Blogs and podcasts
Bring your knowledge and expertise while creating blogs and podcasts
- 643 Topics
- 5,027 Comments
[What (else) is new in v12 - I] New Hardened Repository integration
I would like to revive my old “what else is new” series I did for VBR v11 some time ago. This time, it is about v12 - what else?First part is about the new integration of Linux Hardened Repository. This was one of the greatest new features in v11. To bring the repository to VBR it was necessary to create a Linux repository and enable immutability. With v12, Hardened Repository is added by a new option: But there is more! With this, you can just add the repository with single-use credential. That was highly recommended in v11 recommended. Furthermore, after adding a Hardened Repository, immutability is enabled and cannot be disabled. … even with PowerShell. I like it! Also because this increases security. If a hacker enters the VBR server, it is not possible to disable immutability any more. Check my post about how to monitor these settings with Veeam ONE.
SQL Server 2019 – TDE DB Recovery Errors, Log Shipping & CU16
Microsoft have recently released SQL Server 2019 CU16, and in this blog post I’m calling out a very specific bug that Microsoft have addressed, and the implications this has to business-as-usual operations. Transparent Data Encryption (TDE) & Compressed BackupsMicrosoft have been tracking a bug related to using TDE and compressing backups, impacting both database, and log backup types. Should you attempt to restore a compressed backup of a TDE database, you’ll likely receive a message similar to the below:Msg 3241, Level 16, State 18, LineThe media family on device 'BackupFileName' is incorrectly formed. SQL Server cannot process this media family.Oh dear. This isn’t good! Prior to CU16, Microsoft’s workaround was to simply not compress your backups. Before we proceed any further, I also want to call out that I’ve not yet heard of any examples of Microsoft retrospectively fixing these backups, so if you’re currently in this dangerous scenario, mitigate ASAP. SQL Server 2019 CU16 Re
[Quicktip] "Error in the application" during VM backup
Yesterday I saw the error a second time, so I thought it would be helpful to others to share.Error happens when VBR tries to read vSphere information for the VM to back up. Error says "Error in the application" like you see in the screenshot.After some troubleshooting we found the reason for this. It was because TCP-port 902 was not allowed (in all firewalls) from the Veeam proxy server to the ESXi host that was hosting the VM to back up. After the port was enabled in the firewall(s), backup ran without further issues. Notes:Used ports for VBR see here: https://helpcenter.veeam.com/docs/backup/vsphere/used_ports.html?ver=110 Vanguard @Cragdoo also shared this error some time ago. In his case the error was caused by a name-resolution problem on a new Linux Veeam proxy server.I hope this post safe others some time when this error appears.
3-2-1 rule for VBR Configuration Backup
By default, VBR does a configuration backup every day at 10:00.It is obvious that this backup should also follow the 3-2-1(-1-0) rule. A easy way to do this is to copy these restore points to a machine that is already backed up be Veeam and therefore covered by the 3-2-1(-1-0) rule. This can be done with a Veeam File Copy job. This job can copy files between systems part of Managed Servers.Lets do it and create a File Copy job:and select the path to the configuration backup as sourceFor destination select the server system you want to copy files to. As mentioned, this system should be part of backup job. Finally select your preferred time schedule. I would recommend to run this job just after the configuration backup.Done? Almost! It is important to know, File Copy job copies files respectively a directory, but is does not synchronize. Therefore the amount of files at the destination will increase. So they should also get deleted after some time otherwise partition runs full. A easy wa
DRaaS for the Masses! CDP for VCCR
Opening up CDP for DRaaS…enabling tenants to replicate Tier 1 workloads at ultra low RPOs from on premises locations to one of thousands of Service Provider Clouds efficiently and cost effectively.Veeam is bringing #DRaaS to the masses in v12 and here is a preview of what is in store when it is released.
