|
Security Block
Level Backups
A NAS must be placed at
each location with a Windows 2000 or 2003 server on a LAN. Multiple NAS’s can be placed on the same LAN. Each selected Server must be
completely imaged. Individual files can not be added or omitted from the
back up. Our solution is a block level backup where we are capturing the
entire volume of a server at the 1's and 0's level. Block level data is
raw data which does not have a file structure imposed on it. The
block-level image is an exact digital duplicate of the on-site server.
Database applications such as Microsoft SQL Server and Microsoft
Exchange Server transfer data in blocks without having to worry if files
are open or being used. Block transfer is the most efficient way to
write to disk. This technology allows for complete server restorations
using last functioning server system state before the failure occurred.
Bear in mind that the frequency of off-site back ups is limited by the
amount of available bandwidth at the client site. Limited bandwidth will
result in longer transmission periods which means back ups may only be
done hourly or daily depending on the available internet bandwidth.
Security
Encryption is an important
step in the process of transmitting data between the NAS and the remote
sites because it greatly reduces the risk of data loss incidents that
plague magnetic tape and prevents man-in-the-middle attacks during
transmission. We employ the 256-bit Advanced Encryption Standard (AES)
algorithm because it has never been broken and is currently considered
the gold standard of encryption techniques and renders transmitted data
immune to theft.
After imaging the servers to which it is attached,
the NAS device creates an independent 256-bit encrypted tunnel and
transmits the imaged data to a secure offsite location where it resides
in an encrypted, compressed format. That remote site then replicates
again to an alternate data center, creating a total of three copies of
the data in three geographically distinct regions. Since the data is
encrypted and only you have the pass key, no one at Zenith has access to
the data on the NAS or either of the remote storage facilities.
Smart Data Transport
Data transmission itself occurs
over your client’s internet connection and can easily be configured to
minimize bandwidth consumption. Our NAS leverages Adaptive Bandwidth
Throttling, which allows us to set a limit on outbound bandwidth used.
(E.g. assuming the customer has a 768Kpbs outbound connection, adaptive
bandwidth throttling can be set with a maximum at 512Kpbs). We can
therefore exercise fine control over the data imaging and transmission
processes. Bear in mind that the frequency of off-site back ups is
limited by the amount of available bandwidth at the client site. Bear in
mind that the frequency of off-site back ups is limited by the amount of
available bandwidth at the client site. Limited bandwidth will result in
longer transmission periods which means back ups may only be done hourly
or daily depending on the available internet bandwidth.
We perform packet level verification along with rate
adaptive bandwidth throttling. The result is that we can send very large
files over the internet without affecting outbound data rates.
Additionally, we send data over a secure AES 256-bit encrypted UDP
session, which provides significant efficiencies in data transport
speeds. If the connection drops at any time the transmission picks up
from the last successful packet received. This is a vast improvement
over other technologies that use ftp transmission where a connectivity
problem results in the entire amount of data needing to be resent.
During our internal testing we have successfully transferred 13.6GB of
data over a 512K connection within 20 hours.
On-site and Off-site Solution with
Multi-year Archiving
Each NAS device, depending on the model, can be configured to backup
from one single server up to eight servers. Multiple NAS devices can be
placed on a LAN. As each backup occurs the data is securely transferred
to the off-site co-location facility so in the event of a complete
disaster we are able to ship a new NAS device imaged with the latest
client data. Data is transferred to the co-location facility using AES
256-bit encryption and band-throttling software. Multi-year archiving
using a combination of daily and monthly synthetic images is set up on
the NAS Device and then replicated to the off-site co-location facility.
Recovery after a Catastrophe
In the event of catastrophe (such as a natural disaster or fire), you
order a new NAS that will be imaged and sent out next-day business air
at the additional cost specified on the page 9. Depending on the NAS
Model, multiple servers can be virtualized on one NAS while the NAS can
also continue to perform backups. Your client’s data will not be hosted
at the collocation facility.
Near-line Disaster Recovery
and Failover Using Virtualization
The NAS comes with built-in
virtualization software. This allows a server which has failed to be
restored on the NAS as a virtual image giving the customer a standby
server in less than hour (in most cases) data on restore speeds are in
a table below). Since the total image of the server is being restored no
configuration changes are needed as the virtual image has the same
properties, IP address, NetBIOS name as the failed server and backups
continue to happen even when running the virtual image. When new
hardware/spares arrive, the virtual image can be shutdown and the latest
backup image can be used to perform a bare metal install on the new
hardware.
NAS Specifics
There are two NAS models, Base
(for backing up to 2 servers) and Advanced (for backing up to 8
servers). Following are the specifics:
-
Base Model can be used to backup up to 2 Servers
and is based on the AMD Athlon FX2 Dual Core 3800
-
Base Model storage up to 250GB real space
provided/back up for 500GB uncompressed (based on average 2:1
compression ratio) (NO RAID)
-
Base Model is a small form factor chassis that
can be placed vertically or horizontally
-
Advanced Model can be used to backup up to 8
Servers
-
Advanced Model storage up to 1TB real space
provided/back up for 2TB uncompressed (based on average 2:1
compression ratio)
-
Advanced Model is a tower based model with hot
swappable hard drives (RAID 5)
-
Both models have and Operating System that is
Windows Storage Server 2003 R2 based
-
Both models have virtualization software that
is a hypervisor layer based on open source
|