Fails-over operations of the selected resources to the last checkpoint at a remote site. The lag between production and protection sites is configurable at the level of individual resources. To avoid “split-brain” conflicts, it allows computational resources to be active only in one site at a time unless an administrator intervenes.

Restores operations of the selected resources to the site that was active before fail-over was initiated. By default, all changes made at the protection site during fail-over are preserved, incrementally transmitted across the network, and patched into the original production site. No data need be lost upon fail-back and active processes can continue through the restoration process.

Migrates the selected resources to a remote site without data loss and with active processes still running. Resources can be migrated back to the original site as needed.

Activates a clone of selected resources at a remote site (e.g., for consolidated multi-site backup or multi-site load balancing).

Rolls back the selected resources to a selected checkpoint with active processes still running. The interval between checkpoints and the total number of checkpoints is configurable at the level of individual resources.

Performs a manual or scheduled multi-site snapshot of the selected resources. Snapshots are point-in-time consistent across sites. All copy-on-write traffic is localized within the sites. Only control traffic is transmitted across the network.

Provisions new distributed resources from peered templates in two sites. Templates of commonly used resources are pre-provisioned in a “store” at each location. Only control traffic is transmitted across the network.

Repairs selected distributed resources without interrupting workflow on embedded computational resources. Live Repair analyzes and repairs any discrepancies that might have arisen due to storage subsystem corruption in a given site. Only corrupted blocks need be re-transmitted between the sites.

Performs a live test of any one of a set of pre-configured recovery plans.

The Administrator Console detects and diagnoses failure conditions when they occur. The Console can be configured to issue a text message alert to the IT administrator in the event of a critical failure.