Search <book_title>...

NetBackup™ Deduplication Guide

Last Published: 2024-09-29

Product(s): NetBackup (10.5)

Introducing the NetBackup media server deduplication option
1. About the NetBackup deduplication options
Quick start
1. About client-side deduplication
2. About the media server deduplication (MSDP) node cloud tier
  1. Configuring the MSDP node cloud tier
3. About Auto Image Replication (A.I.R.)
Planning your deployment
1. Planning your MSDP deployment
2. NetBackup naming conventions
3. About MSDP deduplication nodes
4. About the NetBackup deduplication destination
5. About MSDP capacity support and hardware requirements
6. About MSDP storage and connectivity requirements
  1. Fibre Channel and iSCSI comparison for MSDP
7. About NetBackup media server deduplication
8. About NetBackup Client Direct deduplication
  1. About MSDP client deduplication requirements and limitations
9. About MSDP remote office client deduplication
  1. About MSDP remote client data security
  2. About remote client backup scheduling
10. About the NetBackup Deduplication Engine credentials
11. About the network interface for MSDP
12. About MSDP port usage
13. About MSDP optimized synthetic backups
14. About MSDP and SAN Client
15. About MSDP optimized duplication and replication
16. About MSDP performance
  1. How file size may affect the MSDP deduplication rate
17. About MSDP stream handlers
  1. Oracle stream handler
  2. Microsoft SQL Server stream handler
18. MSDP deployment best practices
Provisioning the storage
1. About provisioning the storage for MSDP
2. Do not modify MSDP storage directories and files
3. About volume management for NetBackup MSDP
Licensing deduplication
1. About the MSDP license
2. Licensing NetBackup MSDP
Configuring deduplication
1. Configuring MSDP server-side deduplication
2. Configuring MSDP client-side deduplication
3. About the MSDP Deduplication Multi-Threaded Agent
  1. Configuring the Deduplication Multi-Threaded Agent behavior
  2. MSDP mtstrm.conf file parameters
  3. Configuring deduplication plug-in interaction with the Multi-Threaded Agent
4. About MSDP fingerprinting
  1. About the MSDP fingerprint cache
  2. Configuring the MSDP fingerprint cache behavior
  3. MSDP fingerprint cache behavior options
  4. About seeding the MSDP fingerprint cache for remote client deduplication
  5. Configuring MSDP fingerprint cache seeding on the client
  6. Configuring MSDP fingerprint cache seeding on the storage server
  7. NetBackup seedutil options
  8. About sampling and predictive cache
  9. Rebuilding the sampling cache
5. Enabling 400 TB support for MSDP
  1. Creating the data directories for 400 TB MSDP support
  2. Adding volumes to a 400 TB Media Server Deduplication Pool
6. About MSDP Encryption using NetBackup Key Management Server service
  1. Enabling KMS encryption for a local LSU
  2. Upgrading KMS for MSDP
7. About MSDP Encryption using external KMS server
8. Configuring a storage server for a Media Server Deduplication Pool
  1. MSDP storage path properties
  2. MSDP network interface properties
9. About disk pools for NetBackup deduplication
  1. Configuring a disk pool for deduplication
  2. Media Server Deduplication Pool properties
10. Configuring a Media Server Deduplication Pool storage unit
  1. Media Server Deduplication Pool storage unit properties
  2. MSDP storage unit recommendations
11. Configuring client attributes for MSDP client-side deduplication
  1. Disabling MSDP client-side deduplication for a client
  2. Disable client-side deduplication for all clients in a policy
12. About MSDP compression
13. About MSDP encryption
  1. Configuring encryption for MSDP local storage volume
  2. Configuring encryption for MSDP cloud storage volumes
  3. Configuring MSDP encryption on different platforms
  4. Modes of rolling data conversion
  5. MSDP encryption behavior and compatibilities
14. Configuring optimized synthetic backups for MSDP
15. About a separate network path for MSDP duplication and replication
  1. Configuring a separate network path for MSDP duplication and replication
16. About MSDP optimized duplication within the same domain
  1. About the media servers for MSDP optimized duplication within the same domain
  2. About MSDP push duplication within the same domain
  3. About MSDP pull duplication within the same domain
  4. Configuring MSDP optimized duplication within the same NetBackup domain
  5. Configuring NetBackup optimized duplication or replication behavior
  6. Setting NetBackup configuration options by using the command line
