of buffers being used.
30
Other VTL Configuration parameters to consider Symantec NetBackup offers a wealth of configuration options. These are some of the more useful ones you may wish to consider for use with StoreOnce VTL Libraries Enabling Automatic path correction in Windows. When Windows re-boots the paths are sometimes re-enumerated making some devices inaccessible. (Highly recommended) NUMBER_DATA_BUFFERS_RESTORE. This is similar to the NUMBER_DATA_BUFFERS parameter. HP recommends a value of 256 or larger. TAPE_RESOURCE_MULTIPLIER. This only applies to Duplication Manager and Duplication operations. This parameter makes sure that there is enough queued work to prevent the devices becoming idle. The TAPE_RESOURCE_MULTIPLIER entry lets administrators tune the amount of work that the Resource Broker can evaluate for a particular storage unit. For example, a particular storage unit contains three write drives. If the TAPE_RESOURCE_MULTIPLIER parameter is set to two, the limit on concurrently active jobs is six. Other duplication jobs requiring the storage unit remain queued. Syntax: TAPE_RESOURCE_MULTIPLIER = n Default: 2 (multiplier of two). More documentation on these options is available in the NetBackup 7.5 User Guide
31
Step 3 of the wizard below is where the actual mapping is created in this simple case slot 1 on the source is mapped to slot 1 on the target, and so forth for all 8 slots in the VTL that we created.
Once the replication mapping wizard is complete replication will start immediately unless a replication blackout window is set (see the HP StoreOnce Backup System user guide or online help for details). Data is then replicated from source to target. The first replication is called seeding where all the data is replicated thereafter only the changed data is replicated. As can be seen below source and target are said to be synchronized when the data on the source is identical to the data on the target. The user can configure replication blackout windows on the HP StoreOnce appliance to determine when replication actually takes place.
Disaster recovery In a Disaster Recovery scenario the VTL replicated data at the DR site has to be imported via a NetBackup Media Server into the NetBackup catalog before Disaster recovery can start. The NetBackup catalog is unaware that a duplicate copy of the data exists because it was replicated under HP StoreOnce appliance control. For more details on how to do this refer to a separate whitepaper HP StoreOnce Disaster Recovery scenarios with Symantec NetBackup 7.x
32
The StoreOnce B6200 Backup System uses a series of Virtual IP addresses (VIF) on which to present the NAS (CIFS) shares. The use of Virtual IP addresses supports the autonomic restart feature of the HP StoreOnce B6200 Backup System . NFS shares can also be used but with some restrictions (see the HP StoreOnce Backup System user guide for instructions on creating NFS shares). It is particularly important with NFS shares that the "forcedirectio" mount option is used to ensure data is always delivered in order to the NFS share on the HP StoreOnce appliance.
b) c)
(NFS assigns access by IP address and essentially maintains an access control list.) For the purposes of this example, we will configure Active Directory authentication. Lets assume that we are using Network Template 1 to configure the networking on the HP StoreOnce B6200 system. This means management traffic is on the 1GbE network and the data traffic (NAS/Catalyst backup data and replication) is on the 10GbE network. IMPORTANT: It is the MANAGEMENT network and NOT the DATA network that the StoreOnce Backup System uses to register with Active Directory.
33
To join an AD domain 1. Select NAS in the StoreOnce Navigator, select the Service Set on which you widh to create the share and on the CIFS Server tab choose AD from the Authentication drop down list. Click Update.
2.
If the domain controller is found, a pop-up box will request credentials of a user with permission to join the domain. (Note that joining or leaving the domain will result in failure of any backup or restore operations that are currently running.) Provide credentials (username and password) of a domain user that has permission to add computers to the domain and click Register.
3.
If successful, a message is displayed and the CIFS Server screen is displayed. All access to the shares on this CIFS Server is now administered from one place.
34
4.
The CIFS Server tab on the StoreOnce GUI now shows the Domain and the Status. The DNS entry will be the Current Node name of the Service Set and all shares created on that service set will be connected to the Domain.
5.
Normally joining the Active Directory Domain updates the DNS entries automatically. DNS is an essential component of Active Directory. You can confirm that the Service Set that you are using for NAS shares has joined the Active Directory by checking that it has an entry in the DNS server. On the Active Directory Users and Computers screen, it should be listed under Computers. Note that the name of the computer is the Main Node name.
35
6.
On the DNS Managers screen it should be listed under Forward Lookup Zones. Note that the IP address is the VIF of the service set on the 10 GbE network.
