You can use an on-premises Cleanroom recovery site to restore and validate critical data in an isolated recovery environment that is hosted within your own infrastructure.
An on-premises cleanroom combines an air-gapped HyperScale X vault with a dedicated recovery environment, so you can restore and investigate data without exposing the recovery environment to production systems. This approach can help reduce the risk of reinfection during cyber recovery operations, while providing a controlled environment for testing and validation.
How it works
During normal operations, backup data and cleanroom metadata are replicated to the air-gapped vault. The replicated data remains isolated from the production environment and is available for recovery operations when needed.
When you initiate a cleanroom recovery operation, the cleanroom orchestration workflow creates an isolated recovery environment and restores the production control plane into that environment. Recovery operations are then managed through the isolated control plane, so you can investigate, validate, and restore data without interacting with the production environment.
During a cleanroom recovery operation, Commvault automatically deploys a recovery instance of the control plane, restores the latest replicated configuration and disaster recovery data, and enables recovery workflows within the isolated environment.
Architecture
The on-premises cleanroom architecture isolates production systems from recovery operations.
Key benefits of the architecture include:
-
Air-gapped protection for backup data and cleanroom metadata
-
An isolated environment for cyber recovery testing, investigation, and validation
-
Automated deployment and restoration of the recovery control plane
-
The ability to perform recovery operations without requiring access to the production environment.
Supported recovery destinations
- VMware vSphere (Standard licensing is sufficient)