PBO3311BES
#VMworld #PBO3311BES
Implementing Advanced vSphere Features with Veeam Availability Suite
Clint Wyckoff@ClintWyckoff | CDubHub.us
Michael Cade@MichaelCade1 | vZilla.co.uk
VMworld 2017 Content: Not fo
r publication or distri
bution
Benefits of Veeam with VVols
The Power of SPBM and Availability
Agenda
Part 1 - Next Generation Storage
vSAN Smart-Logic coming to a vSAN near you
Encrypted VMs Backup 101
Part 2 – Cloud and Management
Cloud Connect Replication v10 Enhancements
Cloud Connect Replication and DRaaS
Self Service Backup and Recovery for vCD and vSphere
Veeam One and Log Insight Content Management Pack
Automated Tag Creation in Veeam One
VMworld 2017 Content: Not fo
r publication or distri
bution
Next Generation StorageThe Power of SPBM and Availability
PART 1
VMworld 2017 Content: Not fo
r publication or distri
bution
SPBM is the foundation of the SDS Control Panel
• A common policy framework across VMFS, vSAN & VVols
• Abstracts underlying storage
• Intelligent placement of services at VM level
VMworld 2017 Content: Not fo
r publication or distri
bution
The Storage Policy-Based Management association is critical when it comes to backup and restore.
Otherwise, why use the new frameworks if you can’t ensure their service levels on restore.
VMFS snapshots a lot better in recent versions of vSphere, but Snapshots changed completely with vSAN and VVols.
Sounds great for your production workloads, what about backup?
VMworld 2017 Content: Not fo
r publication or distri
bution
Rules - HowPolicies in the backend are consumed by JOBS (or tasks, or schedules, or batch…)
Jobs are difficult to maintain at scale if they deal with single VMs or groups
The environment is highly changing, instead of changing jobs frequently, let’s have them adjust automatically
VMworld 2017 Content: Not fo
r publication or distri
bution
• Why wouldn't you be using these for your Veeam Backup & Replication™ jobs?
• Fast• Manageable• Automated
Automate your Veeam backup with vSphere Tags
VMworld 2017 Content: Not fo
r publication or distri
bution
• Automate your VMs being added to a backup job by using vSphere Tags
• SPBM policies assigned to a VM will also be recovered
Create Veeam Backup Jobs using vSphere Tags
VMworld 2017 Content: Not fo
r publication or distri
bution
• Ensure that the restore process correctly matches the Storage Policy-Based Management association
IMPORTANT!
VMworld 2017 Content: Not fo
r publication or distri
bution
Next Generation StorageBenefits of Veeam with VVols
VMworld 2017 Content: Not fo
r publication or distri
bution
• VVol support came with complete vSphere 6 support in Veeam Availability Suite™ v8
• VVol backups follow much of the same workflows of a regular VM backup except their path is much more VVol aware
Backup mechanism
VMworld 2017 Content: Not fo
r publication or distri
bution
Backup types supported
•
•
•
•
•
•
•VMworld 2017 Content: N
ot for publicatio
n or distribution
Backup types supported
•
•
•
•
•
•
•
•
VMworld 2017 Content: Not fo
r publication or distri
bution
Snapshots: Files vs VVols
main.vmdk
VMFS VVol
VVol ID 42
main.vmdk
snap.vmdk
VVolID 42
Flat file
snap.vmdk
Redo log
Redo log
snap.vmdk
VVolID 86
VMworld 2017 Content: Not fo
r publication or distri
bution
VMFS VVol
VMFS versus VVol
VMworld 2017 Content: Not fo
r publication or distri
bution
VMFS VVol
VMFS versus VVol
VMworld 2017 Content: Not fo
r publication or distri
bution
• Veeam Quick Migration (included in the FREE edition)• An out-of-band VVol migration tool • Migrate to a VVol from basically any source VM
arrangement
• Quick Migration allows you to completely reconstruct a VM on a VVol target without unnecessarily linking vCenterenvironments
• Source VM should be hardware 11
Migration
VMworld 2017 Content: Not fo
r publication or distri
bution
Next Generation StoragevSAN Smart-Logic coming to a vSAN near you
VMworld 2017 Content: Not fo
r publication or distri
bution
History and Overview
vSAN Aware Backups
• Support for vSAN first in mid 2014 v7 Update 4• 6.5 Support in 9.5 Update 1• 6.6 Support in 9.5 Update 2
• Not an Advanced Feature in Itself• VMware VADP Libraries Commonly Used• Extracts Data from ESXi• Reads VMDK of any VM
• vSAN Aware Backups• Works with lack of vSAN Data Locality• Doesn’t Care about where VM Lives (Host)• Looks at Placement of Disk Objects
VMware KB Article
VMworld 2017 Content: Not fo
r publication or distri
bution
Example Workflow
vSAN Aware Backups
VMworld 2017 Content: Not fo
r publication or distri
bution
Veeam Backup & Replication doesn’t care what Host the VM is registered on.
