Skip to main content

New role for Linux Hardened Repository in v12: Proxy Server

  • November 10, 2022
  • 12 comments
  • 3854 views
vNote42
Forum|alt.badge.img+12

This no new part about what else is new in v12, because I this is great improvement in the upcoming release.

With Veeam Backup & Replication (VBR) v12 it will be possible to use a Linux Hardened Repository (LHR) server as proxy server. Only limitation seems to be the transport mode. Only Network mode (NBD) is supported! This is because of security reasons. Network Mode was possible to implement without requiring root permissions on service. This is no show-stopper, because it is the most secure among all available transport modes.

 

How does it work

How to get a LHR proxy server to work? It is simple as any other proxy server. Just create a new proxy server in VBR console:

And select a LHR server in dropdown list:

With that selection you get the information that only Network transport mode is supported for LHR.

With confirmation, transport mode is set to Network in repository settings. Next I create a job that uses this proxy for backup. As backup target I use the local Hardened Repository. I guess this will be the most common configuration.

That’s it, backup job uses LHR as proxy server!

Wolfgang | vnote42.net | @vNote42
Chris.Childerhose
MicoolPaul
Madi.Cristil

12 comments

Chris.Childerhose
Forum|alt.badge.img+21
  • Chris.Childerhose
  • Veeam Legend, Veeam Vanguard
  • November 10, 2022

Not sure why you would want to put the Proxy role on a Hardened repo server for Linux?  If it were me I would separate the roles and deploy a separate Linux server for Proxy so that you can use Hot-Add mode with it which would be faster than NBD unless you have 10GB+ networking with a physical Linux box (not so much a VM).

Chris Childerhose - VMCA2024 | VMCE2023 | VMCE-SP2024 | Veeam Vanguard 8* | Veeam Legend 5* | VUG Canada Leader | vExpert 6* | Toronto VMUG Leader | VCAP-DCV/VCP-DCV | Object First Ace | Cisco Champion | Twitter: @cchilderhose | Blog Site – https://just-virtualization.tech
Chris.Childerhose
BertrandFR
E
vNote42
Forum|alt.badge.img+12
  • vNote42
  • Author
  • On the path to Greatness
  • November 10, 2022

Not sure why you would want to put the Proxy role on a Hardened repo server for Linux?  If it were me I would separate the roles and deploy a separate Linux server for Proxy so that you can use Hot-Add mode with it which would be faster than NBD unless you have 10GB+ networking with a physical Linux box (not so much a VM).

Could a good option in a branch office. So you just would need a physical repository server.

Wolfgang | vnote42.net | @vNote42
Chris.Childerhose
BertrandFR
dloseke
Chris.Childerhose
Forum|alt.badge.img+21
  • Chris.Childerhose
  • Veeam Legend, Veeam Vanguard
  • November 10, 2022

Not sure why you would want to put the Proxy role on a Hardened repo server for Linux?  If it were me I would separate the roles and deploy a separate Linux server for Proxy so that you can use Hot-Add mode with it which would be faster than NBD unless you have 10GB+ networking with a physical Linux box (not so much a VM).

Could a good option in a branch office. So you just would need a physical repository server.

Yeah, that would be a good option for ROBO as you said and a physical box. 😎

Chris Childerhose - VMCA2024 | VMCE2023 | VMCE-SP2024 | Veeam Vanguard 8* | Veeam Legend 5* | VUG Canada Leader | vExpert 6* | Toronto VMUG Leader | VCAP-DCV/VCP-DCV | Object First Ace | Cisco Champion | Twitter: @cchilderhose | Blog Site – https://just-virtualization.tech
Chris.Childerhose
BertrandFR
dloseke
dloseke
Forum|alt.badge.img+8
  • dloseke
  • Veeam Vanguard
  • November 11, 2022

I wish that it would do direct-storage access as well.  That way, when using a physical box, I can still plug into the SAN as well.

Derek M. Loseke, Senior Systems Engineer | Veeam Vanguard 2025 | Veeam Legend 2022-2024 | VMSP/VMTSP | VCP6-DCV | VSP/VTSP | CCNA | https://technotesanddadjokes.com | @dloseke
Chris.Childerhose
BertrandFR
Link State
JMeixner
Forum|alt.badge.img+16
  • JMeixner
  • On the path to Greatness
  • November 12, 2022

I wish that it would do direct-storage access as well.  That way, when using a physical box, I can still plug into the SAN as well.

