Veritas NetBackup™ Cloud Administrator's Guide

Last Published:
Product(s): NetBackup (9.1)
  1. About NetBackup cloud storage
    1.  
      About cloud storage features and functionality
    2.  
      About the catalog backup of cloud configuration files
    3.  
      About support limitations for NetBackup cloud storage
  2. About the cloud storage
    1.  
      About the cloud storage vendors for NetBackup
    2. About the Amazon S3 cloud storage API type
      1.  
        Amazon S3 cloud storage vendors certified for NetBackup
      2.  
        Amazon S3 storage type requirements
      3.  
        Permissions required for Amazon S3 cloud provider user
      4.  
        Amazon S3 cloud storage provider options
      5.  
        Amazon S3 cloud storage options
      6.  
        Amazon S3 advanced server configuration options
      7.  
        Amazon S3 credentials broker details
      8.  
        About private clouds from Amazon S3-compatible cloud providers
      9.  
        About Amazon S3 storage classes
      10.  
        Amazon virtual private cloud support with NetBackup
      11. About protecting data in Amazon for long-term retention
        1. About protecting data in Amazon Glacier
          1.  
            About restoring data from Amazon Glacier
        2. About protecting data in Amazon Glacier vault
          1.  
            About backing up data to Amazon Glacier vault
          2.  
            About restoring data from Amazon Glacier vault
      12. Protecting data using Amazon's cloud tiering
        1.  
          About backing up data using LIFECYCLE storage class
        2.  
          About restoring data from LIFECYCLE storage class
      13. About using Amazon IAM roles with NetBackup
        1.  
          Configuring AWS IAM Role with NetBackup
      14.  
        About NetBackup character restrictions for Amazon S3 cloud connector
      15. Protecting data with Amazon Snowball and Amazon Snowball Edge
        1.  
          Configuring NetBackup for Amazon Snowball with Amazon Snowball client
        2.  
          Configuring NetBackup for Amazon Snowball with Amazon S3 API interface
        3.  
          Using multiple Amazon S3 adapters
        4.  
          Configuring NetBackup with Amazon Snowball Edge with file interface
        5.  
          Configuring NetBackup for Amazon Snowball Edge with S3 API interface
        6.  
          Configuring SSL for Amazon Snowball and Amazon Snowball Edge
        7.  
          Post backup procedures if you have used S3 API interface
    3. About Microsoft Azure cloud storage API type
      1.  
        Microsoft Azure cloud storage vendors certified for NetBackup
      2.  
        Microsoft Azure storage type requirements
      3.  
        Microsoft Azure cloud storage provider options
      4.  
        Microsoft Azure advanced server configuration options
      5.  
        Protecting data in Microsoft Azure Archive for long-term retention
    4. About OpenStack Swift cloud storage API type
      1.  
        OpenStack Swift cloud storage vendors certified for NetBackup
      2.  
        OpenStack Swift storage type requirements
      3.  
        OpenStack Swift cloud storage provider options
      4.  
        OpenStack Swift storage region options
      5.  
        OpenStack Swift add cloud storage configuration options
      6.  
        OpenStack Swift proxy settings
  3. Configuring cloud storage in NetBackup
    1.  
      Before you begin to configure cloud storage in NetBackup
    2.  
      Configuring cloud storage in NetBackup
    3.  
      Cloud installation requirements
    4. Scalable Storage properties
      1.  
        Configuring advanced bandwidth throttling settings
      2.  
        Advanced bandwidth throttling settings
    5. Cloud Storage properties
      1.  
        Adding a cloud storage instance
      2.  
        Changing cloud storage host properties
      3.  
        Deleting a cloud storage host instance
    6. About the NetBackup CloudStore Service Container
      1.  
        NetBackup CloudStore Service Container security certificates
      2.  
        NetBackup CloudStore Service Container security modes
      3.  
        NetBackup cloudstore.conf configuration file
    7.  
      Deploying host name-based certificates
    8.  
      Deploying host ID-based certificates
    9.  
      About data compression for cloud backups
    10.  
      About data encryption for cloud storage
    11.  
      About NetBackup KMS for encryption of NetBackup cloud storage
    12.  
      About external KMS for encryption of NetBackup cloud storage
    13.  
      About cloud storage servers
    14.  
      About object size for cloud storage
    15. About the NetBackup media servers for cloud storage
      1.  
