Veritas InfoScale™ 7.4 Disaster Recovery Implementation Guide - Linux
- Section I. Introducing Storage Foundation and High Availability Solutions for disaster recovery
- About supported disaster recovery scenarios
- About campus cluster configuration
- About replicated data clusters
- About global clusters
- VCS global clusters: The building blocks
- About global cluster management
- About serialization - The Authority attribute
- Planning for disaster recovery
- About supported disaster recovery scenarios
- Section II. Implementing campus clusters
- Setting up campus clusters for VCS and SFHA
- About setting up a campus cluster configuration
- About running a fire drill in a campus cluster
- About setting up a campus cluster configuration
- Setting up campus clusters for SFCFSHA, SFRAC
- Setting up campus clusters for VCS and SFHA
- Section III. Implementing replicated data clusters
- Configuring a replicated data cluster using VVR
- Configuring a replicated data cluster using third-party replication
- Section IV. Implementing global clusters
- Configuring global clusters for VCS and SFHA
- Setting up VVR replication
- Creating a Replicated Data Set
- Creating a Primary RVG of an RDS
- Adding a Secondary to an RDS
- Changing the replication settings for a Secondary
- Synchronizing the Secondary and starting replication
- Starting replication when the data volumes are zero initialized
- Configuring clusters for global cluster setup
- Configuring service groups for global cluster setup
- Configuring a global cluster with Storage Foundation Cluster File System High Availability, Storage Foundation for Oracle RAC, or Storage Foundation for Sybase CE
- Configuring the secondary site
- Configuring global clusters with VVR and Storage Foundation Cluster File System High Availability, Storage Foundation for Oracle RAC, or Storage Foundation for Sybase CE
- Setting up replication on the primary site using VVR
- Setting up replication on the secondary site using VVR
- Configuring Cluster Server to replicate the database volume using VVR
- Configuring global clusters for VCS and SFHA
- Section V. Configuring disaster recovery in cloud environments
- Section VI. Reference
- Appendix A. Sample configuration files
- Sample Storage Foundation for Oracle RAC configuration files
- About sample main.cf files for Storage Foundation (SF) for Oracle RAC
- About sample main.cf files for Storage Foundation (SF) for Sybase ASE CE
- Appendix A. Sample configuration files
Replication across AWS regions
In this scenario, replication is set up across Availability Zones configured in different regions. The configuration uses software VPN Openswan
to connect the VPCs across different regions.
Figure: Replication across regions illustrates the configuration for replication across regions.
Two VPCs with valid CIDR blocks (for example, 10.30.0.0/16 and 10.60.0.0/16 respectively) that are located in two different regions.
The primary instance belongs to AZ1 of region A and the secondary instance belongs to AZ1 of region B.
Veritas InfoScale instances in each AZ.
A VPN tunnel is established between two VPCs in two different regions using software VPN. Here, we have used OpenSwan software VPN. This is a secure IPSec tunnel.
Elastic IP addresses (EIP) to connect the two VPN instances
Private IP addresses used for replication in standalone environments OR
Virtual private IP addresses used for replication in clustered environments.
Perform the steps in the following procedure to set up replication across regions.
To set up replication across regions
- Create two VPCs with valid CIDR blocks in different regions, for example, 10.30.0.0/16 and 10.60.0.0/16 respectively.
- Create the primary site EC2 instance.
- Create the primary site VPN instance, which belongs to the same VPC as that of the primary EC2 instance.
- Modify the route table on the primary site. Ensure that the route table entry directs the secondary site traffic through the primary site VPN instance.
- Create the secondary site EC2 instance.
- Create the secondary site VPN instance, which belongs to the same VPC as that of the secondary EC2 instance.
- Modify the route table on the secondary site. Ensure that the route table entry directs the primary site traffic through the secondary site VPN instance.
- Set up connectivity across regions using software VPN. The sample configuration uses Openswan.
Perform the following steps:
Install the Openswan packages on the primary and secondary VPN instances.
Configure the
/etc/ipsec.conf
and/etc/ipsec.secrets
files.Note:
The
/etc/ipsec.conf
file contains information about the private IP address of the VPN instance, the subnet range of the left subnet, elastic IP address of the destination VPN, the subnet range of the destination right subnet.The
/etc/ipsec.secrets
file contains the secret key. This key must be the same on both VPN sites.Restart the IPSec service.
# service ipsec restart
Add the IPSec connection.
# ipsec auto --add vpc2vpcConnection # ipsec auto --up vpc2vpcConnection
Enable IPSec forwarding.
# sysctl -w net.ipv4.ip_forward=1
- Set up replication between the instances using the private IP address or virtual private IP address.
For instructions, see the chapter Setting up replication in the Veritas InfoScale Replication Administrator's Guide.
- Verify the status of replication.
# vradmin -g dg_name repstatus rvg_name
Ensure that the replication status shows:
Replication status: replicating (connected)