Data Domain DD6400

Video: Data Domain DD6400 - Why? Architecture, Costs - Security and performance in backup / recovery

Data Domain is well know as unbeatable security / performance / easy of use.
Can new Data Model model - DD64400 - can add anything?
Why the values of Data Domain matters?
Have a look on short /detailed video! https://youtu.be/8ieVepB2kno

Direct link to the video: https://youtu.be/8ieVepB2kno

Detailed description of topics covered in the video: 
0:05 Customer story
https://www.youtube.com/watch?v=8ieVepB2kno&t=5s
- customer encrypted wants to protect for future using Data Domain
 - New DD6400 provides security, performance, scalability

1:02 Agenda
https://www.youtube.com/watch?v=8ieVepB2kno&t=62s

1:15 Backup software and backup media
https://www.youtube.com/watch?v=8ieVepB2kno&t=75s

1:25 - a lot of backup media - tape / disk. why to use Data Domain?
https://www.youtube.com/watch?v=8ieVepB2kno&t=123s

1:39 All Data Domain models
https://www.youtube.com/watch?v=8ieVepB2kno&t=99s

2:03 Performance
 - we write 1%
 - Data Domain does not write data to backup media during backup
https://www.youtube.com/watch?v=8ieVepB2kno&t=123s

2:53 - Performance numbers: 14TB/h for MSSQL environment
https://www.youtube.com/watch?v=8ieVepB2kno&t=173s

3:03 - Oracle speed 5TB/h
https://www.youtube.com/watch?v=8ieVepB2kno&t=183s
 - 1.5GB/s
 - limitation was production storage

3:40 Parallel backup of all items in production environment
https://www.youtube.com/watch?v=8ieVepB2kno&t=220s
 - Virtual machines / databases
 - 270 streams
 - comparison to concert and toilet
 - backup environment - one of the best to perform parallelly

4:37 Additional speed because of Storage Pools
https://www.youtube.com/watch?v=8ieVepB2kno&t=277s

5:58 Why additional speed for backup?
https://www.youtube.com/watch?v=8ieVepB2kno&t=358s
 - Data Domain does not write data during backup
 - We need the speed for recovery
 - There are other mechanisms as defragmentation

7:10 Data Domain speed from de-duplication
https://www.youtube.com/watch?v=8ieVepB2kno&t=430s
 - variable length de-duplication
 - example with 3 Virtual Machines built from 3 blocks - few space required
 - new yellow block and compression required
 - DD6300 - compression by main processor
 - DD6400 - compression card that performs the compression
 - processor is free for replication, cleaning, etc.
 - blocks are smaller - better compression
 - faster backup / restore but also the whole data domain is faster!
 - all new Data Domains: DD6400 / DD6900 / DD9400 / DD990 have the compression card

10:00 Starting backups directly from Data Domain!
https://www.youtube.com/watch?v=8ieVepB2kno&t=600s
 - Instant Access
 - We want to restore immediately Virtual Machine
 - We want Data Domain to be primary storage
 - Can we start Virtual Machine from tape? IT would be like asking kid to empty the trash
 - SSD disk speed

11:50 Revolution in backup
https://www.youtube.com/watch?v=8ieVepB2kno&t=710s
 - normally if something fails - we are offline until backup will restore data - long time
 - now if production fails, backup becomes the production
 - example with customer who was running 75 VMs directly from Data Domain - failure of firmware upgrade in disk array

12:30 Security
https://www.youtube.com/watch?v=8ieVepB2kno&t=750s
 - checking backups on the fly
 - whatever backup software we have - all data are red and checked if correct
 - guarantee of recovery correct data

14:05
https://www.youtube.com/watch?v=8ieVepB2kno&t=845s
 - Storage Pool keeps a lot of additional data 
 - this architecture allows to fail more disks than in RAID-6

15:15 Separated disks for Operating System and data
https://www.youtube.com/watch?v=8ieVepB2kno&t=915s
 - we can reinstall the Operating System and connect disks with backups

16:25 Logically separated Operating System and data - different file systems
https://www.youtube.com/watch?v=8ieVepB2kno&t=985s

16:48 Replication between Data Domains
https://www.youtube.com/watch?v=8ieVepB2kno&t=1008s
 - whole site can be damaged
 - we transfer 1% of the data - we can restore 100% of data
 - case study - 29 locations replicated to central site
 - customer wants only Data Domain for Disaster Recovery base on the great experience
 - almost no transfer, no network usage, reliability

17:48 Hacker / ransomware protection
https://www.youtube.com/watch?v=8ieVepB2kno&t=1068s
 - compliance - locking backups for any period
 - no one can destroy my backup

