Learn about the use of the AWS Cloud as a disaster recovery (DR) environment and explore how architectural approaches to DR and business continuity on AWS give you the skills and experience you need to start building cloud-based production applications. - Create DR environments for your existing systems to minimize technology and business risks - Reduce your infrastructure costs and pay only for the DR resources you use - Test your DR provision more frequently to ensure your critical systems and data are protected

1. @zinimanboazz@amazon.com
Disaster Recovery
December 2017
Boaz Ziniman - Technical Evangelist - AWS
Local Events: https://aws.amazon.com/events/aws-israel/

2. Journey Through the Cloud
Learn from the journeys taken by other AWS customers
Discover best practices that you can use to bootstrap your projects
Common use cases and adoption models for the AWS Cloud

3. Disaster Recovery
• Explore and learn about AWS with a ‘non-
production’ use case
• Phase systems into ‘live’ DR use with reduced risk
• Benefit from lower costs & only pay for what you
use
• Gain the ability to test DR procedures more
frequently
• Invoke DR whilst testing DR procedures if necessary

4. Agenda
• Why AWS for disaster recovery?
• AWS services that are relevant for DR use-cases
• Common DR architectures
• Customer case studies and examples
• Resources to learn more

5. Using AWS for DR Provision
https://aws.amazon.com/solutions/case-studies/tadiran-telecom/

6. Business & Technical Drivers for DR in the Cloud
• Minimize costs
• Reduce on-premises infrastructure
• Consolidate sites
• Remove ageing technologies

7. DR & Business Continuity
DR forms part of a wider set of policies & controls
High Availability Backup Disaster Recovery
Keep your applications
running 24x7
Make sure your data is safe Get your applications and data
back after a major disaster

8. I T ’ S N O T B I N A R Y

9. DR & Business Continuity
Recovery Time Objective
(RTO)
Recovery Point Objective
(RPO)
How quickly I need this service to be recovered
1 minute? 15 minutes? 1 hour? 4 hours? 1 day?
How much data loss can be tolerated?
Zero data loss? 15 minutes out of date?
Each application or service will have specific requirements

10. Disaster
Recovery point Recovery time
Data loss Down time
© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Application Lifecycle

11. Applications can be placed on a spectrum of complexity…
Rebuild when required
from offsite backup
Run hot-hot configuration
with auto-failover
DR & Business Continuity

12. The Utility, On-Demand Data Centre
Primary Site
Routers
Firewalls
Network
Application Licenses
Operating Systems
Hypervisor
Servers
SAN fabric
Primary Storage
Backup
Archive
Secondary Site
Routers
Firewalls
Network
Application Licenses
Operating Systems
Hypervisor
Servers
SAN fabric
Primary Storage
Backup
Archive

13. The Utility, On-Demand Data Centre
Primary Site
Routers
Firewalls
Network
Application Licenses
Operating Systems
Hypervisor
Servers
SAN fabric
Primary Storage
Backup
Archive
AWS Region
Routers
Firewalls
Network
Application Licenses
Operating Systems
Hypervisor
Servers
SAN fabric
Snapshot Storage
Backup
Archive

14. The Utility, On-Demand Data Centre
Primary Site
Routers
Firewalls
Network
Application Licenses
Operating Systems
Hypervisor
Servers
SAN fabric
Primary Storage
Backup
Archive
AWS Region
Routers
Firewalls
Network
Application Licenses
Operating Systems
Hypervisor
Servers
SAN fabric
Snapshot Storage
Backup
Archive
Secondary
site costs

15. 18 regions
49 availability zones
106 edge locations
AWS Global Footprint
https://aws.amazon.com/about-aws/global-infrastructure/

16. AWS security
approach
Size of AWS
security team
Visibility into
usage & resources
Increasing your Security Posture in the Cloud
https://aws.amazon.com/security

