• EN

Replies posted by Michael Melter

101 Comments

cosmik
cosmikComes here often
posted in Discussion Boards

Using password keepers (LastPass/Bitwarden etc) for storing admin sensitive info?

KeePass IMHO fits only for small shops without the need for role based multi-user access.We are using “Password Depot”. Does multi-tenancy, native-MFA and has apps for Windows, MacOS,  iOS and Android.Most important to me: it can be hosted on-prem which I find absolutely crucial for customer passwords. 

19
wesmrt
1 year ago
Cragdoo
CragdooVeeam Vanguard
asked in Discussion Boards

De-dupe to capacity tier

Data will always be deduped in the object tier as only unique blocks will be offloaded. This does not even have anything to do with having a dedupe in yuor performance tier. But three things would prevent me from having a dedupe appliance as a primary repo (SOBR) with an active capacity tier:Dedupe appliances are generally slow with accessing individual blocks randomly. This is the case with Instant-Recoveries, single object recoveries and also S3 offloading. Here individual blocks have to be read to be offloaded to S3, depending on if they’re already in the object store or not. Veeam does not recommend to use a dedupe appliance as a primary repo. In the VMCE v10 training it was exactly stated that way on one slide. In v11 training they put it a bit more relaxed, but still obvious:“When using Veeam with a deduplicating storage system a best practice can be to have a non-duplicating storage system as the primary backup target for the most recent restore points.” - More info: https://www

9
Michael Melter
1 year ago
Cragdoo
CragdooVeeam Vanguard
asked in Discussion Boards

De-dupe to capacity tier

You’ll be fine with ExaGrid as far as Instant-Recovery and SureBackup is concerned. The data residing on the landing zone is not deduplicated here. It’s a tiered storage system.Though from my personal experience even with ExaGrid you cannot do merges and synthetic fulls. Thus ExaGrid recommends to go for active fulls with any backup job type.Also ExaGrid recommends to have “dedupe-friendly” being set as compression mode. Therefore regarding the original question of @Cragdoo here, I would expect the data being offloaded to S3 to be less well compressed than I should be (“optimal”). I would therefore not combine any dedupe with an S3 capacity tier in a SOBR.

9
Michael Melter
1 year ago
Michael Melter
Michael MelterVeeam Legend
posted in Discussion Boards

SOBR rebalancing with hardened Linux repo - division by zero?

Yes, from what I remember from VeeamON I believe as long as all extents are Immutable in a SOBR it can rebalance and move things around, etc. in v12. I don’t think VeeaMover will be able to move or rebalance anything under active immutability. This would breach the immutability right away.And the active end of the chain will alway be the immutable part of it.Only option here would be to disable immutability directly on the Linux box (as root) and then move and mess around… ;)So sealing will be the only easy way to go. Of course with creating new fulls without space optimization on another extent.

9
Chris.Childerhose
1 year ago
Michael Melter
Michael MelterVeeam Legend
posted in Discussion Boards

SOBR rebalancing with hardened Linux repo - division by zero?

My mistake on that one yeah that makes sense.  So sealing is the only way there. Also, if you have XFS configured on the SOBR even with Immutability the space savings should work with an active full. Unfortunately not. Active fulls never give you space savings on any fast-cloning file system. Only a dedupe appliance can dehydrate active fulls.Even synthetic fulls won’t give you savings with a synthetic full if you sealed the original extent. They will generate the next full independently on another extent.No savings between extents. The magic only lives independently within each of them.So the sealing method will produce a lot more steam. For larger and space limited environments I would opt for disabling immutability occasionally and use VeeaMover once we have it.

