Comprehensive data protection for all workloads
Post Reply
hyvokar
Expert
Posts: 360
Liked: 23 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Restoring stuff through guest interaction proxy

Post by hyvokar » Jul 04, 2016 5:42 pm

Hi!


I'm in a situation where a strict security policy limits network connections from backup server to VMs being backed up.
With your support's (and forum) help I've now set up guest interaction proxy and AAIP backup works finally fine.


However, I seem not be able to restore stuff trough that same proxy which kinda defeats the whole purpose of having that proxy in first place...

My network setup is:

VBR connects to the network where our vmware production cluster is. It also connects to network called "veeam". VMs being backed up are connected to "VM-LAN". Proxy server on VM-LAN also connects to "Backup" network. There is a router between "veeeam" and "Backup" networks, which handles all the traffic. There is a static route from VBR to GuestInterAction Proxy and vice versa.


Is there a way to use guest interaction proxy to help restotore stuff to for example AD or to Exchange?
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE

Andreas Neufert
Veeam Software
Posts: 3809
Liked: 683 times
Joined: May 04, 2011 8:36 am
Full Name: Andreas Neufert
Location: Germany
Contact:

Re: Restoring stuff trough guest interaction proxy

Post by Andreas Neufert » Jul 04, 2016 6:58 pm

AD and Exchange objects are restored from the client. Install a B&R Client on the Guest interaction proxy.

hyvokar
Expert
Posts: 360
Liked: 23 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Restoring stuff trough guest interaction proxy

Post by hyvokar » Jul 04, 2016 7:19 pm

Hi!
Is the client same thing as B&R console?
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE

Gostev
SVP, Product Management
Posts: 24785
Liked: 3513 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Restoring stuff trough guest interaction proxy

Post by Gostev » Jul 04, 2016 9:55 pm

Yes.

hyvokar
Expert
Posts: 360
Liked: 23 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Restoring stuff trough guest interaction proxy

Post by hyvokar » Jul 05, 2016 8:12 am

Thank you Andreas and Gostev, the restoring works perfectly now in our small scale test.

However, I'd be very happy chappy to see the restore process working straight from vbr server trough guest interaction proxy in future releases. We currently have hundreds of networks in our vmware cluster and installing consoles to every single network/customer and keeping them up to date will be highly challenging.
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE

hyvokar
Expert
Posts: 360
Liked: 23 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Restoring stuff trough guest interaction proxy

Post by hyvokar » Jul 27, 2016 6:35 am

Hi!

While this was already working on our test environment, it for some reason does not work any more.
I can restore stuff on the proxy only, but not on the other VMs on the network. The issue started after I installed Enterprise Manager (not sure if it's related).

Logs on the proxy/consolse server says:
[21.07.2016 11:01:46] Error Failed to connect to guest agent. Errors:
[21.07.2016 11:01:46] Error 'Cannot connect to the host's administrative share. Host: [10.9.8.11]. Account: [savt\veeam].
[21.07.2016 11:01:46] Error Win32 error:The network name cannot be found.

There is no AV or Firewall on the 10.9.8.11
Any idea how to resolve this? I can try uninstalling Enterprise Manager since it cannot perform desired tasks in this scenario.
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE

foggy
Veeam Software
Posts: 18239
Liked: 1556 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Restoring stuff trough guest interaction proxy

Post by foggy » Jul 27, 2016 12:10 pm

Make sure you're actually able to open administrative share on this guest from the console.

hyvokar
Expert
Posts: 360
Liked: 23 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Restoring stuff trough guest interaction proxy

Post by hyvokar » Jul 27, 2016 1:32 pm

Hi!

Tested, and I can connect to \\savtex01\admin$

Since I have two nics on proxy VM, is it possible that it tries to use wrong nic to connect internal network?
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE

foggy
Veeam Software
Posts: 18239
Liked: 1556 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Restoring stuff trough guest interaction proxy

Post by foggy » Jul 27, 2016 1:46 pm

Do you have preferred networks configured?

hyvokar
Expert
Posts: 360
Liked: 23 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Restoring stuff trough guest interaction proxy

Post by hyvokar » Aug 01, 2016 8:45 am

Hi!

Probably not. Where I can do that?
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE

veremin
Product Manager
Posts: 16867
Liked: 1429 times
Joined: Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin
Contact:

Re: Restoring stuff trough guest interaction proxy

Post by veremin » Aug 01, 2016 9:06 am

Here. Thanks.

hyvokar
Expert
Posts: 360
Liked: 23 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Restoring stuff trough guest interaction proxy

Post by hyvokar » Aug 01, 2016 9:26 am

I'm not quite sure which network should I prefer. Should I enter a different network from all our customers there? Does it matter, that VBR server probably dont know these network? I'm tying to do the restore from the console, which is in customer's network.

