Cohesity cyber resilience for Red Hat OpenShift Virtualization

Integrated cyber resilience

Cohesity’s multilayered security approach strengthens every layer of the architecture to protect OpenShift Virtualization environments throughout the full threat lifecycle. Cohesity Data Cloud provides:

• Immutable backups and zero trust principles that help prevent unauthorized modification of backup data, providing a clean recovery point.
• AI/ML-powered anomaly detection and malware scanning to identify threats early and prevent silent propagation into backup repositories.
• Cyber vaulting and clean-room technology that offers isolated, verifiable recovery environments for critical workloads.
• Federal Information Processing Standard Publication (FIPS) 140-2, a validated encryption architecture to help maintain cryptographic standards in regulated environments.
• Multifactor and multiperson authorization (MFA/MPA) that protects against credential-based attacks on administrative access.
• Write once, read many (WORM) and audit capabilities to help satisfy governance obligations with tamper-proof retention.

Cohesity strengthens protection of OpenShift Virtualization

Cohesity DataProtect architecture

Cohesity DataProtect paired with OpenShift Virtualization takes advantage of Cohesity’s application programming interface (API)-first approach and platform capabilities such as global search and global deduplication to help organizations simplify data protection, speed access to protected data, and increase storage efficiency.

The key elements of the solution are a Cohesity-developed data mover and Velero, acting together. The data mover is responsible for processing the actual data of the entities being protected, while Velero is used to process the associated metadata. These resources are deployed on the worker nodes in an OpenShift cluster as a daemonset, within a Cohesity-created namespace.

Additionally, Cohesity DataProtect integrates with Kubernetes-native snapshots using the Container Storage Interface (CSI).

Cohesity Data Cloud platform has an award-winning user interface (UI) that allows Red Hat OpenShift administrators to protect and recover workloads with remarkable ease. Coupled with a security focus tied to aspects like immutability, quorum control, multifactor authentication, and RBAC, this integration means that security and usability are aligned.

Cohesity NetBackup architecture

To reduce the operational overhead of workload administrators, Cohesity NetBackup can dynamically discover namespaces that contain OpenShift Virtualization VMs and protect them automatically with intelligent policies.

Administrators can also configure specific retention policies for each snapshot and backup copy for full flexibility and control. Additionally, administrators can throttle the number of concurrent data protection workflows or even change how often Cohesity NetBackup queries the Kubernetes cluster to discover new applications that need protection.

Once a snapshot is taken, Cohesity NetBackup’s elastic data mover dynamically tiers data off to the storage of choice, optimizing an organization’s network and storage costs. With the cloud-native scale of Cohesity NetBackup’s data mover, organizations can expand to an enterprise scale while maintaining a low total cost of ownership.

This growth can be accomplished by powering down data mover nodes when not in use, and by moving data off the primary storage to more optimized and protected storage targets.

With Cohesity NetBackup’s industry-leading ransomware resilience capabilities that provide immutable storage, malware scanning, anomaly detection, and support for Federal Information Processing Standards (FIPS), organizations can be confident in the recoverability of their OpenShift Virtualization environment.