17. About MSDP replication to a different domain
18. Configuring MSDP replication to a different NetBackup domain
  1. About NetBackup Auto Image Replication
  2. About trusted primary servers for Auto Image Replication
  3. About the certificate to use to add a trusted primary server
  4. Add a trusted primary server
  5. Remove a trusted primary server
  6. Enable inter-node authentication for a NetBackup clustered primary server
  7. Configuring NetBackup CA and NetBackup host ID-based certificate for secure communication between the source and the target MSDP storage servers
  8. Configuring external CA for secure communication between the source MSDP storage server and the target MSDP storage server
  9. Configuring a target for MSDP replication to a remote domain
    1. Target options for MSDP replication
    2. Configuring a NetBackup Deduplication Engine user with limited permissions for Auto Image Replication
19. About configuring MSDP optimized duplication and replication bandwidth
20. About performance tuning of optimized duplication and replication for MSDP cloud
21. About storage lifecycle policies
  1. About the storage lifecycle policies required for Auto Image Replication
  2. Creating a storage lifecycle policy
  3. Storage Lifecycle Policy dialog box settings
22. About MSDP backup policy configuration
23. Creating a backup policy
24. Resilient network properties
  1. Resilient connection resource usage
  2. Specify resilient connections for clients
25. Adding an MSDP load balancing server
26. About variable-length deduplication on NetBackup clients
  1. Managing the variable-length deduplication using the cacontrol command-line utility
27. About the MSDP pd.conf configuration file
  1. Editing the MSDP pd.conf file
  2. MSDP pd.conf file parameters
28. About the MSDP contentrouter.cfg file
29. About saving the MSDP storage server configuration
  1. Saving the MSDP storage server configuration
  2. Editing an MSDP storage server configuration file
30. Setting the MSDP storage server configuration
31. About the MSDP host configuration file
32. Deleting an MSDP host configuration file
33. Resetting the MSDP registry
34. About protecting the MSDP catalog
  1. About the MSDP shadow catalog
  2. About the MSDP catalog backup policy
  3. Changing the MSDP shadow catalog path
  4. Changing the MSDP shadow catalog schedule
  5. Changing the number of MSDP catalog shadow copies
  6. Configuring an MSDP catalog backup
  7. MSDP drcontrol options
  8. Updating an MSDP catalog backup policy
35. About MSDP FIPS compliance
36. Configuring the NetBackup client-side deduplication to support multiple interfaces of MSDP
37. About MSDP multi-domain support
38. About MSDP application user support
39. About MSDP mutli-domain VLAN Support
40. About NetBackup WORM storage support for immutable and indelible data
  1. About the NetBackup command line options to configure immutable and indelible data
41. Running MSDP services with the non-root user
  1. Changing the service user after installation or upgrade
42. Running MSDP commands with the non-root user
MSDP volume group (MVG)
1. About the MSDP volume group
  1. The MSDP volume group components
2. Configuring the MSDP volume group
3. MSDP volume group disaster recovery
4. The MSDP server maintenance
5. Limitations of the MSDP volume group
6. About the node failure management
7. MSDP volume group best practices
8. MSDP commands for MVG maintenance
9. Troubleshooting the MVG errors
MSDP cloud support
1. About MSDP cloud support
  1. Operating system requirement for configuration
  2. Limitations
2. Create a Media Server Deduplication Pool storage server in the NetBackup web UI
3. Managing credentials for MSDP-C
4. Creating a cloud storage unit
5. Updating cloud credentials for a cloud LSU
6. Updating encryption configurations for a cloud LSU
7. Deleting a cloud LSU
8. Backup data to cloud by using cloud LSU
9. Duplicate data cloud by using cloud LSU
10. Configuring AIR to use cloud LSU
11. About backward compatibility support
12. About the configuration items in cloud.json, contentrouter.cfg, and spa.cfg
13. Cloud space reclamation
  1. Configuring the container aging
  2. Configuring the cloud compaction
14. About the tool updates for cloud support
15. About the disaster recovery for cloud LSU
  1. Common disaster recovery steps
  2. Disaster recovery for cloud LSU in Flex Scale
  3. Additional steps for Veritas Alta Recovery Vault Azure disaster recovery
16. About Image Sharing using MSDP cloud