18:12 Demo of Data Domain compliance
https://www.youtube.com/watch?v=8ieVepB2kno&t=1092s
 - we setup lock for 3 months
 - for whatever backup software we have secure backups against ransomware / hacker attack 

20:49 Cyber Bunker
https://www.youtube.com/watch?v=8ieVepB2kno&t=1249s
 - Data Domain is base for Cyber Bunker - gold copy that neither hacker/ransomware can destroy

21:18 Boost - secure protocol
https://www.youtube.com/watch?v=8ieVepB2kno&t=1278s
 - Boost protects us against ransomware
 - Boost is protected by login/password that ransomware does not know

21:40 Security architecture of DD6900 / DD9400 / DD9900
https://www.youtube.com/watch?v=8ieVepB2kno&t=1300s
 - separated disks for Operating System / Data
 - separated logic

22:00 Retention Lock / Compliance with Veeam Backup Software
https://www.youtube.com/watch?v=8ieVepB2kno&t=1320s
 - Veeam does not force automatically Compliance
 - Cyber Bunker is solution for Veeam
 - Lock is than based on Data Domain in Cyber Bunker
 - Possible to make lock on production - snapshot which is locked

23:17 Setup lock can be on destination Data Domain only
https://www.youtube.com/watch?v=8ieVepB2kno&t=1397s

23:30 We can make incremental / Synthetic FULL backups with compliance mode
https://www.youtube.com/watch?v=8ieVepB2kno&t=1410s

23:42 Number of Virtual Machines that we can start DD6400
https://www.youtube.com/watch?v=8ieVepB2kno&t=1422s
 - 20 Virtual Machines can be started from DD6400
 - with more than performance will be smaller

24:05 If we replace disks with Operating system what about configuration?
https://www.youtube.com/watch?v=8ieVepB2kno&t=1445s
 - data on Data Domain are self-described
 - we can install new Operating system and attach to Data Domain

24:52 NetWorker - how to setup retention lock on Data Domain set-up from NetWorker level
https://www.youtube.com/watch?v=8ieVepB2kno&t=1492s
 - for any backup software we can setup retention lock using Cyber Bunker

26:00 Capacity / Scaling
https://www.youtube.com/watch?v=8ieVepB2kno&t=1560s
 - DD6400 starts from 8TB net and scales up to 172TB
 - we can increase capacity in 4TB increments
 - other models starts from much bigger capacity apart from DD3300
 - DD6400 - we start from 8TB and we increase capacity with just entering license - 4TB increments
 - increase capacity with entering licensing is possible up to 32TB 
 - 40TB of net capacity requires adding hardware - new shelf
 - than we increase capacity again but adding just license
 - we can say DD6400 provides "capacity on demand"
 - ordering DD6400 we just provide net capacity with 4TB increments

29:05 Data Domain - best market de-duplication
https://www.youtube.com/watch?v=8ieVepB2kno&t=1745s
 - small variable block with global de-duplication
 - it writes almost no data
 - if we backup guest level and image level the second backup writes almost no data -> global de-duplication
 - source de-duplication / Virtual Synthetic
 - 2-3 less space than any other competition because of global de-dup / variable & small block de-duplication

29:57 Customer story and Data Domain global de-duplication
https://www.youtube.com/watch?v=8ieVepB2kno&t=1797s
 - 9TB VMware 
 - first backup occupied 0.6TB (600GB) - almost nothing
 - 1:15 de-dup with just 1st backup
 - many products have issue to overcome 1:8 de-duplication with over 30 days retention
 - here it was just after 1st backup
 - Data Domain has 1:100 to 1:300 de-duplication with 30 days retention
 - this makes Data Domain cheap!

30:52 Small customer - 300GB of SAP/Oracle
https://www.youtube.com/watch?v=8ieVepB2kno&t=1852s
 - De-duplication after 4 backups was 1:15  - great one!

31:12 How much Data Domain do I need for my backups?
https://www.youtube.com/watch?v=8ieVepB2kno&t=1872s
 - For 10TB / 30 days retention usually we need 8TB
 - rule of thumb
 - huge small amount

31:37 Tool for sizing Data Domain - Sizer
https://www.youtube.com/watch?v=8ieVepB2kno&t=1897s

31:52 Compression card
https://www.youtube.com/watch?v=8ieVepB2kno&t=1912s
 - we can even further decrease the cost!
 - example with VMs built from 3 blocks
 - if Data Domain sees a new block he must write to disk
 - Data Domain will compress new block further
 - DD6300 - lz algorithm for new blcosk - lz not very effective but very little impact on DD processor
 - DD6400 - compression of new blocks is made by compression card
 - much faster
 - better compression, much less space is required(gz or gzfast)