[curiosity] New kind of Ransomware: software does not demand a ransom but good actions
Some kind of funny: A new kind of ransomware was found in India. It does not demand a ransom but donations like: new clothes to homeless, feed kids in branded pizza outlets and provide financial help to anyone who needs urgent medical attention but cannot afford it. If victims can proof good actions, they receive decryption kid. Please don't misunderstand, I am still against cyber attacks like Ransomware, but at least the needy here have something out of it.https://www.businessinsider.in/tech/news/goodwill-ransomware-detected-in-india-makes-victim-donate-to-poor-provides-financial-help-to-needy-patients/articleshow/91736850.cms
Nimble Storage Integration - Security Measure
I created a previous post on Nimble Storage Integration with Veeam, discussing how you can potentially recover data even if a backup job’s Deleted VMs retention setting has passed. You can view the post here. For this post, I want to continue discussing Nimble Storage Integration, but provide you a security measure you can implement when configuring your Windows Proxies for Storage Integration or Direct SAN, as Veeam requires a Proxy to be configured with Direct SAN (or ‘Automatic Selection’) when using Backup from Storage Snapshots (BfSS).A fellow Vanguard and I have occasional on-going discussions on how to best secure Windows Backup Proxies using Nimble (now called whatever...Alletra? 🙄 ) for Storage Integration. Several mos ago, we were trying to determine how best to present production storage to a Proxy, exposing as minimal amount of Nimble Volumes to a Windows OS as possible to prevent a catastrophic event, beit admin error or mal-intent. He and I were curious if Volumes used f
Community Hub Tips: Full Editor on Mobile Devices
Hi everyone, Did you know it’s possible to access the full desktop editor from a mobile device? I don’t know why all the options are hidden by default but it’s really easy to get them back. All you need to do is change your zoom settings on your web browser. I’ve only tested this in iOS but check my GIF below and you’ll see all the cool options appear when I hit 50% zoom.Want to return to the mobile optimised editor? Just increase your zoom level back to default and everything will return to normal! You can do this dynamically whilst making your post, no need to refresh the page each time!
How to upgrade Veeam Backup and Replication to v11a
If you wish to explore the capabilities of Veeam Backup and Replication v11A, then you probably upgrade to this version. Kindly visit the following URL for more of these capabilities/features.Here is a link to the complete guide highlighting on all the needed steps.You may be notified if there is an update of the Veeam Backup and Replication. Upon clicking on this notification, you will be redirected to the following KB (download) link. Note: I will be upgrading from Veeam v11 Build 184.108.40.2069 → 220.127.116.111.I will be downloading the new 11A ISO as shown below. If you are not prompted that an update is available, you can download the latest version of the Veeam Backup and Replication ISO from the following Veeam Backup & Replication Download page. You will be required to login in order to access the download. Before proceeding to upgrade, ensure all existing jobs are successfully completed. If there are any filed jobs, ensure to re-run them.- Also, ensure there isn't any restore s
In The Lab With: Veeam Backup for Microsoft 365 v6 - What's new? What's fixed? What should I know?
Today Veeam have launched the new Veeam Backup for Office Microsoft 365 v6! That’s right, it’s had a slight name change to align with Microsoft’s rebrand of Office 365 to Microsoft 365. Excited and want to check it out? Download it here. Veeam have also updated their Helpcenter ready to explain all the new features. As always, Veeam have accompanied this release with a set of release notes, available here.In this blog post I’ll be going over the key new features and also any key insights to be aware of as part of deploying Veeam Backup for Microsoft 365 v6 or upgrading to v6 from an earlier version. Key Information Veeam Backup for Microsoft 365 Server:Straight away, I want to highlight that the CPU requirements have changed. Veeam are now recommending 8 cores as the minimum for v6, up from 4 cores in v5.It’s the same story for RAM, v6 now requires 16GB as a minimum, up from 8GB. There is a discrepancy between the release notes and the Helpcenter documentation with regards to VMs wit
SOBR: Veeam Capacity Tier – Calculations and Considerations (in v11)
IntroductionSOBR is a logical construct allowing a backup administrator to group storage extents together to form a multi-tier storage "pool" to ease the management of backups.The Performance Tier holds the "operational restore window" parts of the backups on-premises, typically on block or file-based storage, while both the Capacity and Archive Tiers allow expansions to Object Storage.The Capacity tier offers two types of offload operations:Copy Move (after x days).Note: You can combine both offload operations.When offloading backups to the Capacity Tier, the “.VBK” or “.VIB” shell is cracked open. Veeam backup Meta-Data and Data bits become Objects stored onto the Capacity Tier via PUT operations.Note: It is safe to assume that 99% of all objects created are backup Data bits, the rest is backup Meta-Data.With most public cloud providers, API operations are not free.If you are considering an "on-premises" Object Storage solution, be mindful of vendor-specific limitations in their abil
Is Veeam the most significant storage company that no one knows about?