17. Broad Accreditations & Certifications
https://aws.amazon.com/compliance

18. Partner ecosystem Customer ecosystem Everyone benefits
Security Benefits from Community
Network Effect

19. How CloudEndure Disaster Recovery Works

20. RELEVANT AWS SERVICES

21. Object Storage & Transfer Services
Amazon S3 AWS Import/Export AWS Storage Gateway

22. AWS Import/Export Disk
AWS Import/Export Disk
https://aws.amazon.com/snowball/disk/details/
• Accelerates moving large amounts of data
• Uses portable storage devices for transport
• Often faster than internet transfer for large data sets

23. AWS Import/Export Snowball
https://aws.amazon.com/snowball/
A single Snowball appliance can transport up to 80 terabytes of data

24. Using AWS Storage Services for DR
Amazon S3 & Amazon Elastic Block Store
Simple Storage Service
Highly scalable object storage
1 byte to 5TB in size
99.999999999% durability
Elastic Block Store
High performance block storage device
Volumes from 1GB to 16TB in size
Snapshot/cloning functionalities
https://www.youtube.com/watch?v=Do04sraFXgg

25. Networking & Connectivity Services
AWS Direct Connect
Amazon Virtual
Private Cloud (VPC)
Amazon Route 53

26. Connecting to AWS
VPN Connection
Amazon VPCYour premises/network
AWS Resources
VPC VPN
Gateway
VPN Connection
Customer
Gateway
Your Resources
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpn-connections.html

27. Connecting to AWS
Direct Connection
Amazon VPCYour premises/network
AWS Resources
Direct Connect
Your Resources
https://aws.amazon.com/directconnect/

28. Foundation Services
Amazon EC2
Amazon Relational
Database Service (RDS)
Amazon Elastic Block
Storage (EBS)

29. COMMON ARCHITECTURES
FOR DISASTER RECOVERY

30. 4 Main Patterns
Backup & Restore Pilot light
Warm standby in AWS Multi-site solution
AWS & on-premises
Common Architectures for Disaster Recovery

31. We’ll focus on two, starting with Backup & Restore
Backup & Restore Pilot light
Warm standby in AWS Multi-site solution
AWS & on-premises
Common Architectures for Disaster Recovery

32. Store backup data in the AWS Cloud

33. Store AMIs for server operating system
images

34. Recover servers during DR testing or
invocation

35. Advantages from starting here…
Simple to get started
Easy starting point for exploring the AWS cloud
Low technical barrier to entry
Focus on incorporating cloud into your DR
strategy, not on complex technical issues related
to hot-hot systems
Cost effective
Very high levels of data durability at low price
Cost of storing snapshots in S3
Archiving possibilities beyond tape using Glacier
Backup & Restore Pattern

36. Getting started…
Take backups of
configuration
state & data
Store Backups in
Amazon S3
Move to long term
archive in Glacier
Backup & Restore Pattern

37. Backup & Restore Pattern
Options…
Gateway Backup Appliance Direct Access to Amazon S3
AWS Storage
Gateway

38. Standard
Standard - Infrequent Access
Glacier
https://aws.amazon.com/s3/
Amazon S3

39. Amazon S3 - Standard - Infrequent Access
https://aws.amazon.com/s3/storage-classes/

40. Low Cost
Secure
Durable
Simple
Flexible
Integrated
https://aws.amazon.com/glacier/
Amazon Glacier

41. Logs
accessible from S3
logs
Expiry
time

42. logs
Objects expire
and are deleted
Logs
accessible from S3
Expiry
time

43. Txns
Object transition to
Glacier invoked
Logs logs
Objects expire
and are deleted
accessible from S3
accessible from S3
ExpiryTransition
time

44. Restoration of object
requested for x hrs
Logs logs
Objects expire
and are deleted
accessible from S3
accessible from S3
Txns
ExpiryTransition
Object transition to
Glacier invoked
time

