Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

BCDR MicroHack Berlin Edition #147

Merged
merged 43 commits into from
Mar 20, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
43 commits
Select commit Hold shift + click to select a range
16bde5c
Update Readme.md
diesher Mar 14, 2024
b7040dc
Update Readme.md
diesher Mar 15, 2024
194b854
Update Readme.md
diesher Mar 15, 2024
0f87847
Update Readme.md
diesher Mar 15, 2024
b99ee34
challenge-1 Screenshots updated.
demirsenturk Mar 15, 2024
2025529
updated BCDR challenge-01 Screenshots
demirsenturk Mar 15, 2024
69c3147
Update solution.md
demirsenturk Mar 15, 2024
d8acef6
Upload challenge-2 walkthrough images.
demirsenturk Mar 15, 2024
a987e51
Update solution.md
demirsenturk Mar 16, 2024
5370c77
Update solution-2.md
demirsenturk Mar 16, 2024
8a1d94e
Added solution-2 images.
demirsenturk Mar 16, 2024
bb1ebfa
Update solution-2.md
demirsenturk Mar 16, 2024
b299fc9
Add files via upload
demirsenturk Mar 16, 2024
c8f64e5
Update solution-2.md
demirsenturk Mar 16, 2024
db4a019
Updated solution-3.md
demirsenturk Mar 16, 2024
61ebe68
BCDR solutions new section added,
demirsenturk Mar 16, 2024
9b89752
Update solution-6.md
demirsenturk Mar 16, 2024
70dfee1
Update solution-4.md
demirsenturk Mar 16, 2024
2d5a5cf
added solution-4 images
demirsenturk Mar 17, 2024
6a90c23
Update solution-4.md
demirsenturk Mar 17, 2024
eb1cc00
Add images solution-4
demirsenturk Mar 17, 2024
99fd225
Update solution-2.md
demirsenturk Mar 17, 2024
ea71509
Update solution-4.md
demirsenturk Mar 17, 2024
5308a79
added solution-4 images
demirsenturk Mar 17, 2024
c13e556
Update solution-5.md
demirsenturk Mar 17, 2024
c374b40
Added BCDR solution-5 images
demirsenturk Mar 17, 2024
c477deb
Update solution-5.md
demirsenturk Mar 17, 2024
e26976b
Updated Readme.md
demirsenturk Mar 17, 2024
e5c6e02
Update solution-5.md
demirsenturk Mar 17, 2024
a1c90dd
solution-4 updated
demirsenturk Mar 17, 2024
844c444
Updated solution-2,3,4
demirsenturk Mar 17, 2024
e9be73f
Update solution-5.md
demirsenturk Mar 17, 2024
b1be97b
Update solution-1.md - minor adjustments WEU/NEU -> GWC/SC
demirsenturk Mar 19, 2024
c542366
Typos corrected and parts rewritten to make it more clear.
ajendreieckm Mar 19, 2024
ad6ad77
Update solution.md
diesher Mar 19, 2024
b77b8c4
Updated solutions-2. Added Firewall rule instructions.
demirsenturk Mar 19, 2024
927bd8f
Merge branch 'BCDRMicrohackBerlinEdition' of https://github.com/micro…
demirsenturk Mar 19, 2024
bf68c6f
Add files via upload
diesher Mar 19, 2024
f4043c9
Update solution.md
diesher Mar 19, 2024
68148f1
Update Readme.md
diesher Mar 19, 2024
ac19ccd
Update solution.md
diesher Mar 19, 2024
f3eb32f
Update solution.md
diesher Mar 19, 2024
cff5d0d
Add files via upload
diesher Mar 19, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
172 changes: 94 additions & 78 deletions 03-Azure/01-03-Infrastructure/04_BCDR_Azure_Native/Readme.md

Large diffs are not rendered by default.

Original file line number Diff line number Diff line change
Expand Up @@ -11,58 +11,58 @@ Please ensure that you successfully verified the [General prerequisits](../../Re

### **Task 1: Write down the first 3 steps you would go for if your company got attacked by ransomware**

💡 The first three steps often depend on the employee's perspective. Are you an IT leader, CIO, CEO, or just can't work with you systems you are using on a daily basis?
💡 The first three steps often depend on the employee's perspective. Are you an IT leader, a CIO, a CEO, or just can't work with the systems you are using on a daily basis?

