NetApp - NS3730-0
NetApp - NS3730-0
NetApp - NS3730-0
Document NS3730-0
October 2010
Copyright IBM Corporation, 2010. All Rights Reserved. All trademarks or registered trademarks mentioned herein are the property of their respective holders
Table of contents
Abstract........................................................................................................................................3 Executive summary ....................................................................................................................3
Intended audience ................................................................................................................................... 3
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
Abstract
The success or failure of any software or infrastructure deployment hinges on making the proper design and architecture decisions in the planning phase. This guide provides recommended best practices for deploying and using SnapManager 5.0 for Microsoft Exchange with an IBM System Storage N series storage system and any supporting software. Organizations that want to get the most out of their N series storage investment for Exchange will benefit from putting into practice the recommendations in this report.
Executive summary
Many organizations have come to rely on Microsoft Exchange Server to facilitate critical business e-mail communication processes, group scheduling, and calendaring on a 24x7 basis. System failures might result in unacceptable operational and financial losses. Because of the increasing importance of Microsoft Exchange Server for any business, Exchange data protection, disaster recovery, and high availability are of increasing concern. Companies require quick recovery times with little or no data loss. With Exchange databases growing rapidly in size every day, it is increasingly difficult to complete time-consuming backup operations in a reasonable amount of time. When an outage occurs, it can take days to restore service from slower media such as tape, even assuming that all of the backup tapes are available and error free. IBM System Storage N series offers a comprehensive suite of hardware and software solutions that enable an organization to keep pace with the increasing data availability demands of an ever-expanding Exchange environment, as well as scale to accommodate future needs while reducing cost and complexity. IBM System Storage N series with SnapManager 5.0 for Microsoft Exchange software is available for Microsoft Exchange Server 2003 and 2007. SnapManager 5.0 for Microsoft Exchange (SME) has earned Certified for Windows Server 2008 accreditation with the Hyper-V designation:
www.windowsservercatalog.com/item.aspx?idItem=2ad80f5d-7af7-7695-bc1d-3463d1b3256d&bCatID=1282
SME is tightly integrated with Microsoft Exchange, which allows for consistent online backups of your Exchange environment while leveraging IBM System Storage N series with Snapshot copy technology. SME is a Volume Shadow Service (VSS) (snapshot copy) requestor, which means that it uses the Microsoft VSS subsystem to initiate backups. For details on VSS, see Microsoft KB article 822896 (http://support.microsoft.com/?id=822896). SME provides a complementary feature set for the new Microsoft Exchange 2007 data replication features. SME works with local continuous replication (LCR) and cluster continuous replication (CCR) replica databases and provides a rich feature set to leverage these new technologies. SME also supports standby continuous replication (SCR), providing a rich feature set for the active node only.
Intended audience
This paper is a best practice guide for experienced Microsoft Exchange administrators who have read the installation and administration as well as system administrator guides for N series, SME, IBM System Storage N series with Data ONTAP, and IBM System Storage N series with SnapDrive.
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
Readers of this best practice guide should have a solid understanding of the Exchange storage architecture and Exchange administration, as well as Exchange backup and restore concepts. The recommendations in this document are best practices to assist with the design, implementation, and configuration of SnapManager for Exchange in Windows Server 2003 environments with Microsoft Exchange Server 2003 and Microsoft Exchange Server 2007.
Layout recommendations
Demand for higher availability, increased performance, and improved data protection is becoming the norm, requiring careful planning and consideration in preparation for deploying an Exchange environment. Recovery point objective (RPO) and recovery time objective (RTO) times need to be factored into this planning. Best practice It is recommended, but not required, that database and transaction log volumes be on separate aggregates. IBM System Storage N series with RAID-DP safeguards data residing on an aggregate by providing double disk failure protection, while still maintaining the performance requirements required by Exchange. Placing database volumes and transaction log volumes on separate aggregates provides high data availability for Exchange in the very rare event that more than two disks in a RAID-DP aggregate fail. Number of aggregates Single aggregate for all Exchange data Benefits Minimize the number of parity disks required A single aggregate contains all of the disks that can be used to handle the I/O requirements for Exchange Dedicated aggregate handling the I/O for database or transaction logs If a single aggregate is lost (extremely rare), Exchange data can be recovered from other aggregate Tradeoffs Requires restoring from an archived backup to restore a lost aggregate (very unlikely) More parity disks required because of more aggregates
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
Best practice Place database LUN and transaction log/SnapInfo LUN in separate volumes. Best practice When separate LUNs are used for the Exchange transaction log files and the SnapInfo directory, place those LUNs in the same volume. Both of these LUNs will have a similar I/O profile, allowing them to share the same volume. And for disaster recovery scenarios, having the entire log set for Exchange on the same volume will help achieve SLAs.