NOTE: If an A record has not been created corresponding to the node ID of the StoreOnce service set that contains the share (e.g . hp49273bd8c-1), it will be necessary to add the entry to the DNS server manually.
2.
The share is created and comes on line with a Virtual IP address (VIF) and name associated with it.
3.
If required, you can now set the access permissions for the share you have created. The options available on the Permissions tab associated with the share depend upon overall authentication settings that are configured for the CIFS server running on the StoreOnce service set. (If the default of None is acceptable, you have finished creating the share.)
To grant AD access permissions to StoreOnce shares (optional) Once the StoreOnce Backup System is part of a domain and can be managed, it is possible to grant access permission to domain account users or groups to shares created on any service set that has AD authentication enabled on its CIFS Server tab.
36
Use the MMC snap-in (Microsoft management console). This is standard procedure for authenticating access to shares in a Windows Active Directory Domain. IMPORTANT: The IP address that you provide during this process must be the MANAGEMENT VIF (192.168.60.10 in our example). Login to the Domain Controller in your environment and execute the following command sequence: 1. 2. 3. 4. 5. Use the command line to execute Run>mmc and then select Add/Remove snap-in. From the File menu, select Shared Folders and select Another computer. Enter the Management VIF of the HP StoreOnce B6200 Backup System. Click on shared folders to show any shares configured on the StoreOnce Backup System. Locate the required share and display its Properties dialog. Select the Share Permission tab, as shown below. Click Add to include domain users or groups. Here we have set the Domain administrator as the object name. We could have created a new user such as NetBackup Admin also.
6.
Once users or groups have been added, click in the Allow boxes to enable Full Control permissions.
7.
37
To test data access Having set up the management parameters from the Domain Controller, we can now test data access (on the 10GbE network) from the NetBackup Media Server that will be writing to this share, in this case heartofgold Check you have access through Windows Explorer with the appropriate login you have created. This time you will use the IP address of the actual service set that the share is created on, in this case 172.16.60.2, or the hostname, as shown below. The CIFS share below on Service set 1, when viewed by Windows Explorer, shows some entries after backups have taken place.
Any host with the appropriate NetBackup Admin login and password can now access the NetBackup75 share we have created on the HP B6200 Backup System. If AD is used to control access to the CIFS file shares, the NetBackup Services must be changed from local account to domain administrator logon. Each service must be stopped and restarted for each account change. The logon is changed from the Windows Services in Windows Server Manager. In our example, we will change the logon of all the NetBackup services on heartofgold to be the Logon Accou nt of the Domain with the Domain password.
38
2. 3. 4. 5.
6.
To use the StoreOnce CIFS NAS configuration for NetBackup Storage the Basic Disk category is used.
To configure storage devices 1. 2. 3. 4. 5. 6. 7. 8. 9. In the NetBackup Administration Console, select NetBackup Management> Storage > Storage Units. Click Actions > New > New Storage Unit. In the New Storage Unit dialog box, name the storage unit. Select Basic Disk as the Storage unit type. Select the Disk type of disk storage unit that is to be a disk staging storage unit, in this case BasicDisk. Select a Media Server in this case Heartofgold Enter the absolute path to the directory to be used for storage. This is the VIF of the service set + Share name This directory is on a StoreOnce unit so it cannot reside on the root file system or system disk leave unticked. Enter the Maximum concurrent jobs that are allowed to write to this storage unit at one time 16 is the recommended value.
10. Enter a High water mark value. The high water mark works differently for the Basic Disk disk type. NetBackup assigns new jobs to a Basic Disk disk staging storage unit, even if it is over the indicated high water mark. For Basic Disk, the high water mark is used to trigger the deletion of images that have been relocated or expired. NetBackup continues to delete images until the disk reaches the low water mark. Note: The Low water mark setting does not apply to disk staging storage units. 11. Do not check the Enable temporary staging area option. 12. Click OK. The following screenshot illustrates the options we have selected.
