Zivela phi iinkuni? Veeam Log Diving

Zivela phi iinkuni? Veeam Log Diving

Siyaqhubeka nokuntywiliselwa kwihlabathi elinomdla lokuqagela ... ukulungisa iingxaki ngeelog. IN inqaku elidlulileyo savumelana ngentsingiselo yemigaqo esisiseko kwaye sijonge isakhiwo esipheleleyo seVeeam njengesicelo esisodwa ngeso elinye. Umsebenzi wale nto kukufumanisa indlela iifayile zelog ezenziwe ngayo, luhlobo luni lolwazi oluboniswa kuzo kwaye kutheni zibukeka ngendlela ekhangeleka ngayo.

Ucinga ukuba zeziphi ezi "logs"? Ngokutsho uninzi, iinkuni zaso nasiphi na isicelo kufuneka zabelwe indima yohlobo lweziko elinamandla onke elihlala lityala kwenye indawo ngasemva kwendlu, kodwa ngexesha elililo libonakala lingekho ndawo kwisikrweqe esikhanyayo kwaye lisindisa wonke umntu. Oko kukuthi, kufuneka ziqulathe yonke into, ukusuka kwiimpazamo ezincinci kwicandelo ngalinye ukuya kwintengiselwano yedatha nganye. Kwaye ukuze emva kwempazamo ibhalwe ngoko nangoko indlela enye yokuyilungisa. Kwaye yonke le nto kufuneka ilingane kwiimegabytes ezimbalwa, hayi ngaphezulu. Ngumbhalo nje! Iifayile zombhalo azinakuthatha amashumi egigabhayithi, ndiyivile kwenye indawo!

Ngoko iinkuni

Ehlabathini lokwenyani, iilogi ziyindawo nje yokugcina ulwazi loxilongo. Kwaye yintoni onokuyigcina apho, apho unokufumana khona ulwazi lokugcinwa kunye nokuba luneenkcukacha kangakanani, kuxhomekeke kubaphuhlisi ngokwabo ukuba bathathe isigqibo. Umntu ulandela umendo we-minimalism ngokugcina iirekhodi zenqanaba le-ON / OFF, kwaye umntu ukhupha ngenkuthalo yonke into anokufikelela kuyo. Nangona kukho kwakhona ukhetho oluphakathi kunye nokukwazi ukukhetha okubizwa ngokuba yiNqanaba lokuLoga, xa wena ngokwakho ubonisa ukuba ulwazi oluneenkcukacha ofuna ukulugcina kangakanani kwaye ungakanani indawo eyongezelelweyo yedisk =) I-VBR inamanqanaba amathandathu anjalo, ngendlela. Kwaye, ndikholelwe, awufuni ukubona ukuba kwenzeka ntoni ngokungena ngeenkcukacha ezininzi kunye nendawo yasimahla kwidiski yakho.

Kulungile. Siyiqonde kakuhle into esifuna ukuyigcina, kodwa kuvela umbuzo osemthethweni: singalufumana phi olu lwazi? Ewe kunjalo, siyinxalenye yeziganeko zokungena ngokwethu ngeenkqubo zethu zangaphakathi. Kodwa yintoni enokuyenza xa kukho intsebenziswano kunye nokusingqongileyo kwangaphandle? Ukuze angatyibiliki kwisihogo sentonga kunye neebhayisekile, iVeeam ityekele ekungaqalisi izinto esele ziyiliwe. Nanini na xa kukho i-API esele ilungile, umsebenzi owakhelwe ngaphakathi, ithala leencwadi, njl.njl., siya kunika ukhetho kwiinketho esele zenziwe ngaphambi kokuba siqale ukubiyela ii-contraptions zethu. Nangona le yokugqibela nayo ilahlekile. Ngoko ke, xa uhlalutya izingodo, kubalulekile ukuqonda ukuba isahlulo sengonyama yeempazamo siwela kwimiyalezo evela kwi-APIs yomntu wesithathu, iifowuni zenkqubo, kunye namanye amathala eencwadi. Kule meko, indima ye-VBR yehla ekuthumeleni ezi mpazamo njengoko zinjalo iifayile zelog. Kwaye umsebenzi oyintloko womsebenzisi kukufunda ukuqonda ukuba yeyiphi umgca ovela kubani, kwaye yintoni le "ngubani" ojongene nayo. Ke ukuba ikhowudi yempazamo evela kwilog yeVBR ikusa kwiphepha le-MSDN, kulungile kwaye kulungile.