33:40 How less space DD6400 takes over DD6300?
https://www.youtube.com/watch?v=8ieVepB2kno&t=2020s
 - Migrating from DD63300 100TB to DD6400 - DD6400 will require only 80TB space
 - reason -> lz compression of new blocks vs gz/gzfas on DD6400
 - these number are from worldwide statistics
 - detailed stats for files / databases
 - compression card is in DD6400 / DD6900 / DD9400 / DD9900

35:45 Customer example tat migrated from DD4200 (no compression card) to DD6900 (with compression card
https://www.youtube.com/watch?v=8ieVepB2kno&t=2145s
 - Space dropped from 27TB (DD4200) to 20TB (DD6900)

36:05 Summery - DD6400 with the same net capacity is cheaper than DD6300
https://www.youtube.com/watch?v=8ieVepB2kno&t=2165s
 - similar price
 - less storage required

36:42 - Parameters of DD6400
https://www.youtube.com/watch?v=8ieVepB2kno&t=2202s
 - part of new models family - DD6900 / DD9400 / DD9900
 - DD6400 capacity from 8TB to 172TB net with increments of 4TB
 - capacity of other models
 - DD6400 uses 8TB drives
 - DD6400 has 270 simultaneous backups -> huge important
 - streams of other models
 - DD6400 is 2U / 3U shelf - max 2 shelves
 - DD6400 built in Ethernet card 10Gb -> SFP/BasetT to choose
 - DD6400 allows for 3 additional Ethernet cards - the same as above  or 25Gb
 - DD6400 allows for 1 additional FC card

39:35 Additional materials
https://www.youtube.com/watch?v=8ieVepB2kno&t=2375s
-
Backup and Recovery - all materials: http://backuprecoveryguy.blogspot.com/2022/07/backup-and-recovery-materials.html
BackupRecoveryGuy: Backup and Recovery materials
-
DD6400 video: https://youtu.be/8ieVepB2kno 
DD6400 article: http://backuprecoveryguy.blogspot.com/2022/07/data-domain-dd6400.html 
-
New generation of Data Domains DD6900 / DD9400 / DD9900
Video: https://youtu.be/xx-xZC9JtoM
Article: http://backuprecoveryguy.blogspot.com/2019/12/why-new-data-domain-models-dd6900.html
-
What is new in Data Domain 7.2?
Video: https://youtu.be/m1XNy6IXzOo
Article: http://backuprecoveryguy.blogspot.com/2020/08/data-domain-72-what-is-new.html
-
Performance in backup: https://youtu.be/05fFtGH7YCQ
-
Fast backup of files - video: https://youtu.be/LETxuJZXnuA
Fast backup of files - article and presentation: http://backuprecoveryguy.blogspot.com/2022/07/fast-backup-of-files.html

40:00 Summary

https://www.youtube.com/watch?v=8ieVepB2kno&t=2400s
 - please consider DD6400 -> speed, security,  flexibility, cost-effective, flexibility
 - the above give Data Domain 80% of market
 - please check!

-
Presentation from the event:
https://drive.google.com/file/d/1kSuYUTkDMJXu9cVjlLIrlM7fROBnGsdu 

Only successful restores!
BackupRecoveryGuy

Ransomware attack - how can we recover?

Whatever we do in our life, it is always good to have Plan B.

What if my data are encrypted by ransomware?
Do I have Plan B?
How can I access my data?

What if I have backups that have no chance to be ransomwared/ removed?

What if I have a cyber bunker?

What if I have Cyber Recovery plan?

And... can it be with very attractive cost?

What backup/recovery solution can offer me in case of ransomware/hacker attack?
Why Plan B is important?
https://youtu.be/jtgm2WHpFPk?t=53

How can I lock against ransmoware/hacker?
How can I be sure that none can remove /change my backups.
Can I restore in case of ransomware/hacker attack.
https://youtu.be/jtgm2WHpFPk?t=885

Bunker in IT? - Why, When, How?
Can we do everything automatically?
Can we control our IT over ransomware?
Can we recover immediately?

https://youtu.be/jtgm2WHpFPk?t=1779

All methods to protect against ransomware/hacker
https://youtu.be/jtgm2WHpFPk?t=319

Hardening - let's remember about this simple approach
https://youtu.be/jtgm2WHpFPk?t=385

Data Domain Snapshots 
No cost, no additional space, no performance degradation method to have protection of our backups
https://youtu.be/jtgm2WHpFPk?t=461

Why source de-duplication increases my security?
https://youtu.be/jtgm2WHpFPk?t=612

--------------
We can protect ourselves against ransomware/hacker
We can have plan B
We can make it easy and automated...