  1. Things to consider before you use image sharing to convert VM image to VHD in Azure
  2. Converting the VM image to VHD in Azure
17. About restore from a backup in Microsoft Azure Archive
18. About Veritas Alta Recovery Vault Azure and Amazon
19. Configuring Veritas Alta Recovery Vault Azure and Azure Government
20. Configuring Veritas Alta Recovery Vault Azure and Azure Government using the CLI
21. Configuring Veritas Alta Recovery Vault Amazon and Amazon Government
22. Configuring Veritas Alta Recovery Vault Amazon and Amazon Government using the CLI
23. Migrating from standard authentication to token-based authentication for Recovery Vault
24. About MSDP cloud immutable (WORM) storage support
  1. Creating a cloud immutable storage unit using the web UI
  2. Updating a cloud immutable volume
  3. About immutable object support for AWS S3
  4. About immutable object support for AWS S3 compatible platforms
  5. About immutable storage support for Azure blob storage
  6. About bucket-level immutable storage support for Google Cloud Storage
    1. Creating a Google cloud immutable storage using the Web UI
    2. Managing a Google cloud immutable storage using msdpcldutil tool
  7. About object-level immutable storage support for Google Cloud Storage
    1. Google cloud storage user permissions to create the cloud immutable volume
  8. About using the cloud immutable storage in a cluster environment
  9. Troubleshooting the errors when disk volume creation using web UI fails
  10. Deleting the immutable image with the enterprise mode
  11. Deleting the S3 object permanently
  12. About MSDP cloud admin tool
25. About AWS IAM Role Anywhere support
  1. Prerequisites for AWS IAM Role Anywhere configuration
  2. Configure IAM Role Anywhere in AWS
26. About Azure service principal support
  1. Prerequisites for Azure service principal configuration
  2. Configure Azure service principal
    1. Create a new custom role
    2. Create a new service principal
  3. Configure a disk pool using Azure service principal
27. About instant access for object storage
28. About NetBackup support for AWS Snowball Edge
  1. Interfacing with the device
  2. Using Credentials
  3. Configuring NetBackup for AWS Snowball Edge
    1. Configuring SSL for AWS Snowball Edge
    2. Configuring NetBackup for AWS Snowball Edge with SSL Enabled
  4. Shipping the device
  5. Reconfigure NetBackup to work with S3
    1. Bucket is in a default AWS Region
    2. Bucket is in a non-default AWS Region (or storage already exists in the AWS region)
  6. Configuring NetBackup for AWS Snowball Edge using CLI
  7. Using AWS Snowball Edge for large backup restore
  8. Limitations when AWS Snowball Edge is used
29. Upgrading to NetBackup 10.3 and cluster environment
30. About the cloud direct
  1. Configuring the cloud direct for backup
  2. Configuring the cloud direct for restore
S3 Interface for MSDP
1. About S3 interface for MSDP
2. Prerequisites for MSDP build-your-own (BYO) server
3. Configuring S3 interface for MSDP on MSDP build-your-own (BYO) server
  1. Changing the certificate in S3 server
  2. Changing the ETAG type of the S3 objects
4. Identity and Access Management (IAM) for S3 interface for MSDP
5. S3 Object Lock In Flex WORM
6. S3 APIs for S3 interface for MSDP
7. Creating a protection policy for the MSDP object store
8. Recovering the MSDP object store data from the backup images
9. Disaster recovery in S3 interface for MSDP
  1. Recovering the MSDP S3 IAM configurations from cloud LSU
10. Limitations in S3 interface for MSDP
11. Logging and troubleshooting
12. Best practices
Monitoring deduplication activity
1. Monitoring the MSDP deduplication and compression rates
2. Viewing MSDP job details
  1. MSDP job details
3. About MSDP storage capacity and usage reporting
4. About MSDP container files
5. Viewing storage usage within MSDP container files
6. About monitoring MSDP processes
7. Reporting on Auto Image Replication jobs
8. Checking the image encryption status
Managing deduplication
1. Managing MSDP servers
2. Managing NetBackup Deduplication Engine credentials
3. Managing Media Server Deduplication Pools
4. Analyzing the disc space consumption of the backup images
5. Deleting backup images
6. About MSDP queue processing
7. Processing the MSDP transaction queue manually
8. About MSDP data integrity checking
9. Configuring MSDP data integrity checking behavior
  1. MSDP data integrity checking configuration parameters
10. About managing MSDP storage read performance
11. About MSDP storage rebasing
