Novinkyv NetBackup 9

Novinky v NetBackup 9.1

Josef Honc

Senior Technology Consultant

29.6.2021, 10:00

2

Changing NetBackup terms

• Master Server = Primary Server

• White-List = Allowed List

• Black-List = Blocked List

Workloads

Market leading support for any workload

NetBackup Continuous Data Protection

4 Copyright © 2021 Veritas Technologies, LLC.

• A “stun” free option to be able to protect VM’s that have high I/O and cannot be snapshot in a conventional manner

• Ability to have multiple restore points throughout the day instead of the current once per day backup

• NetBackup Media Server configured as a CDP Gateway with staging area for continuous I/O

• Veritas Filter driver (VAIO) is deployed on ESXi hosts to replicate I/O from VM to CDP Gateway

• Improved RPO (as low as 30 minutes)

• Very low impact on production VM, no need to “stun” VM to freeze I/O during snapshot operation

• Gain additional recovery points for VM

• Support for Single File Restore

• Low RPO (as low as 30 minutes)

• No additional licensing needed on the VMware side

What Is It? How Does It Work? Value to Customer

Instant Rollback for VMware


• A rapid recovery option for a VM in the event of a Ransomware attack (or other restore requirement)

• Using the WebUI or NBU API, a VM can be rolled back to a recovery point instantly. This is done by restoring changed data vs. the entire disk

• Think of this as "reverse Accelerator". We can send the changed blocks back to the VMDK in a matter of seconds

• Improved RTO

• Getting VM's back online in an operational state quickly is critical after a Ransomware attack. If a VM is impacted, it can be rolled back to a previous non-infected state

• Customer does not need to wait for a full restore of the virtual machine to complete


Kubernetes Updates


• NetBackup is now able to protect applications running in Kubernetes

• Kubernetes is an orchestrator for containerized platforms that provides application portability

• NetBackup deploys an operator container into the cluster to take a snapshot of an application

• Improved Solution Offering and Flexibility

• There is now a solution that allows customers to protect applications running in Kubernetes on-premise and/or in the cloud

• Ability to recover an entire application, custom resource, or a persistent volume

• Current support for vSphere Tanzu, RedHat OpenShift and Google GKE


Nutanix Updates


• Agentless SFR

• Agent Based SFR

• App Consistent Snapshots

• Intelligent Backup Selection

• Self Service

• Allows users to restore files and folder from a VM backup image without NBU client installed– Requires Web UI or API – does not work with

JAVA or CLI

• Can restore single files on machines with the NBU Client installed

• VM can be quiesced using a check box in the Web UI – Consistent state by flushing in-memory data

and pending I/O to disk

• Adds intelligent groups in the Web UI

• Part of the RBAC capabilities updates

• Enterprise B&R Features and Improved Solution Flexibility

• Allows more granular restore options for AHV VM’s

If the NBU Client is installed on the VM, granular recovery is an option

• Allows for a reliable recovery of a VM snapshot since it was quiesced before the backup

• Dynamic Nutanix asset protection

• More granular control of the data protection solution when using AHV


Dynamic NAS Updates


• Adding CIFS/SMB mounts to a Windows backup host for backups– Also allows for use of Accelerator

• When using Dynamic NAS, mounts can now be done to a Windows host

• Many customers use CIFS/SMB mounts. Now they can use Dynamic NAS

• Deprecate NDMP use where appropriate– Large number of small files


MS SQL Updates


• Recovery from Any Copy • When browsing for a Restore, all copies are shown

• Desired copy can be chosen even if it isn’t the Primary copy

• Speed of recovery

• Customer can choose the backup they want to restore from

• Works with Availability Groups – Recovery of AG backups are done

at the database level

– Once restored, the DBA would add the restored data to the SQL environment



Workloads - Additional Updates and Proliferations

• Oracle Intelligent Policies are Data Guard Aware– Data Guard is a replication technology from Oracle

• MongoDB– Support for version 4.4

• BMR – Support for iSCSI disk

• Universal Shares – Added NTFS Permissions

• Support added for snapshots on the following platforms: – Dell EMC PowerMax– VMAX-3– VMAX AFA– HDS VSP 5000

