Configuration for using VeeamVault and Azure Private Peering

[tanoue]

Hi,

I would like to clarify the configuration for using VeeamVault with Azure Private Peering.
I have confirmed via KB4745 that this combination is supported.

Reference: https://www.veeam.com/kb4745

The configuration described there places the gateway (GW) in Azure; however, I would like to place the gateway on the on-premises customer site side. Is this possible?

Regards,


---------------------------------------------------------------------------------
VeeamVaultとAzure Private Peeringの利用構成について確認させてください。
両者の組み合わせは実現可能である旨、kb4745で確認できました。

参照: https://www.veeam.com/kb4745

こちらの内容ですとGWをAzureに配置する構成となっており。
GWはオンプレであるCustomerSite側に配置したいのですが可能でしょうか。

[david.domask]

Hi tanoue,

Can you describe what you're wanting to accomplish with a local gateway a bit more? The purpose of the KB article is to avoid inefficient backup / restore (& mount) operations that utilize a gateway server outside of the Azure datacenter, and mostly trying to understand why you want to have the gateway outside of Azure here. If you can share a few more details, would be appreciated.

[benthomas]

If you want to use private peering but with an on prem gateway, then you need to configure Vault with a Private Endpoint so that there is a private ip within a vnet that's routable.

Alternatively if you have Microsoft public services peering on your expressroute then you can route from an on prem gateway to vault over the public ip addresses advertised that way.