39
Configurable options and when to use them Symantec does not recommend configuring multiple storage units to the same share. This is because the individual storage units will assume that they have exclusive access. The On demand only checkbox, if set, means that only backup policies which are specifically assigned to this storage unit can use it. If this option is set and policies do not specify a storage unit they will not run, so take care. In order to increase the number of streams to optimize HP StoreOnce performance, increase the maximum number of concurrent jobs for the storage unit. (This equates to number of tape drives in a real tape library) up to a recommended maximum of 16. It is good practice to group servers together by application. For example, arrange that file and print servers are backed up to the same share if they are likely to contain some degree of duplicate data because this will improve deduplication ratios for the share. The maximum fragment size is set at default to 524288. The data is stored on disk in fragments to ensure that the backups do not exceed the maximum size file allowed by the file system. The space is not pre-allocated so there is no concern about lost disk space. NetBackup will automatically create new fragments as required. This parameter can be left at default. HP NAS shares have a limit of 25000 files per share with each fragment at 524288 it means the 25000 file limit should rarely be exceeded. The high and low water mark are parameters used by NetBackup to determine when to release disk space occupied by expired backup policies. Once the high water mark is reached expired policies will be deleted until none remain or the low water mark is reached. Deleting expired backup will cause housekeeping* overhead on the HP StoreOnce systems. This needs to be monitored (HP StoreOnce has inbuilt housekeeping reporting) to ensure it is within sensible limits. Housekeeping should normally not be increasing week on week. * Housekeeping is the space reclamation process used on HP StoreOnce and can be scheduled to occur up to two periods in 24 hours. It is triggered when tapes are overwritten or files deleted. The enable temporary staging area option is used when backups are staged to disk before reaching their final destination. In the case of the HP StoreOnce the appliance is the final destination (other than possible archiving to tape) so this box does not need to be checked.
40
Incorporating StorageNAS into the backup policy Once configured, StoreOnceNAS appears as a Storage Unit in the NetBackup Administration Console.
Run a test backup using policy StoreOnceNAS to confirm the integration is successful. Check in Activity monitor/Detailed status that the backup completes successfully.
41
1.
At Step 1 of the wizard select the target appliance. In this case we are selecting Service Set 3 of the B6200 on IP address 172.16.60.6 but in reality this would be a separate B6200 Backup System on another site.
2.
The wizard will automatically create a NAS share on the target system. Provide the name and description and click Create New Target Share.
42
3.
Just like with VTLs we must set up a mapping to establish the relationship between source and target
4.
Once the mapping is complete, the first step is to synchronize the source and target devices this is known as seeding and is displayed as "synchronizing" in the screenshot below.
5.
Click on the File Details tab shows the files that have been backed up to the source and replicated to the target.
Blackout windows In our example no replication blackout window is set, which means as soon as a NAS file on the source is closed it will replicate, If you want to control more accurately when replication takes place, you can configure blackout windows for each service set as follows.
43
Select Replication in the StoreOnce Navigator. Select the Local Settings and the Blackout Windows tab. The blackout windows can be set to occur over two durations in a 24 hour period. Note that these blackout windows will apply to all replication activity for both VTL libraries and NAS shares within the same service set.
44
The following figure illustrates the operations associated with deduplication and where they can occur. If deduplication takes place on the target, all data is sent to the Catalyst Store and chunking, hashing, matching, compressing and storing occur on the B6200 Backup System. If deduplication takes place on the source, the only operations that occur on the B6200 Backup System are matching of hashes (created by the Catalyst client) and storing of unique chunks (compressed on the Catalyst client).
Figure 19: Deduplication pre-processing; the operations involved and where they can occur
45
Low Bandwidth backup usage models The following example illustrates a remote office where several clients are connected to a Media Server. Deduplication occurs on the Media Server, enabling low bandwidth backup across the WAN to the Catalyst Store on the HP StoreOnce Backup System.
Remote Office Data Center
Client
Client HP StoreOnce Client Media Server (Dedupe) Client Low Bandwidth Backup Catalyst Store
Client
Figure 20: Low bandwidth backup from remote sites over a WAN In the following example there are multiple Media Servers in a Data Center. Deduplication occurs on the Media Servers reducing the network bandwidth required to backup to the Catalyst Store on the HP StoreOnce Backup System. This saves on bandwidth costs and improves application responsiveness within the Data Center during the backup window.
Data Center
Client
Media Server #1
Client
Client
Media Server #4
46
Terminology StoreOnce Catalyst Store: a backup device with specific NetBackup integration provided via HP OST plug-in 2.0. StoreOnce Catalyst High Bandwidth: Backup data that is sent directly to the HP StoreOnce Backup System where it is deduplicated; this requires a high bandwidth network. StoreOnce Catalyst Low Bandwidth: Backup data that is deduplicated on the Media Server before sending only the unique data to the HP StoreOnce Backup System, making a low bandwidth network link adequate. HP has a rule of thumb for the sizing of the deduplication process running on the Media Server 1GHz of core processing power can sustain a deduplication rate of 50MB/sec. This additional processing requirement is in addition to the standard NetBackup Media Server sizing guidelines.
