Discussions specific to the VMware vSphere hypervisor
Post Reply
neilmurphy65
Enthusiast
Posts: 82
Liked: 13 times
Joined: Nov 25, 2010 4:26 pm
Full Name: Neil Murphy
Contact:

VPN needed for backup copy across WAN

Post by neilmurphy65 » Mar 02, 2016 12:31 pm

Hi All,

One of our customers is thinking of different ways of offering backup as a service to their customers, starting by doing it for themselves as an in-house DR solution. They are trying to work out which would be a better option, either a standard deployment or a VCSP setup.

What I’m still not sure of is whether it is best practice to use a VPN for a standard install where backup copy jobs traverse a WAN connection. The customer points out that since Veeam uses dynamic port ranges (e.g. 2500-5000 for some types of communication, 49152-65535 for others) port forwarding becomes a problem and he wants to know if VPN is used as a way around this.

Does anyone know how the port forwarding issue is addressed?

Many thanks,
Neil.

Vitaliy S.
Product Manager
Posts: 23001
Liked: 1557 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: VPN needed for backup copy across WAN

Post by Vitaliy S. » Mar 02, 2016 12:55 pm

Hi Neil,

Generally, It is recommended to use VCSP setup and do not spend time configuring and maintaining VPN connection. In this case you don't need to open multiple ports in your firewall and all the traffic will still be secured via Cloud Connect components.

Thanks!

neilmurphy65
Enthusiast
Posts: 82
Liked: 13 times
Joined: Nov 25, 2010 4:26 pm
Full Name: Neil Murphy
Contact:

Re: VPN needed for backup copy across WAN

Post by neilmurphy65 » Mar 02, 2016 2:17 pm

Thanks Vitaly.

So this leads to two more questions:

1. VCSP would require a per-VM licensing scheme, correct?
2. For customers just doing backup copies of replication for their own systems, do they usually setup VPNs across WAN links?

Many thanks,
Neil.

Vitaliy S.
Product Manager
Posts: 23001
Liked: 1557 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: VPN needed for backup copy across WAN

Post by Vitaliy S. » Mar 02, 2016 3:54 pm

1. Yes, service provider will need a per-VM license for Cloud Connect.
2. Yes, if there is no service provider involved and some customer would like to send backups to his own offsite location, then VPN is needed, otherwise backup traffic will not be secured.

Post Reply

Who is online

Users browsing this forum: No registered users and 18 guests