© 2015 VMware Inc. All rights reserved. vCloud ® Air™ Disaster Recovery Technical Presentation Patrick Kremer, Systems

2 1vCloud Air Disaster Recovery Overview 2Architecture 3Design Considerations 4Automation Options Agenda

VMware vCloud ® Air™ is a secure public cloud operated by VMware, built on the trusted foundation of vSphere. The service supports both existing workloads as well as new application development, giving IT a common platform to seamlessly extend their data center to the cloud leveraging the same tools and processes they use today. vCloud Air Offerings

1 Dependent on available bandwidth Warm standby capacity on vCloud Air Self-service protection, failover and failback workflows per VM 15 min 1 – 24 hr. recovery point objective (RPO) Initial data seeding by shipping a disk Includes: 7-day run time per DR test 30 days of recovered VM run time Simple and secure asynchronous replication and failover for vSphere What is it? 4 SITE A (PRIMARY) vCLOUD AIR, SITE B (RECOVERY) DR Instance CONFIDENTIAL vCloud Air Disaster Recovery

vCloud Air Locations CONFIDENTIAL5 vCloud Government Service vCloud Air Europe UK Europe Germany US Gov Arizona US Northern California US Nevada US Texas US New Jersey US Virginia US Gov Virginia Japan West Australia

The simplest way to protect your workloads 6 Encapsulation: Simple Application Protection Entire system – including application, OS, and data – is stored as virtual machine files Just right click and replicate Flexible Infrastructure: Integrates with what you already have Support for multiple vSphere versions Support for multiple Virtual Machine Hardware versions Hybrid Aware: Seamless Integration with vCloud Air Integrate with your existing on-premises vSphere environment Scale your protection capacity to meet variable demand CONFIDENTIAL

Fully Integrated with vCenter Web Client Consistent management and operational best practices… Single interface and common management Designed to integrate with vCloud Air Doesn’t require “console hopping” 7CONFIDENTIAL

Disaster Recovery Decision Maker 8 Seeking DR Solution? Budget for Second Data Center/Managed Service? Pass vCloud Air - DR Internal SkillsHosted Solution Co-existence Yes No Yes Co-existence Yes (Default) (Partner service contract) True Multi-Tenancy & Multi-Site Storage agnostic support Support for different vSphere versions Shared cloud infrastructure Simplified management UI embedded in vSphere (v5.1+) Protect VMs with a couple of clicks Automatable failover and testing Installable in current environment Administration via vCloud Air console and API* vCloud Air Disaster Recovery vCloud Air USvCloud Air AsiavCloud Air EUR VMware vSphere customers SRM

TIER 1 TIER 2 TIER 3 Managed by SRM SAN-Based Replication vSphere Replication ON-PREMISES DATA CENTER SITE A REMOTE SITE B vCLOUD AIR, SITE C (RECOVERY) DR Instance vCloud Air DR Co-Existence with SRM CONFIDENTIAL9

Disaster Recovery Architecture

Disaster Recovery Service Architecture 11 vCloud Air Disaster Recovery Customer Data Center Source VMDKs Destination VMDKsSource VMDKs Destination VMDKs SSL Based Replication Reverse Replication

Built-in Encryption of Data in Flight Encryption of replication traffic (in-flight) is provided between the following endpoints in vCloud Air Disaster Recovery. ESXi VR Appliance (vCloud Tunneling) Public Internet or Direct Connect PLC vCloud Air (Cloud Proxy) Host Based Replication (HBR) WebSocket (SSL) Encryption ESXi 12 vSphere CONFIDENTIAL

Components & Architecture CONFIDENTIAL13 DR Appliance vCenter ESX vCTA vCenter ESX ESXi VCD-sp vRMS vR vRCS Hybrid DR Services vRS A B C vSphere Components Replication and Cloud Components Security Components vSphere UI vRMS Plugin VCD Admin UI vCloud Air Portal vSM Tenant (On-Premises Datacenter) Provider (vCloud Air Cloud) Cloud Proxy vRMS ESXi

Disaster Recovery Scale Out CONFIDENTIAL VMware vSphere VMware vCenter A vSphere Replication A 1,000 VMs VM Replication DR-VDC A VMware vSphere VMware vCenter B vSphere Replication B 2,000 VMs VM Replication DR-VDC B VMware vSphere VMware vCenter C vSphere Replication C 3,000 VMs VM Replication DR-VDC C 14

Disaster Recovery Scale Out Two Sites, One Cloud 15CONFIDENTIAL VMware vSphere VMware vCenter A vSphere Replication A 500 VMs VM Replication VMware vSphere VMware vCenter B vSphere Replication B 500 VMs VM Replication Max 1,000 VMs

System Requirements for vCloud Air Disaster Recovery VMware vCenter 6.0 – vSphere Essentials Plus – vSphere Standard – vSphere Enterprise – vSphere Enterprise Plus vSphere Replication Appliance 6.0 ESXi 5.1 or above* ─ ESXi 5.5 U2 or above recommended Public internet connectivity – No proxy or traffic filtering device 16 vCloud Air Disaster Recovery subscription vCloud Air DR-VDC instance Plan * Check VMware interoperability matrix for latest version support: CONFIDENTIAL

© 2015 VMware Inc. All rights reserved. Disaster Recovery Setup and Configuration Demonstration

Disaster Recovery Design Considerations

Considerations for Failover 19 Sizing How much standby storage? How much standby compute? Security Assessment Does your CSO need to be involved? What approvals are needed? Networking and Connectivity Do you need Direct Connect? Do you need VPN? How many Networks? Workload Prioritization Is storage-based replication in place? Is SRM in place? Which workloads to protect when? Self-service failover driven by consumer action CPU RAM and Storage drive sizing requirements Commensurate bandwidth to support data volume and change rate Type of workloads to protect, Tier 1, Tier 3 CONFIDENTIAL