vSAN Aware Backups
VMworld 2017 Content: Not fo
r publication or distri
bution
More interested in looking at the placement of the VM Disk Objects.
vSAN Aware Backups
VMworld 2017 Content: Not fo
r publication or distri
bution
One Veeam Backup & Replication Proxy Server per vSAN Host
vSAN Aware Backups
VMworld 2017 Content: Not fo
r publication or distri
bution
Use DRS Host Affinity rules to keep them locked to a host
vSAN Aware Backups
VMworld 2017 Content: Not fo
r publication or distri
bution
There is no special vSAN Enabled Backup Option
vSAN Aware Backups Job Logic
vSAN enabled datastore detected by Backup & Replication and objects enumerated
VMworld 2017 Content: Not fo
r publication or distri
bution
Once we know were the disk objects are…
Backup & Replication tries to map the data to the proxies that can access them
vSAN Aware Backups Job Logic
VMworld 2017 Content: Not fo
r publication or distri
bution
Proxies are marked as “hotAddSameHost”
vSAN Aware Backups
VMworld 2017 Content: Not fo
r publication or distri
bution
The final step is to select which proxy will execute the read from vSAN
vSAN Aware Backups – Job Logic
VMworld 2017 Content: Not fo
r publication or distri
bution
The final step is to select which proxy will execute the read from vSAN
vSAN Aware Backups
VMworld 2017 Content: Not fo
r publication or distri
bution
• Instant VM Recovery®• Quick Rollback
• There are many other specific options for infrastructure restores (Entire VM, VM hard disks, VM files, etc.)
• Veeam Explorers™ for SQL Server, Exchange, Active Directory, Oracle and SharePoint
Restore mechanism
VMworld 2017 Content: Not fo
r publication or distri
bution
Next Generation StorageEncrypted VMs Backup 101
VMworld 2017 Content: Not fo
r publication or distri
bution
Encrypted VMs 101KMS is required• Key Management Server (KMS) is mandatory to use encrypted VMs
Doesn’t KMS add SPOF to my vSphere?• Yes, you need to consider your KMS implementation.
What are my options for KMS?• HyTrust (free, 5K USD for support)• 3rd party KMS offeringsVMworld 2017 Content: N
ot for publicatio
n or distribution
Lost processing modes• Direct storage access modes are impossible for encrypted
VMs (Direct SAN, Direct SAN+BFSS, Direct NFS)
Supported processing modes• Hot Add proxy itself must be an encrypted VM, otherwise
backup will failover to NBD[SSL]
Security• VDDK fetches unencrypted content of encrypted VMDKs, so
do consider enabling backup file encryption in Veeam
Backup of encrypted VMs
VMworld 2017 Content: Not fo
r publication or distri
bution
We DO NOT encrypt VMs, vSphere does
To ensure this, select the target datastore with VM Encryption storage policy
Applies to full VM restore, replication and Quick Migration (including Instant VM Recovery)
Restore
VMworld 2017 Content: Not fo
r publication or distri
bution
Next Generation StorageAutomated Tag Creation in Veeam One
VMworld 2017 Content: Not fo
r publication or distri
bution
• Veeam ONE™ Business View
Monitoring and reporting
VMworld 2017 Content: Not fo
r publication or distri
bution
Cloud and ManagementCloud Connect Replication, vCloud Director, vSphere and Log Insight
PART 2
VMworld 2017 Content: Not fo
r publication or distri
bution
Veeam Backup Components
Infrastructure as a Service Components
Cloud Connect Repository
Cloud Backup & Replication
Network Edge
IaaS Backup & Replication
WAN Accelerator
vCenter
Cloud EnterpriseManager IaaS/Cloud
vCloud Director
Network Extension Appliances
Veeam Availability Console
vCD Self Service Portal
IaaS RepositoryCloud Connect
Gateways
Cloud Connect Tenant Portal
Cloud Veeam ONE
VCPP and VCSP Super Architecture IaaS, BaaS, RaaS, DRaaS – v9.5
IaaS vSphere Platform Replication vSphere Platform
vCenter
NSX-v
VMworld 2017 Content: Not fo
r publication or distri
bution
Veeam Backup Components
Infrastructure as a Service Components
Cloud Connect Repository
Cloud Backup & Replication
Network Edge
IaaS Backup & Replication
WAN Accelerator
vCenter
Cloud EnterpriseManager IaaS/Cloud
vCloud Director
Network Extension Appliances
Veeam Availability Console
vCD Self Service Portal
IaaS RepositoryCloud Connect
Gateways
Cloud Connect Tenant Portal
Cloud Veeam ONE
VCPP and VCSP Super Architecture IaaS, BaaS, RaaS, DRaaS – v10
IaaS vSphere Platform Replication vSphere Platform
vCenter
NSX Edge Service GatewayNSX-v NSX-v
VMworld 2017 Content: Not fo
r publication or distri
bution
