Veeam Backup & Replication v8for VMware: General Overview

The Veeam® Backup Server is a Windows-based physical or virtual machine (VM). • Coordinates backup, replication, recovery verification

and restore tasks;• Controls job scheduling and resource allocation;• Configures and manages backup infrastructure components

and specifies global settings for the backup infrastructure.

To take the workload off the Veeam backup server, Veeam Backup & Replication™ uses backup proxies. A Veeam Backup Proxy is an architecture component that sits between the data source and target, and is used to process jobs and deliver backup traffic. In particular, the backup proxy tasks include retrieving VM data from the production storage, compressing and sending it to the backup repository. The role of a backup proxy can be assigned to a dedicated Windows server (physical or virtual) in the environment (by default Veeam backup server takes the role itself ).

A Veeam Backup Repository is a location used by Veeam Backup & Replication jobs to store backup files. Techni-cally, a backup repository is a folder on the backup storage. Due to the distribution of different repositories and the limitation on number of parallel jobs for each one, the load across the backup infrastructure is balanced.

Veeam Backup Enterprise Manager is an optional componentintended for distributed enterprise environments with multipleBackup Servers. Veeam Backup Enterprise Manager federatesVeeam Backup Servers and offers a consolidated view of theseservers through a web browser interface. All Veeam Backup Server jobs can be managed and controlled through a single “pane of glass.”

Veeam Backup Enterprise Manager also enables an option to search for Windows and Linux guest OS files in all current and archived backups across the whole backup infrastructure and restore these files in one click.

Data security is an important part of the backup strategy. Information must be protected from unauthorized access, especially if the backup of sensitive VM data goes to off-site locations or is archived to tape. To keep data safe, data encryption should be used. In Veeam Backup & Replication, encryption works at the job level and can be enabled for backup jobs, backup copy jobs, tape jobs and VeeamZIP.

Cloud Connect is a feature of Veeam Backup & Replication that can be used by Service Providers who subscribed to the Veeam Cloud Provider Program (VCP) to offer their custom-ers Backup Storage as a Service. Every Veeam Backup & Replication v8 customer can buy this feature from their service provider of choice. It’s a great tool to send backups offsite.

Veeam Backup & Replication has 4 free Veeam Explorers™ included in the product. All of them are used for granular restore of specific objects directly from Veeam backups. Every Veeam Explorer has a familiar, easy-to-use interface and allows users to quickly locate the items they need. The list includes:• Veeam Explorer for Microsoft Exchange • Veeam Explorer for Microsoft Active Directory• Veeam Explorer for Microsoft SQL server• Veeam Explorer for Microsoft SharePoint

Veeam Backup & Replication offers Virtual Lab technology in order to guarantee recoverability of virtual data. Virtual Lab is an isolated virtual environment (no impact on production) where Veeam verifies VMs and tests backups in automatic mode. Moreover, Veeam is able to check VMs, which are de-pendent from others, using the notion of application group.

Virtual Lab includes: • On-Demand Sandbox™ • SureBackup® • SureReplica

Components FeaturesDeployment Methods

There are a few components deployed on Veeam Backup Server:

Veeam Backup ServiceThe Veeam Backup Service is a Windows service that coordinatesoperations performed by Veeam Backup & Replication such asbackup, replication, recovery verification and restore tasks. Veeam Backup Service runs under account with administrative privileges or local system account (default option since v8).

Veeam Backup ShellThe Veeam Backup Shell provides an application user interfaceand allows users to access the application’s functionality.

Veeam Backup Catalog ServiceVeeam Backup Catalog Service is a Windows service that manages a guest OS file system index for VMs and replicates systemindex data files to enable a search through guest OS files. Index data is stored in the Veeam Backup Catalog − a folder on the Veeam Backup Server. The Veeam Backup Catalog Service running on the Veeam Backup Server works in conjunction with search components installed on Veeam Backup Enterprise Manager and (optionally) a dedicated Microsoft Search Server.

Veeam Backup SQL DatabaseVeeam Backup SQL Database is used by Veeam Backup Service,Veeam Backup Shell and Veeam Backup Catalog Service to storedata about the backup infrastructure, jobs, sessions and so on. Thedatabase instance can be located on a SQL Server installed eitherlocally (on the same machine where the Veeam Backup Server isrunning) or remotely.