9
Chris.Childerhose
1 year ago
Michael Melter
Michael MelterVeeam Legend
posted in Blogs and Podcasts

SOBR Archive Tier – Explained and Configured – Part 2 of 4

Cool blogpost. Idea of SOBR Cloud Archive is nice, but our experience with this is horrible. As per recommendations, we had to setup dedicated SOBR for archive with on-prem storage as performance & cloud Azure blob as capacity/archive Appliances have left unattached disks as leftovers in Azure which had a cost Restore tests from archive failed. Tiering to hot Azure blob is failing for a long time now. Archival is failing because of appliance errors (generic Erorr in SSL handshake - which works when testing with curl). Seems Veeam cannot find some blocks, rescan is not helping Short retention on-premise performance tier (let's call it staging) is getting bloated and now eats up pretty much the same amount of space as the archive in the cloud Support so far did not succeed in fixing this (Case #05626336) Did you have many clients who implemented this successfuly as offload/archival to Azure, especially with private endpoints for storage account? I cannot confirm your observations

5
Michael Melter
1 year ago
N
NorbertBieNot a newbie anymore
asked in VUG Germany

Sichern einer mySQL Datenbank mit dem Veeam Agent für Linux

Hallo Norbert.  Mit dem Veeam Agent kann ab VBR V11 auch MySQL transaktionskonsistent gesichert werden. Details findest du hier: https://helpcenter.veeam.com/docs/agentforlinux/userguide/mysql_backup.html?ver=50 Viele GrüßeMichael

11
Michael Melter
1 year ago
N
NorbertBieNot a newbie anymore
asked in VUG Germany

Sichern einer mySQL Datenbank mit dem Veeam Agent für Linux

Sorry, das hatte ich vergessen zu erwähnen… 😇Applikationsintegrationen gibt’s nur mit der bezahlten Lizenz.Tatsächlich bräuchte man aber nicht unbedingt eine verwaltete VBR Version darüber.Eine VUL für den Agent (standalone) würde schon genügen.

11
Michael Melter
1 year ago
N
NorbertBieNot a newbie anymore
asked in VUG Germany

Sichern einer mySQL Datenbank mit dem Veeam Agent für Linux

Ohne PW musst Du die Variante mit dem File wählen. Bei der anderen MUSS ein PW spezifiziert werden.Versuch es aber mal mit “Require successful processing”.Dann sollte er auf die Nase fallen, wenn es nicht klappt. Darf er wirklich auch ohne PW alles, was der Agent braucht, um die Konsistenz zu erreichen: SELECT für alle Tabellen, LOCK TABLES und RELOAD? 

11
Michael Melter
1 year ago
N
NorbertBieNot a newbie anymore
asked in VUG Germany

Sichern einer mySQL Datenbank mit dem Veeam Agent für Linux

Die genauen Datenbankaktionen werden hier meines Wissens nicht geschlüsselt. Wenn der Agent den Volume Snapshot erfolgreich erzeugt, sollte er auch die Transaktionskonsistenz hinbekommen haben.  Bei MS-SQL und Oracle steht hier auch nicht mehr. Was sagt denn das DB Log? Du müsstest den Zugriff sehen.

11
Michael Melter
1 year ago
N
NorbertBieNot a newbie anymore
asked in VUG Germany

Sichern einer mySQL Datenbank mit dem Veeam Agent für Linux

Knapp, aber ja. >=5.6

11
Michael Melter
1 year ago
S
stbeNew Here
asked in VUG Germany

Restore in andere Umgebung möglich

Wenn Du nur recovern möchtest, brauchst Du nichtmal eine Lizenz. Diese braucht man jeweils nur für die Sicherung von VMs.Eine weiterer Weg für eine solche Migration, den wir gerne gehen, wäre eine Replikation in die Zielumgebung. Hier ist für die Ziel-Hypervisor ebenfalls keine Lizenz erforderlich. Dabei kann man auch zunächst initial replizieren und dann vor der Umschaltung nochmal schnell die Änderungen übertragen. Ggf. auch mit “Planned-Failover” bei minimaler Downtime.

