The network used for ssh connections to Linux VMs with Oracle installed

[Asahi]

Hi,

I have a question about backing up a Linux VM with Oracle installed.
When backing up the Oracle archive logs for a Linux VM, I first make an ssh connection from the Veeam server to Linux.
I understand that the runtime process is deployed to Linux after the ssh connection is successful.
https://helpcenter.veeam.com/docs/backu ... ml?ver=100

I'm interested in this ssh connection.

For example, suppose a Linux VM has the following two IP addresses
IP Address A : 192.168.0.20
IP Address B : 10.172.10.20

In the log, you will see the following output in the task log.
The IP addresses are listed as [192.168.0.20, 10.172.10.20] and the connection test is done from IP address A and the ssh connection is successful.
====
[02.10.2020 02:36:40] <39> Info [Ssh] Creating new cached connection bb66029a-f75f-46f4-850c-4183ed00c3c5 [host: 'xxxx', port: 22, elevation to root: 'no', autoSudo: no, use su if sudo fails: no, host name: xxxx, IPs: [192.168.0.20, 10.172.10.20], AuthenticationData: [UserName: root, AuthTypes: [PublicKey]]].
[02.10.2020 02:36:40] <39> Info [Ssh] Creating SSH connection bb66029a-f75f-46f4-850c-4183ed00c3c5 to server xxxx
[02.10.2020 02:36:40] <39> Info Creating Granados SSH connection 'bb66029a-f75f-46f4-850c-4183ed00c3c5' (unknown protocol)
[02.10.2020 02:36:40] <39> Info [Ssh] logon, host: 'xxxx', port: 22, elevation to root: 'no', autoSudo: no, use su if sudo fails: no, host name:xxxx, IPs: [192.168.0.20, 10.172.10.20], AuthenticationData: [UserName: root, AuthTypes: [PublicKey]]
[02.10.2020 02:36:40] <39> Info [Ssh] Granados 'bb66029a-f75f-46f4-850c-4183ed00c3c5' connected to xxxx. Session: [SSH Session; Local: ; Remote: ]
[02.10.2020 02:36:40] <39> Info [Ssh] Connected to xxxx.
====

Can I specify the order of the IP addresses like this [192.168.0.20, 10.172.10.20]?
For example, I would like to know how to always run ssh connections from IP address B.

Veeam has a setting called Prefferd Network, but I don't think this setting has any effect on ssh connections to Linux VMs because it is a setting that determines priority in communication between Veeam components.
I don't think you can prioritize the IP address of the ssh connection with this setting because the runtime process is deployed after the ssh connection is made.

https://helpcenter.veeam.com/docs/backu ... ml?ver=100

I would like someone to give me some advice.

Kind Regards,
Asahi,
Climb Inc.

[Andreas Neufert]

Preferred network is not used in that case.

We will ask the vcenter (or hyper-v) about the list of IPs for a VM and then work from top to bottom of this list to connect to the VM.
I think there is a reg key to reverse that process for any VM processing (open support case if needed).

Other method would be to block the communication from the Veeam Server to specific subnet by firewall or windows firewall.

[Asahi]

Hi Andreas,

Thank you so much!

===============
We will ask the vcenter (or hyper-v) about the list of IPs for a VM and then work from top to bottom of this list to connect to the VM.
I think there is a reg key to reverse that process for any VM processing (open support case if needed).
===============

In fact, I had already opened a support case, but the engineer there emailed me that the order of the IP addresses could not be changed.
Case # 04392212
Case # 04423495

Our environment is a VMware environment.
I would like to know more about the process of getting the IP list of a VM.

Are you referring to the vmx file of the Linux VM?
Or are you using different parameters to create an IP list?

I want to clarify before asking the support team.

Kind Regards,
Asahi,
Climb Inc.

[Andreas Neufert]

When you open your vcenter or ESXi host, you can click on the VM and when you have VMware Tools installed on a VM it will list you all kind of informations from the VM. One part of this is the list of IPs from that VM. We use some VMware APIs to get this information and use it for our guest processing.

I checked, the logic was enhanced over time. Now you can define specific IPs that should not be used for guest processing and only as fallbacks.

Backup Server
HKEY_LOCAL_MACHINE\SOFTWARE\Veeam\Veeam Backup and Replication\
NLBClusterPrimaryIps
Type: REG_MULTI_SZ
Description: Define an cluster IP addresses (NLB, DAG and so on) to move them down it the list of RPC connections. If you type "all" Veeam will start connects from the second IP address in the current list.
One IP per line.
You need to reboot the Veeam Backup Service (check that no job is running) or reboot the Veeam Server afterward.

Don´t worry about the NLBCluster metioning. With NLB you can not use the NLB IP address for guest processing as it could land on the wrong server. You can use the reg key for your situation.

[Asahi]

Good Morning Andreas,

Thank you so much!

I'll ask the support team again about the registry key.

Kind Regards,
Asahi,
Climb Inc.