{"id":8762,"date":"2019-12-16T06:31:08","date_gmt":"2019-12-15T20:31:08","guid":{"rendered":"https:\/\/nsrd.info\/blog\/?p=8762"},"modified":"2019-12-16T06:31:14","modified_gmt":"2019-12-15T20:31:14","slug":"meme-monday-2","status":"publish","type":"post","link":"https:\/\/nsrd.info\/blog\/2019\/12\/16\/meme-monday-2\/","title":{"rendered":"Meme Monday"},"content":{"rendered":"\n<p>OK, let&#8217;s look at common data protection challenges through the eyes of memes again!<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"600\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/Philosoraptor-Backup-Monitoring.jpg\" alt=\"\" class=\"wp-image-8763\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/Philosoraptor-Backup-Monitoring.jpg 600w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/Philosoraptor-Backup-Monitoring-300x300.jpg 300w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/Philosoraptor-Backup-Monitoring-150x150.jpg 150w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/Philosoraptor-Backup-Monitoring-144x144.jpg 144w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><figcaption>How do you know your KPIs if you&#8217;re not monitoring your backups?<\/figcaption><\/figure>\n\n\n\n<p>I&#8217;m a big fan of backup monitoring. When I was a backup administrator, I&#8217;d spent anywhere up to the first hour of each day reviewing all the NetWorker savegroup completion reports that would come in overnight and actioning them. Ah, those were the days! But, those days are gone \u2013&nbsp;you just don&#8217;t have the time to sit and read an email for each backup group or policy that&#8217;s run each morning. The business expects you to do more, with less \u2013&nbsp;and that means more work with less time. So that means for many of us, our unread badges look something like this:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"http:\/\/cdn.osxdaily.com\/wp-content\/uploads\/2014\/04\/unread-mail-number-iphone.jpg\" alt=\"\"\/><figcaption>Image originally from <strong><a href=\"http:\/\/osxdaily.com\/2014\/04\/29\/hide-unread-mail-number-icon-ios\/\">Hide the unread email number on Mail Icons for iPhone &amp; iPad<\/a><\/strong>.<\/figcaption><\/figure>\n\n\n\n<p>Not me. I get the screaming heebie-jeebies if I see lots of unread badges somewhere. I don&#8217;t subscribe to <em>Inbox Zero<\/em>, but I&#8217;m just not a fan of knowing there are all sorts of emails and messages I need to get to.<\/p>\n\n\n\n<p>If you&#8217;re a backup administrator (or increasingly, an infrastructure administrator), you should be able to just glance at a data protection dashboard at the start of the day and see whether there&#8217;s anything you need to dig into. In my opinion, that&#8217;s probably the best thing Data Protection Central gives you is this:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"308\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/DPC-The-Key-Bits-1024x308.png\" alt=\"\" class=\"wp-image-8765\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/DPC-The-Key-Bits-1024x308.png 1024w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/DPC-The-Key-Bits-300x90.png 300w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/DPC-The-Key-Bits-768x231.png 768w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/DPC-The-Key-Bits.png 1104w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption>DPC&#8217;s At a Glance Dashboard is Your Best Friend in Data Protection<\/figcaption><\/figure>\n\n\n\n<p>Sure, it&#8217;s not always going to be 100% successful every day. I won&#8217;t pretend otherwise: backup, and data protection more broadly has too many systems involved to get 100% success 100% of the time. But you don&#8217;t need to read (or receive) all those individual backup notifications if you can look at a single dashboard and see whether things have been working \u2013&nbsp;especially if that allows you to drill in on any failures (as DPC does).<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"600\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/auditors-are-coming.jpg\" alt=\"\" class=\"wp-image-8766\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/auditors-are-coming.jpg 800w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/auditors-are-coming-300x225.jpg 300w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/auditors-are-coming-768x576.jpg 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><figcaption>Auditors &#8230; more terrifying than White Walkers?<\/figcaption><\/figure>\n\n\n\n<p>My first encounter with auditors involved having to refute a scathing report where our team was judged to be willfully apathetic towards security because the password for every account on our systems was &#8216;*&#8217;. Reality: that&#8217;s what was in \/etc\/passwd, because we were using \/etc\/shadow. We really did have good passwords.<\/p>\n\n\n\n<p>It seems everyone has at least one bad story when it comes to auditors. That&#8217;s not to say that you can&#8217;t have good stories when it comes to auditors. After all, most of the time they&#8217;re just doing their job \u2013 their goal is to help you prove to the business that everything is A-OK.<\/p>\n\n\n\n<p>If the business you work for has to be periodically audited for compliance relating to data protection KPIs and practices, your most invaluable tool is going to be <strong>Data Protection Advisor<\/strong>. Configured correctly, it&#8217;s going to give you a wealth of data, including:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Adherence to KPIs, including:<ul><li>Backup success ratios<\/li><li>Replication success ratios<\/li><li>Recovery success ratios<\/li><li>Backup and replication timeframes<\/li><\/ul><\/li><li>Security access monitoring\/reporting<\/li><li>3-Strike reports (DPC will give you that, too)<\/li><li>Report-cards<\/li><li><em>and so much more<\/em><\/li><\/ul>\n\n\n\n<p>Even things as straight-forward as the backup report card can make your life easier when it comes to successfully completing audits. What&#8217;s more, those sorts of reports are going to make your day-to-day job so damn easy, too:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"532\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/DPA-Report-Card-1024x532.png\" alt=\"\" class=\"wp-image-8767\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/DPA-Report-Card-1024x532.png 1024w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/DPA-Report-Card-300x156.png 300w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/DPA-Report-Card-768x399.png 768w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/DPA-Report-Card.png 1357w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption>DPA Report Card<\/figcaption><\/figure>\n\n\n\n<p>Imagine being challenged by an auditor about your success ratios for backup and recovery and producing, within seconds, a report showing your results for the past month?