Veritas NetBackup™ Cloud Administrator's Guide

Last Published:
Product(s): NetBackup (8.1.2)
  1. About NetBackup cloud storage
    1.  
      About cloud storage features and functionality
    2.  
      About the catalog backup of cloud configuration files
    3.  
      About support limitations for NetBackup cloud storage
  2. About the cloud storage
    1.  
      About the cloud storage vendors for NetBackup
    2. About the Amazon S3 cloud storage API type
      1.  
        Amazon S3 cloud storage vendors certified for NetBackup
      2.  
        Amazon S3 storage type requirements
      3.  
        Amazon S3 cloud storage provider options
      4.  
        Amazon S3 cloud storage options
      5.  
        Amazon S3 advanced server configuration options
      6.  
        Amazon S3 credentials broker details
      7.  
        About private clouds from Amazon S3-compatible cloud providers
      8.  
        About Amazon S3 storage classes
      9.  
        Amazon virtual private cloud support with NetBackup
      10. About protecting data in Amazon for long-term retention
        1. About protecting data in Amazon Glacier
          1.  
            About backing up data to Amazon Glacier
          2.  
            About restoring data from Amazon Glacier
        2. About protecting data in Amazon Glacier vault
          1.  
            About backing up data to Amazon Glacier vault
          2.  
            About restoring data from Amazon Glacier vault
      11. Protecting data using Amazon's cloud tiering
        1.  
          About backing up data using LIFECYCLE storage class
        2.  
          About restoring data from LIFECYCLE storage class
      12.  
        About NetBackup character restrictions for Amazon S3 cloud connector
    3. About Microsoft Azure cloud storage API type
      1.  
        Microsoft Azure cloud storage vendors certified for NetBackup
      2.  
        Microsoft Azure storage type requirements
      3.  
        Microsoft Azure cloud storage provider options
      4.  
        Microsoft Azure advanced server configuration options
    4. About OpenStack Swift cloud storage API type
      1.  
        OpenStack Swift cloud storage vendors certified for NetBackup
      2.  
        OpenStack Swift storage type requirements
      3.  
        OpenStack Swift cloud storage provider options
      4.  
        OpenStack Swift storage region options
      5.  
        OpenStack Swift add cloud storage configuration options
      6.  
        OpenStack Swift proxy settings
  3. Configuring cloud storage in NetBackup
    1.  
      Before you begin to configure cloud storage in NetBackup
    2.  
      Configuring cloud storage in NetBackup
    3.  
      Cloud installation requirements
    4. Scalable Storage properties
      1.  
        Configuring advanced bandwidth throttling settings
      2.  
        Advanced bandwidth throttling settings
    5. Cloud Storage properties
      1.  
        Adding a cloud storage instance
      2.  
        Changing cloud storage host properties
      3.  
        Deleting a cloud storage host instance
    6. About the NetBackup CloudStore Service Container
      1.  
        NetBackup CloudStore Service Container security certificates
      2.  
        NetBackup CloudStore Service Container security modes
      3.  
        NetBackup cloudstore.conf configuration file
    7.  
      Deploying host name-based certificates
    8.  
      Deploying host ID-based certificates
    9.  
      About data compression for cloud backups
    10.  
      About data encryption for cloud storage
    11.  
      About key management for encryption of NetBackup cloud storage
    12.  
      About cloud storage servers
    13.  
      About object size for cloud storage
    14. About the NetBackup media servers for cloud storage
      1.  
        Using media server as NetBackup Cloud master host
    15. Configuring a storage server for cloud storage
      1.  
        KMS database encryption settings
      2.  
        Assigning a storage class to Amazon cloud storage
    16.  
      Changing cloud storage server properties
