everRun Enterprise - with SE Building Management Systems

Solution Guide:

everRun Enterprise with SE Building Management Systems

EcoStruxure Building Labs Solution Guide - Buildings

Document Number: TDS-S-STRATUS-US.BU.N.EN.05.2018.1.00.CC - 2 –

Schneider Electric Confidential

In Brief

EcoStruxure Building Labs

EcoStruxure Building Labs are based in the Schneider Electric Boston One Campus located in Andover. MA. USA. They are funded by Buildings Division of the Buildings and IT Business Unit. There are two labs under the EcoStruxure Buildings Labs umbrella; a Solution Lab and an Interoperability Lab. The role of the Interoperability Lab is to provide tested building blocks that can be used alone or in the Solution Lab. The Solution Lab provide validated solution for the Building segment markets using tested building blocks from the Interoperability Lab.

EcoStruxure Building Labs personnel test, validate, and document integrated solutions that meet the needs of Schneider Electric customers. These solutions target specific vertical applications within a variety of markets. Our goal is to facilitate the integration process by recommending network architectures and proposing components. We also provide examples of integration procedures, relevant data points, and best practices for implementation.

Solution Guides for Buildings Solution Guides describe integrated building solutions designed to meet the needs of Schneider Electric customers. They provide systems integrators with the information they need to determine if a solution makes sense for a particular application. EcoStruxure Building Labs personnel evaluate each solution to confirm that it provides the features and functionality as described. Solution Guides are like TVDA documents (Tested, Validated and Documented Architecture), which are also produced by EcoStruxure Building Labs personnel, however, TVDA solutions are fully tested and validated within a EcoStruxure Building Labs.

About this Document This document was written for the Schneider Electric channel. Its goal is to describe a combined solution that partners Schneider Electric building management systems with everRun® software from Stratus Technologies. An example of this solution has been evaluated and is actively used in the EcoStruxure Buildings Solution Lab by Schneider Electric EcoStruxure Building Lab personnel.

This document provides systems integrators and project engineers with the information necessary to evaluate the feasibility of similar solutions and to make design decisions. The following items are included:

• System architecture

• Key component descriptions

• EcoStruxure Building Lab evaluated system

This document complements existing product documentation and references such documents where appropriate. Readers possessing a solid understanding of Schneider Electric building management systems will benefit the most from the information provided.

Disclaimer

This document does not attempt to describe the proposed solution in its entirety. Users are responsible for compliance with national and international safety laws and regulations. Solution functionality depends on specific versions of software and hardware as described and may change as products are upgraded. This solution was tested and validated under laboratory conditions. Performance measurements do not guarantee future performance. This document does not replace any specific product documentation.




Revision History

Date Authors Revision Description

05.03.2018 MJB 1.0 Released for final review. Added changes based on comments

from Don Lemenager and Joost Verhofstad from Stratus.

© 2018 Schneider Electric. All Rights Reserved. Schneider Electric and EcoStruxure solution are trademarks owned by Schneider Electric Industries SAS or its affiliated companies. All other trademarks are the property of their respective owners.




Table of Contents

1 Introduction ......................................................................................................................... 5

1.1 everRun .................................................................................................................................. 5 1.2 everRun and SE Building Management Software .................................................................... 6

2 Market Overview ................................................................................................................. 7

2.1 Integrated Solution Customer Benefits ..................................................................................... 7 2.2 Target Applications and Customers ......................................................................................... 7 2.3 Use Case Examples ................................................................................................................ 7

3 Solution Overview ............................................................................................................... 8

3.1 How it works ............................................................................................................................ 8 3.2 What you need ....................................................................................................................... 11 3.3 Steps to take .......................................................................................................................... 12

4 Validated System .............................................................................................................. 13

4.1 Validated System Architecture ............................................................................................... 13 4.2 Validated System Components .............................................................................................. 13

5 Frequently Asked Questions ............................................................................................. 14




1 Introduction

This solution provides the means to deploy Schneider Electric building management systems in fault-tolerant applications.