47
3. A warning is displayed.
4. 5.
Open the Command Prompt and check the path is C:\Program Files\Veritas\NetBackup\bin. Input bpdown, then press <Return>, to shut down the Netbackup services..
6.
48
7.
Once the command has completed successfully. Go back to the OST Plugin wizard.
8.
9.
49
50
2.
Give the Catalyst Store a name (NetBackup75 in our example) and a description and set the primary and secondary transfer policies as Low Bandwidth (this will ensure part of the deduplication process is offloaded to the Media Server). Click the lower Create button.
Note: Differing Primary and Secondary transfer policies are not supported by all ISVs for Symantec NetBackup primary and secondary transfer policies must BOTH be set to low bandwidth or high bandwidth.
3.
Display details for the newly created NetBackup75 Catalyst Store by selecting it in the main list of Stores.
There are several tabs associated with each store. See the StoreOnce B6000 User Guide or online help for more information about using these tabs. Store Details: shows Catalyst Store name, description and the retention period of the logs (up to 1 year) Permissions: determines who can access this store these permissions will be set shortly, as described below Item Summary: Data stored in a Catalyst Store is referred to as an Item you can search for items. In the case of NetBackup a backup file consists of a header item and a data item. Data Jobs: There are three types of activities associated with a catalyst store Data jobs, Inbound and Outbound copy (replication) jobs. In this context Data jobs are backup jobs. Outbound Copy Jobs: Outbound jobs are when this Catalyst Store is replicated out to another Catalyst store at another site Inbound Copy jobs: Inbound copy jobs are when this Catalyst Store is receiving data that is being replicated in from another Catalyst Store
51
Setting Catalyst Store Access permissions Before you can assign client permissions to an individual store, you must first enable client access checking and configure clients on the StoreOnce Catalyst configuration tabs. 1. From the Navigator select StoreOnce Catalyst.
There are several configuration tabs. See the StoreOnce B6000 User Guide or online help for more information about using these tabs. Status: A summary view of catalyst store performance per service set. Settings: Enables access permissions, outbound and inbound concurrency, and port numbers for Catalyst control and Catalyst data commands. Clients: Determines which clients have access to which stores. Blackout Windows: This can be used to create two blackout windows within a 24-hour period when catalyst copy process will not occur. Best practice is not to replicate (Catalyst Store copy) whilst backups or housekeeping are taking place. Catalyst store copies always take place using low bandwidth replication (optimized copies). Bandwidth Limiting Windows: This can be used to throttle the amount of WAN bandwidth used with catalyst store replication this is to prevent hogging of all the available replication bandwidth.
2.
Select the Settings tab and check the tick box to enable Client access permission checking.
52
3.
Create a new client using the Add button and enter a name and description, such as NetBackup75user or NBU media server. NetBackup does not support the ability to automatically create a Catalyst store, so leave that box unticked.
4.
Return to the NetBackup75 catalyst store that you created and select the Permissions tab. It will now contain the NetBackup75 user client that you have just configured. Check the Access box next to this client and click Update.
We will use the same client name, NetBackup75user, when we configure this catalyst store into NetBackup.
5.
Finally before we start configuration into NetBackup we must get the name (or Virtual IP address) of Service Set 1 on which the NetBackup75 Catalyst store resides, because this will be required to configure the Storage Server in NetBackup. From the Navigator select B6000 StoreOnce and look for the VIF IP.
53
Configuring Catalyst Stores into the NetBackup Storage Server/Disk Pool/Storage Unit architecture
More sophisticated type of backup devices, such as HP StoreOnce Catalyst Stores, are configured as Storage Servers within NetBackup. A Storage Server is NetBackup terminology for an entity that writes data to and reads data from the disk storage. Separate disk pools can be created under the same storage server and separate storage units can be created within the disk pools, allowing maximum flexibility, as can be seen in the figure below.
Figure 22: NetBackup storage architecture The following diagram illustrates the different ways Catalyst High Bandwidth and Low Bandwidth stores can be accommodated within the Symantec Storage Server architecture. The storage server is configured with three disk pools; the first is configured with a single storage unit for low bandwidth backup; the second has a single storage unit for high bandwidth backup; while the third is configured with two storage units. Each storage unit relates to a Catalyst Store on the HP StoreOnce Backup System.
Figure 23: Incorporating Catalyst stores into the NetBackup storage architecture
54
To configure the connection to the HP StoreOnce Backup System A NetBackup Storage Server is required to create a connection to the StoreOnce service set containing the StoreOnce Catalyst Stores. 1. From the NetBackup Administration console expand Credentials and select Storage Servers.