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
It is recommended that NTFS hard links be used by placing the SnapInfo directory on the same LUN as the transaction log directory whenever possible. This will increase storage utilization, eliminate the physical copy overhead incurred on the Exchange Server, and increase backup performance.
Transaction Log Files on an N series LUN
N series LUN T:\
The Master File Table is updated with the new location of the Transaction Log files, which are now on T:\ , an N series LUN.
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
To avoid transaction log archiving using NTFS hard links, the Exchange transaction log file directory and the SnapInfo directory must reside on different NTFS volumes. This means an additional LUN will be needed for the SnapInfo directory.
SME can also be configured to execute both of the options above. When using both options, the threshold limits for the automatic deletion policy must be set lower than those for the automatic dismount policy. This will make sure that SME will attempt to delete older backup sets to free up space on the volume before it dismounts Exchange databases. Best practice Choose an SME fractional space reservation policy that works best for the Exchange environment. If the backup set deletion policy is triggered, make sure that a minimum of one verified backup set remains on the volume. For additional fractional space reservation information, refer to IBM System Storage N series and Microsoft Exchange Server 2007 NS35780. Although this technical report focuses on Exchange Server 2007, the fractional space reservation calculations also apply for Exchange Server 2003 configurations. Work with your local IBM N series professional to ensure that your storage is sized correctly, all factors are taken into consideration, and a successful fractional space reservation policy is implemented.
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
Certain parameters in the exported control file need to be modified prior to importing the control file on a different server. Examples of parameters that might need to be modified are server names, storage system names, volume names, and so on. Best practice It is recommended that you review the settings in the configuration file before running it for the first time. This will help ensure that the file is free of errors and will configure your Exchange data without issues. The configuration file can contain information for all sections of the configuration or a subset of sections. The use of an XML editor is highly recommended when editing the control file. Edit the appropriate sections, like the server name, and then run the configuration wizard with the control file option to configure that Exchange Server.
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
<?xml version=1.0 ?> - <SMECONFIG xmins:xsi=http://www.w3.org/2001/XMLSchema-instance xmins:xsd=http://www.w3.org/2001/XMLSchema> <SERVER_NAME>excms</SERVER_NAME> <HOST_NAME>W2K8-EXSVR1</HOST_NAME> + <STORAGE_LAYOUT> - <COMMON_SETTINGS> - <NOTIFICATION> - <SEND_EMAIL_NOTIFICATION> <NOTIFY_AUTO>false</NOTIFY_AUTO> <LONG_MSG>false</LONG_MSG> <AS_ATTACHMENT>false</AS_ATTACHMENT> <SEND_ON_FAILURE>false</SEND_ON_FAILURE> </SEND_EMAIL_NOTIFICATION> <EMS_ENABLED>true</EMS_ENABLED> <ASUP_ENABLED>true</ASUP_ENABLED> <ASUP_ON_FAIL>true</ASUP_ON_FAIL> </NOTIFICATION> - <VERIFICATION> - <VERIFICATION_CLIENT_SETTING> <VERIFICATION_SERVER>w2k8-exsvr2</VERIFICATION_SERVER> <VER_SERVER_NTAUTH>false</VER_SERVER_NTAUTH> </VERIFICATION_CLIENT_SETTING> - <VERIFICATION_SERVER_SETTING> <AUTO_DRIVELETTER>false</AUTO_DRIVELETTER> <MP_DIR>C:\Program Files\IBMN\SnapManager for Exchange\SnapMgrMountPoint</MP_DIR> <ESEUTIL_PATH>:\Program Files\Microsoft\Exchange Server\bin\eseutil.exe</ESEUTIL_PATH> <THROTTLE>false</THROTTLE> <IO_PAUSE>0</IO_PAUSE> </VERIFICATION_SERVER_SETTING> </VERIFICATION> <REPORT_DIRECTORY>C:\Program Files\IBMN\SnapManager for Exchange\Report</REPORT_DIRECTORY> - <BACKUP> - <BACKUP_CLIENT_SETTING> <NAMING_CONVENTION>0</NAMING_CONVENTION> <BACKUP_SET_TO_KEEP>8</BACKUP_SET_TO_KEEP> <BACKUP_SET_TO_KEEP_IN_DAYS>0</BACKUP_SET_TO_KEEP_IN_DAYS> <DELETE_BACKUPS_OPTION>0</DELETE_BACKUPS_OPTION> <BACKUP_SET_TO_VERIFY>5</BACKUP_SET_TO_VERIFY> </BACKUP_CLIENT_SETTING> </BACKUP> - <VERIFICATION_ON_DESTINATION> - <SELECTED_DESTINATIONS> - <SELECTED_DESTINATION> <SOURCE_FILER>ibmnseries</SOURCE_FILER> <SOURCE_VOLUME>db_vol</SOURCE_VOLUME> <DESTINATION_FILER>ibmnseries</DESTINATION_FILER>
