Do I need a Gateway server with SOBR?

[tjdoc]

Hi,
We plan to use a hardened Linux performance repo for local backup storage.
We want to create a SOBR setup and offload a copy of the backup to an Azure Capacity tier. (Blob Object Storage).

From an architectural point of view, what server / device is actually going to copy the backup to the Capacity tier?
Does the Linux repo copy the file directly to Azure (so long as it has internet access), OR does this traffic have to go via a Gateway server, which would mean another server on our local infrastructure?

We are also using Hyper-V which has the Data Mover on it, so I guess this only copies the initial backup to the Performance tier, but doesn't have any involvement in copying to the Capacity tier?
I assume the VBR server is not part of the transfer?

Thanks in advance for any guidance...

Tim

[Mildur]

Hello Tim

Offloading occurs directly from the hardened repository to Azure Blob Storage if you select 'direct' as the connection method in the object storage properties. Additional gateway servers are not mandatory.

We are also using Hyper-V which has the Data Mover on it, so I guess this only copies the initial backup to the Performance tier, but doesn't have any involvement in copying to the Capacity tier?

Correct. The HyperV server does not transfer any data to object storage.

Best,
Fabian

[tjdoc]

Hi Fabian
Thanks very much for your help - much appreciated!

Tim

[ssdn108]

But in above case, if the hardened linux repo is an immutable repo i.e. iLHR, would 'direct' as the connection method in the object storage properties still work?

[karsten123]

for SOBR, yes - as far as i know.
if it is a backup copy job to the object storage, there will be the mount server act as a gateway. it is a security security restriction in version up to 12.1.2

[ssdn108]

I have SOBR setup and it's 12.1.2.172 also. But somehow i am getting cert error during SOBR offload (my capacity tier is Wasabi with object lock enabled and immutability set). The Gateway server shown in SOBR offload is the mount server VM which is fine but we don't know how to bypass this cert error. We have spoken with veeam (support case# 07379301) and working with them. We have spoken with wasabi and we can write data to Wasabi just fine if i select GW option and in that if i select VBR VM, and only then offload to wasabi works. Isn't the word 'direct' in connection mode means, directly from the iLHR out to wasabi for the data flow? Wasabi tested the certs from VBR to wasabi and it works just fine. curl on iLHR to wasabi service urls also works. Our cert err in sobr offload is like this: 'failed to offload backup. Error: Failed to retrieve certificate from https://s3.us-east-1.wasabisys.com. Followed by 'failed to rerieve certificate from https://s3.us-east-1.wasabisys.com'. I will be testing few more things tomorrow but any pointers appreciated. Thx

[ssdn108]

Pls ignore above as the prob was related to customer's firewall/network settings which after resolving, SOBR offloads to wasabi worked just fine with 'direct connection' using mount server as a seperate mount server VM and also as VBR VM (both scenarios worked), and the performance tier is iLHR (all good). Thx