* An employee's perspective
* In order to be prepared in an emergency, it is normal that employees are informed at regular intervals about an emergency plan and there are also exercises for such emergencies at predefined intervals. If, for example, an employee is the victim of a ransomware attack, he should be informed about any necessary steps through previous exercises.
* An employee's perspective:
* In order to be prepared for an emergency, it is normal that employees are informed at regular intervals about the emergency plan, as well as provided exercises for such emergencies at predefined intervals. If, for example, an employee is the victim of a ransomware attack, they should be informed about any necessary steps through previous exercises.

* A CISO´s perspective
* The CISO plays a very special role and should be informed at all times about such incidents. In order to ensure this, he should always know how to react in an emergency and also ensure together with the IT manager that teams are informed and trained about regular coordination and emergency exercises.
* A CISO´s perspective:
* The CISO plays a very special role and should be informed at all times about such incidents. In order to ensure this, they should always know how to react in an emergency and also ensure, together with the IT manager, that teams are well-informed and regularly trained in coordination and emergency drills.

* CEO perspective
* In order to keep the damage of any incidents / emergencies as low as possible, appropriate requirements should be defined to enable the C-Suite to act as a role model in case of a disaster. Such as highly business-critical applications that always have to run and on which the focus should be in the event of an error in order to protect the company from image loss or complete standstill. It should be clearly defined at the highest level which requirements for availability a company can and must guarantee and, above all, it must be ensured that the management regularly demands them within the framework of business continuity management.
* A CEO perspective:
* In order to keep the damage of any incidents / emergencies as low as possible, appropriate requirements should be defined to enable the C-Suite to act as a role model in case of a disaster. In order to keep the damage of any incidents / emergencies as low as possible, appropriate requirements should be defined to enable the C-Suite to act as a role model in case of a disaster. To protect the company from image loss or complete standstill, priority should be given to highly business-critical applications (that always have to run) in case of an emergency. The availability requirements the company can and must guarantee should be clearly defined, and, above all, they must ensure to regularly demand them within the framework of the Business Continuity Management.

💥 **Here are the first three general steps that are typically happen:**
1. Everybody struggles with finding the right person and process for triggering the disaster recovery & Business continuity plan
2. If somebody finds the plan, the first three actions for the reaction are not valid anymore because of changes in the org structure
3. Do not sress to much we have a backup and the availability requirements are defined on Hypervisor and Storage level - let´s start the failover to the 2nd Datacenter and the users are able to work again in half an hour or so
💥 **Here are the first three common steps that typically happen:**
1. Everybody struggles with finding the right person and process for triggering the Disaster Recovery & Business Continuity plan.
2. If somebody finds the plan, the first three actions are not valid anymore because of changes in the organization structure (plan not up-to-date).
3. Do not stress too much as we have a backup, and the availability requirements are defined on Hypervisor and Storage level - let´s start the failover to the 2nd Datacenter and the users are able to work again in half an hour or so.

🔑 **Key to a successful strategy in case of a disaster**
- The key to success is not a technical consideration of the topic, but a clear demarcation of responsibilities, requirements and true success is only guaranteed if you test regularly according to the previously defined requirements.
- The key to success is not a technical consideration of the topic, but a clear demarcation of responsibilities, requirements and regular test. True success is only guaranteed if you test regularly according to the previously defined requirements.

### **Task 2: Think about if you every participated in a business continuity test scenario**
### **Task 2: Think about if you ever participated in a business continuity test scenario**

Here it is only a matter of dedicating oneself to the topic and considering whether the emergency plan has ever been tested in the company and who is part of it. It can also be considered whether appropriate measures in case of success or failure were derived to increase the quality next time.

Ask yourself the questions:
1. Can i take a active part in the optimization process from the emergency plan?
2. Whom should i involve?
3. Do i have feedback for application owners for the applications i am working with?
1. Can I take an active part in the optimization process from the emergency plan?
2. Whom should I involve?
3. Do I have feedback from the application owners for the applications I am working with?
4. When was the last succesful failover in my organization?
5. Ask internally when the next failover is planned to test the disaster plan?
5. Ask internally when the next failover is planned to test the disaster recovery plan.

### **Task 3: Put yourself in the position of an application owner and define the necessary steps to make sure your application stays available in case of a disaster**

Here is a small outlook on which topics you should deal with or at least work closely with IT to sharpen the requirements and be prepared in case of errors.

1. Test regulary
2. Test for resiliency
3. Design a backup strategy
4. Design a disaster recovery strategy
5. Codify steps to failover and fallback
6. Plan for regional failures
7. Implement a retry logic
8. Configure test and health probes
9. Segregate read and write interfaces
1. Test regularly.
2. Test for resiliency.
3. Design a backup strategy .
4. Design a Disaster Recovery strategy .
5. Codify steps to failover and fallback.
6. Plan for regional failures.
7. Implement a retry logic.
8. Configure test and health probes.
9. Segregate read and write interfaces.

