Protecting HPE 3PAR File Persona data with share or NDMP backup Using Veritas NetBackup

Contents Executive summary ................................................................................................................................................................................................................................................................. 2

Audience ........................................................................................................................................................................................................................................................................................... 2

Introduction .................................................................................................................................................................................................................................................................................... 2

HPE 3PAR File Persona ............................................................................................................................................................................................................................................... 2

Technology overview ............................................................................................................................................................................................................................................................ 2

HPE 3PAR File Persona Software Suite concepts and terminology .................................................................................................................................... 2

HPE 3PAR StoreServ Management Console ............................................................................................................................................................................................ 3

Veritas NetBackup ............................................................................................................................................................................................................................................................. 4

HPE-supported File Persona backup configurations with Veritas NetBackup ................................................................................................................ 5

Share backup .......................................................................................................................................................................................................................................................................... 5

NDMP backup ....................................................................................................................................................................................................................................................................... 8

Observations and lessons learned ......................................................................................................................................................................................................................... 12

Test results for the tested scenarios ................................................................................................................................................................................................................... 13

Conclusion ................................................................................................................................................................................................................................................................................... 13

Disclaimer ..................................................................................................................................................................................................................................................................................... 13

Useful links .................................................................................................................................................................................................................................................................................. 13

Technical white paper

Technical white paper Page 2

Executive summary This document describes the scenarios that allow backup and restore of HPE 3PAR File Persona using Veritas NetBackup. The configurations are designed to provide flexibility when backing up your file data whether through NDMP or share-configured backups.

Audience The descriptions and recommendations in this document are intended for customers and HPE sales representatives wanting to gain a better understanding using HPE 3PAR File Persona with Veritas NetBackup.

Introduction HPE 3PAR File Persona HPE 3PAR File Persona Software Suite is a licensed feature of the HPE 3PAR Operating System that enables a rich set of file protocols, an Object Access API (REST), and file data services. By unlocking File Persona capabilities, you gain the ability to provision File Shares and block volumes from a single user interface. This solution extends the spectrum of primary storage workloads natively addressed by the system’s default Block Persona.

The Block Persona is ideal for your virtualization, database, and application workloads with the File Persona enabling home directory consolidation, group and departmental shares, corporate shares, and custom cloud applications—all from truly converged controllers, truly agile capacity, and truly unified management. HPE 3PAR File Persona Suite is your key to unlocking this capability.

HPE 3PAR File Persona delivers NFS, Server Message Block (SMB), and object access on new HPE 3PAR StoreServ platforms. It boosts utilization and lowers costs by moving storage-affinity-related workloads such as data access, protection, and analytics directly into the storage operating system and controller. All block, file, and object access are now managed through a new HPE 3PAR StoreServ Management Console, which enables simple provisioning and features a search-enabled interface aligned with HPE OneView.

Technology overview HPE 3PAR File Persona Software Suite concepts and terminology HPE 3PAR StoreServ File Persona Software Suite comprises the following managed objects:

• File Provisioning Groups (FPGs)

• Virtual File Servers (VFSs)

• File Stores

• File Shares

The File Persona Software Suite is built upon the resilient mesh-active architecture of HPE 3PAR StoreServ and benefits from HPE 3PAR storage foundation of wide-striped logical disks and autonomic common provisioning groups (CPGs). A CPG can be shared between file and block to create the File Shares or the logical unit numbers (LUNs) to provide true convergence.

Technical white paper Page 3

Figure 1 represents the four managed objects for HPE 3PAR File Persona Software Suite within HPE 3PAR OS.

Figure 1. HPE 3PAR File Persona logical view

A FPG is an instance of the HPE intellectual property Adaptive File System. It controls how files are stored and retrieved. Each FPG is transparently constructed from one or multiple Virtual Volumes (VVs) and is the unit for replication and disaster recovery for File Persona Software Suite. Up to 16 FPGs are supported on a node pair.

A VFS is conceptually like a server. As such, it presents virtual IP addresses to clients, participates in user authentication services, and can have properties for things such as user/group quota management and antivirus policies. There are up to 16 VFSs supported on a node pair, one per FPG.