Veeam Backup PowerShell Snap-InVeeam Backup PowerShell Snap-In is an extension for MicrosoftWindows PowerShell. Veeam Backup PowerShell Snap-in addsa set of cmdlets to allow users to perform backup, replicationand recovery tasks through the command-line interface of Power-Shell or run custom scripts to fully automate operation of VeeamBackup & Replication.

Backup Server

Requirements• Physical or virtual Windows server

(Windows 2003 SP2 or later);• 2 GB RAM plus 200MB per each concurrent job;• 2 CPU cores.

Takes the workload off the Backup Server processing jobs. Re-trieves VM data from the production storage, compressing and sending it to the backup repository.

Configuration modes• SAN mode − a machine used as a backup proxy should have

direct access to the storage on which VMs reside or the stor-age where VM data is written. This way, the backup proxy will retrieve data directly from the datastore, bypassing LAN.

• HotAdd mode − the backup proxy can be a VM with HotAdd access to VM disks on the datastore. This type of proxy also enables LAN-free data transfer.

• Network mode − can be assigned to a machine on the net-work closer to the source or the target storage with which the proxy will be working. In this case, VM data is being transport-ed over LAN using NBD protocol.

Services The following light-weight components are installed:

• Veeam Installer Service is an auxiliary that is installed and started on any Windows server once it is added to the list of managed servers in the Veeam Backup & Replication console. This analyses the system, installs and upgrades necessary components.

• Veeam Transport is responsible for deploying and coordinat-ing executable modules that act as “data movers” and perform main job activities on behalf of Veeam Backup & Replication such as communicating with VMware Tools, copying VM files, performing data deduplication and compression and so on.

Backup Proxy

Windows server with local or direct attached storage The storage can be:• Local disk• Direct attached disk-based storage• iSCSI SAN LUN• Fibre Channel SAN LUN

Linux Server with local, direct attached storage or mounted NFSThe storage can be:• Local disk• Direct attached disk-based storage• NFS share• iSCSI SAN LUN• Fibre Channel SAN LUN

CIFS (SMB) shareSMB share does not support Veeam transport services, therefore data to the SMB share is written from a Windows-based proxy server. By default, this role is performed by a backup proxy that is utilized by the job for data transport.

Deduplicating storage appliance• EMC Data Domain• ExaGrid• HP StoreOnce

Backup Repository

Veeam Backup Enterprise Manager is a management and report-ing component that allows to manage multiple Veeam Backup & Replication installations from a single web console.

In the case of distributed backup infrastructure when a number of Veeam Backup & Replication instances are installed on different servers, Veeam Backup Enterprise Manager acts as a singlemanagement point, allowing to perform backup and replication jobs across the entire backup infrastructure and providing en-hanced reporting options.

With Veeam Backup Enterprise Manager, backup administrator can:• Manage jobs across a number of Veeam Backup Servers;• View on-going reporting data for all jobs;• Receive email notifications about the status of all jobs;• Search for VMs and guest OS files (Windows, Linux)

in current and archived backups;• Perform web-based recovery operations;• Centrally monitor license usage and update them.

Backup Enterprise Manager

Data encryption transforms data to an unreadable, scrambled format with the help of a cryptographic algorithm and a secret key. If encrypted data is intercepted, it cannot be unlocked and read by the eavesdropper. Only intended recipients who know the secret key can reverse encrypted information back to a readable format.

In Veeam Backup & Replication, encryption works at the job level and can be enabled for the following types of jobs:• Backup jobs• Backup copy jobs• Tape jobs: Backup to tape jobs and file to tape jobs• VeeamZIP

Veeam Backup & Replication uses the block cypher encryption algorithm. Encryption works at the source side (unless admin runs a backup copy job via WAN accelerators). Veeam Backup & Replication reads VMs or file data, encodes data blocks, trans-fers them to the target side in the encrypted format and stores the data to a file on the repository or archives the data to tape. Data decryption is also performed on the source side: Veeam Backup & Replication transfers encrypted data back to the source and decrypts it there. Beside the job-level encryption, Veeam Backup & Replication allows to encrypt network traffic going between the primary site and the disaster recovery site. For network traffic encryption, Veeam Backup & Replication uses the 256-bit Advanced Encryption Standard (AES).