  1. MSDP server-side rebasing parameters
12. About the MSDP data removal process
13. Resizing the MSDP storage partition
14. How MSDP restores work
15. Configuring MSDP restores directly to a client
16. About restoring files at a remote site
17. About restoring from a backup at a target primary domain
18. Specifying the restore server
19. Enabling extra OS STIG hardening on WORM storage server instance
Recovering MSDP
1. About recovering the MSDP catalog
2. Restoring the MSDP catalog from a shadow copy
3. Recovering from an MSDP storage server disk failure
4. Recovering from an MSDP storage server failure
5. Recovering the MSDP storage server after NetBackup catalog recovery
Replacing MSDP hosts
1. Replacing the MSDP storage server host computer
Uninstalling MSDP
1. About uninstalling MSDP
2. Deactivating MSDP
Deduplication architecture
1. MSDP server components
2. Media server deduplication backup process
3. MSDP client components
4. MSDP client - side deduplication backup process
Configuring and managing universal shares
1. Introduction to universal shares
2. Prerequisites to configure universal shares
  1. Build-your-own (BYO) server prerequisites and hardware requirements to configure universal shares
    1. Managing the deduplication web service user and the user group for MSDP BYO server
  2. Configuring universal share user authentication
3. Managing universal shares
4. Mounting a universal share
5. Creating a protection point for a universal share
6. Restoring data using universal shares
7. Advanced features of universal shares
8. Managing universal share services
9. Troubleshooting issues related to universal shares
Configuring isolated recovery environment (IRE)
1. Requirements
2. Configuring the network isolation
3. Configuring an isolated recovery environment using the web UI
4. Configuring an isolated recovery environment using the command line
5. Replicating the backup images from the IRE domain to the production domain
Using the NetBackup Deduplication Shell
1. About the NetBackup Deduplication Shell
2. Managing users from the deduplication shell
3. Managing VLAN interfaces from the deduplication shell
4. Managing the retention policy on a WORM storage server
5. Managing images with a retention lock on a WORM storage server
6. Auditing WORM retention changes
7. Protecting the NetBackup catalog from the deduplication shell
8. About the external MSDP catalog backup
9. Managing certificates from the deduplication shell
10. Managing FIPS mode from the deduplication shell
11. Encrypting backups from the deduplication shell
12. Tuning the MSDP configuration from the deduplication shell
13. Setting the MSDP log level from the deduplication shell
14. Managing NetBackup services from the deduplication shell
15. Monitoring and troubleshooting NetBackup services from the deduplication shell
16. Managing S3 service from the deduplication shell
17. Multi-person authorization for deduplication shell commands
18. Managing cloud LSU in Flex Scale and Cloud Scale
Troubleshooting
1. About unified logging
  1. About using the vxlogview command to view unified logs
  2. Examples of using vxlogview to view unified logs
2. About legacy logging
  1. Creating NetBackup log file directories for MSDP
3. NetBackup MSDP log files
4. Troubleshooting MSDP configuration issues
5. Troubleshooting MSDP operational issues
6. Viewing MSDP disk errors and events
7. MSDP event codes and messages
8. Unable to obtain the administrator password to use an AWS EC2 instance that has a Windows OS
9. Trouble shooting multi-domain issues
10. Troubleshooting the cloud compaction error messages
Appendix A. Migrating to MSDP storage
1. Migrating from another storage type to MSDP
Appendix B. Migrating from Cloud Catalyst to MSDP direct cloud tiering
1. About migration from Cloud Catalyst to MSDP direct cloud tiering
2. About Cloud Catalyst migration strategies
3. About direct migration from Cloud Catalyst to MSDP direct cloud tiering
4. About postmigration configuration and cleanup
5. About the Cloud Catalyst migration -dryrun option
6. About Cloud Catalyst migration cacontrol options
7. Reverting back to Cloud Catalyst from a successful migration
8. Reverting back to Cloud Catalyst from a failed migration
Appendix C. Encryption Crawler
1. About the Encryption Crawler
2. About the two modes of the Encryption Crawler
3. Managing the Encryption Crawler
4. Advanced options
5. Tuning options
6. Encrypting the data
7. Command usage example outputs
8. Updating the KMS configuration
Index