File Stores are the slice of a VFS and an FPG at which snapshots are taken, capacity quota management are performed, and antivirus scan service policies customized. There are up to 256 File Stores supported on a node pair, 16 File Stores per VFS.

File Shares provide data access to clients via SMB, NFS, and Object Access API, subject to the share permissions applied to them. Multiple File Shares can be created for a File Store and at different directory levels within a File Store.

File Shares and VFSs are managed as normal operations through StoreServ Management Console. File Stores and FPGs are typically managed explicitly for advanced operations only.

HPE 3PAR StoreServ Management Console Supported across all HPE 3PAR StoreServ Storage platforms, HPE 3PAR Operating System software utilizes advanced internal virtualization capabilities, features, and tools to increase storage management efficiency, capacity utilization, and performance in enterprise and cloud data centers. The OS simplifies storage management by handling provisioning and change management autonomically—intelligently, at a subsystem level, and without administrator intervention.

Industry-leading ease of use is delivered through the simple, unified HPE 3PAR StoreServ Management Console.

HPE 3PAR StoreServ Management Console brings unmatched simplicity, usability, and visibility to storage management by allowing you to administer all of your HPE 3PAR Storage systems from a single management window, including remote systems used for replication. A single screen provides a dashboard view of all your connected HPE 3PAR systems regardless of model, as well as graphical charts and tables representing important system data and remote replication configuration. HPE 3PAR StoreServ Management Console is fully integrated with signature HPE 3PAR applications including HPE 3PAR Thin Provisioning, Virtual Copy, Dynamic Optimization, Virtual Domains, Priority Optimization, and Remote Copy software, so everything you need to optimize your storage environment is in one place, and right at your fingertips.

Technical white paper Page 4

Features and benefits • Autonomic provisioning features eliminate traditional storage planning

• Simple, powerful administration tools deliver industry-leading ease of use

• Data protection and copy space reclamation features improve capacity utilization

Figure 2 shows a screenshot of the Dashboard that will give you a quick overview of the system. File Persona configuration can be done from here through the multiple drop-down menu choices.

Figure 2. HPE 3PAR StoreServ Management Console

For complete HPE 3PAR software requirements and compatibility lists, refer to the HPE 3PAR Array software section on the HPE SPOCK website.

Veritas NetBackup Veritas NetBackup is an enterprise-class data protection application. Its architecture is designed for a large and complex distributed computing environment. NetBackup provides scalable storage servers that can be configured for a variety of tasks such as backup, recovery, archiving, and file migration. NetBackup provides a variety of client agents for different operating systems and applications. NetBackup Media Servers can use disk or tape for storage targets.

Network Data Management Protocol (NDMP) is an optional Veritas NetBackup feature. It enables Veritas NetBackup to use NDMP to initiate and control backups and restores of File Persona Storage systems.1

1 Licensing for Veritas NetBackup NDMP must be purchased from your Veritas NetBackup representative. Refer to the latest version of the Veritas NetBackup for

NDMP Administrator’s Guide for installation and configuration guidelines.

Technical white paper Page 5

HPE-supported File Persona backup configurations with Veritas NetBackup Share backup In the share backup configuration, the data on the File Persona share is backed up using either SMB or NFS protocol. This is a network share backup. Hewlett Packard Enterprise recommends that the backup is done using the same protocol that the data was entered with. If you do not backup with the same protocol as the data was written to the share, then the ACLs are not preserved.

Configuration SMB share backup When backing up an SMB share using Veritas NetBackup, the backup policy type must be “MS-Windows” so that backup network drives can be selected.

Figure 3. SMB configuration page

Technical white paper Page 6

Figure 4. SMB backup selection

NFS share backup When backing up an NFS share using Veritas NetBackup, the backup policy type must be “Standard” so that “Follow NFS” can be selected.

Figure 5. NFS configuration page

Technical white paper Page 7

Figure 6. NFS backup selection

Data flow The NetBackup agent reads the data from the share using the appropriate protocol and then performs the backup to the destination of choice using the NetBackup Media Server to write to the target. In Figure 7, the destination is a SAN-attached HPE StoreEver. The flow of data will be from the share over the network to the Media Server. The Media Server will then write the data through the SAN to the library.

