VPN needed for backup copy across WAN

VMware specific discussions

VPN needed for backup copy across WAN

Veeam Logoby neilmurphy65 » Wed Mar 02, 2016 12:31 pm

Hi All,

One of our customers is thinking of different ways of offering backup as a service to their customers, starting by doing it for themselves as an in-house DR solution. They are trying to work out which would be a better option, either a standard deployment or a VCSP setup.

What I’m still not sure of is whether it is best practice to use a VPN for a standard install where backup copy jobs traverse a WAN connection. The customer points out that since Veeam uses dynamic port ranges (e.g. 2500-5000 for some types of communication, 49152-65535 for others) port forwarding becomes a problem and he wants to know if VPN is used as a way around this.

Does anyone know how the port forwarding issue is addressed?

Many thanks,
Neil.
neilmurphy65
Enthusiast
 
Posts: 44
Liked: 1 time
Joined: Thu Nov 25, 2010 4:26 pm
Full Name: Neil Murphy

Re: VPN needed for backup copy across WAN

Veeam Logoby Vitaliy S. » Wed Mar 02, 2016 12:55 pm

Hi Neil,

Generally, It is recommended to use VCSP setup and do not spend time configuring and maintaining VPN connection. In this case you don't need to open multiple ports in your firewall and all the traffic will still be secured via Cloud Connect components.

Thanks!
Vitaliy S.
Veeam Software
 
Posts: 19575
Liked: 1104 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: VPN needed for backup copy across WAN

Veeam Logoby neilmurphy65 » Wed Mar 02, 2016 2:17 pm

Thanks Vitaly.

So this leads to two more questions:

1. VCSP would require a per-VM licensing scheme, correct?
2. For customers just doing backup copies of replication for their own systems, do they usually setup VPNs across WAN links?

Many thanks,
Neil.
neilmurphy65
Enthusiast
 
Posts: 44
Liked: 1 time
Joined: Thu Nov 25, 2010 4:26 pm
Full Name: Neil Murphy

Re: VPN needed for backup copy across WAN

Veeam Logoby Vitaliy S. » Wed Mar 02, 2016 3:54 pm

1. Yes, service provider will need a per-VM license for Cloud Connect.
2. Yes, if there is no service provider involved and some customer would like to send backups to his own offsite location, then VPN is needed, otherwise backup traffic will not be secured.
Vitaliy S.
Veeam Software
 
Posts: 19575
Liked: 1104 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov


Return to VMware vSphere



Who is online

Users browsing this forum: No registered users and 26 guests