2.
Right click Storage Servers and select New; the storage server wizard will start.
55
3.
Click Next> and select OpenStorage from the drop down list. (This means it is an OST supported device). Click Next>
4.
Provide the storage server details as described below and click Next >
Storage server name: This is the name of the virtual IP address (or equivalent server name) that represents where the Catalyst Store (NetBackup75 in our example) resides Storage server type: This is always hp-StoreOnceCatalyst because this is the unique identifier that utilizes the OST2.0 plugins HP has developed. Media server: This is the Media Server where the OST2.0 plugin is installed. In this case we will connect it to o ur Heartofgold Media Server (where part of the deduplication process will now be performed because we have set up a low bandwidth catalyst store). User name: This is the user you previously created and the password can be of your choosing. The Use Symantec OpenStorage plug-in for network controlled storage server should not be ticked as this is a Symantec special device type.
56
5.
There is an option to allow other Media Servers (in the same backup domain) to access the Storage Server, for this example we will not select any additional Media Servers. Additional Media servers can be added dynamically later if required; for example in a Disaster Recovery scenario. Click Next >.
6.
57
7.
8.
58
9.
Select the storage server on which the disk pool is to be created and click Next>
11. The wizard has detected two Catalyst Stores on the Storage Server that we named B6200SS1.nearline.local. Select Netbackup75 and click Next > Note: dpstore 1 had permissions set to All users on the StoreOnce Backup System, which is why the NetBackup75user can see this Catalyst Store as well.
59
25TB is the total raw size of the storage connected to the Storage Server B6200SS1.nearline.local. Replication source and Replication target are attributes used with disk pools associated with Symantec snapshot technology for StoreOnce Catalyst these should not be ticked.
Configurable options and when to use them 12. The next step allows us to name our Disk Pool, to set high and low water marks and to define the number of concurrent I/O streams (write and read combined). Give the disk pool a name such as NetBackup75Lowbandwidth
The High water mark for the disk pool applies to both the individual disk volumes in the pool and the individual disk pool itself: When all volumes are at the high water mark, the disk pool is full. When a disk pool approaches the high water mark, NetBackup reduces the number of jobs that are allowed to write to the pool. NetBackup does not assign new jobs to a storage unit in which the disk pool is full. The default setting is 99%. Once a disk volume fills to its high water mark, NetBackup attempts to delete enough relocated images to reduce the used capacity of the disk volume down to the low water mark. The low water mark setting cannot be greater than the high water mark setting.
60
The Low water mark setting has no effect unless backups are written through a storage lifecycle policy, using the capacitymanaged retention type. These watermarks are more relevant when using traditional disk devices with multiple volumes. As stated before the maximum concurrent streams recommended for any device configured on the StoreOnce Backup System is 16, so we will enable Limit I/O streams and configure 16 as the Maximum I/O streams per volume for the disk pool containing the catalyst store. 13. Click Next > to display a Summary screen.
61
15. Click Next > to create a Storage Unit that will use the disk pool.
16. Configure the Maximum concurrent jobs and Maximum fragment size for the storage unit. HP recommends 16 jobs and the fragment size of 524288 Mbytes (0.5TB as the maximum Catalyst item size). Provide a Storage unit name such as netbackup75LowbandwidthStore.
62
18. The Storage Server b6200ss1.nearline .local is now set up with access from the Media Server heartofgold The Storage units for use in creating backup policies now contain the low bandwidth Catalyst store we created and are visible in the NetBackup Administration Console, along with our previously created VTL and NAS Storage units.
63
Image Cleanup In terms of Catalyst stores there is a frequent NetBackup automated job that runs called Image Cleanup. This checks in the NetBackup catalog to see if an image has expired and, if it has expired, it deletes the data from the Catalyst Store. This intelligence helps prevents the Catalyst Store from becoming clogged with expired images and, so, is self regulating. The image cleanup runs by default every 12 hours but is configurable. Deleting catalyst items creates a housekeeping process, and housekeeping run time is configurable via blackout windows. The best practice is to ensure the Image Cleanup job runs just before the housekeeping window on the HP StoreOnce Backup System opens.
64
2.
Select the NetBackup75LowbandwidthStore as the target Policy Storage device for the backup. We will also check Allow multiple data streams.
3.
Right click on the StoreOnceCatalyst policy and click Manual Backup. Monitor the backup in the Activity monitor as we did previously with StoreOnceVTL and StoreOnceNAS policy backups.
