Home > Storage > PowerFlex > White Papers > Ransomware Protection: Secure Your Data on Dell PowerFlex with PowerProtect Cyber Recovery > Logical architecture
The following diagram shows a logical architecture that is deployed on a two-layer PowerFlex cluster setup with four storage-only nodes and four compute-only nodes.
Figure 5. Logical architecture of Dell PowerProtect Cyber Recovery
Production environment: The production environment is deployed on a two-layer PowerFlex cluster containing storage-only nodes that are deployed on the embedded operating system, running the SDS component and compute-only nodes deployed on VMware hypervisor, running the SDC component.
For more information about the configuration of PowerFlex nodes, see Configuration details.
The production data of the customer is protected and managed by Dell PowerProtect Data Manager which stores the backup data on the production PowerProtect DD series appliance. In a Dell PowerProtect CR solution, the production PowerProtect DD series replicates the data to a PowerProtect DD series appliance in the CR Vault.
Vault environment: The Dell PowerProtect Cyber Recovery Vault environment contains a PowerProtect DD series appliance and the Dell PowerProtect Cyber Recovery management host that runs the Dell PowerProtect Cyber Recovery software. Data from the production environment enters the Dell PowerProtect Cyber Recovery Vault environment through PowerProtect DD series MTree replication.
The infrastructure in the Dell PowerProtect Cyber Recovery vault is deployed on a VMware ESXi cluster.
Additional safeguards include an automated operational logical air gap to provide network isolation from the production network.