1.1 everRun Stratus Technologies everRun® software is designed for use with applications for which unplanned downtime must be avoided. Designed to run on multi-core, multi-processor x64-based computer systems, everRun®

ensures that system failures do not result in loss of application availability or critical data.

With everRun, fault tolerance is achieved using two or more redundant servers which present as a single operating environment. Within this environment, applications continue to run despite component or system failures.

Key items to note about everRun:

• Works with off-the-shelf operating systems and hardware

• Provides real-time redundancy with automatic switchover to a standby system in the event of a failure

• Provides auto-recovery when failures are resolved

• Provides protection for one or more Virtual Machines and installed applications.

Stratus Technologies

As a company, Stratus Technologies offers a range of solutions that enable rapid deployment of always-on infrastructures. Their products (software and servers) and services ensure uninterrupted operation of critical




business systems. Stratus customers include financial services, manufacturing, public safety, healthcare, retail, and transportation companies. In September 2012, Stratus acquired Marathon Technologies and its everRun line of products.

Stratus Technologies provides a high level of training and technical support services to a global customer base. In addition, their team of technical consultants offers system assessment, design, and integration services. Additional information about Stratus is available on their website: http://www.stratus.com.

1.2 everRun and SE Building Management Software A server equipped with everRun software provides a fault tolerant platform on which any Windows-based application can run. By operating Schneider Electric building management software on this platform, the databases used to store application programs and data remain accessible in the event of a server failure. everRun accomplishes this by actively maintaining two copies of a building management system’s database, one on each of two servers in a pool (a pool consists of two servers).

For many building management applications, a small delay between server failure and restoration can be tolerated. For these applications, simple, cost effective approaches to protecting the building management system database (such as automatic back-up) are appropriate. everRun is the best approach for data critical applications, where the slightest interruption in building data access or collection is problematic.

Examples of Building Management System Software:

• EcoStruxure WorkStation, Enterprise Server, and Report Server

• Andover Continuum CyberStation

• TAC I/A Series Enterprise Server

• TAC Vista Server

• Microsoft SQL Server

http://www.stratus.com/




2 Market Overview

2.1 Integrated Solution Customer Benefits Integrating Schneider Electric building management systems with Stratus everRun protects customers from downtime and data loss associated with a database server failure. In the event of such a failure, this solution offers the following benefits to customers:

• System redundancy is transparent to end-users; failover does not interfere with users’ ability to monitor and control building parameters

• Failover to backup server occurs automatically with no loss of building management data

• System redundancy is restored automatically when recovery from power or network losses occurs or replacement components are brought online.

• The steps required to install and configure BMS software applications on this system are no different than those required for an off-the-shelf Windows system.

2.2 Target Applications and Customers This solution makes the most sense for customer applications that require the highest level of building system availability or those that require fully automated handling of server or component failures, for example:

• Pharmaceutical and manufacturing

• Retail

• Hospitals

• Government agencies

• Airports and other highly secure facilities

2.3 Use Case Examples This solution has been successfully implemented in many customer applications, the characteristics of which include:

• Require the collection and archival of operating data to comply with government regulations.

• Have critical building needs that preclude any amount of system downtime.

• Contain mission-critical building spaces that cannot tolerate a momentary loss of data access.




3 Solution Overview

Schneider Electric’s building management systems are designed such that building control continues even when controller to server communication is disrupted. The BMS server is home to a database of alarm and historical data, as well as system parameters and programs. When a server or its network connection fails, the collection of data from building controller halts until the problem is resolved. For data critical applications, this solution provides an environment capable of preventing the data loss that often results from these types of failures.

3.1 How it works This solution uses Stratus’ everRun software to establish a fault tolerant Windows-based environment suitable for building management software applications and data storage. The platform for this environment is a networked set of x64-based, multi-core servers. Its design incorporates the redundancies necessary to avoid downtime resulting from critical component loss.