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
Frequent recovery points also help in multisite business continuance (BC) configurations, especially when using IBM System Storage N series with SnapMirror. SnapMirror replication times depend on the connection speed between the source and destination storage systems and the amount of data to replicate across that connection. Minimizing the size of the data dramatically reduces the completion time. FRPs reduce the amount of data for a SnapMirror replication by only replicating the transaction log files created since the last full or FRP backup. The result of this is a shorter SnapMirror replication time. Best practice It is recommended that you use frequent recovery points whenever possible in an Exchange environment where RPOs are very stringent and SnapMirror replication times and data set sizes need to be reduced.
A full backup needs to be created before you can create frequent recovery point backups for that backup set. FRPs are scheduled through SME using the Windows task scheduler to run the task. You can create a FRP backup schedule to run as frequently as every 10 minutes. Best practice Schedule FRP backups at the lowest possible time interval required for the backup to complete. A 10minute FRP backup achieves a 10-minute RPO. FRP backups reduce how often full backups must be created; one or two full daily backups will achieve a low RTO, as well. As always, check with your local IBM N series professional to determine an FRP backup schedule that suits your Exchange environment. When restoring Exchange databases that have FRP backups associated with them, SME will list the available FRP point-in-time backups for a given database. The backups will be displayed in 24-hour increments for each backup set. Selecting an FRP backup set will restore the last full backup set, then replay the transaction log files up to the selected recovery point.
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
10
Backup verification
Microsoft requires backup sets to be verified. The process of verifying backup sets can be time consuming and cause significant I/O load on an Exchange Server and on the storage system. Common practice is to perform verification operations during off-peak hours to minimize the impact to the active Exchange Server and not adversely affect Exchange latencies. SME has many ways to assist an Exchange administrator in mitigating the I/O load for verifications. Deferred verification: This option allows you to schedule your verifications to run at a later, more convenient time. By scheduling the verification process, the Exchange administrator does not have to worry about starting the verification process manually through the SME backup interface. Verification throttling: This option allows the Exchange administrator to throttle the amount of I/O load the verification process places on an Exchange Server. Backup verification on a SnapMirror destination volume: When replicating snapshot copies using SnapMirror, SME can use the destination storage system to verify the backup. Remote verification server: This allows an Exchange Administrator to run verifications on a separate server, thus removing the I/O load from the active Exchange Server altogether.
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
11
The verification server can handle up to four concurrent verification operations. Any verification jobs that are submitted while four verification operations are running will be queued and handled on a first come, first served basis. You can monitor concurrent verification jobs through the main SME management console. You have the option to monitor both locally running jobs and remote jobs for the remote verification server.