65
4.
Because this is the first time the backup job has run and the deduplication is being done on the Heartofgold Media Server, all the data will be transmitted to our Catalyst Store, but on subsequent backups there will be only small amounts of data transmitted from the Media Server saving lots of bandwidth. If we inspect the Data Jobs tab of the Catalyst Store we created on the StoreOnce Backup System after the first backup we find.
Note how the backup has created two item entries in the NetBackup75 low bandwidth Catalyst Store, that 2.1 GB of data have been transferred in that backup and the bandwidth saving was 23.1%. If we now change some of the data set (using an HP utility), this will illustrate the effect of daily changes. Let us change 10% of the data in 10% of the files and add 10% new data as well. Re-run the Low Bandwidth backup and see how the network efficiency improves. This time you can see the network saving is 98.6% for a backup where data has changed and increased. This represents a great saving on bandwidth usage either in the Data Center or for remote office backups over a WAN to an HP StoreOnce Catalyst Store located in a Data Center. The second low bandwidth backup has 98.6% bandwidth savings!
Also note even with just two backups to this Catalyst Store we have already achieved a deduplication ratio of 2.5:1
66
Symantec Lifecycle Policies and Catalyst Store Copies (low bandwidth replication)
A Storage Lifecycle Policy (SLP) is a storage plan for a set of backups. An SLP is configured within the Storage Lifecycle Policies utility. An SLP contains instructions in the form of storage operations, to be applied to the data that is backed up by a backup policy. Operations are added to the SLP that determine how the data is stored, copied, replicated, and retained. NetBackup retries the copies as necessary to ensure that all copies are created. SLPs offer the opportunity for users to assign a classification to the data at the policy level. A data classification represents a set of backup requirements, which makes it easier to configure backups for data with different requirements. For example, email data and financial data. SLPs can be set up to provide staging behavior. They simplify data management by applying a prescribed behavior to all the backup images that are included in the SLP. This process allows the NetBackup administrator to leverage the advantages of disk-based backups in the near term. It also preserves the advantages of tape-based backups for long-term storage. The beauty of OST is that the duplicate feature of storage lifecycle policies can be used to enable Catalyst Stores to be replicated (using low bandwidth replication), all under the control of the backup software. Furthermore, multiple copies (or duplicates) can be created at multiple sites to ensure even better DR capabilities. All copies are logged in the NetBackup catalog. We shall now show how to configure catalyst store replication and multi-hop replication from within NetBackup7.5. To do this we first need to set up another Catalyst Store on the StoreOnce GUI as a target for replication. The actual replication is then configured from within the Storage lifecycle policy within NetBackup not via the actual HP StoreOnce appliance itself. This is a different approach to VTL and NAS emulations, where we use mappings to set up replication and configure them from the Navigator menu options on the StoreOnce GUI, as shown in the following screenshot.
Creating the Catalyst Store and user on the StoreOnce GUI for replication (low bandwidth copies) For our example, we will create the second Catalyst Store on Service Set 3 of the HP StoreOnce Backup System to simulate it actually being on a different site (NetBackup75 Catalyst store is on Service Set 1). Let us call the new Catalyst Store NetBackup75reptarget. 1. Create the Catalyst Store as previously but with the new name and on Service Set 3. Although the duplicate (low bandwidth replication) is triggered by the storage policy the actual data is NOT passed through the NetBackup Media Server but replicated across the 10GbE data network configured on the HP StoreOnce Backup System (in this case) or the WAN link between separate HP StoreOnce Backup Systems units in a real world scenario.
67
2.
Because this is on a different Service Set the user we set up to access NetBackup75 (NetBackup75user) is not present, so we have to create a new NetBackup75user for Service Set 3 on the Clients tab and click Update.
3.
Now select the NetBackup75reptarget and give the NetBackup75user access to the store on the Permissions tab.
Setting up OST Duplication/Catalyst Store low bandwidth replication via NetBackup Storage Lifecycle Policies.
There are two stages to this process: First we need to establish the NetBackup75reptarget on Service Set 3 as a new Storage Server and create the associated Disk Pool and Storage Unit. This is the same process as described for the Catalyst Store on Service Set 1, but be sure to establish the Storage Server Name (VIF IP) of Service Set 3 from the StoreOnce GUI before you start. In a real world scenario both StoreOnce units would be in the same Backup Domain. Once the NetBackup75reptarget is established, we create a Storage Lifecycle Policy to incorporate the existing StoreOnce Catalyst backup policy along with one or more duplicate commands.
68
1.