Let's consider it...

--------------
Presentation about Cyber Recovery (the one used in video):
http://gurago.pl/s1/CyberRecovery.pdf


Only successful recoveries!
BackupRecoveryGuy

New NetWorker 9.2 - ransomware protection / de-duplication to S3 storage

Register to 30 min webcast that discuss NetWorker 9.2 new features in details.
Thursday, 28 September, 10:00 CET (Vienna, Prague, Berlin time).
Details / registration:
https://www.linkedin.com/pulse/30min-webcast-whats-new-networker-92-olkowski-daniel/?published=t


There has been released a new version of NetWorker 9.2 with plenty nice features.
You will find list all of them at the bottom.

Anyhow, at the beginning, let me dig into 2 most interesting aspects of the new NetWorker 9.2:

• De-duplication to S3 storage
• Ransomware/hacker protection

-----

Backup to S3 storage with source de-duplication

NetWorker can use S3 storage in the same way as Data Domain. So if we store backups on S3 storage we can enjoy:

• De-duplication
• Source de-duplication
  NetWorker sends to S3 storage only small, new data fragments that are not yet existing on S3 disk system
• ClientDirect
  Each protected machine sends its data directly S3 storage

What is the value?

Why the backup to S3 media with source de-duplication is so important for us?

1. Reducing cost of storage / network
   S3 storage is the cheapest medium.
   In addition, thanks to source de-duplication, we minimize network costs, backup media.
2. Minimizing cost of cloud data backup
   If we do backup resources located in the cloud (Amazon / Azure / ...), then S3 storage is the cheapest medium available in the public cloud. With source de-duplication, we additionally highly reduce the cost of backup storage and the cost of the cloud network – 2 most important cost factors.
3. Accelerating backups
   Storage S3 is cheap and secure. However, it is not the fastest medium. De-duplication on the source allows us to send / write to S3 storage very minimum amount of data. Thus, anyhow we achieve very good performance. Why? Because of source de-duplication, there is almost no data sent, no data writing so speed of the network / storage is not important. The performance is maybe not as huge as with Data Domain but better than using ordinary disk.
4. Disaster Recovery for cloud data
   What if we need to protect data in the cloud locally, in our Data Center?
   NetWorker can do that easily and in very cheap way. We have several scenarios to choose from:
• Backup our cloud data to our Data Center (S3 storage) with source de-duplication
• Backup to S3 storage in the cloud and than replica to our Data Center (all the way de-duplicated data)

Briefly: NetWorker is the fastest and cheapest solution for cloud backups!

One of my friends backs up old, archive files directly to S3 storage using NetWorker. and having all the values:

• ClientDirect
• De-duplication on the source
• Bypassing any other media: Data Domain, disks or tape

He finds this very cool thing because:

• For archive data, he does not need huge backup / restore performance -> he does not need Data Domain
• Backup is simple with a few clicks to make it
• He has Disaster Recovery within the solution
• The cheapest possible backup cost!

---------

Protection against ransomware / hacker

Having NetWorker / Data Domain, we are sure that even in the case of ransomware or hacker attacks, our backups are safe.

In NetWorker 9.2 – besides regular retention - we can also define blocking time for our backups. What does it mean blocking backups? For example, we can say to NetWorker:

Please keep my backups for 5 years, but for 14 days do not allow anyone to change/ delete    those particular backups.

In this case neither the virus nor the hacker nor us (administrators) can delete/change the backups within the defined 14 days.

This is standard NetWorker functionality available at no extra charge / license.

At the backup price we have an additional layer of protection against cyber-attacks.

This is also important from GDPR perspective.
One of the requirements is to provide security and data integrity.

-----------

List of the most important features in new NetWorker 9.2:

• Backup to S3 storage with source de-duplication
• Protection against ransomware / hacker attack
• VMware: Image level backup with SQL consistency
• HyperV: Ability to dexclude particular disks in VMs from image level backup
• Backup to Date Domian running on Amazon / Azure
• SQL database backup
• Simplified installation
• Ability to disable databases from backup
• Exchange / SharePoint
• Recovery of single items
• Support for SAP IQ
• Support for SAP HANA on Power Linux
• Recovery of Isilon snapshots between different physical Isilons

Register to 30 min webcast that discuss NetWorker 9.2 new features in details.
Thursday, 28 September, 10:00 CET (Vienna, Prague, Berlin time).
Details / registration:
https://www.linkedin.com/pulse/30min-webcast-whats-new-networker-92-olkowski-daniel/?published=t

Have fast and 100% successful recoveries!

BackupRecoveryGuy