-
- Enthusiast
- Posts: 32
- Liked: 3 times
- Joined: Oct 25, 2018 2:20 pm
- Contact:
3-2-1 Backup - Should I have a local backup copy?
I am installing a new implementation of Veeam B&R.
My current setup:
1.) 1 local Backup Job using NAS1 as a repository.
2.) 1 local Backup Copy Job using NAS1 as a repository.
3.) 1 offsite Backup Copy Job using NAS2 as a repository.
Is a local Backup Copy Job necessary?
In this setup, I have 4 copies of data if I include the production data. However, if I remove the local Backup Copy Job I will be losing all of my local archived backups. In this case, what happens if I need to restore from 2 months back and my only Backup Copy is offsite? My only options would be a painfully slow restore, restore at offsite location, or seed the data from my offsite location to my local location.
P.S. should a Backup Job and Backup Copy Job be on the same repository?
My current setup:
1.) 1 local Backup Job using NAS1 as a repository.
2.) 1 local Backup Copy Job using NAS1 as a repository.
3.) 1 offsite Backup Copy Job using NAS2 as a repository.
Is a local Backup Copy Job necessary?
In this setup, I have 4 copies of data if I include the production data. However, if I remove the local Backup Copy Job I will be losing all of my local archived backups. In this case, what happens if I need to restore from 2 months back and my only Backup Copy is offsite? My only options would be a painfully slow restore, restore at offsite location, or seed the data from my offsite location to my local location.
P.S. should a Backup Job and Backup Copy Job be on the same repository?
-
- Veteran
- Posts: 1943
- Liked: 247 times
- Joined: Dec 01, 2016 3:49 pm
- Full Name: Dmitry Grinev
- Location: St.Petersburg
- Contact:
Re: 3-2-1 Backup - Should I have a local backup copy?
Hi GreenAlpha and welcome to the community!
Doing a copy job locally in the same repository isn't possible, since you cannot choose the same repository as source and target.
However, you can create another local repository for GFS restore points if that's what you need. Thanks!
Doing a copy job locally in the same repository isn't possible, since you cannot choose the same repository as source and target.
However, you can create another local repository for GFS restore points if that's what you need. Thanks!
-
- Enthusiast
- Posts: 32
- Liked: 3 times
- Joined: Oct 25, 2018 2:20 pm
- Contact:
Re: 3-2-1 Backup - Should I have a local backup copy?
Hi DGrinev!
I currently have 2 repositories configured to the same NAS. \\nas1\backup and \\nas1\backupcopy.
Is it best practices to have a local backup copy? Or do most customers only use backup copy for offsite locations? I'm concerned that our nas1 is really chugging along because it is being used as the source and target.
I'm more or less, asking for guidance for what the best practice setup is.
Thank you!
I currently have 2 repositories configured to the same NAS. \\nas1\backup and \\nas1\backupcopy.
Is it best practices to have a local backup copy? Or do most customers only use backup copy for offsite locations? I'm concerned that our nas1 is really chugging along because it is being used as the source and target.
I'm more or less, asking for guidance for what the best practice setup is.
Thank you!
-
- Enthusiast
- Posts: 40
- Liked: 5 times
- Joined: Jul 03, 2018 6:27 pm
- Contact:
Re: 3-2-1 Backup - Should I have a local backup copy?
The 3 in the rule does not mean 3 backups, it means your production data and 2 backups: how-to-follow-the-3-2-1-backup-rule-with-veeam-backup-replication
What I do miss in your scenario is the 2 different media, all your backups are on (the same) disk based media. In case of something like a cryptolocker all your disks (and backups) are unreadable. You should add a cloud or tape copy to your environment.
What I do miss in your scenario is the 2 different media, all your backups are on (the same) disk based media. In case of something like a cryptolocker all your disks (and backups) are unreadable. You should add a cloud or tape copy to your environment.
-
- Veteran
- Posts: 1943
- Liked: 247 times
- Joined: Dec 01, 2016 3:49 pm
- Full Name: Dmitry Grinev
- Location: St.Petersburg
- Contact:
Re: 3-2-1 Backup - Should I have a local backup copy?
Retain backups all in one place isn't a good idea, as it becomes a single point of failure.
The backup copy job was designed to deliver the data on the block level into the secondary destination which in most cases is DR site.
I'd recommend you to visit best practices site developed by our technicians.
The backup copy job was designed to deliver the data on the block level into the secondary destination which in most cases is DR site.
I'd recommend you to visit best practices site developed by our technicians.
-
- Enthusiast
- Posts: 32
- Liked: 3 times
- Joined: Oct 25, 2018 2:20 pm
- Contact:
Re: 3-2-1 Backup - Should I have a local backup copy?
