Cloud storage configuration

NetBackup web UI facilitates the cloud storage setup and storage provisioning.

Compression

NetBackup Cloud Storage Compression compresses the data inline before it is sent to the cloud. The compression feature uses a third-party library called LZO Pro (with compression level 3).

Encryption

NetBackup Cloud Storage Encryption encrypts the data inline before it is sent to the cloud. Encryption interfaces with the NetBackup Key Management Service (KMS) to leverage its ability to manage encryption keys.

The encryption feature uses an AES 256 cipher feedback (CFB) mode encryption.

Throttling

NetBackup Cloud Storage throttling controls the data transfer rates between your network and the cloud. The throttling values are set on a per NetBackup media server basis.

In certain implementations, you want to limit WAN usage for backups and restores to the cloud. You want to implement this limit so you do not constrain other network activity. Throttling provides a mechanism to the NetBackup administrators to limit NetBackup Cloud Storage traffic. By implementing a limit to cloud WAN traffic, it cannot consume more than the allocated bandwidth.

NetBackup Cloud Storage Throttling lets you configure and control the following:

Metering

The NetBackup Cloud Storage metering reports enable you to monitor data transfers within NetBackup Cloud Storage.

Cloud-based storage is unlike traditional tape or disk media, which use persistent backup images. Your cloud storage vendor calculates cloud-based storage costs per byte stored and per byte transferred.

The NetBackup Cloud Storage software uses several techniques to minimize stored and transferred data. With these techniques, traditional catalog-based information about the amount of protected data no longer equates to the amount of data that is stored or transferred. Metering allows installations to monitor the amount of data that is transferred on a per media server basis across one or more cloud-based storage providers.

Cloud Storage service

This is applicable to media server versions 7.7.x to 8.1.2 only.

The NetBackup CloudStore Service Container (nbcssc) process performs the following functions:

On Windows, it is a standard service installed by NetBackup. On UNIX, it runs as a standard daemon.

The NetBackup CloudStore Service Container (nbcssc) uses certificate-based authentication. The authentication method used in previous releases (legacy authentication) is disabled by default. It is recommended that you upgrade media servers configured as a cloud storage server to NetBackup 8.1 or later.

If you cannot upgrade these servers, use the Enable insecure communication with 8.0 and earlier hosts option on the NetBackup primary server. The option is available in web UI on the Settings > Global Security Settings > Secure Communication tab.

NetBackup Web Management Console

The NetBackup Web Management Console (nbwmc) process manages requests for certificate and host management.

This process now also controls the configuration parameters that are related to NetBackup Cloud Storage.

The process is installed as a NetBackup service on Windows and runs as a standard daemon on UNIX.

NetBackup Service Layer

The NetBackup Service Layer (nbsl) service facilitates the communication between NetBackup graphical user interface (UI) and the NetBackup logic.

This service is also required for Cloud Storage and now performs the following functions:

Storage providers

Cohesity currently supports several cloud storage providers. More information is available about each of these vendors.

See About the cloud storage vendors for NetBackup.