Showing posts with label IT Service Continuity. Show all posts
Showing posts with label IT Service Continuity. Show all posts

Wednesday, 19 December 2012

DRaaS, a real solution or just another acronym?

DRaaS borns as a concept related to Cloud services which, in a first approach seems to be very similar to the traditional backup datacenters service solutions, but however it has an important differential feature: abstraction from infrastructure.

In traditional backup datacenters, the infrastructure should be equal or very similar, so all services could be run in a proper way independently from the site in which are running. When we talk about DRaaS, and manly due to virtualization, the services are offered in an infrastructure-agnostic way, and this allows services to be recovered only coping data between datacenters. Moreover, with the dynamic capacity management feature given by virtualization, service level can be granted in most cases.

From a conceptual perspective, DRaaS has two different options:
  • DR of software (SaaS), infrastructure (IaaS) or platform (PaaS) running in the Cloud. The Cloud service provider should offer the DR service and it will be completely transparent to users.
  • DR as a solution for IT services running in a corporate datacenter, with cold or hot stand-by.
Is in the second options when DRaaS concept is taken to the extreme, allowing the design of different solutions depending on our infrastructure. For example, since most IT infrastructures are virtualized, a DRaaS can consist on a virtualization server that can host virtual machines conforming the whole service. Carrying out a data replication service could be recovered in an alternative site in seconds.
Advantages of DRaaS are obvious:
  • Economic. In the BCM industry, wer ROI are not very cleary and is difficult to justify, economic matters are very important. In the case of DRaaS we have not to make all payment upfront, it can be done with a pay-per-use model, with a mensual fee. This is a great advantage nowadays because hardware cost of ownership has not to be done.
  • Simplicity in test. Most efforts in business continuity and IT service continty is dedicated to drill and tests. With a reduction of complexity of this test we will reduce the economic cost and we can dedicate this budget to other important issues.
  • Flexibility. Service can be adapted depending on business requirements established to each application. In some industries, which are very dynamics, this issue is very important in order not to have more costs than ingress for a service.
Step by step, housing providers are increasingly using DRaaS as a new product of  their portfolios,  identifying the diferent options of  this kind of  service defined above. In Spain there are not too much providers using this terminology, but we can found some examples, as the DRaaS by Ermestel.
In the same way than Cloud services, not all infrastructure can be migrated to DRaaS. It will be dependent on determining factors like specific hardware, information confidentiality, integration with other corporative services or service level required (a lot of times required service levels cannot be offered by providers because of technology conditioning). The most interesting options could be a combination of Cloud solutions with traditional backup solutions in order to take advantage of IT service continuity in a proper and economically way. This is called hybrid Cloud.

Wednesday, 28 March 2012

BCAW webminars

This are the webminars deployed regarding the Business Continuity Awareness Week, sponsored by BCI.

Adopting Cloud In Your Backup Strategy
BCM Frameworks: From Best Practices to Standards to Overarching Models
Burst out of you own personal silo, Find out who else is interested in disasters
Business Continuity Awareness for Senior Management
Business Continuity in the Supply Chain
Business Continuity Management Systems
CM² Maturity Model
Conscientisation pour la continuité des affaires auprès de la direction
Contact Centre Continuity
Continuity as a Service (CaaS)
Corporate Business Impact Analysis-Why Bother?
Cyber Preparedness-Time is Not on Your Side
Establishing a Governance framework for an effective BCM
Getting Started with BCM
Horizon Scanning - What could Business Continuity look like in 2040
Horizon Scanning, new threats, new skills, new challenges the next 5 years
How to check your Business Continuity Management System?
How to Effectively Use Social Media Before and During Disasters
How to Successfully Implement a Business Continuity Management Program..
Identifying Key Suppliers
Infrastructure Impact Analysis
Integrating Cyber Threat Protection and Business Continuity Planning
ISO 22301 Business Continuity Management Systems
Learning from Earthquakes, Non-Structural Retrofitting and Other Mitigation Meas
Preparing for the 2012 Games- What should you do in the time left?
Preparing for the 2012 Release of ISO 22301
Preparing your Communications Strategies for London 2012
Puzzle Pieces: Are You Seeing the Entire Planning Landscape
Risk Management Strategies for Protecting Enterprise Supply Chains
Why a formal certified BCMS? “Due Diligence”-Talking the Language Management

Thursday, 22 March 2012

Distance Between Datacenters

One of the most common questions when designing a IT service continuity plan is distance between datacenters. Answer is easy: a distance that would be far enough to grant that an event is not going to affect to the principal and the alternate data center, but close enough to ensure that services are going to be delivered in a proper way, specifically in those services in which people are involved.

IT industry maturity has caused that, in most companies, IT service process has a high level of automation or are remotely managed and cloud computing is a clear example of this. This fact has and caused that risk is  considered as the only aspect to take into account when selecting an alternative data center location, so let put the data center far far away.

However there are two issues that affect when determining the distance: Cost and Technology.

Technology

Telecommunications between data center are done using optical fiber in most cases, although depending on applications requirements, different protocols will be used. Basically there are three types of data centers communications:
  • Level 3 interconnections: are used to connect data centers with few latency and transparency requirements. MacroLan by Telefónica, LanLink by Colt or LanExtesion by BT are the typical level 3 operators products .
  • Level 2 interconnections: Are based in link protocols, for example, and over all Ethernet. This kind of connections are more transparent than the lever 3 connections and, with techniques like  FCoE, allow to cover most of connectivity scenarios if applications has not a few latency.
  • Level 1 interconnections: signal transmission through optical fibber multiplexed with DWDM or CWDM that allow interconnection high capacity interconnections (nowadays 40 Gb and up to 100Gb). with a very few latency. It'll be more important the latency due to light transmission.
Most data centers are connected using this technologies, being between 10 and 80 kms the usual distances among them. For longer distances, projects are more complex, because long distance networks has to be used, with, for example, SDH protocol that allow a continuous signal regeneration, although latency are introduced.

Most multinationals have chosen an architecture that offers a lot of technical functionalities with the minimum risk, that is to have two data centers one close to the other (1 to 5 kms) operating in an active-active configuration and the alternative data center for disaster or disruptive events is located hundreds of miles away, even in another continent. For example, Santander bank has in this architecture datacenters in Madrid, Cantabria ( upcoming opening ), London, Sao Paulo (Brasil) and Querétaro (México). The following video shows a virtual tour for the Brazilian datacenter of Santander.


Cost

It's easy to conclude that the longer the distance, the higher the cost. Depending on fiber attenuation interconnections has to be implemented with more or less power lasers. For distances longer than 80kms regeneration or amplification of signal will be required, so more equipment and more cost. Talking about very long distances, like London - Cantabria of Santander bank, international lamdas will be involved and the bill could be very expensive and difficult to justify.

Another fact to take into account is that the longer the distance, the higher probability to be intercepted and confidential information to be disclosed, and thats why cipher technologies has to be used, as I explain in this post in secuirtybydefault blog.