Discussions related to using object storage as a backup target.
Post Reply
Elgringo
Novice
Posts: 3
Liked: never
Joined: Jun 11, 2018 8:48 pm
Full Name: Sebastien Chassagne
Contact:

EMC ECS: failed to establish connection

Post by Elgringo »

Hello,

I am trying to connecct Veeam to my S3 storage (EMC ECS) in order to create an S3 Object Storage type repository.
The S3 storage is located in my LAN.
Seems that veeam requires https access to the S3 endpoint.
The problem is that ECS uses a self-signed certificate... and veeam do not like self-signed certificate. Got the following message when trying to connect to ECS :"failed to establish connection to Amazon S3 endpoint".
Is there a way to make it works using such configuration (I mean self signed certificate on S3 endpoint) ?

Thanks !
kqf_chris
Novice
Posts: 3
Liked: 3 times
Joined: Apr 27, 2017 12:52 pm
Contact:

Re: EMC ECS: failed to establish connection

Post by kqf_chris »

You could try importing the ECS cert into the Veeam server as a trusted root.
tsightler
VP, Product Management
Posts: 6009
Liked: 2843 times
Joined: Jun 05, 2009 12:57 pm
Full Name: Tom Sightler
Contact:

Re: EMC ECS: failed to establish connection

Post by tsightler » 2 people like this post

Veeam should have no problem with self-signed certificates, I use one myself for a Ceph based S3 repo in the lab. When you add the repo it should prompt you to accept the certificate, it does this with all self-signed certificate. Is there any chance the certificate is expired or doesn't match the hostname or some other issue like that? Honestly, the error itself doesn't really look anything like an SSL/TLS level error though.
perrylee
Service Provider
Posts: 1
Liked: never
Joined: Apr 25, 2016 9:39 pm
Full Name: Perry Lee
Contact:

Re: EMC ECS: failed to establish connection

Post by perrylee »

Same situation here, I setup a S3 storage on our Freenas and when I try to add a repo I get the "Failed to establish connection to Amazon S3 endpoint" error.
Is there a solution to get this working with a self signed certificate.
Gostev
Chief Product Officer
Posts: 31460
Liked: 6648 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: EMC ECS: failed to establish connection

Post by Gostev »

Nothing to add to Tom's response... it should work just fine as long as the certificate is valid, and most of our R&D labs use self-signed certificates.
stevekarra
Technology Partner
Posts: 42
Liked: 6 times
Joined: May 02, 2019 9:19 pm
Full Name: Steve Karra
Contact:

Re: EMC ECS: failed to establish connection

Post by stevekarra » 2 people like this post

There is a document which outlines how to set it up - https://www.dellemc.com/resources/en-us ... ide-wp.pdf

As Tom and Gostev mentioned, it should work fine as long as you accept the certs during the repo configuration. You will also need a load balancer for ECS - you can get one at https://www.loadbalancer.org/applicatio ... l-emc-ecs/
graemep
Lurker
Posts: 1
Liked: 1 time
Joined: Feb 06, 2020 4:36 pm
Full Name: Graeme Penman
Contact:

Re: EMC ECS: failed to establish connection

Post by graemep » 1 person likes this post

I ran into the same issue as originally posted, and what was making it slightly more confusing was the 'S3 Browser' app was connecting to the ECS storage (with it's SSL/TLS option selected) yet Veeam would report the failure to establish connection.

It turned out this was due to TLS support on the backup servers, which had the MS patch below installed, and just needed the DefaultSecureProtocols registry setting applied.

https://support.microsoft.com/en-gb/hel ... cols-in-wi

After these were applied (and a reboot), the connection was made first time.
Post Reply

Who is online

Users browsing this forum: Wallachuck and 7 guests