    17. NetBackup cloud storage server properties
      1.  
        NetBackup cloud storage server bandwidth throttling properties
      2.  
        NetBackup cloud storage server connection properties
      3.  
        NetBackup CloudCatalyst storage server properties
      4.  
        NetBackup cloud storage server encryption properties
    18.  
      About cloud storage disk pools
    19.  
      Configuring a disk pool for cloud storage
    20.  
      Saving a record of the KMS key names for NetBackup cloud storage encryption
    21.  
      Adding backup media servers to your cloud environment
    22. Configuring a storage unit for cloud storage
      1.  
        Cloud storage unit properties
      2.  
        Configure a favorable client-to-server ratio
      3.  
        Control backup traffic to the media servers
    23.  
      About NetBackup Accelerator and NetBackup Optimized Synthetic backups
    24.  
      Enabling NetBackup Accelerator with cloud storage
    25.  
      Enabling optimized synthetic backups with cloud storage
    26.  
      Creating a backup policy
    27. Changing cloud storage disk pool properties
      1.  
        Cloud storage disk pool properties
    28.  
      Managing Certification Authorities (CA) for NetBackup Cloud
  4. Monitoring and Reporting
    1.  
      About monitoring and reporting for cloud backups
    2.  
      Viewing cloud storage job details
    3.  
      Viewing the compression ratio
    4.  
      Viewing NetBackup cloud storage disk reports
    5.  
      Displaying KMS key information for cloud storage encryption
  5. Operational notes
    1.  
      NetBackup bpstsinfo command operational notes
    2.  
      Unable to configure additional media servers
    3.  
      Cloud configuration may fail if NetBackup Access Control is enabled
    4.  
      Deleting cloud storage server artifacts
  6. Troubleshooting
    1. About unified logging
      1.  
        About using the vxlogview command to view unified logs
      2.  
        Examples of using vxlogview to view unified logs
    2. About legacy logging
      1.  
        Creating NetBackup log file directories for cloud storage
    3.  
      NetBackup cloud storage log files
    4.  
      Enable libcurl logging
    5.  
      NetBackup Administration Console fails to open
    6. Troubleshooting cloud storage configuration issues
      1.  
        NetBackup Scalable Storage host properties unavailable
      2.  
        Connection to the NetBackup CloudStore Service Container fails
      3.  
        Cannot create a cloud storage disk pool
      4.  
        Cannot create a cloud storage
      5.  
        Data transfer to cloud storage server fails in the SSL mode
      6.  
        Amazon GovCloud cloud storage configuration fails in non-SSL mode
      7.  
        Data restore from the Google Nearline storage class may fail
      8.  
        Backups may fail for cloud storage configurations with Frankfurt region
      9.  
        Backups may fail for cloud storage configurations with the cloud compression option
      10.  
        Fetching storage regions fails with authentication version V2
    7. Troubleshooting cloud storage operational issues
      1.  
        Cloud storage backups fail
      2.  
        Stopping and starting the NetBackup CloudStore Service Container
      3.  
        A restart of the nbcssc (on legacy media servers), nbwmc, and nbsl processes reverts all cloudstore.conf settings
      4.  
        NetBackup CloudStore Service Container startup and shutdown troubleshooting
      5.  
        bptm process takes time to terminate after cancelling GLACIER restore job
      6.  
        Handling image cleanup failures for Amazon Glacier vault
      7.  
        Cleaning up orphaned archives manually
      8.  
        Restoring from Amazon Glacier vault spans more than 24 hours for single fragment
      9.  
        Restoring from GLACIER_VAULT takes more than 24 hours for Oracle databases
      10.  
        Troubleshooting failures due to missing Amazon IAM permissions
      11.  
        Restore job fails if the restore job start time overlaps with the backup job end time