Njengoko besivumelene ngaphambili: I-Veeam yinto ebizwa ngokuba yi-SQL-based application. Oku kuthetha ukuba zonke izicwangciso, zonke iinkcukacha kunye ngokubanzi yonke into efunekayo kuphela ekusebenzeni okuqhelekileyo - yonke into igcinwe kwisiseko sayo. Yiyo loo nto inyani elula: into engekho kwiilog inokwenzeka kakhulu kwisiseko sedatha. Kodwa le ayisiyombumbulu yesilivere nokuba: ezinye izinto azikho kwiilog zasekhaya zeVeeam, okanye kwisiseko sayo sedatha. Ke ngoko, kufuneka ufunde indlela yokufunda iilogi zomkhosi, iilogi zomatshini wendawo kunye neelogi zayo yonke into ebandakanyekayo kwi-backup kunye nokubuyisela inkqubo. Kwaye kwenzeka ukuba ulwazi oluyimfuneko alufumaneki naphi na. Nantso indlela. 

Eminye imizekelo yee-APIs ezinjalo

Olu luhlu alujongi ukuba lugqibelele ngokukodwa, ngoko ke akukho mfuneko yokujonga eyona nyaniso ikuyo. Injongo yayo kukubonisa kuphela ezona APIs zomntu wesithathu zixhaphakileyo kunye nobuchwepheshe obusetyenziswa kwiimveliso zethu.

Masiqale nge VMware

Okokuqala kuluhlu kuya kuba vSphere API. Isetyenziselwa ukuqinisekiswa, ukufunda i-hierarchy, ukudala kunye nokucima i-snapshots, ukucela ulwazi malunga noomatshini, kunye nokunye okuninzi (kakhulu). Ukusebenza kwesisombululo kubanzi kakhulu, ke ndiyakwazi ukucebisa iVMware vSphere API Reference yoguqulelo. 5.5 ΠΈ 6.0. Ukufumana ezinye iinguqulelo zangoku, yonke into ifakwe kuGoogle.

VIX API. Umlingo omnyama we-hypervisor, apho kukho ukwahlukana uluhlu lwempazamo. I-VMware API yokusebenza ngeefayile kumamkeli ngaphandle kokuqhagamshelana nazo kwinethiwekhi. Inketho yokugqibela xa ufuna ukubeka ifayile kumatshini apho kungekho mzila wonxibelelwano olungcono. Yintlungu kunye nokubandezeleka ukuba ifayile inkulu kwaye umphathi ulayishiwe. Kodwa apha umgaqo usebenza ukuba nkqu 56,6 Kb / s ingcono 0 Kb / s. Kwi-Hyper-V, le nto ibizwa ngokuba yi-PowerShell Direct. Kodwa oko kwakungaphambili

vSpehere Web Services API Ukuqala kwi-vSphere 6.0 (malunga, ekubeni le API yaziswa okokuqala kwinguqulo 5.5) isetyenziselwa ukusebenza ngoomatshini beendwendwe kwaye ithathe indawo ye-VIX phantse yonke indawo. Enyanisweni, le yenye i-API yokulawula i-vSphere. Kwabo banomdla, ndincoma ukufunda mkhulu incwadi yesandla. 

VDDK (Ikhithi yoPhuhliso lweDiski eVirtual). Ithala leencwadi, elaxutyushwa ngokuyinxenye koku nqaku. Isetyenziselwa ukufunda iidiski zenyani. Kanye ngelo xesha yayiyinxalenye ye-VIX, kodwa ekuhambeni kwexesha yatshintshelwa kwimveliso eyahlukileyo. Kodwa njengendlalifa, isebenzisa iikhowudi zeempazamo ezifanayo njenge-VIX. Kodwa ngesizathu esithile, akukho nkcazo yezi mpazamo kwi-SDK ngokwayo. Ke ngoko, kwafunyaniswa ngamandla ukuba iimpazamo zeVDDK nezinye iikhowudi luguqulelo olusuka kokubini ukuya kwikhowudi yesishumi. Iqulethwe ngamacandelo amabini - isiqingatha sokuqala sinolwazi olungabhalwanga malunga nomxholo, kwaye inxalenye yesibini yi-VIX yendabuko / i-VDDK iimpazamo. Ngokomzekelo, ukuba sibona:

VDDK error: 21036749815809.Unknown error

Emva koko siguqule ngesibindi oku kwi-hex kwaye sifumane 132200000001. Silahla ngokulula isiqalo esingenalwazi se-132200, kwaye intsalela iya kuba yikhowudi yethu yephutha (VDDK 1: Impazamo engaziwayo). Malunga nezona mpazamo ze-VDDK ezixhaphakileyo, mva nje bekukho okwahlukileyo inqaku.

Ngoku makhe sijonge Iifestile.