Gotcha on the 3-2-1 rule.srdegeus wrote: ↑Nov 01, 2018 2:19 pm The 3 in the rule does not mean 3 backups, it means your production data and 2 backups: how-to-follow-the-3-2-1-backup-rule-with-veeam-backup-replication
What I do miss in your scenario is the 2 different media, all your backups are on (the same) disk based media. In case of something like a cryptolocker all your disks (and backups) are unreadable. You should add a cloud or tape copy to your environment.
I'm confused though, all my backups are on 2 different NAS's (1 local, 1 offsite). So they're all on disk-based media, but on 2 geographically dispersed NAS's. If cryptolocker hist NAS1, then we would fallback to NAS2. Am i missing something?
Is there any reason to have tape back-up? I've been in the IT industry for 10 years and have never seen tape.
-
- Enthusiast
- Posts: 32
- Liked: 3 times
- Joined: Oct 25, 2018 2:20 pm
- Contact:
Re: 3-2-1 Backup - Should I have a local backup copy?
There's no single point of failure since I have 2 geographically separate NAS's.DGrinev wrote: ↑Nov 01, 2018 2:59 pm Retain backups all in one place isn't a good idea, as it becomes a single point of failure.
The backup copy job was designed to deliver the data on the block level into the secondary destination which in most cases is DR site.
I'd recommend you to visit best practices site developed by our technicians.
I've looked through the guides but I have not found any solid info on local backup copy's.
Let's think about this.........If I only have 1 backup copy job running at our DR/offsite location, and the DR site burns down, I'VE LOST ALL ARCHIVED BACKUPS that were created outside of the backup job (which does not do GFS).
Thinking out loud, It sounds like I need:
- 1 local repository for Backup Jobs (hardware1)
1 local repository for Backup Copy Jobs (hardware2)
1 DR repository for Backups Copy Jobs (hardware3)
-
- Veteran
- Posts: 1943
- Liked: 247 times
- Joined: Dec 01, 2016 3:49 pm
- Full Name: Dmitry Grinev
- Location: St.Petersburg
- Contact:
Re: 3-2-1 Backup - Should I have a local backup copy?
Yes, you're safe with the second NAS outside of production area.
You're good to go with the local backup copy for GFS restore points.
Your understanding is right, ideally you should store all backups separately, but the local + remote copy is enough for the most cases. Thanks!
You're good to go with the local backup copy for GFS restore points.
Your understanding is right, ideally you should store all backups separately, but the local + remote copy is enough for the most cases. Thanks!
-
- Enthusiast
- Posts: 40
- Liked: 5 times
- Joined: Jul 03, 2018 6:27 pm
- Contact:
Re: 3-2-1 Backup - Should I have a local backup copy?
Depends, is the storage on both NAS accessible from the same network? (I would suppose so as the Backup Copy Job can access both.) In that case it doesn't matter that they are geographically dispersed if they are not 'air gapped'.If cryptolocker hist NAS1, then we would fallback to NAS2. Am i missing something?
Not necessarily saying that it needs to be tape, but it needs to be different media. Preferably 'read only' media where it is (almost) impossible to modify your backup set. Cloud based storage is also different media, especially if combined with a VTL.Is there any reason to have tape back-up?
Not meant in a negative way, but this would mean that you have worked in a narrow part of the business that doesn't use tape. (Like most start-ups for example.)I've been in the IT industry for 10 years and have never seen tape.
From earlier this year: https://www.forbes.com/sites/tomcoughli ... ing-along/
I am definitely not saying that you should start to use physical tapes but you should verify that at least one of your copies is 'offline'.The report showed a record 108,457 petabytes (PB) of total tape capacity (compressed) shipped in 2017, an increase of 12.9 percent over the previous year.
It doesn't stop at a cryptolocker, we should all remember https://myitforum.com/sccm-task-sequenc ... -commbank/
The Task Sequence contained automation to – here it comes – format the disks. Yes, the disks of some 9,000 PCs and 490 servers (including domain controllers) were formatted and wiped clean.
-
- Enthusiast
- Posts: 32
- Liked: 3 times
- Joined: Oct 25, 2018 2:20 pm
- Contact:
Re: 3-2-1 Backup - Should I have a local backup copy?
This is some great insight srdegeus!
Both NAS's are accessible on the same network.
So what are the options to 'air-gap' the repositories?
What are the different media types available?
And could you give an example of read-only?
This is great stuff! Thank you!
Both NAS's are accessible on the same network.
So what are the options to 'air-gap' the repositories?
What are the different media types available?
And could you give an example of read-only?
This is great stuff! Thank you!
-
- Influencer
- Posts: 21
- Liked: 4 times
- Joined: Apr 14, 2017 5:25 pm
- Full Name: xudaiqing
- Contact:
Re: 3-2-1 Backup - Should I have a local backup copy?
