eviden-logo

Evidian > Products > High Availability Software - Zero Extra Hardware > Siemens Siveillance cluster without shared storage on a SAN

Siemens Siveillance cluster without shared storage on a SAN

[SafeKit] Synchronous real-time replication, high availability and migration of virtual machines between two servers

How the Evidian SafeKit software simply implements a Siemens Siveillance high availability cluster without shared storage on a SAN?

The solution for Siemens Siveillance

Evidian SafeKit brings high availability to Siemens Siveillance between two servers of any brand.

This article explains how to implement quickly a Siemens Siveillance cluster without shared storage on a SAN and without specific skills.

The principle of the solution is to put Siemens Siveillance in a virtual machine under Hyper-V. SafeKit implements real-time replication and automatic failover of the virtual machine.

Note that Hyper-V is the free hypervisor included in all Windows versions (even Windows for PC).

A solution open to several applications

Several applications can be put in several virtual machines replicated and restarted by SafeKit. You have the possibility to migrate each virtual machine between both servers with the SafeKit console and thus balance the load in an active-active cluster.

[SafeKit] A Siemens Siveillance cluster without shared storage on a SAN

Save costs with this solution

There is no need for complex VMware-type solution with three servers and shared storage on a SAN or vSAN. With SafeKit, you will have instead synchronous real-time replication and failover of several virtual machines between two servers.

And with the standard Hyper-V manager GUI, you will be able to manage very simply your virtual machines.

Note that you can implement with the SafeKit product real-time replication and failover of any file directory and service, database, complete Hyper-V or KVM virtual machines, Docker, Podman, K3S, Cloud applications (see all solutions).

Notes

  • For Siveillance VMS and the recording servers, use the integrated failover mechanism and not SafeKit. Recorders can be excecuted at the host level on both physical servers, or in 2 virtual machines on both physical servers (not replicated by SafeKit).
  • Another solution exists for Siemens Siveillance VMS at the application level which can work in any infrastructure (physical servers, any hypervisor including VMware...).

About products under Siemens LMS licensing

  • To avoid the broken Siemens license on failover, the dongle containing the Siemens key can be put in a USB over IP device (like DIGI AnywhereUSB).
  • The dongle can also be put in an external PC with the LMS license server on the PC (for example the PC which manages the Siemens graphical interface).
  • In recent versions of the Siemens licensing system, the license key can be put in the Trusted Platform Module of the VM (enable before TPM on the VM). Then, the license key will be replicated by SafeKit as well as all VM files.

How the SafeKit Hyper-V cluster works with replication and failover of Siemens Siveillance?

The following steps are described for one virtual machine containing Siemens Siveillance inside one mirror module. Each replicated virtual machine runs in an independent mirror module (with a maximum of 32 virtual machines) with a primary server that can be either the Hyper-V server 1 or the Hyper-V server 2.

Step 1. Real-time replication

Server 1 (PRIM) runs the VM (virtual machine) containing Siemens Siveillance. SafeKit replicates in real time the VM files (virtual hard disk, VM configuration). Only changes made in the files are replicated across the network.

Synchronous replication in a Hyper-V cluster with Siemens Siveillance

The replication is synchronous with no data loss on failure contrary to asynchronous replication.

You just have to configure the VM directory name in SafeKit. There are no pre-requisites on disk organization. The directory may be located in the system disk.

Step 2. Automatic failover

When Server 1 fails, Server 2 takes over. SafeKit restarts the VM containing Siemens Siveillance on Server 2. Hyper-V finds the files replicated by SafeKit uptodate on Server 2. 

The VM continues to run on Server 2 by locally modifying its files that are no longer replicated to Server 1.

Failover in a Hyper-V cluster with Siemens Siveillance

The failover time is equal to the fault-detection time (set to 30 seconds by default) plus the VM reboot time. 

Step 3. Automatic failback

Failback involves restarting Server 1 after fixing the problem that caused it to fail. SafeKit automatically resynchronizes the VM files.

Failback in a Hyper-V cluster with Siemens Siveillance

Failback takes place without disturbing the VM containing Siemens Siveillance, which can continue running on Server 2.

Step 4. Back to normal

After reintegration, the VM files are once again in mirror mode, as in step 1. The system is back in high-availability mode, with the VM containing Siemens Siveillance running on Server 2 and SafeKit replicating file updates to Server 1.

Return to high availability in a Hyper-V cluster with Siemens Siveillance

If the administrator wishes the VM to run on Server 1, he/she can execute a "swap" command either manually at an appropriate time, or automatically through configuration.

Typical usage with SafeKit

Why a replication of a few Tera-bytes?

Resynchronization time after a failure (step 3)

  • 1 Gb/s network ≈ 3 Hours for 1 Tera-bytes.
  • 10 Gb/s network ≈ 1 Hour for 1 Tera-bytes or less depending on disk write performances.

Alternative

Why a replication < 1,000,000 files?

  • Resynchronization time performance after a failure (step 3).
  • Time to check each file between both nodes.

Alternative

  • Put the many files to replicate in a virtual hard disk / virtual machine.
  • Only the files representing the virtual hard disk / virtual machine will be replicated and resynchronized in this case.

Why a failover ≤ 32 replicated VMs?

  • Each VM runs in an independent mirror module.
  • Maximum of 32 mirror modules running on the same cluster.

Alternative

  • Use an external shared storage and another VM clustering solution.
  • More expensive, more complex.

Why a LAN/VLAN network between remote sites?

Alternative

  • Use a load balancer for the virtual IP address if the 2 nodes are in 2 subnets (supported by SafeKit, especially in the cloud).
  • Use backup solutions with asynchronous replication for high latency network.

SafeKit, a recognized solution on the security market

Milestone has chosen SafeKit

SafeKit is deployed in 30+ countries with the video management software of Milestone.

SafeKit is validated by Milestone for redundancy and high availability of the management server.

SafeKit is the best solution because it is purely software, completely hardware-agnostic.

Solution preferred by Siemens

SafeKit is available in the Siemens marketplace with its Siveillance suite (video and access control) and with its SCADA software: Desigo CC (building management), SIMATIC WinCC, SIMATIC PCS 7.

SafeKit is deployed by Siemens in Australia, France, the Netherlands, Qatar, Switzerland, the UAE, the UK, the US.

SafeKit recommended by Nedap

Nedap, a key player in physical access control, recommends SafeKit for redundancy and high availability of its AEOS application.

The Nedap/SafeKit solution is available with a free trial and a quick installation guide.

TIL Technologies has chosen SafeKit

SafeKit is deployed in 100+ customer sites by TIL Technologies for access control and building management.

SafeKit is the high availability option of MICROSESAME.

Innovation award in Video Management Software

Readers of Benchmark Magazine (specialized in physical security systems for resellers & SI) have voted for SafeKit as an innovation in Video Management Software.

This award shows the importance of redundancy in security offerings.

SafeKit High Availability Differentiators