Amazon S3 cloud storage provider options

[[UNRESOLVED XREF: v121749319]] shows the Cloud Storage Configuration Wizard panel for Amazon S3 cloud storage.

Figure: Cloud Storage Server Configuration Wizard panel for Amazon

Cloud Storage Server Configuration Wizard Amazon S3 provider panel

Table: Amazon S3 cloud storage provider configuration options describes the storage server configuration options for Amazon S3.

Table: Amazon S3 cloud storage provider configuration options

Field name

Required content

Service host

Select the name of the cloud service end point for your vendor from the drop-down list.

If the cloud service end point for your vendor does not appear in the drop-down list, you must add a cloud storage instance. See the Add Cloud Storage description in this table.

Storage server name

Displays the default storage server for your vendor. The drop-down list displays only those names that are available for use. If more than one storage server is available, you can select a storage server other than the default one.

You can type a different storage server name in the drop-down list, which can be a logical name for the cloud storage. You can create multiple storage servers with different names that refer to the same physical service host for Amazon. If there are no names available in the list, you can create a new storage server name by typing the name in the drop-down list.

Note:

Veritas recommends that a storage server name that you add while configuring an Amazon S3-compatible cloud provider should be a logical name and should not match a physical host name. For example: While you add an Amazon GovCloud storage server, avoid using names like 'amazongov.com' or 'amazon123.com'. These servers may be physical hosts, which can cause failures during cloud storage configuration. Instead, use storage server names like 'amazongov1' or 'amazonserver1' and so on.

Note:

The Add Cloud Storage option is disabled for public clouds. You must use existing cloud storage.

Add Cloud Storage

To configure cloud deployment details, click Add Cloud Storage. The customized cloud deployment refers to the cloud instances that are not already listed in the Service Host drop-down list. After you configure cloud deployment details, the service host appears in the Service Host drop-down list.

See Amazon S3 cloud storage options.

Once the cloud storage is added, you cannot modify or delete it using the NetBackup Administration Console. However, you can modify or delete a storage server by using the csconfig command.

Note:

You can use the NetBackup csconfig -a command to create custom cloud instances for an Amazon S3-compatible cloud provider. You must run the csconfig command before you run the nbdevconfig and tpconfig commands.

See the NetBackup Commands Reference Guide for a complete description about these commands. The guide is available through the following URL:

https://www.veritas.com/content/support/en_US/article.100040135.html

Media server name

Select a NetBackup media server from the drop-down list. The drop-down list displays only NetBackup 8.1.2 and later media servers. In addition, only the media servers that conform to the requirements for cloud storage appear in the drop-down list. The requirements are described in the following topic:

See About the NetBackup media servers for cloud storage.

The host that you select queries the storage vendor's network for its capabilities and for the available storage. The media server also becomes a data mover for your backups and restores.

To support cloud storage, a media server must conform to the following items:

  • The operating system must be supported for cloud storage. For the operating systems that NetBackup supports for cloud storage, see the NetBackup operating system compatibility list available through the following URL:

    http://www.netbackup.com/compatibility

  • The NetBackup Service Layer (nbsl) service must be running on all the media servers.

    The NetBackup Web Management Console (nbwmc) must be running on the master server.

  • For Amazon S3-compatible cloud providers, the media server must run a NetBackup 8.1.2 or later release.

  • The NetBackup media servers that you use for cloud storage must be the same NetBackup version as the master server.

Enter Credentials

Applies to: Amazon GovCloud only.

This option is the default selection. Select this option to configure cloud storage server credentials on this wizard panel by entering the access key ID and secret access key.

Use Credentials Broker

Applies to: Amazon GovCloud only.

Select this option to configure cloud storage server using credentials broker. If you select this option, you then use the Credentials Broker Details wizard panel that appears next to configure the credentials broker information.

Deduplication

Enabling this option creates a CloudCatalyst storage server that can be used to upload deduplicated data to the cloud.

This option is grayed out if any of the following cases are true:

  • The selected media server does not have NetBackup 8.1 or later installed.

  • CloudCatalyst does not support the media server operating system.

  • CloudCatalyst does not support the cloud vendor.

See the NetBackup compatibility lists for support information:

http://www.netbackup.com/compatibility

For information about CloudCatalyst, see the NetBackup Deduplication Guide:

https://www.veritas.com/content/support/en_US/article.100040135.html

Local cache directory

Enter the mount path to be used as the storage path on the CloudCatalyst storage server.

For example: /space/mnt/esfs

The deduplicated data is written to this local cache directory before it is uploaded to the cloud. The larger the cache, the more likely that NetBackup can service requests locally, avoiding cloud access to read and write.

Notes:

  • This path should be to a file system which is dedicated for CloudCatalyst cache use. Inaccurate cache eviction occurs if the path shares any storage with other data or applications.

  • NetBackup manages the files in the local cache directory. Users should not manually delete files in this directory.

Access key ID

Does not apply for Amazon GovCloud if you select Use Credentials Broker.

Enter the access key ID for your vendor account.

If you do not have an account, click Create an account with the service provider link.

Secret access key

Does not apply for Amazon GovCloud if you select Use Credentials Broker.

Enter the secret access key for your vendor account. It must be 100 or fewer characters.

Advanced Settings

To change SSL, proxy, or HTTP header (server-side encryption or storage class) settings for your cloud storage hosts, click Advanced Settings.

See Amazon S3 advanced server configuration options.