Protected software applications installed on the servers are synchronized by everRun via dedicated, redundant connections called Availability Links. Through continuous monitoring of the active server, everRun detects failures and seamlessly redirects control to a backup server as needed. When a power or network issue is resolved or repaired equipment comes back online automatically because everRun restores redundancy without user intervention. everRun makes it possible for system administrators and end-users to interact with the system as if it were a single server, without the underlying redundancies.

3.1.1 System Architecture

System Architecture Example – Two Local Hosts

As the diagram above illustrates, this solution is network intensive. It requires network connections that are dedicated to specific functions including Availability, Management, and Production. Each network has




redundant links using different NICs, cabling, and routing (i.e. one direct, one via the cloud). everRun uses Availability Links to mirror Protected Virtual Machine (PVM) contents. The Management network is dedicated to system configuration tasks. One or more Production networks provide connections to system workstations and corporate networks, and in this case, the BMS.

The simplest of configurations (depicted above) consists of two hosts with point-to-point Availability Link connections of less than three feet and a single Management console for configuration. Several factors, as described below, determine whether additional components are required.

Description of factors affecting system architecture:

Server Placement: System requirements vary based on the relative distance between the servers in a pool. Servers may be placed side-by-side, but more typically, they are in separate areas. By separating active and backup servers, the likelihood that both will be impacted by a single environmental or site failure is reduced. Stratus’ SplitSite capability, which is an add-on to everRun, provides this site disaster tolerance.

For building applications, servers are typically placed in different locations within the same site; each with its own routing and LAN connections, as well as, different primary and backup (UPS) power sources. Some applications require servers be placed in different sites connected via a WAN. In both instances, quorum services are required (see below).

Number of Servers: Two servers are required, with a two-server system, there is a loss of redundancy during the time it takes to repair a failed component. The precise availability achieved (e.g.99.999%) depends on the time it takes to repair (MTTR – mean time to repair), since the greater this time, the higher the probability of an outage.

Quorum Services: everRun’s quorum service software is required for most applications. Quorum services manage failover scenarios and prevent a problem known as split-brain, where a network failure results in a host operating independently from the other host.

Quorum services are required for systems that have Availability Link connections via a LAN or WAN (used, for example, when host servers reside in separate physical locations).

Quorum services must be implemented in a redundant fashion. The software is installed on two separately located computers that rely on unique power sources. Each computer requires a separate network connection to the Production LAN, along with a gateway connection to each Availability LAN.




3.1.2 Inside the Server

Virtual Machines: This approach uses virtual machines to house server applications. everRun software, which is installed on every server within a pool, provides tools for creating and managing virtual machines. everRun allows each virtual machine (VM) to function as an independent computer, with its own operating system and installed applications. It also provides each VM with access to the resources of its underlying server; such as RAM, storage devices and network connections.

Server Components

Protected Virtual Machines (everRun): Virtual machines created by everRun can be protected with everRun across two servers. everRun software is installed on each of the two servers. It provides fault tolerance by performing many functions:

• everRun continuously monitors the primary (active) server and seamlessly transfers control to an alternate in the event of a critical failure. Transfers occur without data loss and in a manner, that is transparent to the user.

• everRun oversees the creation and management of Protected Virtual Machines (PVMs). The contents of protected virtual machines are continuously mirrored on a second host.

• everRun shields the end-user from the complexity associated with a highly redundant system. Redundant servers are presented as one, with a single IP address, MAC address, and hostname. Using a simple web browser-based interface to the everRun Management Utility (called eAC – everRun Availability Console), system administrators can manage system resources and configure protection parameters.

BMS Software and Data: Building management system software applications reside within a protected virtual machine. Examples include workstation software, data archives, graphic files, and databases.

The procedures for installing software applications on a Stratus system are no different than for any standard off-the-shelf system. Applications need only be installed on a single server, as everRun automatically copies any change in PVM content to the backup server.




