Edge Disaster Recovery: Keep Customer-Facing Locations Open

By George Crump

Edge disaster recovery means stores, venues and restaurants stay open through a failed drive, a ransomware attack or the loss of the local server. VergeOS 26.2 handles all of them.

Edge disaster recovery becomes urgent when the remote location serves customers directly. Entertainment venues, restaurants, retail stores, and customer service centers all share the same goal. Nobody standing at the counter should hear, “I’m sorry, our system is down,” or “the internet is out.” That sentence frustrates the customer and makes your brand look bad. VergeIO customers like Topgolf and Saratoga Casino run exactly these kinds of locations. In our on-demand webinar, VergeOS 26.2: Finish the VMware Exit, Dave Vincent showed how VergeOS keeps them serving customers through two very different kinds of failure: problems inside the site, and the loss of the site itself.

Key Takeaways
  • VergeOS runs a remote site on as few as one server, new in VergeOS 26.2, or on a small two-node HA cluster, with data protection built in so no local IT staff is required.
  • Drive failures, deleted files, corruption, and ransomware recover locally from VergeOS snapshots, and ioGuardian pulls missing blocks from the core when failures exceed the protection level.
  • Each site runs as a Virtual Data Center that replicates to the core on your schedule, so the core can run the entire site if the local servers go offline.

Edge Disaster Recovery Starts With Running Local

The main reason to keep servers at a remote location is to serve customers and keep operations running when the site is disconnected. If you are at Topgolf having fun, you want the fun to keep going when the internet connection drops. The problem with running local is that you probably can’t afford IT staff at each location. That means the infrastructure must be managed remotely, rely on automation, and provide local data protection and resiliency.

VergeOS meets this demand by running on as few as one server at a remote site, new in our 26.2 release. For local high availability, a small two-node HA cluster does the job. With no IT staff on site, these systems are exposed directly to the people using them, so VergeOS builds data protection and resiliency into the platform to guard against drive failures and accidental data deletion.

Running local keeps the store openRUNNING LOCALInternet + corelink downStore / venueVergeOS · 1 serverPOSInventoryGamesLink down. POS, inventory and games keep running.

Drive Failures

When a drive fails, VergeOS redirects reads and writes to the surviving redundant drives and the site keeps running. If the number of failed drives exceeds your protection level, for example two drives failing, VergeOS uses ioGuardian to transfer the needed blocks from the core data center to the venue or store. The only expense is the latency of moving those blocks across the wire. Customers keep checking out, and IT replaces the drives on its own schedule.

ioGuardian covers drive failuresDRIVE FAILURESCore data centersynchronized copy of the blocksioGuardianStore server · VergeOSPOSrunningInventoryrunningGamesrunningD1D2D3D4FAILEDFAILEDI/O reroutes to surviving drivesMissing blocks served from the coreTwo drives down. The VMs keep running.

Deleted Files, Corruption and Ransomware

If a user deletes a file or an application suffers corruption, VergeOS snapshots let you restore an individual file by mounting a snapshot as a drive to a virtual machine. Severe corruption or a ransomware attack calls for a bigger response, since ransomware is an infrastructure problem that reaches the VMs, the network and the configuration along with the data. VergeOS system snapshots restore the entire site locally, at local speed, without waiting on WAN bandwidth.

Follow our best practice: put each remote location in its own Virtual Data Center, and keep an attack contained to that site. Ransomware can’t creep up the wire into the core data center or spread to other remote sites.

Ransomware stays inside one VDCRANSOMWARE CONTAINEDStore A · VDCS1S2S3S4system snapshotsSite VMs + confighealthyencryptedrestored ✓Local restore from S4no wait on WAN bandwidthVDC isolation stops the spreadCore VDCcleanStore B VDCcleanOne site restored. Nothing else touched.

Edge Disaster Recovery When the Whole Site Goes Down

The second edge disaster recovery situation is the loss of the entire site. Single-server sites are especially vulnerable because there is nothing left to fail over to. The risk is a location that is technically open for business. Customers walk in the door, and the kitchen is open, but without the servers, nothing can be transacted.