Technical white paper Page 8

Figure 7. Share scenario

Note While Figure 7 shows an HPE StoreEver Tape Library, other physical and virtual HPE libraries will work as well. Similarly, other vendor libraries should work with this configuration also. Refer to the HPE Support portal for compatibility and interoperability matrix.

NDMP backup The NDMP architecture uses a client-server model in which Veritas NetBackup host is the NDMP client or data management application (DMA). The DMA passes control data to the NDMP host-data mover or data server provider (DSP). The DSP maintains a state machine for each NDMP client connection that executes and maintains the backup and restore processes. For HPE 3PAR File Persona NDMP backups, the HPE 3PAR File Persona File Services node acts as the DSP.

NDMP backup configuration To configure an NDMP backup, follow the Veritas NetBackup documentation as you would for any other NDMP backup. When configuring the policy, make sure the Policy type is NDMP.

Technical white paper Page 9

Figure 8. Policy type selection

When configuring your backup selections in the NetBackup policy, refer to the SSMC File Share screen. Note the path and share name highlighted in Figure 9. You will need this information to back up the share.

Figure 9. Share and path selection

Technical white paper Page 10

Note The backup selection entered matches the /path/share name in the SSMC.

Figure 10. Backup selections

NDMP backup connectivity NDMP backups and restores between the File Persona and HPE StoreOnce will be done via an iSCSI connection to the VTL. The only supported target device for NDMP backups with File Persona is an iSCSI VTL as provided by HPE StoreOnce. This configuration involves installation of the NDMP module on the NetBackup Media Server (The NDMP agents are already installed on the File Persona nodes.) and iSCSI configuration on the HPE StoreOnce. It should be noted that the connectivity to the iSCSI targets is made over the same network connections as used to present shares.

Refer to the most recent version of the Veritas NetBackup for NDMP Administrator’s Guide for NDMP module installation.

To enable NDMP services, login to iSCSI library and configure access for DMA host:

1. From the HPE 3PAR CLI, enable NDMP agent:

un3par01 cli% startfsndmp

2. Obtain the iSCSI initiator name of the File Persona nodes:

un3par01 cli% showfsndmp

GlobalServiceStatus -----------------ClusterIqn-------------------------------

STARTED node0fs|[10.10.0.1]|iqn.1994-05.com.redhat:ce331a3b2568; node1fs|[10.10.0.2]|iqn.1994-05.com.redhat:12a93d717238;

Technical white paper Page 11

3. Configure the iSCSI library on the StoreOnce appliance using the IQN obtained from step 2.

4. Perform an iSCSI target login to the IP address of the StoreOnce System:

un3par01 cli% setfsndmp vtl +<ip address of the StoreOnce>

All the target VTL devices [<ip address>] are added in the configuration and discovered successfully.

5. Verify iSCSI target VTL devices:

un3par01 cli% showfsndmp –vtl vtltapes

VtlTapeId VtlNode VtlType VtlConnectedHost HPE_Ultrium_5-SCSI_US1938N6XS /dev/sg8 TapeDevice node0fs HPE_Ultrium_6-SCSI_D11C5BE688 /dev/sg11 TapeDevice node1fs HPE_Ultrium_4-SCSI_D11C5BE686 /dev/nst1 TapeDevice node0fs HPE_D2DBS_US1029NJ4D /dev/sg22 MediaChanger node1fs HPE_Ultrium_4-SCSI_US1029NJ26 /dev/nst2 TapeDevice node0fs HPE_Ultrium_6-SCSI_US1029NJ2N /dev/nst10 TapeDevice node1fs HPE_D2DBS_US1938N71H /dev/sg15 MediaChanger node1fs

6. Allow DMA access for any NetBackup NDMP host(s):

un3par01 cli% setfsndmp conf -dma +<ip address> -username <ndmp_user> -password <ndmp_pass> -enable_sessions true –tcpwinsize 163840 –maxsessions 128

NDMP configuration has been modified successfully

If you look at the drive serial number (S/N), you can go back to the StoreOnce appliance and compare the S/N of the drive you created and they should match.

