Protect virtual backup server and proxy

[karsten123]

Moin,

i have to protect a virtual backup server and a virtual proxy server.
Classical vm backup is not possible because backup server is also tape server and the hba is presented via pci passthrough. The VMware proxy has also a hba via pci passthrough for the connection of the vmfs datastores (FC).
Now i am thinking about, how to protect these machines or to leave it as is and go all in with „just“ the configuration backup.

What are your thoughts about that?
Maybe agent for windows? The downsides of backing up the Veeam backup server are well documented.

Thanks
Karsten

[PetrM]

Hi Karsten,

The configuration backup is highly recommended for backup server protection: in case of a problem, you'll have the option to restore configuration to the original server or to perform migration to a different one.

Speaking about proxy server, the first thought that comes to me is to use Veeam Agent for Windows because VMware snapshot cannot be taken. On the other hand, if the only role of this VM in your infrastructure is a proxy server and data protection is not required, wouldn't it be easier to redeploy it (f.g. from template) in case of failure?

Thanks!

[karsten123]

Hi Petr,
thank you.

So the strategy could be:
- no backup of the backup server
- configuration backup to primary vhr
- file to tape for configuration backup
- no backup of the virtual proxy. Alternatively protection via agent for Windows
- first step of recovery: deploy both vms from a template, recover connections to tape and SAN, recover from configuration backup and reconfigure proxy

Both virtual servers are located at the DR site.
Is this a bullet proof strategy?

Tia
Karsten

[PetrM]

Hi Karsten,

I think so except the virtual proxy on DR site, I'd keep the proxy on the Primary site to ensure high backup performance.

Thanks!

[karsten123]

Hi Petr,

it is not a real separate site. It is more like a DR datacenter in another part of the building.
Everthing is connected with 25 GbE and 32 Gbit FC.

[PetrM]

Hi Karsten,

In this case, I'd say that the strategy is "bulletproof" indeed

Thanks!