Veeam storage functionsIs Veeam the most significant storage company that no one knows about? One of the essential features of any Veeam Backup and Replication architecture is the storage hardware that the backup target or backup repository will sit on. The repository performance, features, and scalability are critical to ensuring that the Veeam deployment will meet customers' needs for quite a while. Unfortunately, this is the component that many customers tend to make bad decisions, usually due to VARs and storage vendors trying to make the backup decisions for the customer. This is easy for the partner and storage vendor community to do because, as we all know - we at Veeam pride ourselves on the fact that the Veeam Backup and Replication suite is a software-defined and hardware agnostic backup storage platform. The partners, storage vendors, and even customers don't realize that Veeam also has another tag ling used internally - "Veeam is the largest storage company that no one
Veeam Backup for Cloud: Extending Recovery Functionality
The Veeam Backup for AWS, Azure, and GCP products supplies an effortless way to protect workloads running in one of the hyperscale public clouds. Workload protection is done by taking native snapshots and copying snapshots to object storage for a defined period. A full instance recovery and file-level recoveries can be performed from the backup. But this only scratches the surface of what Veeam can do with a cloud-based backup. To use advanced storage functions like Instant VM recovery directly to an on-premises hypervisor, full instance recovery into another hyperscale cloud, or copying backup files to an on-premises harden repository will require Veeam Backup and Replication to be integrated with Veeam Backup for AWS, Azure, and GCP through what’s called an “external repository”. The Veeam Backup and Replication external repository is a read-only connection to the Veeam Backup for AWS, Azure, and GCP object-based storage repository. It allows Veeam Backup and Replication to perform
Object Storage: Impact of Job Storage Optimization Settings (in v11)
IntroductionObject storage vendors all have configuration considerations that must be accounted for as part of the process of designing Veeam backup repositories. Some of these considerations can be limiting, while others simply help dictate architecture decisions. In this post, I discuss on-premises vendor considerations, and how Veeam job settings can make an impact.To accommodate for vendor specific on-premises Object Storage Device limitations, it is sometimes necessary to adjust Veeam’s storage optimization settings. Every on-premises Object Storage vendor may express these limitations differently, but it usually boils down to the ability to handle large amounts of object metadata (and therefore number of objects) per bucket and/or device.In our experience, using larger storage optimization settings (job block size) with on-premises Object Storage devices typically works best. The bigger the storage optimization settings, the bigger the average object size which means less objects
The Veeam Custom Search Engine
Hi, I realised that nobody has ever mentioned the Veeam Custom Search tool on the community hub, and I wanted to make sure everyone knows that this tool exists. http://vee.am/VeeamCustomSearchFirstly, what is it?It’s a custom search engine powered by Google that focuses on delivering results from the various Veeam resources.The primary page of that link is deceptively simple, to the point you might think the page hasn’t loaded, you’ll just get a search bar that will present search predictions based on Veeam searches.Once you’ve searched is where the magic happens, you’ll see results from a variety of Veeam focused sites. Such as the R&D forums, the Helpcenter, whitepapers, KB articles, news room, blogs, videos, GitHub, and success stories.You can use this to filter down what type of content you’re after, and easily find what you’re looking for across the various sources of information that Veeam have available. Give it a try the next time you can’t find what you’re looking for, it
Time to celebrate: Veeam Is Now The Tied #1 Data Replication & Protection Provider Worldwide!