Apha, yonke into eyona nto iyimfuneko kwaye ibalulekileyo kuthi inokufumaneka kumgangatho Umbukeli weMicimbi. Kodwa kukho enye into yokubamba: ngokwesiko elide, iWindows ayifaki itekisi epheleleyo yephutha, kodwa inani layo kuphela. Umzekelo, impazamo yesi-5 ithi "Ufikelelo lunqatshelwe", kwaye i-1722 ithi "Iseva ye-RPC ayifumaneki", kwaye i-10060 "Uqhagamshelwano luphelelwe lixesha". Ewe kunjalo, kuhle ukuba ukhumbula ezona zidumileyo, kodwa kuthekani ngezingabonwayo ukuza kuthi ga ngoku? 

Kwaye ukuze ubomi bungabonakali njengobusi konke konke, iimpazamo zigcinwa kwifom ye-hexadecimal, kunye nesimaphambili 0x8007. Umzekelo, 0x8007000e ngokwenene 14, Ngaphandle kweMemori. Kwakutheni kwaye kubani le nto yenzelwa ngubani imfihlelo egutyungelwe bubumnyama. Nangona kunjalo, uluhlu olupheleleyo lweempazamo lunokukhutshelwa simahla kwaye ngaphandle kweSMS evela idevcenter.

Ngendlela, ngamanye amaxesha kukho ezinye izimaphambili, hayi nje 0x8007. Kwimeko enjalo ebuhlungu, ukuze uqonde i-HRESULT ("isibambo sesiphumo"), kufuneka uhlolisise ngakumbi uxwebhu kubaphuhlisi. Kubomi obuqhelekileyo, andikucebisi ukuba wenze oku, kodwa ukuba ucinezele ngokukhawuleza eludongeni okanye unomdla nje, ngoku uyazi ukuba wenzeni.

Kodwa amaqabane eMicrosoft asizela kancinci kwaye abonisa umhlaba into eluncedo ERR. Eli liqhekezana lolonwabo lwekhonsoli elinokuthi liguqulele iikhowudi zempazamo kumntu ngaphandle kokusebenzisa uGoogle. Isebenza ngolu hlobo.

C:UsersrootDesktop>err.exe 0x54f
# for hex 0x54f / decimal 1359
  ERROR_INTERNAL_ERROR                                           winerror.h
# An internal error occurred.
# as an HRESULT: Severity: SUCCESS (0), FACILITY_NULL (0x0), Code 0x54f
# for hex 0x54f / decimal 1359
  ERROR_INTERNAL_ERROR                                           winerror.h
# An internal error occurred.
# 2 matches found for "0x54f"

Umbuzo osemthethweni uvela: kutheni singabhali ngokukhawuleza i-decryption kwiilogi, kodwa sishiye ezi khowudi ezingaqondakaliyo? Impendulo ikwizicelo zomntu wesithathu. Xa utsala umnxeba weWinAPI ngokwakho, akukho nzima ukucacisa impendulo yayo, kuba kukho umnxeba okhethekileyo weWinAPI woku. Kodwa njengoko sele kukhankanyiwe, yonke into eza kuthi kuphela kwiimpendulo ingena kwiilogi zethu. Kwaye apha, ukuze uyicime, umntu kuya kufuneka ahlale ebeka iliso kulo msinga wolwazi, akhuphe iziqwenga ngeempazamo zeWindows kuyo, azicime kwaye azincamathisele. Masinyaniseke, hayi owona msebenzi unika umdla.

Windows File Management API isetyenziswe ngandlela zonke xa usebenza ngeefayile. Ukudala iifayile, ukucima, ukuvula ukubhala, ukusebenza ngeempawu, njalo njalo njalo.

ekhankanywe ngasentla I-PowerShell ngqo njenge-analogue ye-VIX API kwihlabathi le-Hyper-V. Ngelishwa, ayiguquguquki kangako: uninzi lwezithintelo ekusebenzeni, ayisebenzi ngayo yonke inguqulelo yenginginya kwaye hayi kuzo zonke iindwendwe.

CPP (I-Remote Procedure Call) Andiqondi ukuba kukho umntu omnye osebenze kunye ne-WIndows ongabonanga iimpazamo ezinxulumene ne-RPC. Ngaphandle kokungaqondi kakuhle okuthandwayo, oku akusiyo iprotocol enye, kodwa nayiphi na iprotocol ye-server-server eyanelisa inani leeparamitha. Nangona kunjalo, ukuba kukho impazamo ye-RPC kwiilogi zethu, i-90% yexesha iya kuba yimpazamo evela kwi-Microsoft RPC, eyinxalenye ye-DCOM (i-Distributed Component Object Model). Ungafumana isixa esikhulu samaxwebhu kwesi sihloko kumnatha, kodwa isabelo sengonyama siphelelwe lixesha. