Factors to consider while choosing or planning for cloud backup solution?
-
Hi there,
I am working on cloud backup solution.
Currently we have on site backup of Windows server along with File Server data (some 9TB), by using Veeam Endpoint Backup to Synology NAS storage.
Now, considering Offsite backup on Cloud, which should help even in case of Ransomware virus. So following is quick info:
Data size = 9TB
Internet bandwidth =100 Mbps
Daily changes = avg 35 GBI realize factors to consider :
How to upload initial data, which is 9TB and may take many days
At time of restore, it may take days, so not good RTO.
From where to backup? If directly from server, it has regular Veeam backup, so not good idea to load with one more backup.
If I backup to cloud from NAS, it has Veeam backup format files, so at time of restore, need to download and restore from Veeam files, huge process and time.
What factors I should consider?
Is Cloud a suitable option for us?
Thanks
-
I'd initially guess that D2D2C (disk to disk to cloud) is the way to go. Backup locally to the NAS. Then backup the NAS to cloud.
-
In a best case scenario, you are looking at over an hour a day to upload that amount of data. In the real world, likely 3+ hours.
You'll want to compress all that you can before uploading.
-
@openit said in Factors to consider while choosing or planning for cloud backup solution?:
At time of restore, it may take days, so not good RTO.
But it's really for the purpose of dealing with full site loss, right? So it is what it is.
The only really great alternative is figuring out how to not need 9GB of backups. Is that really all data that you need to back up to restore your business?
-
What is the data? Is it basically just a dump from a file server?
-
You could also restore in the cloud, if restoring fast is important to you. In the event of a disaster, you could provision an ec2 server and get extremely fast speed to S3.
You don't have to run this sever all the time, you script and only build it when you need it. So if a server costs you $150 a month to run in the cloud you may only need to run it for 3 days at $5 a day. Certainly worth the convince to the company.
There's some effort scripting it, but you can do most of the scripting locally. AWS has Cloudformation for scripting the actual infrastructure part, and it's pretty easy once you do it.
-
Synology can backup directly to cloud. I use B2 for this at clients.
I don't use the free Veeam (Veeam Endpoiont) though, so no idea on the fine grain controls.
- Veeam backup to NAS
a. Full Backup (no synthetic fully) scheduled for Friday evening once per month.
b. Daily Incremental - NAS automatically syncs to B2
a. Nightly incrementals go up in no time.
b. Monthly full goes up over the weekend
- Veeam backup to NAS
-
Here is how I have Veeam setup.
-
In the Synology, I use the CloudSync app
-
@scottalanmiller
Is this how in general everyone do?Server -> Local/Onsite Backup (NAS/File Server/External HDD) -> Cloud/Tape/Offsite NAS Replication ?
-
@scottalanmiller said in Factors to consider while choosing or planning for cloud backup solution?:
@openit said in Factors to consider while choosing or planning for cloud backup solution?:
At time of restore, it may take days, so not good RTO.
But it's really for the purpose of dealing with full site loss, right? So it is what it is.
The only really great alternative is figuring out how to not need 9GB of backups. Is that really all data that you need to back up to restore your business?
So if it is taking longer, only option to optimize by compression of data, increasing bandwidth is only option. After doing all in hand, if it's RTO taking 10 Days, nothing to do, just need to settle down?
-
@IRJ said in Factors to consider while choosing or planning for cloud backup solution?:
What is the data? Is it basically just a dump from a file server?
Yes, just files (PDF/Word/PPTs/Cad/Photoshop/etc.) on file server.
-
@JaredBusch said in Factors to consider while choosing or planning for cloud backup solution?:
Synology can backup directly to cloud. I use B2 for this at clients.
I don't use the free Veeam (Veeam Endpoiont) though, so no idea on the fine grain controls.
- Veeam backup to NAS
a. Full Backup (no synthetic fully) scheduled for Friday evening once per month.
b. Daily Incremental - NAS automatically syncs to B2
a. Nightly incrementals go up in no time.
b. Monthly full goes up over the weekend
Thanks for details
- Veeam backup to NAS
-
@JaredBusch said in Factors to consider while choosing or planning for cloud backup solution?:
In the Synology, I use the CloudSync app
What and where do you have feature to protect data from Ransomware or restore from infection? (is it at BackBlaze B2?), what exactly it is and how it works? why it not affect with Ransomware, while all resources in local network are vulnerable to infection somehow (vulnerability/misconfig/bruteforce etc.)?
-
@openit said in Factors to consider while choosing or planning for cloud backup solution?:
@IRJ said in Factors to consider while choosing or planning for cloud backup solution?:
What is the data? Is it basically just a dump from a file server?
Yes, just files (PDF/Word/PPTs/Cad/Photoshop/etc.) on file server.
Maybe for the file server, you could set up something like Azure File Sync since the file server seems to be the bulk of your data, unless I read that wrong.
Otherwise, you'll just need to treat this as disaster recovery. Tape works well also with Veeam. I set that up in an environment of about 30TB:
Servers/DASs --> Veeam DAS storage repos for onsite backups daily (multi-daily depending on data) --> Tape (stored off-site, iron mountain type of place), 3 monthly rotations, offering 4 months of recovery depending on when a disaster were to strike.
You could also, if using Hyper-V and Windows Admin Center, easily throw a replica in Azure to spin up if needed to avoid any real RTO, however, having something like Azure File Sync could work better.
-
@openit said in Factors to consider while choosing or planning for cloud backup solution?:
What and where do you have feature to protect data from Ransomware or restore from infection?
That is the point of your local NAS as a backup target.
If that is crypto'd sorry, but you are beyond help because of how insecure you set things up.
-
@openit said in Factors to consider while choosing or planning for cloud backup solution?:
What and where do you have feature to protect data from Ransomware or restore from infection? (is it at BackBlaze B2?), what exactly it is and how it works? why it not affect with Ransomware, while all resources in local network are vulnerable to infection somehow (vulnerability/misconfig/bruteforce etc.)?
All backup mechanisms protect that. In your example, it's Veeam backing up to the NAS. Backups are natively ransomware breaks. If your backup doesn't protect from ransomware, it's not technically a backup.
-
@JaredBusch said in Factors to consider while choosing or planning for cloud backup solution?:
@openit said in Factors to consider while choosing or planning for cloud backup solution?:
What and where do you have feature to protect data from Ransomware or restore from infection?
That is the point of your local NAS as a backup target.
If that is crypto'd sorry, but you are beyond help because of how insecure you set things up.
Obviously I have to do all things in hand to protect anything at local backup at first, in my case, following are things involved and these are how I configured, advise for anything wrong or needed more:
-
Veeam on Windows server - the NAS (Synology) Shared folder credentials are only on Veeam Software to push the backups, not in Credential manager. And these NAS Share only accessible to this Veeam.
-
Updating Synology Firmware all the time
-
Disabled default Admin account and created new.
-
Only me with Read access with different account has access on NAS Shared folder to test the backups from time to time by restoring.
-
Very importantly, Snapshots are enabled on Synology for this Shared folder.
-
-
@scottalanmiller said in Factors to consider while choosing or planning for cloud backup solution?:
@openit said in Factors to consider while choosing or planning for cloud backup solution?:
What and where do you have feature to protect data from Ransomware or restore from infection? (is it at BackBlaze B2?), what exactly it is and how it works? why it not affect with Ransomware, while all resources in local network are vulnerable to infection somehow (vulnerability/misconfig/bruteforce etc.)?
All backup mechanisms protect that. In your example, it's Veeam backing up to the NAS. Backups are natively ransomware breaks. If your backup doesn't protect from ransomware, it's not technically a backup.
Other than above 5 points, what are other things to do to remain Technically Backup
-
@scottalanmiller @JaredBusch
If you people are around