Best practice When performing an upto-the-minute restore, restore from your most recently verified backup. This is the fastest way to restore your Exchange Server. Using an older verified backup slows the restore time because it requires more transaction logs to be replayed and applied to the database. Using the most recently verified backup helps make sure of the quickest recovery of your Exchange database.
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
12
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
13
Replication
Replicating Exchange data to a secondary location is essential for protecting the business-critical e-mail data. Without that level of protection, a business risks extensive Exchange downtime, and this translates into lost revenues and productivity. N series SnapMirror is a key technology to protect critical data for applications such as Exchange. It has the ability to replicate data to multiple locations at high speeds in a simple, reliable, and cost-effective manner.
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
14
SME integrates with SnapMirror to provide an automated method to replicate successful backup sets to a destination storage system. When LUNs containing the database, transaction log, and SnapInfo files reside on volumes that have a SnapMirror relationship, SME will provide an option to automatically update the SnapMirror relationship once the backup finishes successfully. Best practice When creating the SnapMirror relationship, make sure the schedule parameters are set to (- - - -). This establishes the SnapMirror relationship and allows SME, communicating through SnapDrive, to update the mirror and manage scheduling of the updates. An additional benefit for Exchange environments running SnapMirror is the ability to perform backup verifications on the SnapMirror destination storage system. This eliminates the I/O load on the production storage and utilizes the secondary storage system, which typically sits idle until it is needed. When used in conjunction with a remote verification server, you can completely remove the I/O load incurred by backup verifications from the production Exchange Server. Best practice
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
15
Whenever possible, perform database verifications on a SnapMirror destination. By offloading the database verification I/O to the secondary storage, the primary storage is free to handle regular Exchange traffic without the impact of additional verification I/O.
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
16
single copy cluster. Likewise, a standalone Exchange Server can fail over to standby standalone Exchange Server. The BC module also allows for local storage failures, without having to fail over the entire Exchange Server. Currently, the BC module does not support CCR clusters. Best practice In Exchange Server 2003 environments, place all Exchange components onto N series LUNs. This includes the Exchange installation directory, the MTA/SMTP queues, and the MSSEARCH directory. The LUNs containing these directories must be on the same volume as the transaction log/SnapInfo LUNs. This helps make sure all required LUNs are regularly backed up and replicated to the secondary storage system. Best practice Make sure the same installation paths are configured on both the production and standby Exchange environments. The create plan wizard in the BC module is used to create a BC plan. The wizard steps the administrator through the process of specifying the Exchange Servers to protect, the SnapMirror relationships to use, the network configuration for the Exchange Servers, and setting a logical name for the BC plan. Once an administrator has created a BC plan, it is highly recommended that the plan be verified to make sure there are no errors or faulty configurations in the Exchange environment. Best practice Verify the BC plan immediately after creating it. Then schedule regular verifications to make sure the plan is still valid for the Exchange environment. If the verification fails, address the issues in the environment or recreate the BC plan. In Exchange Server 2007 environments, the BC module can rehome mailboxes as part of the recovery. Rehoming mailboxes should be used whenever user mailboxes are moved to another server and users access their mailboxes on the new Exchange Server. This option further automates the failover process, making the failover completely transparent to end users. The BC module also has the capability to fail back to the original production Exchange Server using the same BC plan. To perform the failback, the SnapMirror relationships must be resynchronized back to the original production storage. This can be accomplished in one of two ways: Resynchronizing the existing SnapMirror relationship: If the production storage system is still online, available, and has a common SnapMirror snapshot copy, then the SnapMirror relationship can be resynchronized. During this resynchronization process, only data that has changed since the SnapMirror snapshot copy will be transferred back to the production storage system. Synchronizing a new SnapMirror relationship: If the production storage is lost and a new storage system is in place, a full synchronization of the data will be required. This will require a new SnapMirror relationship.
Best practice
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
17
When failing back to the original production Exchange Server, make sure you select the Clean Up Destination task. This will help make sure all remnant Exchange configurations are cleaned up and prepared for failback.