Placing the Cloud Catalyst server in a consistent state

To ensure data integrity and consistency, it is important that there are no active jobs using the Cloud Catalyst server during migration. Perform the following procedure to stop all jobs and to ensure that the Cloud Catalyst server is in a consistent and a stable state before starting the migration process.

Note:

Any errors that are seen in the following procedure should be addressed before you begin the final migration. Read the full procedure and text following the procedure before you begin this process in your environment.

To place the Cloud Catalyst server in a consistent state

Deactivate all backup policies that write to the Cloud Catalyst storage server.
Deactivate all storage lifecycle policies that write to the Cloud Catalyst storage server.
Verify all active jobs that use the Cloud Catalyst storage server have stopped.
Run a catalog cleanup on the primary server using the bpimage -cleanup command..
Location: /usr/openv/netbackup/bin/admincmd/bpimage -cleanup -allclients -prunetir
Once the catalog cleanup completes, process the MSDP transaction queue manually on the Cloud Catalyst server using the crcontrol - - processqueue command and wait for the processing to complete.
Location: /usr/openv/pdde/pdcr/bin/crcontrol - - processqueue
See Processing the MSDP transaction queue manually.
Repeat step 5 to verify that all images have been processed.
Monitor /usr/openv/netbackup/logs/esfs_storage log on the Cloud Catalyst server for at least 15 minutes (at a minimum) to ensure that all delete requests have processed.
On the Cloud Catalyst server run the /usr/openv/pdde/pdcr/bin/cacontrol --catalog recover all_missing command.
Warning:
If this step reports any errors, those errors must be addressed before you continue to the next step. Contact Veritas Support if assistance is needed in addressing the errors.
On the Cloud Catalyst server run the /usr/openv/pdde/pdcr/bin/catdbutil --list command and redirect the output to a temporary file.
Monitor this file for errors and contact Veritas Technical Support if any errors are reported.
When the previous steps have been completed without error, run the sync_to_cloud utility and wait for it to complete. Running this utility may take time depending on environment.
See About beginning the direct migration.
After sync_to_cloud has finished successfully, shut down services on the Cloud Catalyst server.
You can leave the services down on the Cloud Catalyst server. Or, if you plan to use a different MSDP server to migrate Cloud Catalyst, you can change the Readonly field to 1 in <CloudCatalyst cache directory>/cache/etc/esfs.json. Then restart the services on the Cloud Catalyst server. If the services are running on the Cloud Catalyst server at the time of migration certain configuration items like cloud bucket name are determined automatically. If not, you need to enter those configuration items you gathered in the following section:
See About beginning the direct migration.
Run a manual backup of the catalog backup policy (policy type: NBU-Catalog).
Do not skip this step as it is very important to run this manual backup. This backup establishes a point in time to return to if the migration does not complete successfully.

If possible, it is preferable to use a new MSDP direct cloud tier server for migration. Using a new server keeps the existing Cloud Catalyst server intact and usable if the migration unexpectedly fails. If you plan to reuse the Cloud Catalyst server as the new MSDP direct cloud tier server, you need to uninstall and or reimage the server at this time. Be sure to remove all of NetBackup and the contents of the Cloud Catalyst cache directory. If reusing a Cloud Catalyst appliance you may need to do a storage reset to remove the Cloud Catalyst cache, see the appliance documentation for details.

See Planning your MSDP deployment.

Note:

Although not usually recommended, in some special circumstances Cloud Catalyst is running on the primary server. Since you cannot uninstall, reimage the primary server, and you cannot upgrade it with Cloud Catalyst configured, you need to run the /usr/openv/esfs/script/esfs_cleanup.sh script to remove Cloud Catalyst. Then you can upgrade the primary server and proceed with migration.