Host-based backup of VMware vSphere VMs.
Post Reply
mschlott
Enthusiast
Posts: 86
Liked: 2 times
Joined: Jan 20, 2011 5:45 pm
Full Name: Mike Schlottman
Contact:

What hardware for Hardened Linux Repository?

Post by mschlott »

Hi, I'm due for a hardware refresh of my backup targets. I'm currently using Dell MD arrays connected to a VMWare host that runs a Veeam proxy. I am considering changing things up a bit and switching to a Hardened Linux Repository. My first thought is to build a server with DAS and fill it with consumer SATA drives. I'm having trouble finding servers that either support enough internal storage, or external DAS from the same vendor so I can get a supported package. If this keeps up, I'll end up buying used hardware and going with third-party support, which I don't like to do.

What are others doing?

Also, any concerns around running a hardened repository, and then having driver issues or crashes in the future, that may be difficult to troubleshoot on a hardened server?
Origin 2000
Service Provider
Posts: 94
Liked: 24 times
Joined: Sep 24, 2020 2:14 pm
Contact:

Re: What hardware for Hardened Linux Repository?

Post by Origin 2000 »

Running a dozen HLR for around ~4? years now on Dell HW without a single problem. We have R7x0XD 12x3.5" with external MD arrays as well as R7x0XD2 which offer internal 24x3.5" drives. Others use HPE Apollo or Supermicro. Last year we deliver 3x Dell H760xd2 with around 300TB RAID6 to a customer.

Regards,
Joerg
Andreas Neufert
VP, Product Management
Posts: 7148
Liked: 1534 times
Joined: May 04, 2011 8:36 am
Full Name: Andreas Neufert
Location: Germany
Contact:

Re: What hardware for Hardened Linux Repository?

Post by Andreas Neufert »

For the hardware, I think the most important investments are for the raid controller (use a good one with battery backed caches) and fast reliable network cards (server grade).

For the number of disks: Lenovo SR650, HPE Apollo, Cisco S3260, Cisco C240, SuperMicro X13,...

The idea of the hardened repository is to not give Veeam any account that can damage the system. Locally you can use root for troubleshooting, but you should not expose this to the network or SSH. As well don´t use KVM switches or ILO as they are known for getting hacked as well.
Post Reply

Who is online

Users browsing this forum: No registered users and 52 guests