S3 Retention

[francescorusso]

Hi,
I am not sure I understand how the retention works when you enable Object Lock.

I created the bucket, configured the SOBR and set the Immutability protection in Veeam to 5 day which means that in reality it will be 5+10=15 days
We are going to used the SOBR for weekly backup with 3 restore point

Will this configuration allow the selected retention or will I find my RP locked ?

Can I configure Synt Full with S3 Lock ?

Many thanks.
Francesco

[Mildur]

How is your weekly backup configured?
Weekly synthetic full? I don‘t see any configuration with only 3 restorepoint to keep which works with capacity tier offloading.


From the guide about Retention Policy and object lock:

https://helpcenter.veeam.com/docs/backu ... ml?ver=110

Immutable blocks of data are removed after the immutability period is over.
When a retention policy encounters immutable copied/moved blocks of data, it removes such blocks from the associated backup files on the extents only and then updates indexes, informing Veeam Backup & Replication that these blocks no longer exist and must be removed from the capacity tier once mutable.

For more information about immutability, see Immutability.

[francescorusso]

This backup will be the 4th copy the customer wants as additional security.

I was thinking of a simple Forward Incremental with 3 RP run once a week (not to consume too much S3 TB), I immgine that the Immutability should match the retention, that is 21 or 22 days, correct ?

Many thanks.
/fr

[Mildur]

S3 offload will only copy unique data blocks. You will not have weekly fulls on the S3 Storage. Only the incremental changes. Therefore, i don't think you will have too much TB on the S3 each week. Of course, It depends on your change rate between the two backup jobs (or backup copy jobs) to the SOBR.

You can use synthetic full with a Capacity Tier. If I were you, i would do daily backups/copys to the SOBR with immutability activated. If you have an ransomware attack, you have your most actual restore points secure in the bucket with object lock. Are you using public Cloud S3 Storage or onPremise?

[francescorusso]

I am using AWS S3 with Lock enabled and the customer just wants a maximum of 3 RP in S3 made of 3 weekly backups: this way I should have the first Full plus the 2 incrementals on S3
In this scenario, correct me if I am wrong, I can configure Forever Forward Incremental with 3 RP and Immutability for 21 days, at the end of which VBR can delete the first Full

Thanks
/fr

[Mildur]

I am not sure what happens or if it works with forever forward incremental, if you use capacity tier.
Never used forever forward incremental on a capacity tier. Theoretically, it should work like you said.

I can try it on my homelab in a few hours.

[veremin]

If I get your requirement correctly, you can indeed:

- create a backup job with 3 weekly restore points as retention
- point it to capacity tier that has copy mode and immutability option enabled
- set immutability period for 3 weeks

This way you will have 3 restore points in capacity tier protected by object lock for at least 3 weeks. I said at least, because backup server adds additional period to reduce number of requests to object storage.

Thanks!

[francescorusso]

Many thanks for your replies
Regards,
Francesco