Using tape as a backup target
Post Reply
ThierryF
Enthusiast
Posts: 88
Liked: 21 times
Joined: Mar 31, 2018 10:20 am
Contact:

VBR Disaster Recovery from WORM Tapes after Cyber Attack ...

Post by ThierryF »

Hello friends,

We are looking at moving from LTO7 Classic mediums to LTO7WORM mediums, as
backup media protection against cyber attack, copying 2.5TB Tape backups a day VBR backups
to Azure/AWS Immuable storage being impossible.

Assuming a scenario with all of my backups to be Tape-Copy'ed on WORM Tapes
(actually avg 10 LTO7WORM Tapes a day, Avg 2.5TB Data daily, synthetic fulls being spread on all days of the week),
my VBR Repositories to be destroyed by Cyber attack, including Veeam Database ...
In other words, VBR env dead ...

Due to WORM Tapes, hacker cannot overwrite my backup medias as read-only once
mediaset is closed and/or tape full.

Assuming also that I have a SQL-based daily full backup of my VeeamDB, stored in a folder on my
Veeam Server (VBR and SQL roles on same physical server) that is protected by a VBR job, with a
daily synthetic full cycle and also being tape-copied to WORM Tapes ...

Assume also that I have a daily hardcopy of all of my backups stored on tape, out of hacker attack ...

What would be the procedure to recover my VBR Env and start VBR Guests (VM/physical servers) Recoveries ?
Reinstalling Servers (OS, SQL, Veeam) on Veeam Server/Proxy and Veeam Repositories,
then Restore SQL DB and let's go ?

But to start restoring SQLDB, tape should be known by new VBR Environment.
Should I just process like loading tapes written on another veeam server, to let new environment
aware of latest WORM tape (the one containing latest SQLBackup), then restore my SQL DB backup files,
then stop and proceed with SQL DB recovery before restarting VBR Env?
Any other missing steps ?

In such a setup (all VBR Backups and SQL DB Backups put to WORM Tapes),
what about need to backup VeeamConfigBackup repository ?
Faster DRP Recovery with VCB backups also on WORM Tapes ?

Any advises are welcome ...

Thierry

HannesK
Veeam Software
Posts: 11005
Liked: 2089 times
Joined: Sep 01, 2014 11:46 am
Full Name: Hannes Kasparick
Location: Austria
Contact:

Re: VBR Disaster Recovery from WORM Tapes after Cyber Attack ...

Post by HannesK »

Hello,
Assuming also that I have a SQL-based daily full backup of my VeeamDB
that makes everything complicated when it comes to passwords, because passwords are encrypted with the machine key of the backup server. If the backup server is lost, then you somehow have to manage restoring potentially hundreds or thousands of passwords.

I would go with configuration backup. Copy that somewhere on disk media / object storage / even USB disk might work, with whatever 3rd-party copy tool instead of doing a full restore from tape. It just simplifies everything and saves hours during restore.

Best regards,
Hannes

ThierryF
Enthusiast
Posts: 88
Liked: 21 times
Joined: Mar 31, 2018 10:20 am
Contact:

Re: VBR Disaster Recovery from WORM Tapes after Cyber Attack ...

Post by ThierryF »

Good advise. VCB Backups being small in size regarding other backups,
it make sense to copy them to Azure/AWS Immuable Storage space for easier restart !

Good idea ! :-D
Have a great day !
Thierry

Post Reply

Who is online

Users browsing this forum: No registered users and 6 guests