* [Checklist Testing for reliability](https://learn.microsoft.com/en-us/azure/architecture/framework/resiliency/test-checklist)
* [Resiliency testing](https://learn.microsoft.com/en-us/azure/architecture/framework/resiliency/testing)
* [Backup and disaster recovery plan](https://learn.microsoft.com/en-us/azure/architecture/framework/resiliency/backup-and-recovery)

### Task 4: Who defines the requirements for Business Continuity and what are the necessary KPI´s for an application to reach a good SLA in terms of availability?
### **Task 4: Identify who defines the requirements for Business Continuity and what are the necessary KPI´s for an application to reach a good SLA in terms of availability**

- Different categories that are often seen as the same
- There is a big difference and in most of the infrastructure of traditional it departments there is a 100% mirror from hardware over two datacenters
- What is the difference between High Availability, Disaster Recovery and Business Continuity?
- There is a big difference, and in most of the infrastructure of traditional IT departments, there is a 100% mirror from hardware over two datacenters
- The 100% mirroring of the hardware ensures that all applications have a fully redundant setup, but in just a few cases this is needed
- According to experience, however, only 10-20% of applications really need a classification in Highly Business Critical, the rest are often grouped into Moderate, Low or even just Backup & Restore.

Expand All @@ -72,7 +72,7 @@ Here is a small outlook on which topics you should deal with or at least work cl



### Task 5: Plan the different geographic regions you need to use for reaching the highest availability SLA (can also include your datacenter locations)
### **Task 5: Plan the different geographic regions you need to use for reaching the highest availability SLA (can also include your datacenter locations)**

![image](/03-Azure/01-03-Infrastructure/04_BCDR_Azure_Native/walkthrough/challenge-0/img/Customerneeds_RPO_RTO.png)

Expand Down
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ Duration: 20 minutes

Please ensure that you successfully verified the [General prerequisits](../../Readme.md#general-prerequisites) before continuing with this challenge.

### Task 1: Create Azure Resources in region West Europe
### Task 1: Create Azure Resources in region Germany West Central

Sign in to the [Azure Portal](https://portal.azure.com/).

Expand All @@ -24,72 +24,86 @@ Sign in to the [Azure Portal](https://portal.azure.com/).
###### Basics
![image](./img/004.png)

###### Networking
###### Redundancy
![image](./img/005.png)

###### Tags
###### Encryption
![image](./img/006.png)

###### Review + Create
###### Vault properties
![image](./img/007.png)

###### Networking
![image](./img/008.png)

###### Tags
![image](./img/009.png)

###### Review + Create
![image](./img/010.png)

#### Create Storage Account
[Create Storage Account | Microsoft Learn](https://learn.microsoft.com/azure/storage/common/storage-account-create)

###### Basics
Storage Account Names need to be unique in a region, so please add a suffix to the generic name mhstweu

![image](./img/008.png)
![image](./img/011.png)

###### Advanced
Advanced settings don't need to be modified for this Micro Hack

![image](./img/009.png)
![image](./img/010.png)
![image](./img/011.png)
![image](./img/012.png)
![image](./img/013.png)

###### Networking
![image](./img/012.png)
![image](./img/014.png)

###### Data protection
![image](./img/013.png)
![image](./img/014.png)
![image](./img/015.png)

###### Encryption
![image](./img/015.png)
![image](./img/016.png)

###### Tags
![image](./img/016.png)
![image](./img/017.png)

###### Review
![image](./img/017.png)
![image](./img/018.png)
![image](./img/019.png)
![image](./img/020.png)

### Task 2: Create Azure Resources in region North Europe
### Task 2: Create Azure Resources in region Sweden Central
#### Create Resource Group
[Create Resource Group | Microsoft Learn](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/manage-resource-groups-portal#create-resource-groups)
![image](./img/020.png)
![image](./img/021.png)
![image](./img/022.png)
![image](./img/023.png)

#### Create Recovery Services Vault

###### Basics
![image](./img/023.png)

###### Redundancy
![image](./img/024.png)

###### Networking
###### Encryption
![image](./img/025.png)

###### Tags
###### Vault properties
![image](./img/026.png)

###### Review + Create
###### Networking
![image](./img/027.png)

###### Tags
![image](./img/028.png)

###### Review + Create
![image](./img/029.png)

## You successfully completed challenge 1! 🚀🚀🚀
###### Resources in region 1
![image](./img/028.png)
![image](./img/030.png)
###### Resources in region 2
![image](./img/029.png)
![image](./img/031.png)
Loading
Loading