Comprehensive data protection for all workloads
Post Reply
kaithost
Veeam ProPartner
Posts: 30
Liked: 1 time
Joined: Aug 25, 2011 7:53 am
Full Name: Kai Thost
Contact:

Feature extension request: more than 9 isolated networks for vLABs

Post by kaithost »

Hi,

some customers of ours are currently segmenting their server networks much more intensive than in the past.
We see compliance and security requirements due to the NIS2 framework in the EU as the cause for this.

In the same spirit these customers want to embrace sure backup jobs much more than in the past (finally!)
to get restore compliance as far as it can get.

currently the number of isolated networks in a vLAB is limited to 9 networks. We see up to 30 networks
in customer installations and since the customers will want to use linked backup job validation they
would have to reorganize the backup jobs (grouping the VMs) toward the limitation of 9 networks
each vLAB. This is not a good solution since they have migrated the backup configuration towards TAGs
just 2 years ago.

the recommendation of just making more vlabs will just not work because the backup jobs will
contain always more than 9 networks for the VMs backed up.

we have submitted a feature extension request already: with case 07201190

i am preaching for years the customer should do more sure backup jobs and finally this is getting
tracktion - just to hit the limitation :(

From my point of view the limitation has no real reason to be there - except for the ease of the network
overview in the vlab configuration and maybe the amount of networks on the vswitch....
ressource wise this shouldn't be a problem for the vlab VM ....

I'd love to get the view on this by the forum and maybe some Veeam guys?



[side remark: since with a lot of isolated networks comes some work which went into the vlab configuration,
maybe we could get a 'duplicate vlab' feature to push it to other hosts?]
Mildur
Product Manager
Posts: 10288
Liked: 2747 times
Joined: May 13, 2017 4:51 pm
Full Name: Fabian K.
Location: Switzerland
Contact:

Re: Feature extension request: more than 9 isolated networks for vLABs

Post by Mildur » 1 person likes this post

Hello Kai
From my point of view the limitation has no real reason to be there - except for the ease of the network
overview in the vlab configuration and maybe the amount of networks on the vswitch....
The limitation comes from VmWare and not from Veeam. One vsphere VM is limited by VmWare to 10 virtual networks: https://configmax.esp.vmware.com/guest? ... gories=1-0
1x network is used for the backup server to be able to connect to the virtual lab appliance. The other 9x networks can be used for your 9 isolated subnets.


We have multiple requests to overcome this limitation somehow. But no ETA. Please also check out this KB:
https://www.veeam.com/kb4353
[side remark: since with a lot of isolated networks comes some work which went into the vlab configuration,
maybe we could get a 'duplicate vlab' feature to push it to other hosts?]
PowerShell can help you to "clone" configurations to a new virtual lab configuration. Please check out our PowerShell subforum if there is already such a script.

Best,
Fabian
Product Management Analyst @ Veeam Software
kaithost
Veeam ProPartner
Posts: 30
Liked: 1 time
Joined: Aug 25, 2011 7:53 am
Full Name: Kai Thost
Contact:

Re: Feature extension request: more than 9 isolated networks for vLABs

Post by kaithost »

Hi Fabian,

ah, didn't see that coming.... Thank you for pointing out.

ok, then maybe this approach:

one vLab network utilizing multiple/unlimited ip segments on the "vlab side" each with a
virtual IP address as gateway in the same VLAN.

this is by far not the way to go for production networks but shall be nice and easy to use in
a vLab environments. the vLab appliance just has to NAT the segments accordingly as
it did before but this time not for a dedicated interface/VLAN/network but for an IP address
in a shared VLAN/network.

The VMs should be fine when the network uplink in migrated to the sole vLAB network
and IP accessability is fine when die vLAB appliance uses the gateway IP for the VMs.

I am not a linux guru and not 100% sure if NAT will work this way - but could be.

Got my idea? Has this been validated? If this works it will simplify vLABs very much ...
Post Reply

Who is online

Users browsing this forum: No registered users and 70 guests