-
- Lurker
- Posts: 2
- Liked: never
- Joined: Jul 05, 2021 2:24 pm
- Full Name: KAlbers
- Contact:
Backups Across Segregated Networks
I have three networks. Network A is the primary, network B is the user network in building BB, and network C is a segregated network in building BB. Network A and B can see each other with no restrictions. Network C can seen B, currently with no restrictions, but will eventually be locked down to where C can only see certain devices on B. Network C cannot see anything outside of Building BB, including network A. I do not have the option of making network A able to see into network C, or vise vera.
I have a Veeam B&R server in network A that does all of our backups currently to physically attached storage that is two physical repositories configured as a single Scale-out Repo. I have a handful of devices in network C that I somehow need to get backed up on our B&R server. I would just setup a second B&R in building BB, but need to get the backups stored outside of building BB due to controls that I must follow.
Network C has two VMs, two Red Hat hypervisors, and 5 physical Windows Server machines.
Can I setup some sort of proxy on network B to relay the backup data to the existing B&R server, or can I setup a second B&R server in building BB to use the repositories that reside on the first B&R server? If I go the second way, how does that affect the first B&R's ability to manage the space for its backups? Is there a better option I'm not thinking of?
Case # 04888058
I have a Veeam B&R server in network A that does all of our backups currently to physically attached storage that is two physical repositories configured as a single Scale-out Repo. I have a handful of devices in network C that I somehow need to get backed up on our B&R server. I would just setup a second B&R in building BB, but need to get the backups stored outside of building BB due to controls that I must follow.
Network C has two VMs, two Red Hat hypervisors, and 5 physical Windows Server machines.
Can I setup some sort of proxy on network B to relay the backup data to the existing B&R server, or can I setup a second B&R server in building BB to use the repositories that reside on the first B&R server? If I go the second way, how does that affect the first B&R's ability to manage the space for its backups? Is there a better option I'm not thinking of?
Case # 04888058
-
- VP, Product Management
- Posts: 7081
- Liked: 1511 times
- Joined: May 04, 2011 8:36 am
- Full Name: Andreas Neufert
- Location: Germany
- Contact:
Re: Backups Across Segregated Networks
Can you please add a drawing so that we better can understand?
-
- Veteran
- Posts: 487
- Liked: 106 times
- Joined: Dec 08, 2014 2:58 pm
- Full Name: Steve Krause
- Contact:
Re: Backups Across Segregated Networks
You can always have multiple B&R servers connecting to the same infrastructure components (proxies, repositories, etc.) but you need to take into account that the two B&R servers are not aware of each other so their job/resource schedulers are unaware of what the other B&R server is having the system do. It also means that the backup files will not show up in the other B&R server unless a rescan/import is done on the repository.kalbers wrote: ↑Jul 05, 2021 2:55 pm Can I setup some sort of proxy on network B to relay the backup data to the existing B&R server, or can I setup a second B&R server in building BB to use the repositories that reside on the first B&R server? If I go the second way, how does that affect the first B&R's ability to manage the space for its backups? Is there a better option I'm not thinking of?
If you schedule your jobs in such a way to not have the tasks run at the same time you should be ok.
Steve Krause
Veeam Certified Architect
Veeam Certified Architect
-
- Veeam Software
- Posts: 3626
- Liked: 608 times
- Joined: Aug 28, 2013 8:23 am
- Full Name: Petr Makarov
- Location: Prague, Czech Republic
- Contact:
Re: Backups Across Segregated Networks
Hello,
@kalbers I'd like to clarify one detail:
If there is a route from C to A, then the second VBR is not needed. If there is no route, I believe that the repository from A will be unavailable for backups coming from C.
Thanks!
@kalbers I'd like to clarify one detail:
In this case, I don't understand how will data flow go from the network C to the repository in the network A?Network C cannot see anything outside of Building BB, including network A.
If there is a route from C to A, then the second VBR is not needed. If there is no route, I believe that the repository from A will be unavailable for backups coming from C.
Thanks!
-
- Lurker
- Posts: 2
- Liked: never
- Joined: Jul 05, 2021 2:24 pm
- Full Name: KAlbers
- Contact:
Re: Backups Across Segregated Networks
I'm not worried about the backup scheduling, but do appreciate you pointing that out. My main concern here is whether or not the second B&R or a Veeam Proxy can utilize the repository that is physically attached to the first B&R server.skrause wrote: ↑Jul 06, 2021 4:29 pm You can always have multiple B&R servers connecting to the same infrastructure components (proxies, repositories, etc.) but you need to take into account that the two B&R servers are not aware of each other so their job/resource schedulers are unaware of what the other B&R server is having the system do. It also means that the backup files will not show up in the other B&R server unless a rescan/import is done on the repository.
If you schedule your jobs in such a way to not have the tasks run at the same time you should be ok.
You're correct in that C can't see to A, but both A and C can see into B. We're hoping there's a solution where we can put something in B to bridge the gap between A and C.PetrM wrote: In this case, I don't understand how will data flow go from the network C to the repository in the network A?
If there is a route from C to A, then the second VBR is not needed. If there is no route, I believe that the repository from A will be unavailable for backups coming from C.
Thanks!
-
- Product Manager
- Posts: 9848
- Liked: 2607 times
- Joined: May 13, 2017 4:51 pm
- Full Name: Fabian K.
- Location: Switzerland
- Contact:
Re: Backups Across Segregated Networks
This will work with some requirements/limitations:My main concern here is whether or not the second B&R or a Veeam Proxy can utilize the repository that is physically attached to the first B&R server.
- Linux hardened Repo will not work
- windows local Disk Repo will work, but please use dedicated folders for each vbr server, don‘t use the same folder for multiple vbr servers
- both vbr servers targeted to the same windows local disk Repo needs to be on the same veeam version/build number
- for SMB Repos, nothing special, it will work, but create dedicated shares for each vbr server
Product Management Analyst @ Veeam Software
-
- Veeam Software
- Posts: 3626
- Liked: 608 times
- Joined: Aug 28, 2013 8:23 am
- Full Name: Petr Makarov
- Location: Prague, Czech Republic
- Contact:
Re: Backups Across Segregated Networks
Hello,
If A and C are reachable from B, then why don't place a single VBR in B and keep the repository in A instead of deploying a new VBR and share the same repository between two different instances?
For VMware workloads: it will be enough to deploy a backup proxy on B.
For non-VMware workloads: you can create jobs in "Managed by backup server" mode and point these jobs to a shared folder SMB/NFS in A. Also, you can specify a gateway server from B, this server will play a role of the bridge. For example, it could be VBR itself. In this case, data transfer will be performed between Veeam Agent service that runs on the protected computer (C) and Veeam Data Mover that runs on the gateway server (B).
Thanks!
If A and C are reachable from B, then why don't place a single VBR in B and keep the repository in A instead of deploying a new VBR and share the same repository between two different instances?
For VMware workloads: it will be enough to deploy a backup proxy on B.
For non-VMware workloads: you can create jobs in "Managed by backup server" mode and point these jobs to a shared folder SMB/NFS in A. Also, you can specify a gateway server from B, this server will play a role of the bridge. For example, it could be VBR itself. In this case, data transfer will be performed between Veeam Agent service that runs on the protected computer (C) and Veeam Data Mover that runs on the gateway server (B).
Thanks!
Who is online
Users browsing this forum: Bing [Bot] and 52 guests