If you go back to the StoreOnce appliance and look at the Active Connections tab on the iSCSI library you created, it will display a connection to the initiator you identified at the start of this configuration for each of the devices and sessions.

Data flow During an NDMP backup (Figure 11), data flows from the File Persona to the iSCSI library via the 10GbE NIC. Only the backup software’s control data, catalog data, and tape library commands are sent over the network utilizing the NDMP protocol. In this scenario, the HPE 3PAR File Persona node acts as the NDMP data mover or DSP. The Veritas NetBackup NDMP media server acts as the DMA server.

The DMA controls and maintains the backup schedule for all File Persona systems and coordinates activity between the File Persona devices when the backup session is initiated. Once the backup session is initiated, the DMA is released from the backup session. When the backup session is complete, the metadata is sent to the DMA, which updates the index with information pertaining to the backup session. Remember, the NDMP connection is tied to the HPE 3PAR File Services node IP. It is not connected to the HPE 3PAR File Persona Virtual File Server (VFS) IP. In the event of a failover, NetBackup will need the VTL reconfigured to point to the IP of the File Services node that was failed over to.

Technical white paper Page 12

Figure 11. NDMP scenario

Observations and lessons learned • The File Persona File Services node IP that the iSCSI VTL communicates with will not be accessible in the event of a failover. In this case,

Veritas NetBackup will need to have the backup configuration changed to reflect the IP of the File Persona node that was failed over to.

• When using Lightweight Directory Access Protocol (LDAP) environment, if the File Persona is not added to the LDAP domain or the LDAP user is not recognized, then restores will have ACLs that show up as “nfsnobody”.

• Back up with the same protocol that was used to write the data to the share. Otherwise, the ACL credentials will not be preserved.

• Backups with smaller files will run slower via NDMP than the share backup.

Technical white paper Page 13

Test results for the tested scenarios The following tests were executed for the certification of backup and restore solution.

Table 1. File Persona test cases

Feature Checked

Validation of backup/restore of File Persona Server Message Block (SMB) Yes

Validation of backup/restore of File Persona NFS share presentation Yes

Validation of backup/restore of Active Directory user Yes

Validation of backup/restore of LDAP user Yes

Validation of backup/restore of LOCAL user Yes

Validation of backup/restore of deep directory structure up to 100 levels Yes

Validation of backup/restore of million files Yes

Validation of backup/restore of large files (5 GB) Yes

Validation of backup/restore of quotas configurations Yes

Validation of backup/restore using NDMP configuration Yes

Validation of backup/restore in VLAN configuration Yes

Validation of Block backup/restore at same time as File Persona backup/restore Yes

Veritas NetBackup software installed without incurring any issues Yes

Conclusion This technical white paper outlines the scenarios that enable share and NDMP backups and restores of HPE File Persona systems using Veritas NetBackup, HPE StoreOnce, and HPE StoreEver tape libraries. The choices of either share or NDMP module enhances backup and restore flexibility by allowing customers to use NDMP with iSCSI or share backups and a dedicated Fibre Channel link to HPE StoreEver tape libraries to back up critical data.

Disclaimer The configurations in this document are HPE tested configurations. They are provided as a reference only, as configurations vary with specific customer needs. The mentioned memory, processor count and speed, and I/O storage recommendations should be considered as a minimum recommendation.

Useful links HPE 3PAR StoreServ Storage

HPE 3PAR StoreServ with File Persona ChalkTalk

HPE 3PAR StoreServ Management Console

HPE 3PAR StoreServ Management Console—Simplifying the user experience

Veritas NetBackup

HPE StoreOnce Data Protection

HPE StoreEver Tape Storage

Technical white paper

Sign up for updates

© Copyright 2015–2016 Hewlett Packard Enterprise Development LP. The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.

4AA5-8070ENW, October 2016, Rev. 2

Learn more at hpe.com/storage/spock