Azure VM High Availability & Disaster Recovery (part 2)

By Ashwin Venugopal -

 



To read part 1 please click here
To read part 3 please click here
To read part 4 please click here


High-availability of SAP application servers

High-availability can be simply achieved by redundancy through installing individual application servers on separate Azure VMs with at least two SAP application instances installed in two instances of Azure VMs. An Azure availability set can ensure that:
  • Each Azure belongs to a different upgrade domain ensuring that Hyper-V hosts hosting these VMs aren't updated at the same time during planned maintenance events that needs a temporary downtime.
  • Each Azure VM belongs to a different fault domain ensuring that VMs are deployed such that a localized rack-level failure does not affect the availability of all Azure VMs. 

High-availability of SAP ASCS-SCS instance

Additional provisions are needed by Azure VMs to implement the operating system-dependent clustering capabilities:
  • High-availability architecture for SAP ASCS/SCS instance on Windows (single-SID configuration)- Windows Server Failover Clustering (WSFC) solution can be used to protect the SAP ASCS/SCS instance which has following two variants- 

  1. Cluster the SAP ASCS/SCS instance by using clustered shared disks that can be implemented by using third-party solutions like SIOS Datakeeper.
  2. Cluster the SAP ASCS/SCS instance by using file share in which a highly available UNC/sapmnt share can be implemented by using WSFC with Scale Out File Server (SOFS) and the Storage Spaces Direct (S2D) feature in Windows Server 2016. 

  • High-availability architecture for SAP ASCS/SCS instance on Linux (single-SID configuration)- which needs the use of Linux clustering (Pacemaker with STONITH) and  a highly available NFS share, that can be provisioned by using Azure VMs in a separate cluster, Azure NetApp Files, or Red Hat GlusterFS.

  • High-availability architecture for SAP ASCS/SCS instance on Windows (multi-SID configuration)- It is supported only with WSFC by using file share and shared disk. 

High-availability for DBMS instance

The DBMS consists of a single point of failure in SAP system which can also be protected by using high-availability solution by deploying a DBMS layer in an active/passive mode along with a failover clustering solution to protect from infrastructure or software failures. 

The DBMS-specific failover framework generally integrates with the operating system-level clustering functionality and take advantage of the Azure platform support. For example, SQL Server Always On high-availability solution in Azure always integrates with Windows Server Failover Clustering and uses an Azure Load Balancer with an availability set. It also replicates DBMS data  and log files by using its own DBMS replication which eliminates the requirement for any shared storage.   

High-availability capabilities of Azure infrastructure

The following principles are used to maximize the high availability of SAP NetWeaver system in Azure:
  • The complete system is deployed on Azure.
  • The complete system runs within one Azure subscription.
  • The complete system runs within one Azure Virtual Network.
  • Each layer must use a dedicated Availability Set.
  • All VMs running DBMS instances of one SAP system are in one Availability Set.
  • All VMs use managed disks.
  • DBMS data and log files are replicated using DBMS high availability functions that synchronize the data.
  • (A)SCS instance files and SAP Global folder are either stored on a highly available file share or synchronously replicated between disks of two Azure VMs that are part of the same availability set.



To read part 1 please click here 
To read part 3 please click here
To read part 4 please click here

 



Comments

Post a Comment

Popular posts from this blog

Query, Visualize, & Monitor Data in Azure Sentinel

By Ashwin Venugopal -
Image
  Azure Sentinel Workbooks Several ready for use templates are provided by the Azure Sentinel that can be used to create your own workbook and then modify them as needed for Contoso. Most of the data connectors it uses to ingest data come with their own workbooks, but better insight can be obtained by simply looking into the data that is being ingested by using tables and visualizations, including bar and pie charts. You can also make your own workbook easily by using this data from the beginning instead of using the predefined templates. Workbook Page You can easily access the workbook page from the Azure Sentinel from the navigation pane which consists of the: Workbook header- You can add a new workbook and review the saved workbooks as well as templates that are available on the workbook page. Templates section- You can access existing workbook templates on the Templates tab. You can save some of the workbooks for quick access and they will appear on the My Workbooks tab.  From the
Read more

Work with String Data Using KQL Statements

By Ashwin Venugopal -
Image
  Extract Data from Unstructured String Fields Unstructured string fields often contains the Security log data and requires parsing to extract data. There are multiple ways of pulling information from string fields in KQL and the two primary operators used are extract and parse.  Extract It gets a match for a regular expression from a text string. You can convert the extracted substring to the indicated type.  Arguments regex- A regular expression. captureGroup- A positive int constant indicating the capture group to extract. 0 stands for the entire match, 1 for the value matched by the first '('parenthesis')' in the regular expression, 2 or more for subsequent parenthesis.  text- A string to search. typeLiteral- An optional type literal. If provided, the extracted substring is converted to this type.  Returns If regex finds a match in text- the substring matched against the indicated capture group captureGroup, optionally converted to typeLiteral. If there's no mat
Read more

Threat Hunting in Microsoft Sentinel (part 1)

By Ashwin Venugopal -
Image
  To read part 2, please click  here To read part 3, please click  here Introducing the Microsoft Sentinel Hunting Page Threat hunting is a series activities performed while investigating and as there are no guidelines to perform it, the available tools on the Microsoft Sentinel can be introduced to perform better in your investigations. Firstly, you have to choose the Hunting link in the Microsoft Sentinel navigation menu to get to the Hunting page which is divided into the following sections: The header bar- It is located at the top of the page as usual and contains Refresh as well as timespan drop down menu. The New Query button can help you with creating a new query and the Run all queries button can run all the hunting queries in the background while also updating the hunting query list section with the number of results found.  The summary bar- Here, you can view the total number of queries available to run, the total number of bookmarks, the number of results from running live
Read more