Best solution for backup VM in DMZ

[bou01]

Hello all

I want migrate ESXi and vCenter in Secure DMZ.

What is the best solution for this case .

I think my firewall will not supported the backup flow because my repository will stay outsite the DMZ.
Maybe add the network card port in DMZ in Repository server ?

I want create a backup proxy in DMZ with "HotAdd" i am not sure this it reliable compared to NBD.
I want not create a new repository in DMZ beacause i have no disk space.

What solution are possible for limited the backup data flow ?

Regards

[david.domask]

Hi bou01,

> I want create a backup proxy in DMZ with "HotAdd" i am not sure this it reliable compared to NBD.

HotAdd typically out-performs NBD in most test cases and should be quite fine.

> What solution are possible for limited the backup data flow ?

By default, Veeam uses Synthetic Fulls along with Changed Block Tracking to reduce total data sent to the repository, so main idea would be to avoid Active Full backups unless required.

Outside of that, simply ensure you have enough resources to complete the incremental backups each backup session.

[Virtuollie]

Hello,

Will the ESXi not have ANY other NIC connected than those in DMZ?
I would recommend to go with your proxy approach (hotadd is working nicely!) and give the proxy a virtual NIC connected to a dedicated backup network to reach the Veeam B&R server and repository.
The dedicated backup network can be a port group connected to a vSwitch with an also dedicated physical NIC (vmnic) as uplink, so you keep DMZ and backup network separated.

Regards,
Ollie