6
Michael Melter
1 year ago
Michael Melter
Michael MelterVeeam Legend
asked in Discussion Boards

VBR outside domain - possible issues

As expected and always welcome, we found the reason. 😎LAN managers auth level was restricted due to some hardening applied to Windows. Not clear right now, if via Windows update or actively by the customers policies.HKLM\System\CurrentControlSet\Control\Lsa\LmCompatibilityLevel on VBR was set to 1.→ Network security LAN Manager authentication level (Windows 10) | Microsoft LearnOnce set back to 5, it works as expected. Repos also had 5 (which is default for non-domain-joined systems).Thanks all for contributing. 

6
regnor
1 year ago
ChristianM75
ChristianM75Not a newbie anymore
asked in VUG Germany

Backup Job Stündlich nur 1 Tag

Hallo auch von mir. 😀Bei der Anforderung würde ich keine Fulls empfehlen. Weder synth. noch active. Dann wird gemerged und die Kette bekommt immer die exakte Länge. Dann sollte er bei einer Retention Policy von einem Tag die älteren Punkte ins VBK mergen. Alternativ kann man es dann ja auch mal mit der exakten Zahl an Punkten versuchen (16 → 6am-10pm).Noch besser würde ich aber ebenfalls empfehlen auf Log-Shipping umzustellen. Dem SQL bzw. seinen Usern gefällt es sicher nicht, wenn jede Stunde VSS und Log-Truncation bemüht werden müssen.Grüße, Michael

11
ChristianM75
1 year ago
ChristianM75
ChristianM75Not a newbie anymore
asked in VUG Germany

GFS bei einem File Backup Job

Hallo Chris.GFS gibt es bei den Filejobs in der Form nicht. Hier werden ja keine Snapshots bzw. “Fullbackups” gehalten, sondern letztlich Dateiversionen.Was Du erreichen kannst ist, während 30 Tagen z.B. alle Versionen zu halten (also ggf. 30 bei täglicher Sicherung) und zusätzlich mit einem Archiv Repository ältere Versionen (bis ggf. zu einer maximalen Anzahl) in einem anderen Repository.Ich würde Dir übrigens empfehlen, kein SMB Repo zu bauen. Binde die Synology wenn möglich als iSCSI an. Bei NAS Backups gibt es zwar kein Fast-Cloning, aber bei den VM/Agent Backups kannst du es sonst nicht nutzen und die Stabilität von SMB Repos ist auch nicht optimal.Grüße,Michael

2
ChristianM75
1 year ago
Viperian
ViperianProduct Strategy
posted in Cyber Security Space

Selecting a new Password Manager

I’m not a big fan of cloud based password managers. Not only since what happened to LastPass.Ourselves we are using and also recommend a password manager that runs fully on-premises and can do 2FA internally. It’s multi-user and multi-role capable with its optional enterprise server and there are plugins and apps for many platforms and browsers. You can have but also restrict users from having off-line copies. It allows for emergency export copies into many formats which also allow for a later migration outside.I have no advantage whatsoever from recommending it: https://www.password-depot.de/en/ 

9
marcofabbri
1 year ago
JonahMay
JonahMayVeeam Vanguard
posted in Automation Desk

Creating a REST API Wrapper for VBR - Part 1

Very cool and unique content. Thank’s for sharing. Looking forward to #2-8... 😁

10
martynh
10 months ago
CarySun
CarySunVeeam Vanguard, Veeam Legend
asked in Discussion Boards

Backup Configuration job warning after upgrade to VBR12 RTM

Same here. Configuration backup flags the above warning daily since the upgrade V11->V12(RTM).No AWS used in the demo environment. So I consider this a cosmetical issue with the built-in plugin right now.The Azure plugin seems to work though, as the demo is doing some SOBR offloading to Azure S3. 