• Multi SLO Support For NetBackup and VRP

Cloud and Storage

Best in class data protection solutionsfor leading cloud providers

Ransomware Immutable Object Storage Support for AWS S3


• Support for the Amazon S3 object lock storage with deduplicated backups (MSDP-C)

• This is an AWS immutability option that we can now use during backups– This does require an AWS account with

Object Lock permissions

– Compliance and Governance Mode

• Improved Security and protection from Ransomware Attack

• Customers need immutability options, and we can now provide them with immutability when sending backups to S3


Cloud Intelligent Policies – AWS, Azure, Azure Stack, GCP


• Protect assets when they are created/updated/deleted

• Intelligent groups can also be used for RBAC

• New Intelligent Group Tab in the Cloud section of the Web UI– Includes a “preview” option similar to

VMware Intelligent Policies

– Works with AWS, Azure, AzureStack and GCP

• Reduced Management

• Newly added VM's in the cloud can be protected without having to add each one. Better protection, less management overhead


Azure Stack Basic Support


• Support for native snapshots in Azure Stack using CloudPoint

• Auto discovery of assets

• App Consistent Snapshot– MongoDB, MS-SQL, Oracle

• Granular File Recovery

• Backup from snapshot

• API driven just like in Azure • CSP Flexibility

• Consistent hybrid cloud protection


Backup From Cloud Snapshots – Azure and Azure Stack


• Snapshots in the Cloud can now be backed up to deduplicated cloud storage (MSDP-C)

• Dynamic resource creation and shutdown after completion

• Create the snapshot and backup to any available NetBackup Storage Unit– Only Full back up from snapshot is

supported at this time

• Copies of the data can be in the same cloud, in an alternate cloud or on-prem

• Additional destinations coming later

• Long Term Retention

• Lower cost storage – snapshots vs. Object storage

• Optimized across clients and volumes when sent to MSDP-C

• Consolidated deployment to a single subscription

• Optimized cloud compute resource usage


VMDK To Native Azure VM Conversion


• Enables VMware backup images to be converted to Azure VHD– This is part of Image Sharing

• As part of Image sharing, NBU catalog information is included in backup images– Data can be restored from cloud

without an on-premise NBU server

• Disaster Recovery for VMware in Azure

• Migration from VMware to Azure VM’s


Parameterized Restore


• More flexibility when restoring a cloud VM from a snapshot– Change the

VM name (AzureStack, Azure,AWS,GCP)

• No more names like this "nbu2351283940676323053snap1616605200 (restored Mar 24 2021 19:23"

– Restoring to a separate subscription id (AzureStack and Azure)

– Restoring to a separate resource group (AzureStack and Azure)

– Change the power state after restore (AzureStack , Azure,AWS,GCP)

• New restore wizard in the WebUI • Improved Manageability

• Be able to name their Azure VM something meaningful


• Cloud Auto Scaling– Scale up and Down Azure resources on demand

• NetBackup CloudPoint– Agentless for Windows

– Deployment on RHEL8.3 as a server

– Co-Deployment with NetBackup in Marketplace – AWS and Azure

• Google Cloud– NetBackup now on GCP Marketplace – only NetBackup CloudPoint previously

– Regional snapshots – snapshots were copied to "sister" regions in some places.• Regional snapshots now provide 23% lower TCO with no major reduction in resiliency or availability.

• MSDP Metadata is encrypted when sending to the cloud for Image Sharing

Cloud – Additional Updates and Proliferations


Operational Simplicity

Simplify everything, scale with growth, enable seamless deployment and integration

VMware Policy Management


• VMware Policy Type now available in the Web UI

• Can create a VMware Policy in the WebUI in addition to the existing Protection Plan

• Reduce management as WebUI can be used vs Java UI for existing VMware Policy Type creation and management will also save time.


WebUI Updates


• File/Folder restore UI • WebUI similar to the BAR UI in JAVA for restores

• Improve operational efficiency

• Customer can now perform most restores from the Web UI


WebUI Updates


• SLP Management in the Web UI • Can create and edit Storage Lifecycle Policies in the WebUI

• Backup Admins will be able to reduce the time they utilized Java UI.

• A lot of customers use SLP’s and had to switch to the JAVA UI to use them.