Mhh, this would threaten the security of the hardened repository, because for this there have disks to be mounted to the server. This is possible with root permissions only….

Jochen (Joe) Meixner | Veeam Vanguard 2024 | Veeam Legend 2021 - 2024 | Veeam Certified Architect (VMCA) | X: @JoMeix | BlueSky: @jmeixner.bsky.social
Chris.Childerhose
BertrandFR
dloseke
Nico Losschaert
Forum|alt.badge.img+11
  • Nico Losschaert
  • On the path to Greatness
  • November 12, 2022

Nice one @vNote42  !!!

#Veeam Legend 5* | VMCA 3* | VMCE 4* | VMTSP+ 2* | VMSP 2* | DCIE 2* | Loves Best Practices | Twitter : @NLosschaert
Chris.Childerhose
vNote42
Link State
vNote42
Forum|alt.badge.img+12
  • vNote42
  • Author
  • On the path to Greatness
  • January 11, 2023

I am just curious. Will VeeamONE be able to gather performance data from Hardened Repository with enabled proxy? @Mildur can you answer this?

Wolfgang | vnote42.net | @vNote42
Chris.Childerhose
BertrandFR
HangTen416
Mildur
Forum|alt.badge.img+12
  • Mildur
  • Influencer
  • January 12, 2023

Hi @vNote42 

I’ll give you an update as soon I have information about it.

 

Best,

Fabian

 

Senior Analyst, Product Management @ Veeam Software
Chris.Childerhose
vNote42
HangTen416
Mildur
Forum|alt.badge.img+12
  • Mildur
  • Influencer
  • January 27, 2023

Hi @vNote42 

 

I still own you an answer to this question :)
As in V11, we can only collect performance data (CPU, Memory, Disk, Network) for windows based components. For a Linux components like Proxy or Repository, we won’t have performance data inside Veeam One.

What we can show for linux components is the information in the Summary tab. This information about transferred data or processed disks is collected directly from the backup server. A connection to the Hardened repository is not required.

Linux Proxy Veeam One v12

 

Best,

Fabian

 

Senior Analyst, Product Management @ Veeam Software
Chris.Childerhose
MicoolPaul
dloseke
BertrandFR
Forum|alt.badge.img+7
  • BertrandFR
  • Influencer
  • January 30, 2023

Not sure why you would want to put the Proxy role on a Hardened repo server for Linux?  If it were me I would separate the roles and deploy a separate Linux server for Proxy so that you can use Hot-Add mode with it which would be faster than NBD unless you have 10GB+ networking with a physical Linux box (not so much a VM).

Could a good option in a branch office. So you just would need a physical repository server.

or for HPE Simplivity cluster...Veeam Backup & Replication on HPE SimpliVity 380 technical white paper

Chris.Childerhose
vNote42
Forum|alt.badge.img+12
  • vNote42
  • Author
  • On the path to Greatness
  • January 30, 2023

Not sure why you would want to put the Proxy role on a Hardened repo server for Linux?  If it were me I would separate the roles and deploy a separate Linux server for Proxy so that you can use Hot-Add mode with it which would be faster than NBD unless you have 10GB+ networking with a physical Linux box (not so much a VM).

Could a good option in a branch office. So you just would need a physical repository server.

or for HPE Simplivity cluster...Veeam Backup & Replication on HPE SimpliVity 380 technical white paper

yes, hot-add is not good idea for SimpliVity :)

Wolfgang | vnote42.net | @vNote42
Chris.Childerhose
BertrandFR
vNote42
Forum|alt.badge.img+12
  • vNote42
  • Author
  • On the path to Greatness
  • January 30, 2023

Hi @vNote42 

 

I still own you an answer to this question :)
As in V11, we can only collect performance data (CPU, Memory, Disk, Network) for windows based components. For a Linux components like Proxy or Repository, we won’t have performance data inside Veeam One.

What we can show for linux components is the information in the Summary tab. This information about transferred data or processed disks is collected directly from the backup server. A connection to the Hardened repository is not required.

Linux Proxy Veeam One v12

 

Best,

Fabian

 

Thank you, Fabian for answering my question!

Wolfgang | vnote42.net | @vNote42
Chris.Childerhose
Mildur
BertrandFR
Terms & ConditionsAccessibility statement