eviden-logo

Evidian > Products > High Availability Software - Zero Extra Hardware > Siemens Desigo CC cluster without shared storage on a SAN

Siemens Desigo CC cluster without shared storage on a SAN

[SafeKit] Synchronous real-time replication, high availability and migration of virtual machines between two servers

How the Evidian SafeKit software simply implements a Siemens Desigo CC high availability cluster without shared storage on a SAN?

The solution for Siemens Desigo CC

Evidian SafeKit brings high availability to Siemens Desigo CC between two servers of any brand.

This article explains how to implement quickly a Siemens Desigo CC cluster without shared storage on a SAN and without specific skills.

The principle of the solution is to put Siemens Desigo CC in a virtual machine under Hyper-V. SafeKit implements real-time replication and automatic failover of the virtual machine.

Note that Hyper-V is the free hypervisor included in all Windows versions (even Windows for PC).

A solution open to several applications

Several applications can be put in several virtual machines replicated and restarted by SafeKit. You have the possibility to migrate each virtual machine between both servers with the SafeKit console and thus balance the load in an active-active cluster.

[SafeKit] A Siemens Desigo CC cluster without shared storage on a SAN

Save costs with this solution

There is no need for complex VMware-type solution with three servers and shared storage on a SAN or vSAN. With SafeKit, you will have instead synchronous real-time replication and failover of several virtual machines between two servers.

And with the standard Hyper-V manager GUI, you will be able to manage very simply your virtual machines.

Note that you can implement with the SafeKit product real-time replication and failover of any file directory and service, database, complete Hyper-V or KVM virtual machines, Docker, Podman, K3S, Cloud applications (see all solutions).

About products under Siemens LMS licensing

  • To avoid the broken Siemens license on failover, the dongle containing the Siemens key can be put in a USB over IP device (like DIGI AnywhereUSB).
  • The dongle can also be put in an external PC with the LMS license server on the PC (for example the PC which manages the Siemens graphical interface).
  • In recent versions of the Siemens licensing system, the license key can be put in the Trusted Platform Module of the VM (enable before TPM on the VM). Then, the license key will be replicated by SafeKit as well as all VM files.

How the SafeKit Hyper-V cluster works with replication and failover of Siemens Desigo CC?

The following steps are described for one virtual machine containing Siemens Desigo CC inside one mirror module. Each replicated virtual machine runs in an independent mirror module (with a maximum of 32 virtual machines) with a primary server that can be either the Hyper-V server 1 or the Hyper-V server 2.

Step 1. Real-time replication

Server 1 (PRIM) runs the VM (virtual machine) containing Siemens Desigo CC. SafeKit replicates in real time the VM files (virtual hard disk, VM configuration). Only changes made in the files are replicated across the network.

Synchronous replication in a Hyper-V cluster with Siemens Desigo CC

The replication is synchronous with no data loss on failure contrary to asynchronous replication.

You just have to configure the VM directory name in SafeKit. There are no pre-requisites on disk organization. The directory may be located in the system disk.

Step 2. Automatic failover

When Server 1 fails, Server 2 takes over. SafeKit restarts the VM containing Siemens Desigo CC on Server 2. Hyper-V finds the files replicated by SafeKit uptodate on Server 2. 

The VM continues to run on Server 2 by locally modifying its files that are no longer replicated to Server 1.

Failover in a Hyper-V cluster with Siemens Desigo CC

The failover time is equal to the fault-detection time (set to 30 seconds by default) plus the VM reboot time. 

Step 3. Automatic failback

Failback involves restarting Server 1 after fixing the problem that caused it to fail. SafeKit automatically resynchronizes the VM files.

Failback in a Hyper-V cluster with Siemens Desigo CC

Failback takes place without disturbing the VM containing Siemens Desigo CC, which can continue running on Server 2.

Step 4. Back to normal

After reintegration, the VM files are once again in mirror mode, as in step 1. The system is back in high-availability mode, with the VM containing Siemens Desigo CC running on Server 2 and SafeKit replicating file updates to Server 1.

Return to high availability in a Hyper-V cluster with Siemens Desigo CC

If the administrator wishes the VM to run on Server 1, he/she can execute a "swap" command either manually at an appropriate time, or automatically through configuration.

Typical usage with SafeKit

Why a replication of a few Tera-bytes?

Resynchronization time after a failure (step 3)

  • 1 Gb/s network ≈ 3 Hours for 1 Tera-bytes.
  • 10 Gb/s network ≈ 1 Hour for 1 Tera-bytes or less depending on disk write performances.

Alternative

Why a replication < 1,000,000 files?

  • Resynchronization time performance after a failure (step 3).
  • Time to check each file between both nodes.

Alternative

  • Put the many files to replicate in a virtual hard disk / virtual machine.
  • Only the files representing the virtual hard disk / virtual machine will be replicated and resynchronized in this case.

Why a failover ≤ 32 replicated VMs?

  • Each VM runs in an independent mirror module.
  • Maximum of 32 mirror modules running on the same cluster.

Alternative

  • Use an external shared storage and another VM clustering solution.
  • More expensive, more complex.

Why a LAN/VLAN network between remote sites?

Alternative

  • Use a load balancer for the virtual IP address if the 2 nodes are in 2 subnets (supported by SafeKit, especially in the cloud).
  • Use backup solutions with asynchronous replication for high latency network.

SafeKit, a recognized solution on the security market

Milestone has chosen SafeKit

SafeKit is deployed in 30+ countries with the video management software of Milestone.

SafeKit is validated by Milestone for redundancy and high availability of the management server.

SafeKit is the best solution because it is purely software, completely hardware-agnostic.

Solution preferred by Siemens

SafeKit is available in the Siemens marketplace with its Siveillance suite (video and access control) and with its SCADA software: Desigo CC (building management), SIMATIC WinCC, SIMATIC PCS 7.

SafeKit is deployed by Siemens in Australia, France, the Netherlands, Qatar, Switzerland, the UAE, the UK, the US.

SafeKit recommended by Nedap

Nedap, a key player in physical access control, recommends SafeKit for redundancy and high availability of its AEOS application.

The Nedap/SafeKit solution is available with a free trial and a quick installation guide.

TIL Technologies has chosen SafeKit

SafeKit is deployed in 100+ customer sites by TIL Technologies for access control and building management.

SafeKit is the high availability option of MICROSESAME.

Innovation award in Video Management Software

Readers of Benchmark Magazine (specialized in physical security systems for resellers & SI) have voted for SafeKit as an innovation in Video Management Software.

This award shows the importance of redundancy in security offerings.

SafeKit High Availability Differentiators