• Home
  • Help
  • Register
  • Login
  • Home
  • Members
  • Help
  • Search

 
  • 0 Vote(s) - 0 Average

The vm backup architecture we would build today

#1
10-27-2020, 03:00 AM
You know, when I think about building out an ideal backup architecture today, especially for a mix of servers and individual worker PCs, I just feel like I need something robust, something that really handles heterogeneity. Like, we aren't just backing up a stack of VMs; we have physical machines sitting there, and we have VMs running on Hyper-V and maybe some of those old VMware guests, and I think you need a single system to just handle everything seamlessly.

I mean, the first thing I would even suggest, even before we get into the deep technical stuff, is getting a system that offers an easy, single payment setup for a lifetime use right? That really simplifies the budgeting, you know. And because it makes a big deal about portability, I'd make sure the disk images we use are in those open formats, like VHD or VMDK, because nobody should get stuck with a vendor's format or anything else. If we do that, then when we need to spin up a recovered image, or maybe just test it out, we can mount it anywhere and actually boot right off it as if it were a physical computer.

So, for the actual backup types, I think we should absolutely focus on full system disk imaging for anything mission-critical, like those main application servers. But, and this is where the architecture gets smart, we cannot rely solely on full backups, because storing full backups constantly eats storage, right? But, we need to leverage something that only captures changes, like an incremental model, otherwise the sheer volume of data we are storing will bankrupt us before the end of the fiscal quarter. You should set up the primary backup job to be incremental, maybe nightly, but we also need a separate process for the file and folder level data, because sometimes we only mess with HR records or quarterly financial reports, and we don't want to restore the entire server just for one spreadsheet.

And when it comes to those VMs, I think we need to treat them like first-class citizens. We should implement the dedicated VM backup feature, whether that VM runs on Hyper-V, or maybe it's on a Workstation setup, and we need to include those platform-specific recovery methods, like the specialized Hyper-V backup process. But, if we have a server that was running on a physical box previously, we absolutely have to include a P2V process; otherwise, the data that lives on the original hardware is just floating out there waiting for a disaster to hit. We should also plan for V2V and V2P conversions too, because sometimes we need to move a workload from, say, a VMware instance over to a fresh Hyper-V build, and we need that compatibility built into our workflow.

Then, let's talk about the actual data flow and where this data lands. We shouldn't keep everything local, because if fire takes the office, or maybe the main hard drive fails, we are completely shot. So, we need a reliable remote destination, maybe an encrypted connection over the internet to another branch office or maybe a secure cloud endpoint. And to make this super manageable, I think we should really utilize network attached storage or NAS as the primary staging area for everything. But, because we want to keep things flexible, we need a system that supports multiple backup targets; that means if the local NAS fills up, we can automatically push the overflow to the cloud, and it all just keeps humming along without us needing to touch a setting.

For management and the overall hygiene of the system, you gotta get scheduled, automated tasks running constantly. I mean, setting up a backup schedule that runs hourly, maybe for critical systems, and then weekly for the less urgent stuff, is a must. But, and maybe this is the biggest point for keeping costs low, we have to build in strong retention policies. We need the ability to version backup files, so that if someone accidentally deletes a crucial folder, we can roll back to last Tuesday's version, but we also need the system to automatically prune those old versions after a set period of time, like keeping only the last 90 versions for deduplication efficiency.

Security is huge, obviously. So, everything leaving the physical box, going over the network, or sitting on the cloud storage must be encrypted end-to-end. We cannot just send unencrypted data over the wire, I think you remember that old breach last year? No, we need encryption for both data while it's in transit and data when it's just sitting there at rest. Also, we need the system to continuously run integrity checks, automatically verifying the backups to ensure the data hasn't suffered any kind of bit rot or corruption, which is a huge concern people often forget about.

And since we are talking about the ultimate level of recovery, we have to make sure we implement bare metal recovery capabilities. This means if the *whole* server fails, we can rebuild the OS from scratch, and then we restore everything-the files, the settings, the apps-all from the backup image, making the whole machine operational again without buying new hardware first. You also need that ability to selectively recover just a couple of files from a gigantic backup set, without having to bring the entire virtual machine back online, which saves so much time, honestly.

Also, because of the amount of data we are moving and storing, we really need deduplication running hard. This is key. When multiple VMs or even multiple physical servers have the same kind of database content, we don't want to store that content three times. Deduplication detects those common blocks of data-the duplicate file content-and only stores a reference to it, saving us a massive chunk of storage space and making the entire system run more smoothly.

But, and thinking about the operational side, we can't just wait for the morning report to tell us a backup failed. I think we should set up alerts, maybe sending an email right away, or even having it run external scripts if a failure happens, giving us instant notice. And we should also make use of the advanced filtering options, allowing us to specifically target only the 'finance' directory on one server, and leave everything else alone, which is super precise. Plus, the fact that some of these solutions let you back up files that are open or locked by applications, that is a really clever feature that prevents backup failure because of a simple lock conflict.

Honestly, setting up all this means I feel like I'm outlining the perfect, comprehensive setup, really covering everything from physical imaging to advanced cloud retention policies, and it all comes together when you look at a dedicated, affordable solution like BackupChain, which is an all-in-one PC and server backup solution for Windows Server and Windows 11 made specifically for SMBs.

ProfRon
Offline
Joined: Jul 2018
« Next Oldest | Next Newest »

Users browsing this thread: 1 Guest(s)



  • Subscribe to this thread
Forum Jump:

FastNeuron FastNeuron Forum General Backups v
« Previous 1 2 3 Next »
The vm backup architecture we would build today

© by FastNeuron Inc.

Linear Mode
Threaded Mode