38
C
1 year ago
falkob
falkobVeeam Vanguard
posted in VUG Germany

Veeam VMCE & VMCA - Vorbereitung

Danke, @falkobNach dem Test ist vor dem Test, oder? 😉

6
JMeixner
1 year ago
Rick Vanover
Rick VanoverRICKATRON
published in News

V12 Upgrade CenterV12 Upgrade Center

@Rick Vanover -- not sure if you know yet but can RTM be upgraded to GA, or will we need to wait on a patch?  I am going to be testing with GA regardless so that is not an issue at all for my company. We expect that patch later in the week, I’m working on the details of that - will have more info later today/tomorrow.  The Installer will warn you in advance, but it is essential you do not upgrade until the Provider informs you that they have upgraded, as this will impact all Cloud Connect functionality with that Provider adversely. Did I get that correctly: even with us as VCSPs already on 1402, VCSP tenants should not go to 1420 unless we’re also on 1420?So there is something more important in 1420 than expected? Or does that just relate to V12 at the provider’s site at all?

31662103
ratkinsonuk
2 months ago
V
volvistiNew Here
asked in VUG Germany

HYper-V-Server wird nicht mehr gefunden

Von der Beschreibung her, hätte ich auf RemoteUAC gewettet.Hast du nach EnableLUA von 1 auf 0 stellen und  LocalAccountTokenFilter einfügen und auf 1 setzen rebootet?Ansonsten wie @JMeixner schreibt, mal die Windows FW komplett aus machen.Welche Windows Version läuft auf dem HV bzw dem VBR? Welche VBR Version?

8
V
1 year ago
H
HannesKComes here often
posted in VUG Germany

VBR on-demand health check with PowerShell

Thanks, Hannes.Just checked it and it works. 👍 Seems to be an undocumented function as it cannot be found in: Getting Started - Veeam Backup PowerShell Reference It’s also flagged for internal use only:PS C:\Users\my.user> help Start-VBRBackupHealthCheckNAME    Start-VBRBackupHealthCheckÜBERSICHT    WARNING! This cmdlet is for internal use only.SYNTAX    Start-VBRBackupHealthCheck [-Backup] <CBackup> [[-Oib] <COib>] [-RunAsync] [<CommonParameters>]    

6
JMeixner
1 year ago
H
HannesKComes here often
posted in VUG Germany

VBR on-demand health check with PowerShell

Thanks… Otherwise I would never ever have used it, of course… 😉Good thing is, it returns the result within PS. So one might evaluate it for reporting purposes.

6
JMeixner
1 year ago
V
volvistiNew Here
asked in VUG Germany

HYper-V-Server wird nicht mehr gefunden

Ich könnte mir vorstellen, dass es an deiner V2P Migration liegt.Du hast die Konfig von V11 auf V12 eingespielt? Ist es eine PostgreSQL Installation?Dann geht das so nicht, sondern Du musst erst die Quelle auf V12 bringen und dann erst ein Config-Backup ziehen:Cross DB Configuration Restore? - R&D Forums (veeam.com) 

8
V
1 year ago
H
HannesKComes here often
posted in VUG Germany

Enterprise Application Plugins sind eine version abwärts kompatibel

Hallo, ich habe die Release Notes falsch in Erinnerung gehabt und nochmal nachgeschaut.  Ein V11a plugin (RMAN / SAP) funktioniert mit V12 https://helpcenter.veeam.com/docs/backup/plugins/system_requirements.html?ver=120 Veeam Plug-in for Oracle RMAN 11.0.101.1264 supports integration only with Veeam Backup & Replication version 11a Cumulative Patch P20211211 or later.   Die Diskussion um Inkompatibilität war also unnötig. Sorry dafür! Beste Grüße Hannes Hallo Hannes.Das war auch meine Erinnerung. Hatte schon im Projekt mit V10er Plugin gegen eine frisch upgedatete 11er gesichert und die Plugins nachgezogen.Danke und VG

2
JMeixner
1 year ago

Badge winners

Show all badges
Terms & Conditions