• Skip to main content
  • Skip to secondary menu
  • Skip to primary sidebar
The Blog of Jorge de la Cruz

The Blog of Jorge de la Cruz

Everything about VMware, Veeam, InfluxData, Grafana, Zimbra, etc.

  • Home
  • VMWARE
  • VEEAM
    • Veeam Content Recap 2021
    • Veeam v11a
      • Veeam Backup and Replication v11a
    • Veeam Backup for AWS
      • Veeam Backup for AWS v4
    • Veeam Backup for Azure
      • Veeam Backup for Azure v3
    • VeeamON 2021
      • Veeam Announces Support for Red Hat Enterprise Virtualization (RHEV/KVM)
      • Veeam announces enhancements for new versions of Veeam Backup for AWS v4/Azure v3/GVP v2
      • VBO v6 – Self-Service Portal and Native Integration with Azure Archive and AWS S3 Glacier
  • Grafana
    • Part I (Installing InfluxDB, Telegraf and Grafana on Ubuntu 20.04 LTS)
    • Part VIII (Monitoring Veeam using Veeam Enterprise Manager)
    • Part XII (Native Telegraf Plugin for vSphere)
    • Part XIII – Veeam Backup for Microsoft Office 365 v4
    • Part XIV – Veeam Availability Console
    • Part XV – IPMI Monitoring of our ESXi Hosts
    • Part XVI – Performance and Advanced Security of Veeam Backup for Microsoft Office 365
    • Part XVII – Showing Dashboards on Two Monitors Using Raspberry Pi 4
    • Part XIX (Monitoring Veeam with Enterprise Manager) Shell Script
    • Part XXII (Monitoring Cloudflare, include beautiful Maps)
    • Part XXIII (Monitoring WordPress with Jetpack RESTful API)
    • Part XXIV (Monitoring Veeam Backup for Microsoft Azure)
    • Part XXV (Monitoring Power Consumption)
    • Part XXVI (Monitoring Veeam Backup for Nutanix)
    • Part XXVII (Monitoring ReFS and XFS (block-cloning and reflink)
    • Part XXVIII (Monitoring HPE StoreOnce)
    • Part XXIX (Monitoring Pi-hole)
    • Part XXXI (Monitoring Unifi Protect)
    • Part XXXII (Monitoring Veeam ONE – experimental)
    • Part XXXIII (Monitoring NetApp ONTAP)
    • Part XXXIV (Monitoring Runecast)
  • Nutanix
  • ZIMBRA
  • PRTG
  • LINUX
  • MICROSOFT

Veeam: Detailed How-To Create a Secure and Immutable Backup Repository using Cloudian and Veeam v11

29th June 2021 - Written in: cloudian, veeam

Greetings everyone, on the previous blog post, I’ve covered in detail the whole deployment of Cloudian, using the trial version which gives us a great OVA to deploy. Today, we will take a step further, and configure those buckets with object lock, into Veeam Backup and Replication v11. Let’s take a quick look at where Cloudian fits anyways.

Quick Diagram about Where Cloudian Fits

As said before, there are Companies that due to regulations, or even just to keep costs under control, these Customers prefer Object Storage on-prem. The main use-case of this usually is to have an air-gap different from traditional storage, the diagram could look something like this:

  • We have at the left our Primary Storage, and the Production workloads there, physical, virtual, Workstations, etc.
  • Then, we introduce the Backup layer, Veeam Backup and Replication, that of course, allows us to trigger Instant Recovery, Automated Backup, etc.
  • Veeam Backup and Replication require Storage to save the Backup, I do 100% recommend Linux Repositories with Immutability, but it does support as well any Windows Server with ReFS, NFS, iSCSI, etc.
  • Now, the new layer, an additional copy, our air-gap, the Cloudian Object Storage. We can configure our Scale-Out Backup Repositories to send COPY, and even MOVE as well, and keep the immutability on these Buckets.
  • Finally, and completely optional, we can even have a third copy of the data into Public Cloud, but probably not ideal for those use cases to keep data on-prem, or cost-prediction desire.

How to create an Immutable Backup Repository using Cloudian and Veeam Backup and Replication v11 – video

The step-by-step can be a bit tedious, especially the first time you configuring it, so I’ve decided to put a guide about how to do it, with a luxury of details, comments, etc. Hope you like it:

How to create an Immutable Backup Repository using Cloudian and Veeam Backup and Replication v11 – images

The step-by-step can be a bit tedious, especially the first time you configuring it, so I’ve decided to put a guide about how to do it, with a luxury of details. Hope you like it.

How to create the Object Storage Backup Repository

The first step will be to create a new Backup Repository, so under Backup Infrastructure – Backup Repositories – Add Backup Repository:

We will select that the new Backup Repository is an Object storage type: As we are configuring a Cloudian Repository, we will need to select S3 Compatible type: Here just introduce the desired name and description. Additionally, and super important, for the ones like Cloudian, it is better to reduce the number of concurrent tasks to 2, or to a better number after doing sizing exercise with Cloudian, and Veeam, Systems Engineers:

Now, on account, we will introduce the FQDN of the Cloudian box, for production this would be most likely a valid FQDN that will be load-balanced, etc. We need as well the Region, and the credentials, all of them have been configured on the previous blog entry:

Finally, on bucket, we will select the desired bucket with object-lock enabled, we will create an folder, and check the box to make backups immutable for the desired days

We will select Finish, and we can move to the next step:

How to create a Scale-Out Backup Repository

Under the same Backup Infrastructure view, let’s create a new scale-out backup repository:

Let’s introduce a name for the new scale-out backup repository and a description:

Let’s now add the performance Tier, or Peformance Tiers (remember that you can add multiple backup repos, different types, into the performance tier) and click next:

Under Capacity Tier, enable the check which says extend scale-out backup repository, select now the new Object Storage Repo we have created before. After that, you can always select COPY and MOVE mode, COPY will put an exact copy of your daily backups into this new Cloudian, and MOVE will offload the backups that you do not need to store on a normal disk, imagine those Weekly, Monthly, Yearly, and last but not least, why not enable encryption:

How to create a Scale-Out Backup Repository

Now we edit the Job, or Jobs that we want to go to this new Scale-out Backup Repository, and we select the retention, with the daily points, and the GFS:

How to create a Scale-Out Backup Repository

Finally, if we go to Active Tasks, or Last 24 hours, we will see the automated Offload task once our backup has finished, this is the COPY option from Scale-Out Backup Repository, not a bad speed for a homelab. So right now I have a copy on my normal repo, and an immutable copy on my Cloudian S3 Bucket:

If I try to delete any of these backups, the error I will obtain will be something similar to this, same as if this was a Ransomware attack, or a local employee trying to delete backups, just a mistake, etc.

That’s it for now, I might prepare a detailed, and more advanced in-depth into fine-tune a big Cloudian Environment, but for that, I will need a bit more time. Meanwhile, I hope you liked the post, and if that is so, leave some comments here.

Filed Under: cloudian, veeam Tagged With: cloudian veeam v11, veeam cloudian, veeam cloudian s3, veeam immutable cloudian

Reader Interactions

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Primary Sidebar

  • E-mail
  • GitHub
  • LinkedIn
  • RSS
  • Twitter
  • YouTube

Posts Calendar

June 2021
M T W T F S S
 123456
78910111213
14151617181920
21222324252627
282930  
« May   Jul »

Disclaimer

All opinions expressed on this site are my own and do not represent the opinions of any company I have worked with, am working with, or will be working with.

Copyright © 2025 · The Blog of Jorge de la Cruz