Just read the announcement of Anand Eswaran: Veeam Is Now The Tied #1 Data Replication & Protection Provider Worldwide! https://www.veeam.com/blog/number-one-data-replication-protection-provider-worldwide.html Veeam has reached the status of being tied as the #1 provider worldwide during 2H’21 in IDC’s data replication and protection market.Nice global data:#1 in EMEA #1 in LATAM #3 in APJA part for this great success is certainly also the strong community
VB365 Restore Audit - The Definitive Guide
Greetings everyone, Audit Logging always is an interesting topic, it doesn’t matter if you need this due to compliance, or just for best practices. Having visibility of restore operations of something as critical as emails, documents, etc. should be a must.When I am mentioning the word Audit, I am talking about all the Restore operations that anybody does using the Explorers, PowerShell, or API, or even using the new Restore Portal (meaning opening an email, restoring it, saving it, etc.)As we stand today, we have the next methods to Audit the Restore Operations:Inside the Veeam Backup for Microsoft 365 Console, under History - Restore On Windows Logs, on the Client who opened the Console and Explorers (bear this in mind) RESTFul API can send real-time alerts RESTful API to obtain RestoreSessions with extreme great detail Windows Logs to parse some Infrastructure actions like Job Creation, Edit, Deletion, etc.Advanced VB365 AuditPowerShell audit - Some visibilityLet’s start with PowerS
Hardened repository immutability backup copy + Infinidat Snaprotator Locked Volume
Hi everyone I'm sharing this kind of configuration aimed to strengthen the security of immutable data backup against ransomeware attacks or possible 0 day \vul of the O.S. Linux used to deploy a Hardened Repository.Thanks to Veeam, it is now possible to perform immutable backups via Hardened Repository.This technique aims to safeguard the databackups saved on Raw LUN Volumes of a storage in “Locked Volume” mode on Hardenend Linux based repositories.The combo is to use the Hardened Repository to which present a RAW LUN Volume formatted in XFS to support block cloning, in this case Infinidat + the functionality/utility Snaprotator, allows to schedule a snapshot of one or more Volumes in "Locked Volume" mode.Tested also the restore, re-presented the Snapshot Volume on the Hardened Repository, the only trick is to force the change of the UUID of the Raw Lun, if not it is not mountable by the O.S. because of duplicate UUID.InfiniBox SnapRotator User Guide – INFINIDAT Support Find out if yo
VDRO: Unable to use 'Prepare DC for DataLab' - Solution
Morning, Just a quick one from me today I wanted to share.I was playing with VDRO, and scratching my head as I was playing with restore plans, but I couldn’t find a very crucial step. ‘Prepare DC for DataLab’. It’s documented here: Prepare DC for DataLab - Veeam Disaster Recovery Orchestrator User GuideI’ll quote the key text as to why we need this:This step is required for a domain controller to be started in a test lab environment. This must always be the first step for the domain controller in a lab group.This step ensures the VM will reboot to exit DSRM (Directory Services Restore Mode) and therefore will function correctly as a domain controller in the lab. Seems pretty important right?Well, when I went to create my restore plan, I couldn’t find it, even the Veeam documentation doesn’t show it within the list:After a lot of head scratching, turns out, I was missing something that is a bit light on helpcenter documentation! You need to define this at the DataLabs level:Once added,
[GUIDE] How To deploy & schedule Veeam Agent Protection Group MS Cluster step by step
How To deploy Veeam Agent Protection GroupAre two physical nodes of an MS cluster and MSSQL instance in the clusterReference:Installing Veeam Agent for Microsoft Windows - Veeam Agent for Microsoft Windows GuideGetting Started - Veeam Agent for Microsoft Windows GuideInstallation and Configuration - Veeam Agent for Microsoft Windows GuideCreate new Protection GroupThe account used to perform a consistent backup of an MSSQL DB must be entered either in the Local group Administrators or enter the user side MSSQL studio with permissions of DBA Admin\Owner.You require different sets of Microsoft SQL permissions in the following cases:Installation (remote or local): current account needs CREATE ANY DATABASE permission on the SQL server level. After database creation this account automatically gets a db_owner role and can perform all operations with the database. If the current account does not have this permission, a Database Administrator may create an empty database in advance and grant t
VeeamON 2022 Countdown – Full Agenda Released!
