3. Reference design for backup services

This chapter will describe a complete Veeam Cloud Connect Backup deployment at a service provider. By impersonating a provider willing to offer backup services, you will learn about design and deployment of all the servers, networks and network rules necessary to run Veeam Cloud Connect Backup.

Fig 3.1 Cloud Connect Backup Overview

3.1: Cloud Connect Backup overview

All the components will be deployed in VMs running on top of a hypervisor in order to leverage the quick deployment times of new VMs starting from templates and to protect components that cannot be executed in multiple instances, like the Veeam Backup & Replication server. Because of this, sizing rules will be based on vCPUs (virtual CPUs) rather than sockets and cores. Additionally, the size adjustments of virtual disks will be easier than in a physical server, like when it will be needed to increase the WAN accelerator cache size for example.

The only exception is backup repositories: For better performance and security, service providers should use physical backup repositories.

During this chapter (and the following one dedicated to replication services), these VMs are referred to as servers; please remember that physical servers only refer to the repositories. If you plan to use physical servers, adjust the CPU considerations to existing and available CPU models and specifications.

We will first explain the different Security Zones (chapter 3.1) used to isolate and harden the design, and then we’ll show the Deployment of the different servers (chapter 3.2).

NOTE 1: Information about services and networks ports are listed in chapter 2.13 here we will focus on the servers.

NOTE 2: compared to previous editions of this book, we removed all the references to the Veeam Enterprise Manager component. Instead, we heavily suggest service providers to deploy Veeam Service Provider Console to manage Veeam Cloud Connect and expose a far superior interface to their tenants.


Table of contents