Veritas NetBackup™ Cloud Administrator's Guide
- About NetBackup cloud storage
- About the cloud storage
- About the cloud storage vendors for NetBackup
- About the Amazon S3 cloud storage API type
- Amazon S3 cloud storage vendors certified for NetBackup
- Amazon S3 storage type requirements
- Permissions required for Amazon S3 cloud provider user
- Amazon S3 cloud storage provider options
- Amazon S3 cloud storage options
- Amazon S3 advanced server configuration options
- Amazon S3 credentials broker details
- About private clouds from Amazon S3-compatible cloud providers
- About Amazon S3 storage classes
- Amazon virtual private cloud support with NetBackup
- About protecting data in Amazon for long-term retention
- Protecting data using Amazon's cloud tiering
- About using Amazon IAM roles with NetBackup
- About NetBackup character restrictions for Amazon S3 cloud connector
- Protecting data with Amazon Snowball and Amazon Snowball Edge
- Configuring NetBackup for Amazon Snowball with Amazon Snowball client
- Configuring NetBackup for Amazon Snowball with Amazon S3 API interface
- Using multiple Amazon S3 adapters
- Configuring NetBackup with Amazon Snowball Edge with file interface
- Configuring NetBackup for Amazon Snowball Edge with S3 API interface
- Configuring NetBackup for Amazon Snowball and Amazon Snowball Edge for NetBackup CloudCatalyst Appliance
- Configuring SSL for Amazon Snowball and Amazon Snowball Edge
- Post backup procedures if you have used S3 API interface
- About Microsoft Azure cloud storage API type
- About OpenStack Swift cloud storage API type
- Configuring cloud storage in NetBackup
- Before you begin to configure cloud storage in NetBackup
- Configuring cloud storage in NetBackup
- Cloud installation requirements
- Scalable Storage properties
- Cloud Storage properties
- About the NetBackup CloudStore Service Container
- Deploying host name-based certificates
- Deploying host ID-based certificates
- About data compression for cloud backups
- About data encryption for cloud storage
- About NetBackup KMS for encryption of NetBackup cloud storage
- About external KMS for encryption of NetBackup cloud storage
- About cloud storage servers
- About object size for cloud storage
- About the NetBackup media servers for cloud storage
- Configuring a storage server for cloud storage
- Changing cloud storage server properties
- NetBackup cloud storage server properties
- About cloud storage disk pools
- Configuring a disk pool for cloud storage
- Saving a record of the KMS key names for NetBackup cloud storage encryption
- Adding backup media servers to your cloud environment
- Configuring a storage unit for cloud storage
- About NetBackup Accelerator and NetBackup Optimized Synthetic backups
- Enabling NetBackup Accelerator with cloud storage
- Enabling optimized synthetic backups with cloud storage
- Creating a backup policy
- Changing cloud storage disk pool properties
- Certificate validation against Certificate Revocation List (CRL)
- Managing Certification Authorities (CA) for NetBackup Cloud
- Monitoring and Reporting
- Operational notes
- NetBackup bpstsinfo command operational notes
- Unable to configure additional media servers
- Cloud configuration may fail if NetBackup Access Control is enabled
- Deleting cloud storage server artifacts
- Using csconfig reinitialize to load updated cloud configuration settings
- Enabling or disabling communication between master server and legacy cloud storage media servers
- Troubleshooting
- About unified logging
- About legacy logging
- NetBackup cloud storage log files
- Enable libcurl logging
- NetBackup Administration Console fails to open
- Troubleshooting cloud storage configuration issues
- NetBackup Scalable Storage host properties unavailable
- Connection to the NetBackup CloudStore Service Container fails
- Cannot create a cloud storage disk pool
- Cannot create a cloud storage
- Data transfer to cloud storage server fails in the SSL mode
- Amazon GovCloud cloud storage configuration fails in non-SSL mode
- Data restore from the Google Nearline storage class may fail
- Backups may fail for cloud storage configurations with Frankfurt region