Right click on storage servers and click New to start the storage server wizard, as described previously.
2.
Set up the Service Set 3 Storage Server. After creating the storage server we are automatically led into the disk pool creation wizard and asked to choose which storage server we want to create the new disk pool on, and the new NetBackup75reptarget is displayed.
69
3.
Select NetBackup75reptarget as the disk pool to be created and this in turn leads onto the storage unit being created after clicking Next>.
4.
70
5.
To create a storage lifecycle policy in the NetBackup Administration Console, right click Storage Lifecycle Policies in the left-hand navigation pane and select New Storage Lifecycle Policy.
6.
Enter the name of the policy, such as StoreOnceCatalystLCP, and the data classification (priority) and then click Add. We shall now assign two storage operations to the policy (backup followed by duplicate). First select Backup as the Operation and the Storage Unit involved in this case NetBackup75LowbandwidthStore and click OK to add it to the storage lifecycle policy. Note the retention period (2 weeks).
71
7. 8.
Click Add to add another storage operation to the Storage Lifecycle policy this time select Duplication from the Operation drop down list. Note the source of the data is already specified (NetBackup75LowbandwidthStore). Select the new Storage unit to be used for the duplication operation (NetBackup75reptarget). Also note in this example we have increased the retention of the duplicate copy to 3 months. Typically, at a central location data is held for longer periods than at the local level to make optimum use of the higher levels of storage available at the Data Center.
9.
10. Now we must apply this Storage Life cycle policy to our existing StoreOnce Catalyst backup policy. Double click StoreOnceCatalyst under the policies in the Left -hand Navigation pane. Under Policy Storage click the drop down list and change the storage policy from NetBackupLowBandwidthStore to StoreOnceCatalyst LCP (the storage lifecycle policy we have just created). Click OK.
72
11. Now run a backup and see the Storage Lifecycle Policy take effect (and replicate data from NetBackup75LowbandwidthStore to NetBackup75reptarget). Right click StoreOnceCatalyst in the policies and run Manual backup, as we have done previously. The backup job runs successfully.
The duplicate job will run approximately 30 minutes after the backup job( this is configurable). The duplicate job will run as long as there is no replication blackout window set on the StoreOnce Backup System, if there is, it will keep trying until the replication blackout window is over.
Checking Duplication Job Status from a Command Prompt 1. 2. 3. Open a Command Prompt window. Go to the C:\ProgramFiles\Veritas\NetBackup\bin\admincmd (default) directory. Input the command nbstlutil report and press <Return>.
4.
As you can see our StoreOnceCatalystLCP is active but incomplete waiting for the duplication to take place.
73
After 30 minutes the Duplication process runs and is reported in the NetBackup Administration Console.
Monitoring outbound and inbound copy jobs on the StoreOnce GUI There are two tabs on the StoreOnce GUI that show what has happened from a StoreOnce Catalyst Store Item perspective. We need to look at the Outbound Copy jobs tab of the NetBackup75 Store on Service Set 1 and the Inbound Copy Jobs tab on the NetBackup75reptarget Store on Service Set 3. Outbound copy jobs from B6200ss1
Note that because this is the first time the Catalyst store has been replicated a seeding process to B6200ss3 has to take p lace and hence the bandwidth saving is not up at 98%. Subsequent Duplicates would be much more bandwidth efficient because the seeding process would have already taken place.
74
Inbound copy jobs to B6200ss3 The screenshot below shows the NetBackup controlled (but B6200 implemented) copies being created on the B6200SS3 Storage Server in the Storage Unit Netbackup75reptarget.
Multi-hop replication (duplication) The above example demonstrates the power of the HP StoreOnce catalyst store integration with Symantec OST and Storage Lifecycle Policies. The technique can be extended further to allow multiple duplicates to be produced. This technique is sometimes called multi-hop replication. The multiple copies are not produced in parallel but serially one after the other. It now becomes easy to implement this feature because we simply add another storage operation to the Storage Lifecycle Policy (see below).
75
For example: in the SLP we created we could select Backup again and add a second Duplication entry, the second duplicate copy could then be written to either:a) b) Our Virtual Tape unit (or even a real physical tape) with an even longer extended retention period (such as 1 year) Another B6200 catalyst store (not shown) on a third site perhaps called NetBackupreptarget2
Faster DR recoveries A further important feature of the OST/Catalyst integration is the ability to provide very fast disaster recovery SLAs. This is because, unlike VTL and NAS replication, Symantec NetBackup is fully aware of every copy of a Catalyst Store (because it created them!) and entries are made automatically in the NetBackup Catalog. The following diagram illustrates an Integration Environment with a NetBackup Master Server connected to a primary and secondary data center. Should we lose the primary Data Center StoreOnce Backup System, B6200A, (but not the NetBackup Master server) we can recover the data directly from a copy on the StoreOnce Backup System, B6200B, that is at the secondary Data Center. This is possible because we can use NetBackup copy entries in the NetBackup catalog.
