Using object storage as a backup target
Post Reply
johnhk215
Lurker
Posts: 2
Liked: never
Joined: Aug 23, 2020 9:42 am
Contact:

Azure Blob Storage is support use private network

Post by johnhk215 »

Hi All,
Does it support use Azure Site to Site VPN private network backup to Azure Blob Storage?

Thanks.

HannesK
Veeam Software
Posts: 6101
Liked: 885 times
Joined: Sep 01, 2014 11:46 am
Location: Austria
Contact:

Re: Azure Blob Storage is support use private network

Post by HannesK »

Hello,
and welcome to the forums.

Could you describe the use case? I mean, the communication with Azure Blob storage is already encrypted 1x or 2x (1x with HTTPS / TLS and 2x optional at backup level). What is the idea of encrypting it 3x?

Ah, and just to make sure: you are really talking about Veeam Backup for Azure? https://www.veeam.com/backup-azure.html (just because some customers accidentally wrote to this forum while using Azure Blob as capacity tier in Veeam Backup & Replication)

Best regards,
Hannes

Andreas Neufert
VP, Product Management
Posts: 4511
Liked: 855 times
Joined: May 04, 2011 8:36 am
Full Name: Andreas Neufert
Location: Germany
Contact:

Re: Azure Blob Storage is support use private network

Post by Andreas Neufert »

I think this is possible by leveraging the internal DNS name for the BLOB storage.

Andreas Neufert
VP, Product Management
Posts: 4511
Liked: 855 times
Joined: May 04, 2011 8:36 am
Full Name: Andreas Neufert
Location: Germany
Contact:

Re: Azure Blob Storage is support use private network

Post by Andreas Neufert »

Maybe I missunderstood you. Can you please explaing why you implement an additional VPN tunnel to speak within your Azure datacenter with blob storage. Or do the VPN relate to the Azure internal connection between sites that is automatically created for you by Azure ?

johan.h
Veeam Software
Posts: 559
Liked: 115 times
Joined: Jun 05, 2013 9:45 am
Full Name: Johan Huttenga
Contact:

Re: Azure Blob Storage is support use private network

Post by johan.h »

Support for private endpoints depends on name resolution. Do you have this set up on your end? Feel free to DM me if you need help with anything.
https://docs.microsoft.com/en-us/azure/ ... -endpoints

johnhk215
Lurker
Posts: 2
Liked: never
Joined: Aug 23, 2020 9:42 am
Contact:

Re: Azure Blob Storage is support use private network

Post by johnhk215 »

We've consider to deploy 10Gbps site to site VPN to Azure network , so that we have question for Veeam backup software can leverage this private network or not.

So you mean we can use Azure Private DNS to enforce the traffic is use the 10Gbps VPN tunnel?

Thanks.

johan.h
Veeam Software
Posts: 559
Liked: 115 times
Joined: Jun 05, 2013 9:45 am
Full Name: Johan Huttenga
Contact:

Re: Azure Blob Storage is support use private network

Post by johan.h »

This really has very little to do with how Veeam works.

Effectively what you need to do is set up a private endpoint for your Azure Storage so that traffic to Azure Blob stays within your VNet.
https://azure.microsoft.com/en-us/servi ... vate-link/

Then you would set up your VPN connectivity so that your on-premises site has access to this VNet via VPN. The last step is configuring DNS correctly so that requests to Azure Blob route internal to VPN traffic.

HannesK
Veeam Software
Posts: 6101
Liked: 885 times
Joined: Sep 01, 2014 11:46 am
Location: Austria
Contact:

Re: Azure Blob Storage is support use private network

Post by HannesK »

We've consider to deploy 10Gbps site to site VPN to Azure network
I moved the question to the VBR object storage forum... that's what caused the confusion in my answer.

Post Reply

Who is online

Users browsing this forum: No registered users and 4 guests