VergeOS addresses this by establishing each remote location as a Virtual Data Center (VDC). A VDC encapsulates the entire remote data center into a single object, and VergeOS replicates that object to the core data center on a schedule you set. Each replication captures the site’s complete state, including data, network configuration, VM configurations, and storage settings, all consistent and in sync. The core holds everything it needs to run the remote site. VergeOS abstracts the hardware, so that VDC runs at the core even when the core uses different server, storage, and network hardware than the store.

The core runs the site when it failsVDC REPLICATION + FAILOVERStore usersRemote site · VDCPOSInventoryGamesdata · network · VM configs · storage settingsVDCreplicates onyour scheduleCore data centerSite VDC copystandby · in syncrunning at the corePOSInventoryGamesBGPThe core starts the site VDC and serves its users.
FailureVergeOS ResponseWhere Recovery Runs
One drive failsReads and writes move to surviving drivesLocal
Failures exceed protection levelioGuardian supplies missing blocks from the coreLocal, with blocks from the core
User deletes a fileSnapshot mounted as a drive to a VMLocal
Corruption or ransomwareSystem snapshot restores the whole siteLocal
Site servers go offlineReplicated VDC runs the site, BGP redirects trafficCore

See the Failover in the On-Demand Webinar

In the webinar, Dave used VergeOS’s built-in BGP routing to show the core copy of a remote location picking up the moment the remote servers went offline. The store keeps serving customers from the core, and IT can fix or replace the local hardware on its own schedule. Watch the on-demand webinar for the full session, or go straight to the Edge Site Recovery Demo. The VergeOS 26.2 datasheet covers single-server sites and the rest of the release. If you want to map this to your own locations, book a technical whiteboard session with our team.

BGP moves the store to the coreBGP FAILOVERCustomers + POSBGP reroutesStore serveronlineofflineCore · VDC copystandbyserving the siteStore stays opentransactions run from the core
On-Demand Webinar
VergeOS 26.2: Finish the VMware Exit
Aaron Richman and Dave Vincent demonstrate faster migration, Failover Clustering on VergeFS, and edge site recovery with BGP.
Watch Now
Key Terms
Edge Disaster Recovery
Protecting and restoring remote locations such as stores, venues and branch offices, where local IT staff is rare and downtime faces the customer.
Virtual Data Center (VDC)
A VergeOS object that holds an entire data center, including VMs, networking and storage settings, so it can be isolated, snapshotted and replicated as one unit.
ioGuardian
A VergeOS capability that repairs missing or corrupted blocks by retrieving them from a synchronized remote system, such as the core data center.
System Snapshot
A point-in-time copy of the complete VergeOS environment, used to roll back a whole site after corruption or a ransomware attack.
Frequently Asked Questions
Can VergeOS run a remote site on a single server?
Yes. VergeOS 26.2 adds support for single-server sites. Locations that want local high availability can run a two-node HA cluster instead.
What happens if two drives fail in a single-server site?
VergeOS uses ioGuardian to pull the blocks it needs from the core data center. The site keeps running, and the only cost is the latency of moving those blocks.
Does ransomware at one store reach the core data center?
With each remote location in its own Virtual Data Center, the attack stays isolated to that site. You restore the site locally from a VergeOS system snapshot.
What does the core need to run a failed remote site?
The core needs the replicated VDC, which holds the site’s data, network configuration, VM configurations and storage settings. The core hardware can differ from the hardware at the site.

Next Steps

The full webinar, the edge recovery demo and the datasheet are one click away.

Further Reading

VMware migration testing with VergeOS snapshots and virtual data centers

VMware Migration Testing Is Critical to Completing Your Exit

VMware migration testing decides whether your exit finishes. VergeOS keeps the VMware image, takes instant snapshots and isolates each workload in a VDC.
Read More →
Hard drive tiering: one terabyte on NVMe flash costs $706 against $56 on hard drives, and across a 150 TB estate that is $105,900 against $8,400

How to Use Hard Drive Tiering to Fight Data Center Inflation

Hard drive tiering is back. See how VergeOS lets you pick each drive's tier, move it live, and put the long tail on $56/TB disk instead of $706/TB flash.
Read More →

Leave No VM Behind

A complete VMware migration includes clustered SQL Server. VergeOS 26.2 shortens cutover and protects critical workloads inside isolated VDCs.
Read More →