Question

veeam infrastracture best practices


Userlevel 4
  • Comes here often
  • 9 comments

Hi guys, 

im just starting build veeam backup infrastructure for vsphere 8 from the beginnig.

I would ask to some best-practices. i have more than 8 year experinence but now i have also S3 compatible storage. 

  • 3 x DELL R750 with vSphere 8
  • 1 x DELL powerstore 500T NvME 60 TB storage / FC SAN
  • Network on 10 GbE 
  • Quantum i6 with 2x LTO 8 drives  / FC
  • Quantum P100 Object Storage with 100 TB usable capacity /10 GbE 
  • Veeam v12 

 

Which scenario is best for veeam ? 

  • Virtual Machine on vSphere cluster with VBR 
  • HW Tape Proxy server Win/Linux
  • Primary backup to S3 
  • every sunday backup to tape and export tape to offline partition. 
  • on each node - veeam ubunutu proxy

or

  • veeam backup server on physical server + tape proxy role 
  • direct backup to S3 
  • every sunday backup to tape and export tape to offline partition. 
  • on each node - veeam ubunutu proxy

or do you have another best-practices deploy scenario ? 

thankyou.

tom


5 comments

Userlevel 7
Badge +17

Personally I would go with option 2.
Just to separate the backup environment from the production environment.

 

Userlevel 7
Badge +7

So the post summarizes to: is a physical or virtual Veeam server better?! 😅

Hi Tom, I agree with Joe, having it physical is better for several reasons, including security..however, the convenience of a virtual server, and especially taking snapshots before upgrades is unbeatable!

Userlevel 7
Badge +8

So the post summarizes to: is a physical or virtual Veeam server better?! 😅

Hi Tom, I agree with Joe, having it physical is better for several reasons, including security..however, the convenience of a virtual server, and especially taking snapshots before upgrades is unbeatable!

Right!

For me, I will go with option 1! 😜

I liked the option to snap before upgrading, and also I love the option to have it under HA in vSphere!

I usually separate the network for backups, to try to isolate as much as I can, in a “blind” VLAN, with visibility only for the extracted components involved in the backup tasks.

But both options are valid, and by the way, nice hardware though!

cheers.

Userlevel 7
Badge +6

First, VBR is recommended to be virtual not physical. minimum 2 proxies.

Userlevel 4

guys, thanks very much.

for my opinion is better to have physical vbr server, i had situation, when whole VMware was encrypted by ransomware, vm with veeam also, all datastores was gone... we had luck, that i configured the snapshots on the storage array sc3020 when i deployed the infrastrucuture few years ago. 

 so the physical vbr is safer maybe, of course without domain, disabled winrm and rdp :) 

Comment