3.2 What you need This solution requires specialized expertise in addition to what the typical BAS Engineer may possess. The process of architecting this system requires additional knowledge and experience with the following technologies:

• everRun

• Multi-core x64- based servers

• RAID storage technology

• Networking with redundancy and security

• Virtual machines

• Microsoft SQL (where applicable)

Potential sources for this expertise include:

• Stratus Technologies and Schneider Electric Professional Services: Assistance with everRun system architecture, configuration, and installation needs is available, on a contract basis, from both Stratus and Schneider Electric. Certified everRun installers from both companies have hands-on experience implementing this solution at customer sites.

• Customer IT Department: An end-user’s IT personnel may contribute expertise in a variety of ways, including knowledge of site-specific standards and requirements that must be adhered to.

In addition to the building management system, the following components are required to implement this solution:

3.2.1 Intel processor based Hosts

This solution requires two or more x64-based servers are typically high-end machines equipped with multi-core processors and multiple network interface cards.

The architecture and requirements of the overall system will dictate the configuration of each host server. Servers should be similarly equipped and have compatible* processors. Each backup server must have sufficient capacity to efficiently manage protected applications while a system is under repair.

The necessary everRun software, documentation, and licenses are included with your purchase of everRun.

3.2.2 everRun

everRun protects every application resident on the virtual machines you designate as “protected”. A single licensed copy of everRun is approved for installation on the two hosts in an everRun system.

For applications in which servers will be in different locations, the everRun Split Site add-on option offers fault tolerance as described for everRun above, while separating the two servers in a campus-like setting. A campus-like setting is defined as a separation of up to a few miles with a very high-speed, low-latency interconnect. Additionally, the everRun Extend add-on option offers Disaster Recovery (DR) for systems geographically separated across a WAN. This DR solution provides real-time asynchronous data copying and a restart of the system after the primary site fails.

* We say, “compatible processors” as Intel processors from the last few years can be matched up, so an Ivy Lake processor can be matched up with a Broadwell processor in the other server.




3.2.3 Quorum Service Computers

Quorum service, when required, is established by installing the everRun Quorum Service software on any Windows-based computer capable of communicating with the two hosts under management. Each quorum service computer, of which there are two, is tasked with managing host behavior in response to a system failure. One is adequate, but if it goes down then one of the two redundant servers is disabled (i.e. we give up redundancy), to eliminate the possibility of getting “Split brain”. So even with one, there is no single point of failure in the system. When the quorum goes down we keep running, but lose redundancy. Two quorums are recommended, but not required.

Quorum service is required for all but one type of system – a system in which two servers have point-to-point Availability Link connections of three feet or less in length.

Quorum service software can coexist with other Windows-based applications on the same computer, but it is not recommended! As Quorum service computers needs to be in a third location, so if either side fails, the quorum survives.

3.2.4 everRun Management Interface

The purpose of the everRun Management interface is to provide users with the ability to monitor, configure, and manage everRun server environments. The interface is accessible via a Windows-based computer with network connections (over the management LAN) to both hosts and a web browser.

3.3 Steps to take This section provides an overview of the process of implementing this solution.

• Design and Build System Hardware: Architect the system and specify the components that will be used. This process requires the expertise of SE personnel trained in both IT practices and everRun. Once the system hardware and networks are in place, the process of establishing the server environment can begin.

• Install everRun: Install everRun software on the both servers. Install quorum service software, if needed, separate targeted machines.

• Create Virtual Machines: Use the Management interface to create virtual machines (VMs) and assign server resources to them. Typically, at least one VM is dedicated to BMS software and databases.

• Install Operating Systems and Applications: For each VM on the primary server, install a Windows operating system followed by the desired applications.

For detailed instructions, refer to the appropriate installation and user manuals.




4 Validated System

4.1 Validated System Architecture

There are many requirements for the network links used with an everRun implementation. The user needs to check the relevant section in the everRun User Manual for the details on the requirements, e.g. ability to pass IPv6 traffic, the need for links between the servers to be on the same subnet and other requirements.