<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"300\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/Backup-and-Restore-KPIs-1024x300.png\" alt=\"\" class=\"wp-image-8768\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/Backup-and-Restore-KPIs-1024x300.png 1024w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/Backup-and-Restore-KPIs-300x88.png 300w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/Backup-and-Restore-KPIs-768x225.png 768w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/Backup-and-Restore-KPIs.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption>Backup and Restore KPIs<\/figcaption><\/figure>\n\n\n\t<div class=\"wp-block-jetpack-gif aligncenter\">\n\t\t<figure>\n\t\t\t\t\t\t\t<div class=\"wp-block-jetpack-gif-wrapper\" style=\"padding-top:117%\">\n\t\t\t\t\t<iframe src=\"https:\/\/giphy.com\/embed\/l3q2K5jinAlChoCLS\" title=\"surprise\"><\/iframe>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t<figcaption class=\"wp-block-jetpack-gif-caption gallery-caption\">Auditor&#8217;s Reaction to Backup and Recovery KPIs Report<\/figcaption>\n\t\t\t\t\t<\/figure>\n\t<\/div>\n\t\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"700\" height=\"393\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/source-dedupe-1.jpg\" alt=\"\" class=\"wp-image-8770\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/source-dedupe-1.jpg 700w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/source-dedupe-1-300x168.jpg 300w\" sizes=\"auto, (max-width: 700px) 100vw, 700px\" \/><figcaption>Source deduplication is often scary fast<\/figcaption><\/figure>\n\n\n\n<p>Source side deduplication \u2013&nbsp;true, source-side deduplication, is crazy fast to watch. It&#8217;s common to see even within large organisations that 99.9% or more backups, done as a full backup every day, complete in less than 30 minutes.<\/p>\n\n\n\n<p>Can you imagine that? If you&#8217;re still stuck in a three-tier architecture going to tape, it&#8217;s a big jump. Sure, daily incrementals might not take too much time, but what about daily fulls? I remember when I was a backup administrator shuddering any time someone asked me if we could do a full backup of such-and-such a system each day.<\/p>\n\n\n\n<p>There are times when you need to do target-based deduplication. I get that. But those times should be few and far between, and should be the exception rather than the rule? Why would you waste your network bandwidth and backup window sending 100% of your data over the LAN only to throw away 95% of it? Why not throw away 95%-99% of it before it even leaves the client? That&#8217;s the joy of source-based deduplication.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"532\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/forgot-to-add-that-filesystem-to-the-backup.jpg\" alt=\"\" class=\"wp-image-8772\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/forgot-to-add-that-filesystem-to-the-backup.jpg 800w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/forgot-to-add-that-filesystem-to-the-backup-300x200.jpg 300w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/forgot-to-add-that-filesystem-to-the-backup-768x511.jpg 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><figcaption>You can&#8217;t possibly keep up with everything that needs protecting \u2013&nbsp;let the system do its work<\/figcaption><\/figure>\n\n\n\n<p>When I used to do backup implementation and support services, I don&#8217;t know how many times I&#8217;d have that sort of bone-chilling conversation with a customer where I&#8217;d have to tell them that they couldn&#8217;t recover some filesystem because they&#8217;d configured NetWorker to only backup specific filesystems, and never included that particular path.<\/p>\n\n\n\n<p>You see, NetWorker, like other enterprise backup products, has special &#8220;auto-selection&#8221; options that tell it: &#8220;back up everything automatically mounted on this client&#8221;. NetWorker literally calls it the &#8220;All&#8221; saveset. For Avamar, it&#8217;s the default of having &#8220;All Local <em>x<\/em> filesystems&#8221; as the dataset selection. I call these products <em>Exclusive<\/em> selection products because if there&#8217;s anything you <em>don&#8217;t<\/em> want to be protected, you have to explicitly <em>exclude<\/em> it. (The opposite, <em>Inclusive<\/em> selection products, require you to explicitly <em>include<\/em> everything you want to be protected.)<\/p>\n\n\n\n<p>The lesson here is simple: if your data protection product is zealous about making sure your data is protected, be very, very careful about deciding to force it to behave differently. It may seem like you&#8217;re getting some cunning space savings in the short term, but in the long term you, or someone who follows after you in your role, may have a <em>very<\/em> uncomfortable discussion ahead.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>OK, let&#8217;s look at common data protection challenges through the eyes of memes again! I&#8217;m a big fan of backup&hellip;<\/p>\n","protected":false},"author":1,"featured_media":8774,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[1154,1133,16,19],"tags":[126,134,301,342,1425,1548,1249,896],"class_list":["post-8762","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-avamar-2","category-best-practice","category-networker","category-recovery","tag-auditing","tag-avamar","tag-deduplication","tag-dpa","tag-dpc","tag-kpi","tag-networker","tag-sla"],"aioseo_notices":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2019\/12\/100-backup-success-ratios.jpg","jetpack_shortlink":"https:\/\/wp.me\/pKpIN-2hk","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts\/8762","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/comments?post=8762"}],"version-history":[{"count":3,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts\/8762\/revisions"}],"predecessor-version":[{"id":8775,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts\/8762\/revisions\/8775"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/media\/8774"}],"wp:attachment":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/media?parent=8762"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/categories?post=8762"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/tags?post=8762"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}