I have a 2 node ESXi 7.0.3 host setup and running Veeam v12 to backup 5 VMs to a NFS share (all production VMs exist on node A, NFS share is BSD VM on node B). The thought is that currently all production VMs can run on a single host and a backup copy of those can be created in a VM on host B. Each server has qty 2 10Gb network interfaces and I have connected both NICs in a port group and virtual switch along with creating a vmkernel interface on both hosts referencing the correct port group. After reconfiguring VMWare, I rescanned both ESXi hosts in Veeam and started the backup job. I am not convinced that the process is using the new 10Gb link between the 2 hosts for the transport process. What am I missing?
Dedicated Transport Network
Best answer by beenydu
Good morning all, I apologize for the delay in getting back to you on an update (too many projects lately!).
It was mentioned above that I could add the 10Gb NIC network as a Preferred Network within Global Network Traffic Rules. Unfortunately, this idea did not work for this situation as this created a relationship between the VBR server (remote network) and the dedicated 10Gb NIC Backup Network. Using the Preferred Network caused the VBR server to attempt to connect to this dedicated network instead of the backup proxy servers. Essentially my goal was to only connect to the Backup Proxy servers to the NFS exports on the dedicated 10Gb NIC Backup Network.
After researching logs from the VBR server and the backup proxy servers (/var/log/Veeam), I was able to determine that the backup proxy servers were able to mount the NFS share on the dedicated 10Gb NIC Backup Network however the backup file was 0 bytes in size. I reviewed the NFS server to ensure the NFS export was able to connect as Read Write and I found I needed to make a few tweaks to the /etc/exports file due to some constructs within FreeBSD OS. Unfortunately, this did not help and no changes made to the progress.
The part that was getting frustrating was it appeared that the Backup Job on the VBR server was being stalled at “Getting info from VSphere” and “Initializing Storage”. I saw very clear evidence that the VBR server was able to connect to VSphere, download the xml file and parsed it, and successfully disconnect.
I FINALLY had a break through while remembering an issue I ran into years ago with a much larger NFS network and VMWare environment. Everything was working beautifully and the out of no where, 2pm on a Friday, BOOM! All Datastores in VMWare became disconnected and all virtual machine offline; just an instant hard STOP. We researched for a few hours and finally determined that the NFS server was trying to reverse DNS lookup the client IP address and due to this being a dedicated 10Gb NIC Network and none of these layer 2 IP Addresses were contained in DNS, the NFS server was all of a sudden blocking the Read/Write functions of the NFS export. LightBulb! As a last ditch effort to make this work, since these IP Addresses on the dedicated 10Gb Backup Network are layer 2 non-routed network addresses, I added the IP address of the 10Gb Network adapter for each Backup Proxy server to the /etc/hosts file on the NFS server and BAM!! That finally flipped the switch for me and I am now able to use that network to connect on. The backup jobs are now streaming at 250+ MBps and backup time is significantly reduced.
So the order of operations on the Backup Job for this installation is:
-VBR connects to VSphere, Backup Proxy performs HotAdd of VMDK files of Virtual Machine, Backup Proxy connects to the NFS export and writes backup data across.
It is my hope that this process has helped someone else trying to figure out how this works. I truly believe this would be helpful to a SMB shop with a 2 host ESXi environment to have solid, quick, backup jobs and secure them behind a proxy server. If I can help anyone with this process, please don’t hesitate to reach out, you all have been wonderful to help me along the way! Thank you again for everyone’s support with this design.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.