4.2 Validated System Components The components used to test this solution include:

Component Version

Data Center Expert 7.5.0

Power Monitoring Expert 8.2

Continuum Web.Client 1.94

CyberStation 1.94

everRun Enterprise 7.4.0

ION Database Server (ION Enterprise) 8.0

SQL Server 2012 R2 Standard

StruxureWare ES 1.9.3

Struxureware Report Server 1.9.3




5 Frequently Asked Questions

Does this solution require the purchase of multiple licensed copies of each software application, one for each Server they will be installed on?

Software license policies vary with the type of application and the supplier. When installing any of Schneider Electric’s workstation applications on an everRun system, a single licensed copy is sufficient. However, applications, such as CyberStation 1.94, that make use of a hardware license key must also have a USB over IP concentrator. The purpose of the concentrator is to provide a USB port to receive the license key. Through the concentrator’s network connection, each VM is granted access to its respective license key. The AnywhereUSB® Concentrator from Digi has been tested and proven to work in this scenario.

For more information: http://www.digi.com/products/usb/anywhereusb#overview.

How does this approach compare with failover and cluster solutions, such as Microsoft Cluster Server?

In a nutshell, traditional cluster and failover systems are more difficult and costly to implement than everRun and rely on proper deployment for reliable failover performance. They are also limited in their ability to reliably detect low-level failures, in which case a failover is not triggered as required.

One of the distinguishing features of everRun is the use of virtualization. VMware offers a comparable solution called vSphere Fault Tolerance.

Do the VMs need to be configured identically (memory size, CPU etc)?

Each VM has the same amount of CPU, memory and disk space on each physical machine. So if Windows in a VM thinks it has 2 CPUs, 8GB of memory and 200GB of disk space, then that amount of CPU, memory and disk space are allocated for that VM on each physical server. Two VMs on an everRun system can have different amounts of CPU, memory and disk space.

Can everRun monitor on a specific windows service such as the EcoStruxure Building Operation ES?

everRun does not monitor services or applications. Windows will monitor services and restart them when they fail. everRun will monitor the VM, i.e. the entire Windows system and restart it when it appears to have stopped.

Is there any country restriction? Is this a global product solution?

There is no country restriction beyond the restrictions imposed by the USA government. It’s a global product available in several languages. User manuals are available in English, Chinese, German, and Japanese.

How is licensing handled?

Licenses are shipped as license keys that are installed when the system is set up. A license needs to be activated, which can be done by connecting the everRun system to the internet (to automatically connect to the Stratus support centre), or by calling Stratus support who will help with the activation of the license. License keys are shipped via email and software is downloaded from our web site.

Where can I buy everRun Enterprise?

Schneider Electric has a Reseller Agreement with Stratus, under which any Schneider Electric group can order directly from Stratus by sending a PO and be invoiced for that after shipment. everRun is also available for purchase on the iPortal for a while (see below for Schneider Electric model numbers for everRun Enterprise).

http://www.digi.com/products/usb/anywhereusb#overview




What are the Schneider Electric model numbers for everRun Enterprise?

Schneider Electric PRODUCT NUMBER

DESCRIPTION PRODUCT CATEGORY

PREREQUISITE

MAR-EE0001 Stratus® everRun Enterprise Edition Software for 2 socket servers (must be ordered with 1yr support - separate SKU)

EVERRUN LICENSE NONE

MAR-EEHA0001 Stratus® everRun Express Software for 2 socket servers HA Only (must be ordered with 1yr support - separate SKU)

EVERRUN LICENSE NONE

MAR-EES0001 everRun Enterprise Edition Software 2 Socket Support 1 Year

EVERRUN LICENSE EITHER MAR-EE0001 OR MAR-EEHA0001 (THIS IS AN ADD-ON)

MAR-EESHA0001 Customer Support for Stratus® everRun Express Software 2 Socket Support HA Only 1 Year

1 YR SUPPORT FOR AN EVERRUN LICENSE

This is 1-year support for a license.