• Now they can do this from the WebUI


WebUI Updates


• RBAC for Jobs Monitor • When RBAC is configured, Activity/Jobs Monitor only shows jobs associated with that Role

• Enhanced Security and Workload Persona Manageability

• Customers can limit amount of data shown to users when RBAC is configured. Users only see what they need to.

• We only supports System Define Roles for– VMware, RedHat and Kubernetes



Operational Simplicity – Additional Updates and Proliferations

• API Keys for SAML Users in WebUI

• Error Handling updates for codes 5, 6 and 26

• SLP task cancelation– Includes image handling improvements

• Deferred Duplication of Import copy in Target domain

• Fix Accelerator Support for snapshot-based backups

• Changed Change Track Log Size Experience

• Restore API (used by the new Restore UI)

• Nbdeployutil has a customer friendly name of "netbackup_deployment_insights"– This will call the nbdeployutil binary - so nothing has changed except the name a customer runs

Security and Compliance

Improve accountability

Job Level Anomaly Detection – Phase One


• During the backup flow, unusual job data is detected and reported on– This is alerting/reporting only –

backup will continue to run

• While a backup is occurring, the following is examined and any abnormal change in the job data is considered an anomaly: – Image Size

– Number of Files

– KB Transferred

– Dedupe Rate

– Job Completion Time

• Improved Detection against a Ransomware Attack

• As part of our ransomware story, this update will alert if NetBackup detects anomalies in the data being sent to a backup stream.

• The backup can then be checked to determine if it is good data

• This uses Machine Learning - so it improves over time. The customer can submit "false positives" to remove them from detection


• Client Direct to Immutable Storage

• Remove root access requirement for majority of the Primary Server (Master) daemons

• 2FA/SAML for JAVA UI

• CAC/PIV for JAVA UI

• Secure Communications – Data In Transit Encryption (DTE)

• Enable AD Groups in Auth.conf

• FIPS 140-2 Compliance for Filesystem Backup and Restore to/from Basic Disk

Security – Additional Updates and Proliferations


O P E R A T I O N A LS I M P L I C I T Y

S E C U R I T Y & C O M P L I A N C E

W O R K L O A D S C L O U D & S T O R A G E

• Azure Stack Resource throttling, app consistent snapshot, intelligent backup selection, self-service

• Backup from Cloud Snapshots Azure and Azure Stack

• Cloud Auto Scaling add and remove Azure resources dynamically

• Cloud Intelligent Policies AWS, Azure, Azure Stack, GCP, with tags

• CloudPoint Co-deployment w/NetBackup in Cloud Marketplace

• GCP BYOL NetBackup for GCP Marketplace, Regional Snapshots

• Instant Access Flex Scale support• MSDP Metadata encryption• NetBackup CloudPoint

Deployment on RHEL 8

• Error Handling clarification of codes 5, 6, and 26

• SLP Task cancellation and image handling improvements

• Web UI File/Folders restore UI, VMware Policy Mgmt., RBAC for Jobs, SLP Management

• 2FA/SAML for Java Admin Console

• CAC/PIV for Java Admin Console

• API Keys for SAML users in Web UI

• Ransomware Immutable Object Storage Support (AWS/S3),

• Job level anomaly detection, Client Direct with Immutability support, Flex Scale Immutability

• Security Remove root access (majority primary server daemons)

Overview of NetBackup 9.1

• BMR Client iSCSI disk support

• Dynamic NAS CIFS/SMB support

• HW Snapshots Dell EMC PowerMax, VMAX-3, VMAX AFA, HDS VSP 5000

• Kubernetes Support for vSphere Tanzu, OpenShift, and Google GKE

• MongoDB v4.4• MS SQL Recovery from any

copy• Nutanix AHV Agentless SFR,

app consistent snapshots, intelligent backup selection, self-service

• Oracle Data Guard intelligence for OIP

• Universal Shares NTFS Permissions

• VMware NBU Continuous Data Protection, VMware Instant Rollback

&Q A

29

Thank you!

Copyright © 2020 Veritas Technologies, LLC. All rights reserved. Veritas and the Veritas Logo are trademarks or registered trademarks of Veritas Technologies or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners.

This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.

Copyright © 2021 Veritas Technologies LLC30

Date post:	04-Dec-2021
Category:	Documents
Upload:	others
View:	3 times
Download:	0 times

Novinkyv NetBackup 9

Documents