Or is there anyone I can disguss with my setup in more detail, to get this working?
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE

foggy
Veeam Software
Posts: 18239
Liked: 1556 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Restoring stuff trough guest interaction proxy

Post by foggy » Aug 01, 2016 11:45 am

You can contact support for assistance in configuration. Basically, you need to specify network that you want to be used for actual restore traffic.

hyvokar
Expert
Posts: 360
Liked: 23 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Restoring stuff trough guest interaction proxy

Post by hyvokar » Aug 01, 2016 11:58 am

I have contacted your support, and really wouldnt like to go down on that road again. What they basically told me, was to use wrong proxy during the restore process and then they told me that it's impossible to do the restore the way I want (which actually was working before).
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE

foggy
Veeam Software
Posts: 18239
Liked: 1556 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Restoring stuff trough guest interaction proxy

Post by foggy » Aug 01, 2016 12:03 pm

If you feel the case wasn't treated properly, you can always provide your feedback to a manager, the corresponding option is available right on the support portal.

hyvokar
Expert
Posts: 360
Liked: 23 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Restoring stuff trough guest interaction proxy

Post by hyvokar » Aug 02, 2016 9:57 am

Haven't heard of support for some time, so I went ahead and removed the Enterprise Manager. Restore directly to customers network (without preferred networks) is now working again. Cannot confirm, that it's because of EM, but that's only change made in the system.
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE

foggy
Veeam Software
Posts: 18239
Liked: 1556 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Restoring stuff trough guest interaction proxy

Post by foggy » Aug 02, 2016 11:32 am

Have you installed EM on the backup server or guest interaction proxy?

hyvokar
Expert
Posts: 360
Liked: 23 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Restoring stuff trough guest interaction proxy

Post by hyvokar » Aug 02, 2016 1:03 pm

backup server
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE

foggy
Veeam Software
Posts: 18239
Liked: 1556 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Restoring stuff trough guest interaction proxy

Post by foggy » Aug 02, 2016 4:19 pm

Not sure how this can affect restores... Could you please check whether the machine with console installed is specified as a mount host for the corresponding repository?

hyvokar
Expert
Posts: 360
Liked: 23 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Restoring stuff trough guest interaction proxy

Post by hyvokar » Aug 03, 2016 5:42 am

No it isnt. I cannot use that server as a mount server, since mount server has to have a network connection to vcenter. I'm using backup server as a mount server.
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE

billcouper
Service Provider
Posts: 68
Liked: 18 times
Joined: Dec 18, 2017 8:58 am
Full Name: Bill Couper
Contact:

Re: Restoring stuff through guest interaction proxy

Post by billcouper » Jul 11, 2018 1:45 am

Is this still a requirement? Installing a VBR console on every guest interaction proxy just to be able to do restores? This is a great joke.
As hyvokar pointed out, this basically defeats the purpose of the guest interaction proxy, for us at least.
For a hosting provider, it is impractical to install VBR consoles inside every customer environment.

edit: on second thought, this is actually FAR WORSE than first thought.... this means that firewall ports need to be open from customer environment to our Veeam server?????? this is completely unacceptable and is totally rubbish imo... a large part of putting in a guest interaction proxy is to get the application-level restores... which now can't be done because of SECURITAH!

hyvokar
Expert
Posts: 360
Liked: 23 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Restoring stuff through guest interaction proxy

Post by hyvokar » Jul 19, 2018 6:36 pm

Hi,
yes, this was/is a major design flaw what comes to hosting services.
I resigned ~2years ago, so I'm not sure how things are handled nowadays, but back then we made a ton of scripts (two for each customer) which would open and close the ports on the windows firewall that was needed when we needed to do a restore. Major PITA.
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE

foggy
Veeam Software
Posts: 18239
Liked: 1556 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Restoring stuff through guest interaction proxy

Post by foggy » Aug 10, 2018 12:52 pm

Guest interaction proxy cannot be used for restores. In case you cannot have mount server in the VM network, restore can be performed over VIX.

Gostev
SVP, Product Management
Posts: 24785
Liked: 3513 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Restoring stuff through guest interaction proxy

Post by Gostev » Aug 10, 2018 12:56 pm 1 person likes this post

All, we're looking at enabling restores through guest interaction proxies (short-term roadmap). Thanks!

hyvokar
Expert
Posts: 360
Liked: 23 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Restoring stuff through guest interaction proxy

Post by hyvokar » Aug 14, 2018 8:08 pm

Too late for me, but probably very useful for others :-)
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE

Steve-nIP
Service Provider
Posts: 19
Liked: 4 times
Joined: Feb 06, 2018 10:08 am
Full Name: Steve
Contact:

Re: Restoring stuff through guest interaction proxy

Post by Steve-nIP » May 27, 2019 8:25 am

How's this working out? This is a 100% required feature in VBR.
It seems crazy that I can run an SQL transaction log backup through the Guest Interaction Proxy, but then restore of it is impossible...

foggy
Veeam Software
Posts: 18239
Liked: 1556 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Restoring stuff through guest interaction proxy

Post by foggy » May 29, 2019 5:04 pm

Hi Steve, nothing particular to share at the moment.

Post Reply

Who is online

Users browsing this forum: AdsBot [Google], Google [Bot] and 25 guests