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
18
It is recommended that Protection Manager and the N series Management Console be installed on a dedicated server that is not an Exchange Server. Through SME, a data set is created and assigned to a policy that has been defined in Protection Manager. The data set includes information such as storage system name, volume/qtree names, and LUN name for the storage groups which will be protected. Through Protection Manager, an administrator will assign a resource pool for the policy and choose the secondary storage that will host the archived data. Protection Manager will subsequently set up the relationships and apply the rules that are set forth in the policy that is assigned to the data set. Once Protection Manager is aware of data sets created by SME, SME is able to protect new backup sets using the Archive local backup using SnapVault option in the backup window or backup wizard. Once the backup process has completed successfully, SME will communicate with Protection Manager, through SnapDrive, to archive the specified backup set. Protection Manager will identify the correct snapshot copies on the storage system and update the SnapVault relationship accordingly. Best practice If SnapVault relationships exist for volumes containing Exchange data that is protected with SME and Protection Manager, those relationships must be imported into Protection Manager. Failing this, new SnapVault relationships will be created for those volumes. SME allows database verifications to be performed on the SnapVault destination volume. In order to take advantage of this feature and to utilize the secondary storage, a separate verification job must be scheduled after a successful backup operation completes with the archive option selected. The backup verification job will communicate with Protection Manager, through SnapDrive, all the necessary configuration information to perform the verification on the secondary storage. Once the verification job is complete, SME will mark the backup set on the primary storage as verified. The data set and SnapVault integration with SME is supported on stand-alone Exchange Server and clustered Exchange Servers, both CCR-enabled clusters and single-copy clusters. In a clustered environment, an Exchange administrator has the option to create a data set on both nodes of the cluster. The data sets will be distinguished by appending the node name to the data set name that SME assigns. The advantage of SnapVault integration with SME through Protection Manager is significant for an Exchange administrator. It simplifies archiving of backup sets created by SME on cheaper and larger secondary storage systems. You can archive more often and retain larger amounts of valuable Exchange data that needs to be retained and protected for extended periods of time. You can also manage that archived data using Protection Manager and monitor the environment using Operations Manager. The entire suite of products provides an administrator with a total data protection and archiving solution.
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
19
controllers. This could result in the need to have different vendor storage controllers on each node of a CCR cluster, which is now supported by SME 5.0. An Exchange administrator can realize the benefits of SME 5.0, with its configuration, backup and restore capabilities, with only a single node of a CCR cluster on an N series storage controller. It does not matter which node (active or passive) is hosted by N series storage, but whichever node it is, thats the node where SME will run. If the active node resides on N series storage, SME performs its actions on the active node. It cannot manage the passive node that is hosted by another vendors storage system. Best practice SnapDrive and SME must be installed on both nodes of the CCR cluster. SME will run from the node that is hosted by N series storage systems. Best practice As required by CCR, both nodes of the cluster must have the same drive letters and file path locations. When deploying a heterogeneous configuration, make sure that both the third-party storage and N series storage are capable of having identical paths on both nodes.
Summary
N series SnapManager 5.0 for Microsoft Exchange is an integral component of the N series data management solution for Microsoft Exchange Server environments. By reducing backup and restore times, minimizing Exchange outages, and consolidating Exchange storage, SME delivers a cost-effective solution for managing critical Exchange data.
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
20
The recommendations made in this paper are intended to be best practices for most environments. This paper should be used as a set of guidelines when designing, deploying, or administering SnapManager for Microsoft Exchange. To make sure of a supported and stable environment, review the concepts presented in this paper and involve an Exchange specialist if necessary.
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
21
Resources
These Web sites provide useful references to supplement the information contained in this document: System Storage on IBM PartnerWorld ibm.com/partnerworld/systems/storage IBM Systems on IBM PartnerWorld ibm.com/partnerworld/systems/IBM Publications Center IBM Publications Center www.elink.ibmlink.ibm.com/public/applications/publications/cgibin/pbi.cgi?CTY=US IBM Redbooks ibm.com/redbooks IBM developerWorks ibm.com/developerWorks IBM Techdocs ibm.com/support/techdocs/atsmastr.nsf/Web/TechDocs Microsoft www.microsoft.com
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
22
IBM system Storage N series and SnapManager 5.0 for Microsoft Exchange
23