VeeamON 2024 - Use Code "COMMUNITY10" for 10% Off!
Salut Philippe, super step by step d’un point de vue Veeam. Je rajouterai juste sur la partie “hardening” que l’os linux et sa configuration joue un role clé. Notamment : En évitant que le compte Veeam reste dans les sudoers post install Que la synchronisation de temps soit sur un serveur externe Et que le password root soit fort en cas d’attaque via interface de management Idrac/Ilo etc @jm.massou Pour répondre, un serveur physique linux sans accès SSH et hors domaine a beaucoup (beaucoup beaucoup) moins de vecteur d’attaque qu’une infra de virtu ou plusieurs admin se connect régulièrement avec des comptes dans des groupes du domaine et où un simple delete de la VM supprime toutes les données. Et par extension il faut sécurisé l’interface de la baie également (généralement simple login password et/ou domaine account). Yes effectivement le durcissement du serveur est ultra important, d’ailleurs je suis entrain de rédiger la partie deux de mon post, qui parlera de cet aspect. (Mise
Super article, je viens de faire la demande pour la partie Service Provider sur le forum que je connaissais pasComme le souligne @AlexisM la newsletter de Gostev contient également pas mal d’informations. Et je rajouterai cette page kb : https://www.veeam.com/kb4126 qui est mis à jour continuellement pour avoir les derniers patchs pour la v11. (Release Notes for Veeam Backup & Replication 11 Cumulative Patches)
Personnellement je vois pas trop l’intérêt de mettre le dépot de sauvegarde sur un hyperviseur hormis rajoute une couche de risque et de gestion qui n’est pas forcément utile… Le BR sur une infra complètement isolée et dédié est un débat aussi de cout d’exploitation au quotidien mais aussi matériels. En tout cas c’est une bonne initiative, je lirais les billets du blog avec plaisir! Je monte également de mon coté un sobr consistant sur xfs de plusieurs PBs, j’essaierais d’apporter mes retours :) Hello,Il est possible de mutualiser sur un ESX par exemple les différents rôles typiquement si l’on veut faire en plus de la sauvegarde de la réplications.
Ola ! Sympa comme petit contest :Liens des scores: Mobility Genius: https://kahoot.it/challenge/06064f95-af58-4abb-b401-93eaacd06af1_1634207711726?&uid=UGhpbGlwcGUuRA==Disaster Recovery Genius: https://kahoot.it/challenge/06064f95-af58-4abb-b401-93eaacd06af1_1634206420936?&uid=UGhpbGlwcGUuRA==Monitoring Genius: https://kahoot.it/challenge/06064f95-af58-4abb-b401-93eaacd06af1_1634207270098?&uid=UGhpbGlwcGUuRA==Ransomware Genius: https://kahoot.it/challenge/06064f95-af58-4abb-b401-93eaacd06af1_1634206594321?&uid=UGhpbGlwcGUuRA== En revanche pour l’instant je n’ai reçu aucun badge :(
Awesome !
Time to say goodbye to this one too: http://rps.dewin.me/rpc/
Hello, thanks for the sharing!I m looking to implement VBO with Wasabit but I have a little question where do you deploy your Veeam VBO/Proxy ?
Apply an update to all the production Vms without test, for more fun apply it during the weekend.Lack of knowledge, the wrong click in the Disk managements especially with Veeam and Direct San and bye bye the production.
Hello,Comme mentionné par Arnaud les causes peuvent être multiples.Si tu regardes directement sur ton repository est-ce que le fichier est présent ou non ?
Good reminder thanks!I dont know why Veeam does not implement a “backup copy” from the interface for this need.Maybe with the v12 it will be possible to backup it directly on Object Storage.
A good complement of this one : https://vccbook.io/
Hello @JMeixner , Thanks for your answers. I have an enterprise Plus licence so I have already somes bakup jobs.I ll take a look about the files to tape, but my prerequisite is to have an externalization of a full backup everyday for my vms.If I selection my repositories I ll have all the chain in tapes ...It’s not possible with Backup copy from source to schedule more than once a week a virtual full…
A good complement of this one : https://vccbook.io/ I’ve never seen this one...I’ll have a look. Thanks! No prob ;)
Hi,Sorry for the delay. @dips I m using an OnPremise solution with Veeam Azure.Finally I got a solution :In a backup to tape it’s possible to create a “virtual full” everyday if in the source there no synthetic or active full created.So I backup my Instances Azure with Veeam Azure in Blob storage.From my VBR server Onpremise, I created a Backup copy job, with no GFS retention. In my tape job I configured to create a virtual full everyday and scheduled my job everyday too. So everynight I have an export on tape of all my Vms.Regards.
That cool be a great features, in addition it s already possible to do it for a linked job.
Im suprised with that “Once verified write these backups to tape and delete the files on disk - These should be written to the weekly set in a GFS media pool”What do you want deleted your backups file on disk ?
Thanks for this sharing. When you are not familiar with Azure it 's a bit a mess :D
Nice post! There is no object lock yet in Azure right ?
@vNote42 be carefull with a capacity tier the Backups are immutable only during the immutability period set in the bucket even if their retention policy allows for longer storage. So GFS points could be deleted without problem...@MicoolPaul Thanks for the clarification, which confirms my issue… Is there a difference with copy/move options and immutability in a SOBR.I am waiting for v12 to avoid this kind of problem, many of my customers want to set different retention and protection in S3 which is not possible today in a SOBR.
I'm not sure but maybe this kb could give you some advicehttps://www.veeam.com/kb2174
@Nico Losschaert nice one!For me one advantage with VCC today is the ability to use the backup copy job, we can change the retention and enable some gfs points.We can't do that with SOBR.But there ll be a game changer in Veeam v12 with the possibility to backup directly to object storageThe force of the object storage is the immutable part :).
Let’s try to become a legent 😄
Thinking purely in the realm of possibility, not practicality, if you have two SOBRs, you could use a backup copy from one to the other, and have one SOBR for immediate copy to cloud with short-term object lock and then the other with long term object lock with move to object. Other ways you could achieve similar would be to use immutable on local hardened with move to object configured and long term object lock. We’ve discussed the moving GFS to archive tier as well. Otherwise as you say that you’ve got many customers, if you’re providing VCC you could layer some of this up in backup copies to VCC doing the heavy lifting, because copying to VCC often means sending off-site anyway, so immutability on a hardened repo (or even using insider threat protection) could give you the short-term immutability, with your own offload to object (or even tape!). Don’t know if this helps with any further ideas. Hello @MicoolPaul Maybe I didn’t follow your idea, but you said to configure a back
Hi @Stabz I could’ve worded it better, I assume it’s this line: if you have two SOBRs, you could use a backup copy from one to the other. In which case I meant backup to one SOBR, then BCJ to another 🙂 Ok we are aligned 😄
Nice reminder! But make sure your production storage has the performance to handle it.I recently saw a customer lose production after setting this value...
Already have an account? Login
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.