        Using media server as NetBackup Cloud master host
    16. Configuring a storage server for cloud storage
      1.  
        KMS database encryption settings
      2.  
        Assigning a storage class to Amazon cloud storage
    17.  
      Changing cloud storage server properties
    18. NetBackup cloud storage server properties
      1.  
        NetBackup cloud storage server bandwidth throttling properties
      2.  
        NetBackup cloud storage server connection properties
      3.  
        NetBackup cloud storage server encryption properties
    19.  
      About cloud storage disk pools
    20.  
      Configuring a disk pool for cloud storage
    21.  
      Saving a record of the KMS key names for NetBackup cloud storage encryption
    22.  
      Adding backup media servers to your cloud environment
    23. Configuring a storage unit for cloud storage
      1.  
        Cloud storage unit properties
      2.  
        Configure a favorable client-to-server ratio
      3.  
        Control backup traffic to the media servers
    24.  
      About NetBackup Accelerator and NetBackup Optimized Synthetic backups
    25.  
      Enabling NetBackup Accelerator with cloud storage
    26.  
      Enabling optimized synthetic backups with cloud storage
    27.  
      Creating a backup policy
    28. Changing cloud storage disk pool properties
      1.  
        Cloud storage disk pool properties
    29.  
      Certificate validation against Certificate Revocation List (CRL)
    30.  
      Managing Certification Authorities (CA) for NetBackup Cloud
  4. Monitoring and Reporting
    1.  
      About monitoring and reporting for cloud backups
    2.  
      Viewing cloud storage job details
    3.  
      Viewing the compression ratio
    4.  
      Viewing NetBackup cloud storage disk reports
    5.  
      Displaying KMS key information for cloud storage encryption
  5. Operational notes
    1.  
      NetBackup bpstsinfo command operational notes
    2.  
      Unable to configure additional media servers
    3.  
      Cloud configuration may fail if NetBackup Access Control is enabled
    4.  
      Deleting cloud storage server artifacts
    5.  
      Using csconfig reinitialize to load updated cloud configuration settings
    6.  
      Enabling or disabling communication between master server and legacy cloud storage media servers
  6. Troubleshooting
    1. About unified logging
      1.  
        About using the vxlogview command to view unified logs
      2.  
        Examples of using vxlogview to view unified logs
    2. About legacy logging
      1.  
        Creating NetBackup log file directories for cloud storage
    3.  
      NetBackup cloud storage log files
    4.  
      Enable libcurl logging
    5.  
      NetBackup Administration Console fails to open
    6. Troubleshooting cloud storage configuration issues
      1.  
        NetBackup Scalable Storage host properties unavailable
      2.  
        Connection to the NetBackup CloudStore Service Container fails
      3.  
        Cannot create a cloud storage disk pool
      4.  
        Cannot create a cloud storage
      5.  
        Data transfer to cloud storage server fails in the SSL mode
      6.  
        Amazon GovCloud cloud storage configuration fails in non-SSL mode
      7.  
        Data restore from the Google Nearline storage class may fail
      8.  
        Backups may fail for cloud storage configurations with Frankfurt region
      9.  
        Backups may fail for cloud storage configurations with the cloud compression option
      10.  
        Fetching storage regions fails with authentication version V2
    7. Troubleshooting cloud storage operational issues
      1.  
        Cloud storage backups fail
      2.  
        Stopping and starting the NetBackup CloudStore Service Container
      3.  
        A restart of the nbcssc (on legacy media servers), nbwmc, and nbsl processes reverts all cloudstore.conf settings
      4.  
        NetBackup CloudStore Service Container startup and shutdown troubleshooting
      5.  
        bptm process takes time to terminate after cancelling GLACIER restore job
      6.  
        Handling image cleanup failures for Amazon Glacier vault
      7.  
        Cleaning up orphaned archives manually
      8.  
        Restoring from Amazon Glacier vault spans more than 24 hours for single fragment
      9.  
        Restoring from GLACIER_VAULT takes more than 24 hours for Oracle databases
      10.  
        Troubleshooting failures due to missing Amazon IAM permissions
      11.  
        Restore job fails if the restore job start time overlaps with the backup job end time
      12.  
        Post processing fails for restore from Azure archive
    8.  
      Troubleshooting Amazon Snowball and Amazon Snowball Edge issues
  7.  
    Index

