DRaaS by Eplexity 2017
Eplexity Disaster Recovery as a Service (DRaaS) provides continuous replication of critical applications, infrastructure, data and systems to the cloud to enable rapid recovery after an IT outage. DRaaS delivers an Eplexity fully managed service helping businesses to reduce costs and at the same time gaining Eplexity’s credible history of resiliency expertise. DRaaS provides end-to-end integrated services using private, public and/or hybrid cloud.
Eplexity has focused on the following key points in developing a solution for the Client:
Replication Agents Eplexity DRaaS provides a host based logical replication solution whereby client-side agents are installed on the specific client server(s) to be protected and Eplexity works with the Client to determine the best way to address the operating systems, data, applications, and hardware in the Client environment. We do not choose a “one size fits all” philosophy understanding each Client will have unique circumstances which will often dictate that best way to go often utilizing the underlying capabilities of technologies already present in the Client’s environment.
Replication network The Eplexity DRaaS infrastructure will interface with the Client’s hosts across a network. Depending on client requirements, a number of options exist to communicate with the Eplexity DRaaS infrastructure for replication of data and user access networks such as MPLS, Point-2-Point, Over-Internet, Secure VPN and IPSEC. By default the replication network will provide one way replication in steady-state, but can be reversed or bidirectional replication following an event for failback operations..
Private Management Network All management of the environment is conducted over a dedicated management network accessible only by Eplexity NOC Centre and personnel. All access and use of this network is controlled and monitored by a dedicated security group.The network also allows monitoring and auditing of support personnel usage.This network is protected through a secure firewall that provides an IPsec virtual private network (VPN). The VPN permits only specific hosts and users to gain access and then only after entering the proper validation sequence. Logs of each access are retained for audit by the Eplexity Service delivery group.Eplexity support staff access is permitted using centralized authentication. Each user must have an account on the server along with valid credentials for authenticating against the centralized authentication server. This enables the delivery security group to enforce password policies in a centralized manner, allows for the expedient revocation of credentials when necessary, and also allows the security group to limit which Prime environments a given individual within the support organization can access providing the ability to use factors such as geographic region or other characteristics as access limiting factors.
Shared or Dedicated Hardware The Eplexity DRaaS infrastructure can deliver a number of deployment options or delivery models depending on client requirements such as a multi-tenant (shared) PoD (Point-of-Delivery) or a Dedicated PoD with location service options such as Eplexity private or public clouds in over 3+ data centers in the US. Depending on the deployment model, Eplexity DRaaS infrastructure consist of common switches, firewalls, routers, and target storage for data replication, management, replication and recovery servers providing a secure and isolated environment for each client whether shared or dedicated amongst DRaaS subscribers as a cloud architecture. The number of physical and/or virtual servers to be protected will be based on client requirements and capacity goals established during the initial phases of the proposal activity and confirmed prior to the start of service.
Dedicated Storage Data replicated to the Eplexity DRaaS Infrastructure will be written to and maintained on dedicated storage. Storage is always dedicated as it contains client’s data, therefore it is secured with Eplexity DRaaS. Storage to be used will be based on client performance requirements and capacity goals established during the initial phases of the proposal activity and confirmed prior to the start of service.
Server and Infrastructure Security The replication service will be secured and monitored by the Eplexity’s Network Operation Center. Eplexity DRaaS is based on Eplexity’s internal security standards along with industry best practices.User access on management network granted based on centrally managed authorization credentials.Eplexity’s strict security policy is in place on each server used to provide management oversight of the environment. The Eplexity security scan as specified by Eplexity is run once a month to validate compliance and the results are inspected by the security group. All unneeded services are disabled on the management server(s) such that only those required to run reporting and monitoring will be active.By default replication will be one way with the Client data center initiating replication and the Eplexity Resiliency Services target data center receiving data. At the conclusion of a disaster event, replication back to the source site may be requested by the customer to be performed on a custom basis.Centralized endpoint monitoring software is used on each backup appliance and DRaaS infrastructure to validate the security status of the environment. This software also enables expedient remediation of any security issues found within the environment and facilitates the application of critical patches.
Remote Troubleshooting All remote troubleshooting and remediation is included in your monthly fees, as per the limitation of the service package chosen. Any service that requires an on-site engineer is charged at Eplexity applicable hourly service rates service rates.
Support for Infrastructure Requirements Upon request, Eplexity will provide infrastructure consultation services to determine if the customer has the required circuit, hardware, and software at each location to establish the proper connectivity. There may be a charge for these consultative services, which will be determined and established in advance.