Skip to main content
  • EN

I have a vCenter at a remote datacenter which is serviced by its own storage array and physical proxies for direct san backups. The repository is located in the main campus datacenter and i need to encrypt those backups. I have been using job encryption, but those dont compress/dedupe. Can I use Networo k Traffic encryption for this? The documentation says I can encrypt between “backup infrastructure components”. If I specify the proxy servers at the remote datacenter in the job does that mean I could encrypt from “proxy at remote campus” to “sobr at main campus”? 

 

  1. In the Source IP address range section, specify a range of IP addresses for backup infrastructure components on the source site.
  2. In the Target IP address range section, specify a range of IP addresses for backup infrastructure components on the target site.

Backup Encryption and network encryption are two separate things.  Network encryption ensures the backups transmitted are encrypted to the destination.  If you want to have the backups encrypted you need to specify that in the job on the Repository screen under the Advanced button.  There is an option to encrypt the backups with a password.

Hi ​@TK515 -

According to the Guide, Veeam does use Compression, although it appears to not be as good when using encryption. See:

https://helpcenter.veeam.com/docs/backup/vsphere/encryption_hiw.html?ver=120

Dedup/Compression is done at the Job level, and those tasks are specifically handled by the Proxy component. But again..when using encryption, dedup will not be as good as without encryption enabled.

When you enable Job encryption, it doesn’t matter your Repo is at the “main” site...the Job should still encrypt the files to the Repo no matter where the Repo is located.

If you’re using a SOBR, you can encrypt those individual SOBR Capacity/Archive Tiers as well:

https://helpcenter.veeam.com/docs/backup/vsphere/encryption_for_capacity_tier.html?ver=120
https://helpcenter.veeam.com/docs/backup/vsphere/encryption_for_archive_tier.html?ver=120

Best.

I have  a requirement to encrypt because the backups are traversing from remote to main campus. I dont think that means the backups themselves have to be encrypted, just the connection. Im currently encrypting the backups for the sake of ease, but the Exagrid reposisory cannot compress or dedupe the encrypted backup thus consuming more space. My question is can I use traffic encryption to get the backups from remote to main campus using the IP address range for the proxy servers at the remote site and the repository UP address at the main campus.

I have  a requirement to encrypt because the backups are traversing from remote to main campus. I dont think that means the backups themselves have to be encrypted, just the connection. Im currently encrypting the backups for the sake of ease, but the Exagrid reposisory cannot compress or dedupe the encrypted backup thus consuming more space. My question is can I use traffic encryption to get the backups from remote to main campus using the IP address range for the proxy servers at the remote site and the repository UP address at the main campus.

Yes you can with network encryption.  That is what it is meant for.

Hi ​@TK515 -

Yep..as Chris shared...you certainly can. See here (which it appears you may have already seen):

https://helpcenter.veeam.com/docs/backup/vsphere/enable_network_encryption.html?ver=120

Hi ​@TK515 -

According to the Guide, Veeam does use Compression, although it appears to not be as good when using encryption. See:

https://helpcenter.veeam.com/docs/backup/vsphere/encryption_hiw.html?ver=120

Dedup/Compression is done at the Job level, and those tasks are specifically handled by the Proxy component. But again..when using encryption, dedup will not be as good as without encryption enabled.

When you enable Job encryption, it doesn’t matter your Repo is at the “main” site...the Job should still encrypt the files to the Repo no matter where the Repo is located.

If you’re using a SOBR, you can encrypt those individual SOBR Capacity/Archive Tiers as well:

https://helpcenter.veeam.com/docs/backup/vsphere/encryption_for_capacity_tier.html?ver=120
https://helpcenter.veeam.com/docs/backup/vsphere/encryption_for_archive_tier.html?ver=120

Best.

Hi ​@coolsport00 Shane, In my opinion, the deup ratio will be affected only for dedup appliances when the encryption is enable on BJ, so if wyou are using traditional repos the dedup ratio will be OK,
Look at this, the order is First compressiont, second deduplication and finally encryption if it is enabled.

Am I wrong?

 

Yep Andre...dedup appliances only is my thinking too.

Yep Andre...dedup appliances only is my thinking too.

:-)

Comment


Terms & Conditions