45. time
3-5hrs
Object held in S3
RRS for x hrs
ExpiryTransition
Logs logs
Objects expire
and are deleted
accessible from S3
accessible from S3
Txns
Object transition to
Glacier invoked
Restoration of object
requested for x hrs

46. Storage Gateway
Corporate Data Center Elastic Data
Center
AWS Storage
Gateway
AWS Storage
Gateway installed
on-premise to
synchronize local
volumes
https://aws.amazon.com/storagegateway/

47. Corporate Data Center Elastic Data
Center
AWS Storage
Gateway
Local volumes
created under
Storage Gateway
Storage Gateway

48. Corporate Data Center Elastic Data
Center
AWS Storage
Gateway
Usable with on-
premise servers
via iSCSI interface
Storage Gateway

49. Corporate Data Center Elastic Data
Center
AWS Storage
Gateway
Primary on-
premise volumes
snapshotted,
compressed and
stored in Amazon
S3
Storage Gateway

50. Corporate Data Center Elastic Data
Center
AWS Storage
Gateway
Storage Gateway

51. Corporate Data Center Elastic Data
Center
AWS Storage
Gateway
Snapshot
pulled from S3
to restore local
volume
Storage Gateway

52. Corporate Data Center Elastic Data
Center
AWS Storage
Gateway
Snapshot
pulled from S3
to create cloud
instance
backed by
Volume
Storage Gateway

53. Next, let’s take a look at the Pilot Light pattern
Backup & Restore Pilot light
Warm standby in AWS Multi-site solution
AWS & on-premises
Common Architectures for Disaster Recovery

54. Pilot light architecture
Build resources around
replicated dataset
Keep ‘pilot light’ on by replicating core
databases
Build AWS resources around dataset and
leave in stopped state

55. Pilot light architecture
Build resources around
replicated dataset
Scale AWS resources in
response to a DR event
Keep ‘pilot light’ on by replicating core
databases
Build AWS resources around dataset and
leave in stopped state
Start up pool of resources in AWS when
events dictate
Match required production capacity through
auto-scaling policies
Cut over to the system in AWS

56. Subordinate
database
server
www.example.com
Data mirroring
replication
Not running
Pilot light system
Reverse
proxy/
caching
server
Data
volume
Application
server
Corporate data center
Reverse
proxy/
caching
server
Application
server
Master
Database
server
Pilot light - prep

57. Subordinate
database
server
www.example.com
Data mirroring
replication
Start in minutes
Add additional
capacity,
if needed
Reverse
proxy/
caching
server
Data
volume
Application
server
Corporate data center
Reverse
proxy/
caching
server
Application
server
Master
Database
server
Pilot light - recovery

58. RESOURCES YOU CAN USE
TO LEARN MORE

59. aws.amazon.com/disaster-recovery/

60. AWS Disaster Recovery White Paper
http://media.amazonwebservices.com/AWS_Disaster_Recovery.pdf

61. aws.amazon.com/vpc
aws.amazon.com/directconnect
aws.amazon.com/s3
aws.amazon.com/glacier
aws.amazon.com/storagegateway

62. AWS re:Invent 2017: Disaster Recovery with AWS
https://www.youtube.com/watch?v=a7EMou07hRc

63. aws.amazon.com/architecture/

64. CertificationSelf-Paced Labs
aws.amazon.com/training
Try products, gain new skills, and get
hands-on practice working with
AWS technologies
Training
Validate your proven skills and
expertise with the AWS platform
Build technical expertise to design
and operate scalable, efficient
applications on AWS
AWS Training & Certification
aws.amazon.com/training/
self-paced-labs
aws.amazon.com/certification

65. Security Best Practices
January 23th – 16:30

66. @zinimanboazz@amazon.com
Thank You!
December 2017
Boaz Ziniman - Technical Evangelist - AWS
@AWScloud for Global AWS News & Announcements
Local Events: https://aws.amazon.com/events/aws-israel/