Veeam and Azure

Backup Nas

Restore to Microsoft Azure

Veeam Backup & R├ęplication permit to restore backup directly on Microsoft Azure. With Veeam you can :

  • Restore machine to Microsoft Azure
  • Migrate on-premises machines to the cloud
  • Create a lab (similar to the prod) on the cloud for test patching, …

What type of backup can be used ?

For replicate to Azure, the backup must be :

  • Backup of Windows and Linux VM (VMware vSphere VMs or vCloud Director VMs)
  • Backup created with veeam agent (Windows and Linux). Backups must be created at the entire machine level or volume level.
  • Backup of EC2 instances or Nutanix AHV VMs.

Restoration process to Azure

On the first time, If Azure proxy is used for restore VM, Veeam powers on the Azure proxy. Thereafter Veeam convert disk of machine (backed-up machine to the VHD format). After conversion, the disks is uploaded to blob storage on Microsoft Azure and it’s mounted to the backup server.

Veeam prepares the disks for the restore step. It also enables Remote Desktop rules and configures firewall rules. It prepares disks for Microsoft Azure agent installation.

The prepared disks are unmounted from the bakup server and Azure proxy is powers off after a time out (if used). The Microsoft Azure VM is registers with prepared disks. With this process is complete, VM is powered on and Azure Agent is installed.

Veeam and Microsoft Azure - Schema Veeam and Azure

Configure Azure prerequities

Uploading disks from the machine to Microsoft Azure can take a long time (low speed internet connection for example). In order to speed up the recovery process and thus reduce RPO and RTO, it is strongly recommended to set up an Azure proxy. Veeam transports data from the disks to the blob storage through this proxy. The various Veeam components installed on the proxy enable compression and deduplication of disk data. This reduces network traffic. The proxy is set up using a wizard available from the Veeam console. The wizard allows the deployment of a Windows Server 2012 R2 VM in Azure directly. After deployment, the proxy role is automatically assigned. In the event that the restore will involve several Azure regions, it is recommended to use one proxy per region.

Configure Azure prerequisites We must create in Azure Storage account andNetwork before create Azure proxies. I use my Ressources Group but you can if you want create new ressources group. From Azure portal, enter Storage on search bar then click on Storage accounts.

Veeam and Microsoft Azure - Storage Account on Azure

Click on Add for add new storage accounts.

Veeam and Microsoft Azure - Storage Account on Azure

Select resource group or create new resource group. Enter desired storage account name and select location. Select Cool for access tier and click on Next.

Veeam and Microsoft Azure - Create Storage

Click on Review + Create on Networking Windows then on Create for create stockage accounts.

Veeam and Microsoft Azure - Create Storage

Virtual Network can be created. From the Azure portal, click on Virtual Networks.

Veeam and Microsoft Azure - Create Virtual networks

Click on Add for create new virtual networks.

Veeam and Microsoft Azure - Create Virtual networks

Select the desired Resource Group and enter the name. Select the Region and click on Next.

Veeam and Microsoft Azure - Create Virtual networks

Configure the IPv4 address space and click on Add for add new subnet. Enter the Subnet address range and click on Add. CLick on Next for configure security.

Veeam and Microsoft Azure - Create Virtual networks

Configure the security as you want and click on Review + create then on Create for create virtual networks.

Veeam and Microsoft Azure - Create Virtual networks

Configure Azure Account
This operation is mandatory if you want add Azure proxies.. Before add Azure account, you must add the Following address on if you use Protected mode for Internet Explorer.

  • https://login.live.com
  • https://login.microsoftonline.com
  • https://secure.aadcdn.microsoftonline-p.com
  • https://auth.gfx.ms
  • about:security_veeam.backup.shell.exe

From the Veeam console, open the menu and click on Manage Cloud Credentials.

Manage Cloud credential on Veeam console

A windows appear, click on Add then on Microsoft Azure compute account.

Manage Cloud credential on Veeam console

Select the region (choose Global for France, West Europe, …) and click on Next.

Create Cloud credential on Veeam console

At the subscription step, you can use an existing account or create new account. This account must be owner of subscription Azure. if you want attribute minimal permission, you can use this link.
You cannot use MFA for this account. If it’s enabled, you need disabled the MFA or use an other account..

Create Cloud credential on Veeam console

Click Next and Finish. Account has been added.

Configure Azure Proxies

From the Veeam console, open Backup Infrastructure tab and select Backup Proxies.

Add Backup Proxies

Click on Add Proxy then on Azure.

Add Backup Proxies

Enter the desired name (the name must not contain only numeric characters and not contain special characters). Configure the Max concurrent tasks. Click on Next.

Add Backup Proxies

Click on Add and enter credential of the local/domain admin account without domain name.

Add Backup Proxies

Select the subscription and Location.

Add Backup Veeam Proxies

Select the VM size and the storage account.

Select VM size and storage account

Select the resource group and click on Next.

Select resource group

Select the desired Virtual network and Subnet. Click on Apply for Apply configuration. If error 409 appear (The remote server returned an error:(409) Conflict), verify that the VM size is available on the selected region. If the problem persist, you can see on Azure monitor the error detail.

Select resource group

Click on Finish when all step is finished. Proxies has present in Veeam console.

Veeam Proxies has been present in the Veeam Console

Create backup file

If Backup job is already created, you can skip this step.
From the Veeam console, open HOME tab and click on Jobs. Right Click on Jobs and select Backup then Virtual machine.

Create backup job

Enter the desired name of the backup job and click on Next.

Enter the name for backup job

With the Add button, select the desired virtual machines and click on Next. You can choose VM backup order with Up and Down button and exclude VM with Exclude button.

Select VM for backup job

Select the Backup Proxy and the Backup Repository. Configure Retention Policy. If your backup contain VM with SQL Server or Oracle, you need configure transaction Logs settings. For SQL, you can use this Post.

Configure backup job

If your backup contain VM with SQL Server or Oracle, you need configure transaction Logs settings. For SQL, you can use this Post. For Oracle, you can use this link.

Configure Transaction log

Configure scheduling and click on Apply. Backup job has been created. Start the backup job and wait that backup is finish.

Backup job has been created

Restore to Azure

From the Veeam console, open HOME tab. Expand Backups and click on Disk. Expand the backup job and select the VM to be restored. In the ribbon, click on Microsoft Azure.

Select vm to restore

Select the Subscription and the Location.

Select location and subscription Azure

Select the VM and click on Edit.

Select location and subscription Azure

Configure the Size and Storage option. Repeat the same operation for all VM.

Configure option for the Azure VM

You can also configure Disk type (SSD or HDD) with Disks button. Click Next when configuration is finish.

Configure disk type

Select the VM and click on Group. You can select Resource group or create a new one. Repeat the same operation for all VM and click on Next. You can change the name with Name button.

Configure Resource group

Select the VM and click on Network. Select Virtual Network and Subnet. You can choose to assign a public address at the VM.

Configure Resource group

Select VM and click on on Group. You can assign a Network Security Group. Repeat all operation for other VM.

Configure NSG

An antivirus scan can be performed during recovery. If malware is present, the recovery can be aborted or the VM can be moved to another virtual network. Enable Scan if you want and click on Next.

Configure Scan for malware

Enter restore Reason and click on Next. Click on Finish for begin restore. By default, target VM has power on after restoring.

Restore Server

The restoration is beginning. Unfortunately, I couldn’t finish, my Internet connection being very bad.

Leave a comment

Your email address will not be published. Required fields are marked *