Cloud gateway nat or dual home?

Availability for the Always-On Enterprise

Cloud gateway nat or dual home?

Veeam Logoby hatrick » Wed Sep 28, 2016 1:17 am

It is my understanding with the cloud gateway used for backups only that we can either place the gateway on a dmz and nat via our cisco firewall or we can dual home the gateway server with two interfaces with on being placed on out Internet segment and the other on the dmz. Because I do not like the server to be exposed even with the windows firewall and security suggestions that I would rather nat via the firewall and the server residing only on the dmz. My question is if we decide to offer replication and allow clients the fail over to the replicas via using the nea appliances in the future will the firewall nat for the gateway servers cause a problem? Thanks and let me know if you have further questions about our proposed configuration.
hatrick
Novice
 
Posts: 5
Liked: never
Joined: Fri Dec 16, 2011 12:59 am
Full Name: Mike Bouchard

Re: Cloud gateway nat or dual home?

Veeam Logoby dellock6 » Wed Sep 28, 2016 5:23 am

Hi Mike,
have you looked at the Cloud Connect reference architecture? It has this and many other answers:

https://www.veeam.com/wp-cloud-connect- ... re-v9.html

Also, I see from our records you are an end user, not a service provider. May I ask what's the use case for you for Cloud Connect?
Luca Dell'Oca
EMEA Cloud Architect @ Veeam Software

@dellock6
http://www.virtualtothecore.com
vExpert 2011-2012-2013-2014-2015-2016
Veeam VMCE #1
dellock6
Veeam Software
 
Posts: 5047
Liked: 1330 times
Joined: Sun Jul 26, 2009 3:39 pm
Location: Varese, Italy
Full Name: Luca Dell'Oca

Re: Cloud gateway nat or dual home?

Veeam Logoby hatrick » Wed Sep 28, 2016 1:14 pm

I have looked at that and there is an example of the dual home but also a reference to an option for selecting NAT on the install. Behind a firewall would be more secure even though the exposure is minimal if the server is hardened. I was an end user but I am helping a friend that is a newly licenced service provider and am new to this setup.
hatrick
Novice
 
Posts: 5
Liked: never
Joined: Fri Dec 16, 2011 12:59 am
Full Name: Mike Bouchard

Re: Cloud gateway nat or dual home?

Veeam Logoby dellock6 » Wed Sep 28, 2016 3:44 pm

You can always have a firewall even without nat, just set the firewall to be the gateway of the subnet used by the external network, or use a L2 firewall.
Luca Dell'Oca
EMEA Cloud Architect @ Veeam Software

@dellock6
http://www.virtualtothecore.com
vExpert 2011-2012-2013-2014-2015-2016
Veeam VMCE #1
dellock6
Veeam Software
 
Posts: 5047
Liked: 1330 times
Joined: Sun Jul 26, 2009 3:39 pm
Location: Varese, Italy
Full Name: Luca Dell'Oca


Return to Veeam Backup & Replication



Who is online

Users browsing this forum: Bing [Bot] and 28 guests