- Backups may fail for cloud storage configurations with the cloud compression option
- Fetching storage regions fails with authentication version V2
- Troubleshooting cloud storage operational issues
- Cloud storage backups fail
- Stopping and starting the NetBackup CloudStore Service Container
- A restart of the nbcssc (on legacy media servers), nbwmc, and nbsl processes reverts all cloudstore.conf settings
- NetBackup CloudStore Service Container startup and shutdown troubleshooting
- bptm process takes time to terminate after cancelling GLACIER restore job
- Handling image cleanup failures for Amazon Glacier vault
- Cleaning up orphaned archives manually
- Restoring from Amazon Glacier vault spans more than 24 hours for single fragment
- Restoring from GLACIER_VAULT takes more than 24 hours for Oracle databases
- Troubleshooting failures due to missing Amazon IAM permissions
- Restore job fails if the restore job start time overlaps with the backup job end time
- Post processing fails for restore from Azure archive
- Troubleshooting Amazon Snowball and Amazon Snowball Edge issues
- Index
About protecting data in Amazon for long-term retention
The following Amazon cloud storage options are available for long-term retention of data:
Consider the following table when deciding between GLACIER and GLACIER_VAULT storage classes:
| GLACIER and GLACIER_DEEP_ARCHIVE storage class | GLACIER_VAULT storage class |
|---|---|
|
GLACIER and GLACIER_DEEP_ARCHIVE storage class corresponds to uploading data through S3 endpoint and transitioning the data to Glacier. |
GLACIER_VAULT storage class corresponds to uploading data using Amazon Glacier services to vault. |
|
For GLACIER and GLACIER_DEEP_ARCHIVE storage class, the metadata is stored in STANDARD storage class. |
For GLACIER_VAULT storage class, the metadata is stored in STANDARD and GLACIER_VAULT storage classes. |
|
Cost of operation for GLACIER is approximately 2% higher than GLACIER_VAULT. |
Cost of operation for GLACIER and GLACIER_VAULT storage class is approximately the same with GLACIER being approximately 2% higher than GLACIER_VAULT. |
|
Use GLACIER and GLACIER_DEEP_ARCHIVE storage class if you do not plan to use immutable vault lock capability. |
Use GLACIER_VAULT storage class if you plan to use the immutable vault lock policy for compliance or to protect your data from ransomware attack. |
|
GLACIER GLACIER_DEEP_ARCHIVE storage class has a configurable retrieval retention period. Thus, it is useful for restores that may take more time due to size and speed. |
The retrieval retention period for GLACIER_VAULT storage class is fixed, that is 24 hours. See Restoring from Amazon Glacier vault spans more than 24 hours for single fragment . |
|
As objects get uploaded, Amazon provides visibility for all objects and their storage class property through the Amazon S3 service console. Hence, NetBackup images that are created using GLACIER and GLACIER_DEEP_ARCHIVE storage class have better visibility through the Amazon S3 service console. |
Amazon takes 24 hours to refresh archive inventory. Hence, archives uploaded during backup done using GLACIER_VAULT storage class are reflected in the Amazon Glacier service console only after 24 hours. However, you can get some visibility of backups using the Amazon S3 service console through the metadata generated during the backup. Amazon Glacier service console does not provide any visibility for individual archives. |
|
There are architectural differences between GLACIER_VAULT storage class (using Amazon Glacier services) and GLACIER and GLACIER_DEEP_ARCHIVE storage class (using Amazon S3 services). This results in difference in speed that must be considered when selecting a storage class. |
There are architectural differences between GLACIER_VAULT storage class (using Amazon Glacier services) and GLACIER and GLACIER_DEEP_ARCHIVE storage class (using Amazon S3 services). This results in difference in speed that must be considered when selecting a storage class. |
|
Storage cleanup handling on failure is better for GLACIER and GLACIER_DEEP_ARCHIVE storage class. |
Storage cleanup handling on failure is better for GLACIER storage class as compared to GLACIER_VAULT storage class. |