--- name: pattern-pvs-ibmi-resiliency-reference-architecture-pvs-ibmi-resiliency title: IBM® Power® Virtual Server resiliency on IBM i description: 'This is a baseline solution pattern containing the design and architecture decisions for a PowerVS resiliency solution for IBM i workloads to meet common requirements as described in this use case. Actual solutions depend on the specific requirements that are set by the client. Review the following summary of the use case for this reference architecture:' last-updated: 2026-03-30 --- > ## Documentation Index > The table of contents for this documentation set is at https://cloud.ibm.com/docs/pattern-pvs-ibmi-resiliency?format=markdown > The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt > Use these files to discover more information as needed. # IBM® Power® Virtual Server resiliency on IBM i {: #power-virtual-server-on-ibmi} {: toc-content-type="reference-architecture"} {: toc-version="1.1"} This is a baseline solution pattern containing the design and architecture decisions for a PowerVS resiliency solution for IBM i workloads to meet common requirements as described in this use case. Actual solutions depend on the specific requirements that are set by the client. Review the following summary of the use case for this reference architecture: ![IBM i resiliency summary](/images/usecase.svg "Reference Summary"){: caption="Reference Architecture Summary for Deploying Resilient IBM i workloads on IBM® Power® Virtual Server" caption-side="bottom"}{: external download="usecase.svg"} ## Architecture diagram {: #architecture-diagram} ![IBM i reference architecture](/images/resiliencypvsarchnumbered.svg "Resiliency Architecture Diagram"){: caption="Deploying resilient IBM i workloads on IBM® Power® Virtual Server reference architecture" caption-side="bottom"}{: external download="resiliencypvsarchnumbered.svg"} Review the environments that are related to this reference architecture: 1. Provider connects the environment by using a direct link for private connectivity. 2. The direct link then connects to a Local Transit Gateway. This advertises and routes on-premises traffic to VPC for gateway or firewall inspection. 3. The transit gateway connects to management VPC, which hosts your Next-Generation Firewall, management subnets for your bastion hosts, and your Virtual Private Endpoint. 4. Falconstor Storsight VSI is deployed as a monitoring dashboard for the backup solution. 5. A Virtual Private Endpoint is deployed to communicate from the falconstor appliance to the Cloud Services Layer: Cloud Object storage. 6. PowerVS workspace is deployed within the IBM® Power® Virtual Server environment and connects to the Power Edge Router (PER). 7. A local Power high availability standard cluster is then deployed within the workspace to provide local clustering. It is utilizing PowerHA SystemMirror for i as the software and geographic mirroring as the replication method. 8. The management and workload VPC mentioned from the primary site is also deployed in disaster recovery. 9. Global Replication Service (GRS) is deployed as part of Disaster Recovery Storage Area Network to Storage Area Network replication. 10. There is a ksys orchestrator Logical Partition that is deployed at the disaster recovery (DR) site. 11. Communication for GRS SAN to SAN traffic between sites occurs over the IBM private backbone. 12. Replication of the controller Logical Partitions occurs over the Global Transit gateway. ## Design scope {: #design-scope} The PowerVS resiliency for IBM i workloads architecture covers design considerations and architecture decisions for the following aspects and domains: - Compute: Virtual Servers - Storage: Primary Storage, Backup Storage, Archive Storage - Networking: Enterprise Connectivity, BYOIP/Edge gateways, Segmentation, Isolation, Cloud Native Connectivity, Domain name system - Security: Data security, Identity and access management, Infrastructure and endpoint security - Resiliency: Backups and Restore, High Availability, Disaster Recovery The Architecture Framework provides a consistent approach to design cloud solutions by addressing requirements across a set of "aspects" and "domains", which are technology-agnostic architectural areas that need to be considered for any enterprise solution. For more information, see [Introduction to the Architecture Design Framework](https://cloud.ibm.com/docs/architecture-framework?topic=architecture-framework-intro&format=markdown). Following the Architecture Design Framework, Resiliency for PowerVS covers design considerations and architecture decisions for the following aspects and domains: ![heatmap](/images/ibmiheatmap.svg "IBM i Heatmap"){: caption="Resiliency for PowerVS IBM i Workloads Heat Map" caption-side="bottom"}{: external download="ibmiheatmap.svg"} ## Requirements {: #requirements-list} | Aspect | Requirements | |--------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | Compute | Provide CPU and RAM to support resiliency components. | | Storage | Provide storage to support replication activities. Provide storage to support customer retention schedules. | | Networking | Provide enterprise to cloud network connectivity to recovery site. Provide private connectivity between workloads across protected and recovery sites. Deploy workloads in an isolated environment and enforce information flow policies. Provide BYOIP, Edge Routing, VLAN segmentation and DNS | | Security | Help ensure data encryption at rest and in transit for the storage layer. Protect the boundaries of the application against denial-of-service and application-layer attacks. | | Resiliency | Provide local (within the same AZ or between two AZs in the same Region) OS level high availability between two IBM i LPARs. Provide backups for data retention for IBM i workloads. Recovery Time Objective (RTO) and Recovery Point Objective(/RPO) = 1 hours/1 hours. 99.99% Infrastructure Availability | | Service Management | Monitor the usage and performance of the resiliency components | {: caption="Resiliency for PowerVS requirements" caption-side="bottom"} ## Components {: #component-list} | Category | Solution components | How it is used in a solution | |--------------------|-------------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------| | Compute | PowerVS LPARs | - High availability workload virtual servers \n - Disaster recovery workload virtual servers \n - Global Replication Service (GRS) controllers | | | VPC VSI | Compute for NGFW and management tools | | Storage | Flash Storage from IBM FS9500 series devices | Web, application, database storage, Storage for GRS | | | [Cloud Object Storage](https://cloud.ibm.com/docs/cloud-object-storage?topic=cloud-object-storage-about-cloud-object-storage&format=markdown) | - Long-term backup archive \n - Logs | | Networking | IBM Cloud Direct Link | Enterprise to cloud network connectivity | | | Transit Gateway (TGW) | Connectivity between PowerVS and VPCs | | | Service Endpoints | Private network access to cloud services such IBM Cloud Logs, Cloud Object Storage. | | | [Global Transit Gateway (GTGW)](https://cloud.ibm.com/docs/transit-gateway?topic=transit-gateway-about&format=markdown) | Provides PowerVS and VPC connectivity in different regions (global routing) | | | [DNS Services](https://cloud.ibm.com/docs/dns-svcs?topic=dns-svcs-about-dns-services&format=markdown) | Private DNS resolution | | Security | Next-Generation Firewall (NGFW) | Provide IDS/IPS and edge firewall capabilities | | Resiliency | FalconStor StorSafe VTL | Backups for IBM i workloads | | | PowerHA SystemMirror for i | Local OS level between two LPARS | | | Global Replication Service and IBM Toolkit for IBM i Full System Replication | SAN to SAN replication between two IBM Cloud data centers | | | Disaster Recovery Automation with Global Replication Service |SAN to SAN replication between two data centers and automated failover handled by ksys orchestrator LPAR(s)| | Service Management | IBM Cloud Logs IBM Cloud Monitoring | Apps, Audit, and operational logs monitor platform metrics | {: caption="Resiliency for PowerVS components" caption-side="bottom"}