Configuring NetBackup for Amazon Snowball with Amazon S3 API interface

When you back up the data to the Amazon Snowball device using the Amazon S3 interface, data is moved directly from the source to the Amazon Snowball device. This process is accomplished using the Amazon S3 APIs.

To configure NetBackup to transfer data to Amazon Snowball using the S3 API interface

  1. Create a temporary storage server and disk pool to create or list the buckets that you plan to use for the device import job.

    Note:

    It is recommended to create the buckets from the NetBackup Administration Console. However, if you create buckets from the AWS console, ensure that only characters that NetBackup supports are used.

  2. Delete the temporary storage server and disk pool.
  3. Create an import job in the AWS console. Refer to the AWS documentation for detailed steps.
  4. Install the Amazon Snowball S3 adapter on a different host. Refer to the AWS documentation for detailed steps.
  5. (Optional) To use SSL protocol for communication with the Amazon Snowball adapter, append the certificate provided to the Amazon Snowball adapter on the command line as it is to /usr/openv/var/global/wmc/cloud/cacert.pem file on the media server. Ensure that the format and length of the newly copied certificate matches with the existing certificates in cacert.pem.

    See Configuring SSL for Amazon Snowball and Amazon Snowball Edge.

  6. Add a custom instance for the device.

    Set the custom instance's cloud storage properties with details of the host on which you have installed the Amazon Snowball S3 adapter.

    Set the following in the General Settings tab:

    • Provider type: Amazon or Amazon GovCloud depending upon the endpoint for which you have ordered the device.

    • Service host: IP or host name of the adapter

    • Service endpoint: Leave blank

    • HTTP port: Default is 8080. Or enter the port you have configured.

    • HTTPS port: Default is 8443. Or enter the port you have configured.

    • Endpoint access style: Path Style

    Set the following in the Region Setting tab:

    • Location constraint: Region from where you have ordered the device.

    • Service host: IP or host name of the adapter

    Note:

    An Amazon Snowball Edge device can be used to transfer data only from the region from where the device is obtained. Thus, use the location constraint and service host of the region from where the device is obtained.

    See Adding a cloud storage instance.

  7. Create a storage server for the device using the custom instance.

    See Configuring cloud storage in NetBackup.

  8. Update the following storage server property:

    AMZ:OFFLINE_TRANSFER_MODE: PROVIDER_API

    See NetBackup cloud storage server connection properties.

  9. For live data, create the NetBackup storage lifecycle policy, backup policy and run the backup for initial seeding.

    For old data, use the bpduplicate command and duplicate the images on the storage unit.

    See the NetBackup Commands Reference Guide.

  10. After the data transfer is complete:
    • Deactivate the backup policy or postpone the secondary operation processing in the SLP till the device is in transit.

    • Set the storage server properties you have configured to NONE.

    • Save the properties. You need this information during the post-backup process.

      Take an image capture of storage server properties from Administration console or use nbdevconfig -getconfig command. See the NetBackup Commands Reference Guide.

      Also, note down the object size that was configured.

  11. Ship the device to the cloud vendor. Refer to the AWS documentation for detailed steps.

Note:

After backups are imported into the cloud bucket, before restore you need to perform the post backup procedures. See Post backup procedures if you have used S3 API interface.