Cloud and ManagementvCloud Director History, Advanced Capabilities and Futures
VMworld 2017 Content: Not fo
r publication or distri
bution
Veeam vCloud Director Backup Integration
• Released in Veeam Backup & Replication 7.0
• Uses vCD APIs to get correct hierarchy• Captures vApp Metadata• Allows Restoration of objects back into vCD
• Metadata Includes
• General VM info• vApp Networks• Startup options• User Info• Lease• Quota• Storage
• Restore Options
• In Place or side by side• Instant VM Recovery• VM Files, Hard Disks or OS Files
VMworld 2017 Content: Not fo
r publication or distri
bution
Veeam vCloud Director v10 DRaaS Enhancements
• Veeam CDP Support
• Enhanced Replication• Low RPO’s with VMware API for IO (VAIO)
• Full vCloud Director support for Cloud Connect Replication
• Replicate into vCloud Virtual Datacenters• Failover control via vCloud User Interface• Scalability and Control
• Ability to utilize NSX-v Edge Service Gateways
• ESGs Configured as Cloud Edge• Advanced Networking Features
VMworld 2017 Content: Not fo
r publication or distri
bution
Veeam vCloud Director v10 DRaaS Enhancements
VMworld 2017 Content: Not fo
r publication or distri
bution
Veeam vCloud Director v10 DRaaS Enhancements
VMworld 2017 Content: Not fo
r publication or distri
bution
Veeam vCloud Director v10 DRaaS Enhancements
VMworld 2017 Content: Not fo
r publication or distri
bution
Veeam vCloud Director Self Service Portal
• Released in Veeam Backup & Replication 9.5
• Multi-tenant self service backup and restore portal• Requires Enterprise Manager
• Allows tenant’s to backup
• Single VMs• vApps• Virtual Datacenters• Organisations
• Allows tenant’s to restore
• In place• Side by side• File level• MSSQL items• Oracle itemsVMworld 2017 Content: N
ot for publicatio
n or distribution
Veeam vCloud Director Self Service Portal – Quick Demo
VMworld 2017 Content: Not fo
r publication or distri
bution
Cloud and ManagementCloud Connect Replication Advanced Partial Failover
VMworld 2017 Content: Not fo
r publication or distri
bution
Veeam Cloud Connect Replication – Partial Failover
Tenant Side SP Side
Cloud Gateways
Web Application
VMworld 2017 Content: Not fo
r publication or distri
bution
Veeam Cloud Connect Replication – Partial Failover
Tenant Side SP Side
Cloud Gateways
Web Application
VMworld 2017 Content: Not fo
r publication or distri
bution
Veeam Cloud Connect Replication – Partial Failover
Tenant Side SP Side
Cloud Gateways
Web Application
VMworld 2017 Content: Not fo
r publication or distri
bution
Veeam Cloud Connect Replication – Partial Failover
Tenant Side SP Side
Cloud Gateways
Web Application
VMworld 2017 Content: Not fo
r publication or distri
bution
Veeam Cloud Connect Replication – Partial Failover
Tenant Side SP Side
Cloud Gateways
L2 VPN
Web Application
VMworld 2017 Content: Not fo
r publication or distri
bution
Veeam Cloud Connect Replication – Partial Failover Demo
Tenant Side
Cloud Gateways
L2 VPN
Web Application
VMworld 2017 Content: Not fo
r publication or distri
bution
Veeam Cloud Connect Replication – Partial Failover Demo
Tenant Side
Cloud Gateways
L2 VPN
Web Application
VMworld 2017 Content: Not fo
r publication or distri
bution
Veeam Cloud Connect Replication – Partial Failover
Tenant Side SP Side
Cloud Gateways
Web Application
VMworld 2017 Content: Not fo
r publication or distri
bution
Cloud and ManagementVeeam One and Log Insight Content Management Pack
VMworld 2017 Content: Not fo
r publication or distri
bution
• Free Edition is Powerful!• vCD and Cloud Connect Monitoring
Veeam One
VMworld 2017 Content: Not fo
r publication or distri
bution
vRealize Log Insight- Quick Demo
• Log Analytics• Content Packs
• vCD• vSphere• NSX• Veeam
VMworld 2017 Content: Not fo
r publication or distri
bution
VMware Cloud on AWSVeeam Support Demo and quick walkthrough
BONUS
VMworld 2017 Content: Not fo
r publication or distri
bution
VMworld 2017 Content: Not fo
r publication or distri
bution
Thankyou and next steps…• Try Tags• Check out Cloud Connect Replication• Download Veeam One• Download Log Insight Content Pack• Please fill out the survey on the app.
Anthony Spiteri@anthonyspiteri | anthonyspiteri.net
Michael Cade@MichaelCade1 | vZilla.co.uk
VMworld 2017 Content: Not fo
r publication or distri
bution
Veeam Availability Suite v10:A Deeper Dive of What’s New
Hall 8.0, Room 48Wednesday 11am
#PBO3309BESVMworld 2017 Content: Not fo
r publication or distri
bution