Considerations for Failover Cloud (“DR-VDC”) pre-configuration required to streamline failover operations and aide in faster recovery times Local authentication required? Access needs to manage the environment? Infrastructure Active Directory DNS Networking DHCP / IP Re-addressing L4-L7 services redirect Storage Resource allocation changes Management RBAC CONFIDENTIAL20

Basic DRaaS CONFIDENTIAL21

DRaaS with IaaS Cross-Connect “Pilot Light” CONFIDENTIAL22

DRaaS with IaaS Cross-Connect “Pilot Light”, single WAN CONFIDENTIAL23

DRaaS with IaaS Cross-Connect Pilot Light / Prod, dual WAN CONFIDENTIAL24

“Pilot Light” Virtual Machines With Physical Sites 25 Corp HQ West Coast AD03AD04VIRTUAL MACHINE Private Network ( /24) Private Network ( /24) EDGE GATEWAY Any IPSEC Endpoint INTERNET vCloud Air Disaster RecoveryCorp HQ (East Coast) IPSEC VPN REPLICATION CONFIDENTIAL

“Pilot Light” Virtual Machines with Cross Connect 26 Customer Data Center AD01 Private Network ( /24) EDGE GATEWAY Private Network ( /2 4) vCloud Air Disaster Recovery AD02 Customer Cage vCloud Air Direct Connect (1gbps) Customer Router REPLICATION CONFIDENTIAL

“Pilot Light” Virtual Machines with VPC OnDemand IPSEC VPN EDGE GATEWAY VPC OnDemand (Virgina) vCloud Air Disaster Recovery (Virginia) Test Network Corp/Recovery Network EDGE GATEWAY On-Premises Data Center (San Francisco) PROTECTED WORKLOADS Domain Network IPSEC VPN Endpoint ADDNS ADDNS Domain Network IPSEC VPN Corp Network REPLICATION vCloud Air CONFIDENTIAL27

“Pilot Light” Virtual Machines On-Premises Data Center (San Francisco) PROTECTED WORKLOADS Domain Network IPSEC VPN Endpoint ADDNS IPSEC VPN Corp Network REPLICATION CONFIDENTIAL28 vCloud Air Disaster Recovery (Virginia) Corp/Recovery Network EDGE GATEWAY ADDNS Domain Network Test Network vCloud Air

IPSEC VPN EDGE GATEWAY VPC OnDemand (Virgina) vCloud Air Disaster Recovery (Virginia) Test Network Corp/Recovery Network EDGE GATEWAY ADDNS Domain Network vCloud Air Connecting to your workloads HTTP/HTTPS CONFIDENTIAL29

IPSEC VPN EDGE GATEWAY VPC OnDemand (Virgina) vCloud Air Disaster Recovery (Virginia) Test Network Corp/Recovery Network EDGE GATEWAY ADDNS Domain Network vCloud Air Connecting to your workloads – VPN CONFIDENTIAL30 VPN

Current Disaster Recovery Automation Options

Attach vCloud Air Disaster Recovery Site Configure Outgoing Replication Test Failover Disaster Recovery Process Examples Setup & Configuration Configure Networks In vCloud Air Initial Sync Seeded ODT Full Failover CONFIDENTIAL32 Attach vCloud Air Disaster Recovery Site Configure Incoming Replication Test Failback Failback Process Delete Original vSphere VM* Initial Sync Seeded ODT Perform Full Failback

Tools for automation Disaster Recovery Automation Options vCO/vRealize Automation Puppet/Chef or 3rd party solutions Managing VM changes Additional networks IP Changes Manual RunBook Creation vCloud API’s vCloud Air Extensions RaaS Extensions Networking Extensions Automation for: Failover Testing Failback Startup Orders Recovery Groups CONFIDENTIAL33

vRealize Orchestrator Plugin 34 Workflows included plugin Configure replication to the cloud Configure replication from the Cloud Register Cloud Site Initiate Planned Migration to Cloud Test Recover to Cloud Test Clean Up CONFIDENTIAL

Hybrid cloud-based DR automation with SRM Air CONFIDENTIAL35 vCloud Air VDC DR automation Failover Failback On-prem Data Center Easy setup Failover and failback Multiple recovery plans IP address changes Multi-site topologies Non-disruptive testing Priority groups Startup dependencies Roadmap

Site Recovery Manager Air: Cloud-Based DR Automation & Orchestration 36 SITE A (PRIMARY) vCLOUD AIR, SITE B (RECOVERY) FAILBACK FAILOVER DR Instance SITE RECOVERY MANAGER AIR Easy setup Failover and failback Multiple recovery plans IP address changes Multi-site topologies Non-disruptive testing Priority groups Startup dependencies No Secondary Site to manage Design and Execute from a web browser CONFIDENTIAL Roadmap

CONFIDENTIAL vRealize Orchestrator – Where to put it? 37 EDGE GATEWAY VPC OnDemand (Virgina) vCloud Air Disaster Recovery (Virgina) Test Network Corp/Recovery Network EDGE GATEWAY On-Premises Data Center (San Francisco) PROTECTED WORKLOADS Domain Network ADDNS vRO Corp Network REPLICATION vCloud Air API CALLS Monitor On-Premises Data Center ? VM

CONFIDENTIAL38 Questions? CONFIDENTIAL38 Today’s slide deck available at: