Quantcast
Channel: Veeam Support Knowledge Base
Viewing all articles
Browse latest Browse all 4362

Using Object Storage with Veeam Products

$
0
0

Using Object Storage with Veeam Products

KB ID: 4241
Product: Veeam Backup & Replication
Veeam Backup for Microsoft 365
Veeam Backup for AWS
Veeam Backup for Microsoft Azure
Published: 2021-11-18
Last Modified: 2024-05-14

Summary

Veeam Backup & Replication supports object storage as a destination for long-term data storage. Similarly, Veeam Backup for Office 365 and cloud-specific offerings, such as Veeam Backup for AWSVeeam Backup for AzureVeeam Backup for Google Cloud Platform all support object storage.

This article lists some general guidance for using object storage in combination with these Veeam products.

Considerations and Limitations

General Limitations

As documented in Object Storage Repository > Considerations and Limitations:

Object storage gateway appliances used to store backup data, emulating disk or CIFS/NFS, iSCSI/FC/SAS are not supported if the backup data is offloaded to object storage and is no longer stored directly on the appliance.

Gateway appliances are only supported in the following cases:

  • All backup data is stored and remains on the actual storage appliance, and data is only copied to object storage.

    or
  • The appliance emulates a tape system (VTL) as an access protocol for Veeam Backup & Replication.

Amazon S3 and S3 Compatible Object Storage

Support for Amazon S3 and S3-compatible object storage varies between products. The following limitations apply:

  • Versioning is not required unless object lock is enabled.
  • Support for AWS Signature v4 is required.

Specific Veeam products can manage immutability for data stored within AWS S3. Immutability can only be used with new buckets. Automatic settings for objects uploaded with object lock are not supported, and configuring these features outside of how Veeam uses them can result in data loss. 

Veeam manages the entire data lifecycle of backups stored within AWS. As such, Lifecycle policies are not supported nor needed, and doing so can result in data loss.

For AWS, it is recommended that you use S3 bucket policies to restrict access to specific endpoints or IP addresses.

Azure Blob Object Storage

Support for Azure Blob object storage varies between products. The following limitations currently apply to all Veeam products:

Specific Veeam products can manage immutability for data stored within Azure. Immutability can only be used with new storage account containers and cannot be used with existing backup data where immutability was not applied previously. Default immutability policies are not supported, and configuring these features outside of how Veeam uses them can result in data loss. Learn more...

Veeam manages the entire data lifecycle of backups stored within Azure. As such, configuring the storage account with these features is unnecessary, and doing so can result in data loss. More details are available in the Object Storage Repository Considerations and Limitations section of the Veeam Backup & Replication user guide.

For Azure, it is recommended that you use Azure Storage Firewall policies to restrict access to specific IP addresses.

Microsoft Defender for Storage Unsupported
Note that using Microsoft Defender for Storage with Veeam data is not supported. Sensitive data threat detection and malware scanning will not work as Veeam data is stored in individual blocks that are encrypted. Enabling Defender for Storage may effectively double the cost associated with your storage account. Defender for Storage could be used to detect activity anomalies, but since it cannot read the encrypted data contents, it may result in false positives and come with an additional cost per transaction.
To submit feedback regarding this article, please click this link: Send Article Feedback
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.

Viewing all articles
Browse latest Browse all 4362

Trending Articles