I am new to Veeam, so I apologise if this is a stupid question.
I have a number of remote sites that each have a Proxmox server. Each of these servers is connected to my home using a TailScale network. There is a Linux VM acting as a subnet router.
I am trying to use the latest version 12.3 of Veeam to backup the VM’s on the remote sites to a small NAS installed in each site. Basically, I want to manage the backups from a central location, but the backups actually take place at the remote sites.
I can register the remote Proxmox servers centrally, but when I run the test on the worker created at each site, it looks like it will run OK; it starts the worker, connects to it, but then always fails on the connect to core services, and occasionally fails on failed to obtain IP address.
As a test, I have disabled the firewall on the central backup server and the worker VM. But the errors are the same.
I have tested the connection between sites using several other applications, and it works well and is stable.
My questions are:
Is it possible to achieve what I want: central management of remote Proxmox servers?
Is there anything special I must do to make it work across Tailscale networks with subnet routers?
Has anyone made this work? If so, how did you do it?
Many thanks in advance for any help you can provide.
How to use Veeam for Proxmox for remote sites using Tailscale.
Since you are using a Tailscale subnet router, your Proxmox hosts, NAS devices, and Veeam components need to communicate over routed subnets, not direct peer-to-peer connections.
You can try the following, it might help to get you where you are going.
tailscale up --advertise-routes=<Proxmox-network-cidr>,<NAS-network-cidr> --advertise-exit-node
tailscale status
ping <proxmox-tailscale-ip>
ssh <proxmox-tailscale-ip>
/////////
nc -zv <nas-tailscale-ip> 2049 # For NFS
nc -zv <nas-tailscale-ip> 445 # For SMB
In Veeam Backup & Replication, go to:
Backup Infrastructure → Managed Servers → Your Worker VM
Under Agent Settings, assign a static IP from the Tailscale subnet.
Ports to check <--TCP-->
Veeam Agent TCP 10006 VBR → Worker VM
SSH for Agent Install TCP 22 VBR → Proxmox VM
Veeam Data Transfer TCP 2500-3300 Bidirectional
SMB (NAS Backup) TCP 445 Worker → NAS
NFS (NAS Backup) TCP 2049 Worker → NAS
You can set the preferred network as a last step on the VBR in the reg.
HKEY_LOCAL_MACHINE\SOFTWARE\Veeam\Veeam Backup and Replication
Create a new string - ManagedServerPreferredNetworks
Set the value to the tailscale subnet.
recycle Veeam services and test.
Comment
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.