I use storage on the virtual host for Backup Jobs, local storage on veeam server (which is behind it's own firewall) for local Backup Copy Jobs.
I use vm in the cloud with daily snapshot for mostly air-gapped storage.
I use vm in the cloud with daily snapshot for mostly air-gapped storage.
-
- Service Provider
- Posts: 26
- Liked: 3 times
- Joined: Apr 19, 2017 3:47 pm
- Full Name: Ryan Faulkner
- Contact:
Re: 3-2-1 Backup - Should I have a local backup copy?
For one of our clients we do this for them:
-local backup onsite
-cloud backup copy job to our Cloud Connect Server/Repo (same city)
-air gapped backup copy to 2 different ext hdd's locally that the client swaps once per week.
The air-gapped also gives the customer the advantage of having a longer retention period but also adds an added layer of protection from crypto that could potentially encrypt the local backups and or destroy the cloud backups. We've actually had a client this year where crypto hit the local repo and encrypted all their backups, we could have avoided this mishap by having the repo VM not on the domain.
If you don't like the swapping ext hdd's for air-gapped, I just read a great idea from Gostev about having a workstation/server power on once a week to allow a copy job to run to it then power that machine off after the copy completes. This gives that air-gapped protection as the machine isn't powered on all the time. I might actually implement this the next time a customer wants to do the air-gapped method.
-local backup onsite
-cloud backup copy job to our Cloud Connect Server/Repo (same city)
-air gapped backup copy to 2 different ext hdd's locally that the client swaps once per week.
The air-gapped also gives the customer the advantage of having a longer retention period but also adds an added layer of protection from crypto that could potentially encrypt the local backups and or destroy the cloud backups. We've actually had a client this year where crypto hit the local repo and encrypted all their backups, we could have avoided this mishap by having the repo VM not on the domain.
If you don't like the swapping ext hdd's for air-gapped, I just read a great idea from Gostev about having a workstation/server power on once a week to allow a copy job to run to it then power that machine off after the copy completes. This gives that air-gapped protection as the machine isn't powered on all the time. I might actually implement this the next time a customer wants to do the air-gapped method.
-
- Enthusiast
- Posts: 40
- Liked: 5 times
- Joined: Jul 03, 2018 6:27 pm
- Contact:
Re: 3-2-1 Backup - Should I have a local backup copy?
What we did is setup our own Cloud Connect for the Enterprise environment. This environment is completely separated from our internal network by a firewall and only the CloudConnect port is open (and RDS Gateway for management.)GreenAlpha55 wrote: ↑Nov 01, 2018 4:19 pm ...
So what are the options to 'air-gap' the repositories?
...
The most important in this setup is that the storage cannot be accessed from anywhere else than from (within) the Cloud Connect network.
This Cloud Connect is in a different location than the offices connecting to it.
Not saying that our setup is the only alternative, but for us it was the better solution as we can set 'quotas' in Cloud Connect for the different offices (tenants.)
-
- Service Provider
- Posts: 111
- Liked: 21 times
- Joined: Dec 22, 2011 9:12 am
- Full Name: Marcel
- Location: Lucerne, Switzerland
- Contact:
Re: 3-2-1 Backup - Should I have a local backup copy?
Wow, 10 Years. You must have seen everything except from tapesGreenAlpha55 wrote: ↑Nov 01, 2018 3:18 pm Is there any reason to have tape back-up? I've been in the IT industry for 10 years and have never seen tape.
Tape is:
- air gapped
- fast (really, tape is extremly fast)
- durable
- portable
- easy to handle
- veeery cheap per TB (think big!)
- it scales very well
- WORM!
Tape is not:
- ancient tech
-
- Lurker
- Posts: 1
- Liked: never
- Joined: Apr 04, 2019 6:42 am
- Contact:
[MERGED] backup copy
Hi, I'm trying to configure backup copy job to use retention weekly and monthly but job seem not start if I use same repository of backup.
It's obbligatory use different repository to use backup copy?
Thank you
It's obbligatory use different repository to use backup copy?
Thank you
-
- Veteran
- Posts: 1943
- Liked: 247 times
- Joined: Dec 01, 2016 3:49 pm
- Full Name: Dmitry Grinev
- Location: St.Petersburg
- Contact:
Re: backup copy
Hi and welcome to the community!
Yes, you must choose a separate repository for the backup copy job.
Please review this thread for additional information. Thanks!
Yes, you must choose a separate repository for the backup copy job.
Please review this thread for additional information. Thanks!
Who is online
Users browsing this forum: Google [Bot], Majestic-12 [Bot], Semrush [Bot] and 90 guests