DPM, Windows Server & Azure BackupOrin Thomas@orinthomas

MDC 322

In this session• Why Backup to Azure?• Backup Vaults and Vault Certificates• Windows Azure Backup• Data Protection Manager and Windows

Azure

The Trouble with Offsite Backup• Need to have a way of ensuring that backup data regularly gets offsite in a secure manner• Cumbersome and costly.

• Recovery from offsite requires locating and retrieving data remotely. • Expensive to do well• Time intensive

In addition to, not replacement for • Backup to Azure in addition to your onsite backups• Backup frequently onsite• Backup once every 8-12 hours to Azure

• Almost all your restore operations will be from onsite

Not (yet) a fully featured solution• Retention period is • 30 days for Azure Backup• 120 days for DPM (1 sync/day)• 60 days for DPM (2 sync/day)

• No tape export and retention• You will still need to manage long term tapes to meet compliance responsibilities

Pricing• http://www.windowsazure.com/en-us/pricing

/details/backup/

• Pay only for data stored, not data transferred or compute resources

• PAYG Azure Plan• First 5 GB/Month Free• Each additional GB per month 25 cents

• 6-12 Month Plans• First 5 GB/Month Free• Each additional GB 17-20 cents

Reducing Backup Data• Backup critical data• Don’t backup OS/Applications you have the installers for.• Sync the stuff that you can’t recreate without a lot of person hours

•Worst Case Scenario solution

So why backup to Azure?• Failure of onsite backup solution• Cheap offsite storage that allows for easy

recovery of data• Medium term offsite backup storage

solution

Management Certificates• Allow identification and authentication of

server and Azure recovery vault• Can be created using CA or makecert.exe• Does not need to be a public certificate

• Upload to Recovery Vault• Can use same management certificate for

Windows PowerShell management of Azure

Make your own management certificate.\makecert.exe -r -pe -n CN=AuTechED -ss my -sr localmachine -eku 1.3.6.1.5.5.7.3.2 -len 2048 -e 01/01/2016 AuTechED.cer

Demo

Creating and uploading a management certificate

Recovery Vaults• Stores backed up data• Can have multiple recovery vaults• You pay for the data stored across all your recovery vaults• No extra charge for extra vaults

• Allows you to segment your backup data• Restrict access to recovery data on a per backup job basis

Demo

Creating a Recovery Vault

Windows Azure Backup• Similar to and can run in conjunction with

Windows Server Backup• Single server backup• Multiple WAB can back up to single

Recovery Vault• Cannot be used for full server recovery

backups• 3 Backups per day• 850 GB per volume per backup• Multiple 850 GB volumes ok• Big workloads should use DPM

Demo

Windows Azure Backup and Recovery

System Center Data Protection Manager

Online Snapshots (up to 512)

Disk-based Recovery

Tape-based Backup

Data Protection Manager

Up to Every 15 minutes

Disaster Recoverywith offsite replication & tape

Data Protection Manager

Active Directory®

System State

file services

BMR

Windows Azure Backup Service

Manage with System Center4

Best backup solution for Microsoft workloads

3

Flexible and efficient protection of private cloud deployments

2

“Enterprise Ready” Backup Solution

Scale• A DPM can protect 100 production servers• A DPM can protect 80TB of production data• A single Central Console can manage as many as 100 DPM servers.

Reliability• Auto protect new databases/files/clients within SQL/SharePoint instances/clients• Auto job re-run and improved self-healing• Auto grow storage on need basis

Performance• Faster backups of all data sources using Express Full Technology• Backup full content only once and only changes after that

Manageability• Single Central Console can manage 100 DPM servers• 90% of actions can be taken from Central console itself• SLA based alert mechanism and alert resolution

Rich Offsite Backup Capability• Disk to Tape• Disk to Disk to Azure using DPM to Azure• Disk to Disk to Disk/Tape using DPM 2 DPM 4 DR

“Enterprise Ready” backup solution1

SQL• End User Recovery• Supports all SQL configurations: Mirroring, Clustering and

“Always ON”

Exchange• Enhance DAG continuity of service SLAs• Provide protection against total data loss due to logical

corruptions

SharePoint• Protect at farm level, search and recover at granular level• Automatic discover and protection of new databases

Client• Auto protecting new clients• End User Recovery• Protect over VPN/Direct Access

File System• End User Recovery• Efficient protection of “Dedup” volumes

“Enterprise Ready” backup solution1

Best backup solution for Microsoft workloads

3

Flexible and efficient protection of private cloud deployments

2

Manage with System Center4

DPM is application aware

SC 2012 R2: Data Protection ManagerPrivate Cloud Protection“Application Consistent” backup of Linux VMs – VM doesn’t need to go offline for backup anymore

DPM can be completely virtual

DPM can leverage VHD/VHDX as its storage

Leverage SynthFC to provide tape support

DPM can now leverage SQL Cluster for its DB needs

Leverage VMM Service template to provision DPM

Leverage Orchestrator Run Books for configuring DPM and Production Server

Protect large-scale clusters using DPM Scale Out

A 64 node cluster with 4000 database cannot be protected by a *single* DPM serverMultiple DPM severs can be leveraged to protect this cluster using DPM scale out feature

Deploy multiple DPM servers

Connect/attach these DPM servers to all nodes in the cluster

DPM 2012 R2 and Azure• Integrated offsite data protection to Azure

• Azure integrated service to manage your subscription

• Single billing for all of your Azure consumption

• Protect SQL, File Server, VM workloads to Azure

• Faster backup to Azure using Express Full technology

• Ability to see data sources protected to Azure on Azure Portal

DPM and Windows Azure• Backup multiple targets through one server

to Azure• Register DPM Server with Windows Azure• Manage DPM Backups• Recover data from Windows Azure

Demo

DPM 2012 R2 backup and recovery to Azure

Developer Network

Resources for Developers

http://msdn.microsoft.com/en-au/

Learning

Virtual Academy

http://www.microsoftvirtualacademy.com/

TechNet

Resources

Sessions on Demand

http://channel9.msdn.com/Events/TechEd/Australia/2013

Resources for IT Professionals

http://technet.microsoft.com/en-au/

© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.