Today I’ve noticed that Veeam have released the full upcoming agenda for their premier data protection event: VeeamON 2022!I just want to talk through some of the personal highlights I spotted from the agenda.Hands on Labs (Virtual & In-person) Veeam Backup & Replication v12That is not a typo, Veeam must be feeling pretty confident about the shape of v12 by now as next month they’ll be allowing hands on labs of this unreleased product. Check out the description below:In this lab, you will be working with a Veeam Backup & Replication V12 environment where you will learn the basics of Veeam Backup & Replication, test out some of our upcoming new features, and perform typical Veeam backup operator tasks though an interactive step-by-step lab guide.I can only speculate as to what upcoming features will be available to test, but I’m looking forward to seeing what Veeam have been cooking up since v11 launched last year. Veeam Backup & Replication with Immutable Linux Hard
[GUIDE] How to deploy CDP v.11 step by step
Hi all, I share the lab I created to test the CDP feature.HW List:VmwareServer: 4 UCSC-C220-M5SX - VMware ESXi, 6.5.0, 15256549 VCSA 6.7.0 15129973 Storage: Dell Storage SC 5020 VBR+CDP-Proxy Source 1x4 vCPU – 16 Gb RAM CDP-Proxy Target 1x4 vCPU – 16 GB RAM System Requirements - User Guide for VMware vSphere (veeam.com) Requirements and Limitations - User Guide for VMware vSphere (veeam.com) Backup Infrastructure for CDP - User Guide for VMware vSphere (veeam.com)Deploy & Configure CDP proxy VBR on source & target Vmware datacenterDeploy & Configure CDP proxy on Target DCInstalling I/O FilterInstalling I/O Filter - User Guide for VMware vSphere (veeam.com)KB4096: VeeamCDP I/O filter installation fails with “The agent’s workflow is blocked” erroresxcli software acceptance set --level CommunitySupported on all your Esxi.07/10/2021 10:53:39 Error Installing CDP components on cluster: CDP-Source... Error: The operation is not allowed in the current state.The operation is
Snapshots are not backups!
Most of you probably already know or have heard this statement: Snapshots are not backups! Just last week a German hosting provider did lose 1500 snapshots because of failing hardware. And who hasn’t experienced some horror stories about (forgotten) VMware snapshots. Because of that I wanted to highlight this with a dedicated blog post. What is a snapshot? In general a snapshot is a frozen point in time state of a certain system or data. While we're often referring to snapshots in case of virtual machines, there are other variations like storage or file snapshots. For virtual machines, snapshots set the virtual disks to read only state and redirect all changes to a different disk file(the details may differ depending on the hypervisor). They can be used for quick rollbacks or during VM backups. Normally those are only created temporarily(or at least the should). Storage or file snapshots can be used for versioning and can also be replicated to different systems; those tend to have a lo
Facebook investigates silent data corruption by CPU
You can think what you want about Facebook, but they operate a massive amount of compute and storage unites. And it seems, they have some scientist investigating interesting phenomenon like this. To be honest, it is not primary backup related but in the second instance it is restore related 😀Briefly summarized:They found out, CPU can perform computations incorrectly. So it comes to silent data corruption by CPU. According to their observations these failures are reproducible and not transient. When you think about data-reduction technologies like compression this really can cause problems. As the following article describes, these corruptions occur at scale. Interesting is also how they test their hardware.Read more details here:https://blocksandfiles.com/2022/03/18/facebook-investigates-silent-data-corruption/
Already have an account? Login
Login to the community
Log in with your Veeam account
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.