MAR-EESP0001 everRun Enterprise SplitSite Add-On (must be ordered w 1yr support - separate SKU)


This is 1-year support for a license

MAR-EESPS001 1YR Customer Service for everRun Enterprise SplitSite Add-On



MAR-EEUGMXEN Upgrade MX to everRun 7.X MAJOR RELEASE UPGRADE OF EVERRUN LICENSE

You must have an everRun MX license under support to be able to purchase this upgrade

MAR-L-RHAWVMNW1PP

ARCSERVE RHA (EXTEND) FOR 2 MACHINES (INCLUDES ONE YEAR SUPPORT)

EVERRUN EXTEND LICENSE

NONE

MAR-L-RHAWVMNW1VV

ARCSERVE RHA (EXTEND) BETWEEN TWO EVERRUN VIRTUAL MACHINES (INCLUDES ONE YEAR SUPPORT)


TWO EVERRUN LICENSES, EITHER CAN BE MAR-EE0001 OR MAR-EEHA0001

MAR-L-RHAWWNW1VP

ARCSERVE RHA (EXTEND) BETWEEN AN EVERRUN VM AND A SINGLE MACHINE (INCLUDES ONE YEAR SUPPORT)


EITHER ONE MAR-EE0001 OR ONE MAR-EEHA0001

MAR-M-RHAWVMNW1PP

Extend P2P 1 Yr. additional Customer Service

1 YR SUPPORT FOR AN EVERRUN EXTEND LICENSE


MAR-M-RHAWVMNW1VV

Extend V2V 1 Yr. additional Customer Service



MAR-M-RHAWWNW1VP

Extend V2P 1 Yr. additional Customer Service






If I can buy everRun Enterprise from Schneider Electric, who supports me? Schneider Electric or Stratus?

Schneider Electric.

What is the difference between everRun Express and everRun Enterprise?

The everRun Express product is the exact same software as the everRun Enterprise software, except it is licensed to be able to create HA/level 2 Protected Virtual Machines(PVMs) only. You can order everRun Express from Schneider Electric using the Product number MAR-EEEHA001.

Where can I get more information on Stratus and everRun?

Additional information is available on the Stratus Technologies website: https://www.stratus.com/solutions/platforms/everrun/

Who do I contact for assistance with this Integration?

Schneider Electric provides branch and channel partners with planning and implementation assistance for EcoStruxure Building Lab solutions. To request help, send an email to Product Support specifying the solution name and the type of assistance you require. Product Support will relay your request to the appropriate support team.

For support inquiries, contact your local Customer Care Center. Visit schneider-electric.com and select the "Support" tab then select your country of origin. Access Customer Care directly from the "mySchneider" mobile app; download it now onto Apple or Android devices.

Visit The Exchange Knowledgebase - a self-service web portal that provides 24/7 access to the most frequently asked questions and solutions.

https://www.stratus.com/solutions/platforms/everrun/

http://cl.exct.net/?qs=a4a55c97f62004aee980520009e2e3e8b15740dd7616bc94b712e5b14a78e5328f305749aea718ffcc9317a0afcde498d3298ec5b5d984ea

http://cl.exct.net/?qs=a4a55c97f62004ae1e5a3a827fad10e02b9664bfaac3e8258ae7e208a970f59789e6146036113d94fbd43d167340996889249fb56958d32c

http://cl.exct.net/?qs=a4a55c97f62004ae7aed7e7b35e4136147a8282fa0b78422c0561282f8d1ffd31e5e3e5063ff7f3230d8128102e320189304bf1aeaa00ba5

http://cl.exct.net/?qs=a4a55c97f62004aef95eaa429e01e16a0dc7f2294c23a8511255003b29d1f3bce94e25eb85d5d927200c2bc0e41223d042df97064589c14e

everRun Enterprise - with SE Building Management Systems

Documents

Transcript of everRun Enterprise - with SE Building Management Systems