Automated network isolation for providing non-disruptive disaster recovery testing of multi-tier applications spanning physical and virtual hosts
Various systems, methods and apparatuses for creating network isolation spanning physical and virtual hosts are presented. In one embodiment, network isolation may be created between a primary (e.g., production) site and a secondary (e.g., a disaster recovery or sandbox) site. The network isolation allows testing (or other uses) on the secondary site to be non-disruptive to the normal operations of the sites, including the ability to failover during testing. Such non-disruptive network isolation allows certain communications to continue, especially communications between ports having replicated data. The network isolation may be customized in various other ways to allow certain communications to continue while preventing other communications. This invention can be used to validate application readiness, as well as to validate data correctness of individual tiers, and may be used with systems that contain multiple tiers, and include physical hosts, virtual hosts, and/or combinations of both.
1. A method comprising:
replicating data from a production site to a secondary site, wherein
the secondary site is configured with a secondary multi-tier application, and
the secondary multi-tier application is a copy of a primary multi-tier application executing on the production site;
configuring a firewall to provide network isolation between the primary multi-tier application and the secondary multi-tier application, wherein
the configuring the firewall allows the replicating to occur between the production site and the secondary site while the network isolation is ongoing; and
testing the secondary multi-tier application, wherein the testing comprises
testing the secondary multi-tier application while the replicating is ongoing.
2. The method of claim 1 , wherein the configuring the firewall further comprises
configuring the firewall to allow the secondary site to perform one or more operations that are not part of the testing, wherein
the one or more operations are performed during the testing.
3. The method of claim 1 , further comprising
using one or more daemons on the production site to collect one or more parameters from the production site, wherein
the one or more daemons collect the one or more parameters prior to the configuring the firewall.
4. The method of claim 3 , further comprising
providing the one or more parameters to one or more daemons on the secondary site, wherein
the providing occurs prior to the configuring the firewall.
5. The method of claim 1 , further comprising
updating a hostname mapping table, wherein
the hostname mapping table is stored on the secondary site prior to the testing, and
the hostname mapping table is used during the testing.
6. The method of claim 1 , further comprising
creating a clone of one or more service groups, wherein
each clone corresponds to a service group on the secondary site,
each clone corresponds to a service group on the production site, and
the creating the clone of each of the one or more service groups is performed prior to the testing.
7. The method of claim 1 , further comprising
stopping the testing prior completion of the testing, wherein
the stopping is performed in response to detecting a failure related to the production site; and
bringing the secondary site online in response to the detecting the failure.
8. A non-transitory computer-readable storage medium configured to store program instructions that, when executed on a processor, are configured to cause the processor to perform a method comprising:
replicating data from a production site to a secondary site, wherein
the secondary site is configured with a secondary multi-tier application, and
the secondary multi-tier application is a copy of a primary multi-tier application executing on the production site;
configuring a firewall to provide network isolation between the primary multi-tier application and the secondary multi-tier application, wherein
the configuring the firewall allows the replicating to occur between the production site and the secondary site while the network isolation is ongoing; and
testing the secondary multi-tier application, wherein the testing comprises
testing the secondary multi-tier application while the replicating is ongoing.
9. The non-transitory computer-readable storage medium of claim 8 , wherein the configuring the firewall further comprises:
configuring the firewall to allow the secondary site to perform one or more operations that are not part of the testing, wherein
the one or more operations are performed during the testing.
10. The non-transitory computer-readable storage medium of claim 8 , wherein the method further comprises:
using one or more daemons on the production site to collect one or more parameters from the production site, wherein
the one or more daemons collect the one or more parameters prior to the configuring the firewall.
11. The non-transitory computer-readable storage medium of claim 10 , wherein the method further comprises:
providing the one or more parameters to one or more daemons on the secondary site, wherein
the providing occurs prior to the configuring the firewall.
12. The non-transitory computer-readable storage medium of claim 8 , wherein the method further comprises:
updating a hostname mapping table, wherein
the hostname mapping table is stored on the secondary site prior to the testing, and
the hostname mapping table is used during the testing.
13. The non-transitory computer-readable storage medium of claim 8 , wherein the method further comprises:
creating a clone of one or more service groups, wherein
each clone corresponds to a service group on the secondary site,
each clone corresponds to a service group on the production site, and
the creating the clone of each of the one or more service groups is performed prior to the testing.
14. The non-transitory computer-readable storage medium of claim 8 , wherein the method further comprises:
creating a clone of one or more service groups, wherein
each clone corresponds to a service group on the secondary site,
each clone corresponds to a service group on the production site, and
the creating the clone of each of the one or more service groups is performed prior to the performing the test.
15. The non-transitory computer-readable storage medium of claim 8 , wherein the method further comprises:
stopping the testing prior completion of the testing, wherein
the stopping is performed in response to detecting a failure related to the production site; and
bringing the secondary site online in response to the detecting the failure.
16. A computer system comprising:
a processor; and
a memory coupled to the processor and configured to store instructions executable by the processor, the instructions configured to
replicate data from a production site to a secondary site, wherein
the secondary site is configured with a secondary multi-tier application, and
the secondary multi-tier application is a copy of a primary multi-tier application executing on the production site;
configure a firewall to provide network isolation between the primary multi-tier application and the secondary multi-tier application, wherein
the firewall is configured to allow the data to be replicated between the production site and the secondary site while the network isolation is ongoing; and
test the secondary multi-tier application, wherein the test comprises
testing the secondary multi-tier application while the data is being replicated.
17. The computer system of claim 16 , wherein
the firewall is further configured to allow the secondary site to perform one or more operations that are not part of the test, and
the one or more operations are performed during the test.
18. The computer system of claim 16 , wherein the instructions are further configured to use one or more daemons on the production site to collect one or more parameters from the production site, wherein
the one or more daemons collect the one or more parameters prior to the firewall being configured.
19. The computer system of claim 16 , wherein the instructions are further configured to update a hostname mapping table, wherein
the hostname mapping table is stored on the secondary site prior to the test, and
the hostname mapping table is used during the test.
20. The computer system of claim 16 , wherein the instructions are further configured to create a clone of one or more service groups, wherein
each clone corresponds to a service group on the secondary site,
each clone corresponds to a service group on the production site, and
the clone of each of the one or more service groups is created prior to the test.