DR Active/Active Primary Sites Deployment

The DR Scenario Environment

DR Scenario Environment Map

In this example, the active/active scenario has three primary sites:

  • Amsterdam
  • New Jersey
  • Singapore

Example DR Component Layout

In this example, U-Series Appliances in each of the three primary datacenters Amsterdam, New Jersey, and Singapore, are connected to a MS SQL Always On Availability Group.

Each U-Series Appliance can initially assume any mix of roles and may be reconfigured at any time after deploying into production.

Example of DR Component Layout

This example contains U-Series Appliances that have been configured for the following roles:

U-Series Appliance - Admin Node U-Series Appliance - A&R Node U-Series Appliance - Worker Node
Admin Management Analytics Discovery Scanner
Admin Console A&R Db Password Portal
Password Portal SSIS Session Recording
Discovery Scanner SSAS Password Management
Session Recording SSRS  
Password Management    

You can see that many more U-Series Appliances can be added, each with varying roles: Scanners, Event Servers, Password Portals, Session Managers, and Password Management. Behind load balancers, U-Series Appliances may be added for redundancy and scalability. For example, session managers configured to send recordings to archive servers can be brought down with no loss of data or functionality. As many U-Series Appliances may be added as required and pointed at the availability group.

Only one admin (manager) service is supported at any one time but this may be configured to failover to a secondary U-Series Appliance.

Microsoft SQL Always On Availability Groups may consist of a primary replica, and up to 8 secondary replicas in either synchronous-commit or asynchronous-commit mode. Replicas are supported in both Azure and AWS environments; a typical deployment model comprising an asynchronous replica in the cloud provides access to password data in the event that all on-prem components become unavailable.

In this example, an additional async commit replica has been added in a cloud environment (AWS or Azure) to provide DR capability. BeyondTrust has an AMI U-Series Appliance available (https://aws.amazon.com/marketplace/seller-profile?id=edb65982-bb22-445e-854b-c1156a5026d9), and an Azure U-Series Appliance.