End-to-end encryption

Veeam Cloud Connect is a technology in Veeam Backup & Replication that lets Service Providers (SP) configure cloud re-positories — storage locations in the cloud, and expose cloud repository resources to their customers. Veeam Backup & Replication does not offer its own cloud for storing VM data. Instead, it uses service providers’ storage resources to configure cloud repositories — storage locations in the cloud. Users who want to store their data in the cloud can connect to the SP and write their VM backups to cloud repositories.

Veeam Backup & Replication • Creates a storage abstraction layer and virtually

partitions storage resources of a cloud repository;• Establishes a secure channel to transfer VM data

to and from the cloud repository; • Offers data encryption capabilities to protect

user’s data at rest.

Users can perform the following operations:1. Back up VMs to the cloud repository;2. Copy VM backup files to the cloud repository;3. Restore VM data from the cloud repository;4. Perform file copy operations between

the user’s side and the cloud repository.

Veeam Cloud Connect

Veeam enables the virtualization of the four largest Tier-1 infra-structure applications: SQL, AD, Exchange, and SharePoint. The Veeam Explorers give administrators more powerful tools and better options for handling the challenges of data protection and recovery. They can restore items within their backup files to their running virtual machines and perform granular export for any needs. Each Veeam Explorer supports a corresponding database: .MDF Database from SharePoint, .DIT DB from Active Directory, .EDB DB from Exchange and .MDF Database from SQL Server.

Typical process on how Veeam Explorer works:

• The backup administrator uses Veeam Backup & Replication restore options to extract a database file from the Server’s backup file through mounting it to the Veeam backup server;

• Veeam Explorer obtains specific server hierarchy information (instances and databases) and presents it to the user in a native interface.

• Explorer facilitates browsing, search and provides users with all available restore options (entire restore, granular object restore, export sought-for information into required format).

Veeam Explorers

In most cases, a VM works in cooperation with other services and components. To verify such a VM, Veeam Backup & Replication uses the notion of application group. Typically, the application group contains at least a domain controller, DNS server and DHCP server.

In the virtual lab, Veeam Backup & Replication starts a verified VM and VMs from the application group. A virtual lab does not require provisioning of additional resources. It can be deployed on the existing ESX(i) host in a virtual environment. The virtual lab is fully fenced off from the production environment. The network configuration in the virtual lab mirrors the network configuration of the production environment.

The SureBackup job aggregates all settings and policies of a recov-ery verification task such as application groups and virtual labs, VM backups that should be verified in the virtual lab and so on.

To ensure that the VM replica is functioning properly, Veeam Back-up & Replication performs SureReplica—automatically booting the VM replica to the necessary restore point in the isolated environ-ment. It then performs tests against it, powers the VM replica off and creates a report on the VM replica state.

Virtual Lab

Veeam Backup Server

Source VMware Host

WAN Acceleration

OffsiteWAN

TargetVMware Host

Backup

Distributed Deployment

Simple Deployment

Advanced Deployment

Replication

Source VMware Host

TargetVMware Host

Veeam Backup Server

Veeam Backup Servers

Unencrypteddata

Encrypteddata

Backuprepository

Tape media

Secret key

Veeam BackupEnterprise Manager

VeeamSearch Server

Server Roles

Backuprepository

Cloudgateway

Cloud repositories

Customers

WANaccelerator(optional)

SSL

SSL

SSL

VeeamBackup server

Service provider

WANaccelerator(optional)

WAN 21

1 2 33

Veeam Explorer for Microsoft SQL Server

Backuprepository

Backup of Microsoft SQL server

Physical or virtual machine

Veeam Backup Server

Staging Microsoft SQL Server

Target Microsoft SQL Server

Veeam Explorerfor Microsoft SQL Server

Veeam Backup Server

ESX(i) host Virtual lab

VM replicasVM replica snapshots

Veeam BackupEnterprise Manager

Veeam Backup Server

Veeam Backup Server