Figure 24: Catalyst improves DR recovery times because all copies of data are already registered in the NetBackup catalog
Manipulating and controlling Catalyst copies We can show the duplicate copy (Copy 2) exists in the catalog by selecting the Catalog in the Left -hand navigation pane of the NetBackup Administration Console and then performing specific search criteria as shown below. This shows a duplicate copy of the files we backed up from heartofgold. Note Copy 2 is not the primary copy (yet).
76
Promoting a secondary copy to a primary copy Occasions may arise where we want to make a secondary copy the primary copy. Proceed as follows. Select the Copy 2 (illustrated in the previous screenshot) in the Catalog search, right click and select Set Primary Copy. The status will change, as shown below and the backup will appear in the restore options with the same timestamp as the original backup.
77
Promoting the secondary copy using the Storage Lifecycle policy As an alternative, in the Storage Lifecycle Policy for Backup there is the Retention type option to expire the backup after copy. If you select this option, it automatically makes the Copy the primary copy. This is one way of saving space on the primary data center site but only after the data is safely replicated to the DR site.
Let us do a restore from Copy 2. 1. Select The Symantec Client utility to perform restores. NetBackup has a specific Client utility that can be invoked from the NetBackup Administration console, as illustrated below.
78
2.
Click the Select for restore tab and Restore from Normal Backup.
3.
A display of all possible restore points is shown but unfortunately the display does not indicate we are restoring from Copy2. (We are restoring from the Primary Copy of the latest full backup from July 4th , which now happens to be the Copy 2 we described earlier since we changed it to be the primary copy). Tick the box to restore all the files from the backup or click + and select the individual files you want to restore. Click the restore icon (highlighted).
79
4.
5. 6.
Click Start Restore. The restore can be monitored on the Activity monitor.
80
7.
You can also use the StoreOnce GUI to monitor restore performance and check we are restoring from Copy2 of the Catalyst backup. Select Activity from the Navigator to show the reporting from Service Set 3 where the Catalyst Store NetBackup75reptarget is located. As you can see below the StoreOnce Catalyst read (restore) peaks at about 35 MB/sec during the restore period.
81
82
In Figure 26 Node 2 on Couplet 1 has failed. Autonomic restart transfers all the services that were running for the failed node to Node 1 without any manual intervention. (All other couplets are unaffected.)
83
Device up scripts
There are numerous ways in which this monitoring process can be written and in complex backup environments additional logic may be required, for example, to prioritize which libraries and backups are re-enabled first. The following scripts have been provided as examples and may be modified as required. The scripts must be installed and configured on each NetBackup Media Server that has B6200 virtual tape libraries configured. Theses scripts are ONLY required for VTL devices, NAS (CIFS) and Catalysts stores restart automatically. Checkpoints With all backup policies to backup devices, if Checkpoints have been enabled in the backup policy and the backup fails because of B6200 node failure, when B6200 failover is complete the backups will restart from the last checkpoint NOT from the beginning of the backup job. B6200 failover takes around 15 minutes so the backups continue almost uninterrupted and will complete within the required backup window. The VTL device up script is downloadable from here
If PowerShell v2.x is not installed, it can be downloaded from www.microsoft.com Copy the Autonomic Restart script to the NetBackup folder: copy AutonomicRestartNBU.ps1 %ProgramFiles%\Veritas\Volmgr\bin\
84
Configuration Schedule the script to run every 15 minutes: schtasks /create /ru system /tn "HP B6000 Autonomic Restart for NetBackup" /sc minute /mo 15 /tr "powershell -version 2.0 -file \"%ProgramFiles%\Veritas\Volmgr\bin\AutonomicRestartNBU.ps1\"" Logging The Autonomic Restart script will log any attempts to re-enable library devices within NetBackup in the Windows Event Log. Using Windows Event Viewer, see Windows Logs > Application.
85
StoreOnce and NetBackup DR Scenarios will be published under the part number EJ022-90954
Get connected
hp.com/go/getconnected Current HP driver, support, and security alerts delivered directly to your desktop
Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. No thing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. Symantec and NetBackup are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners.
86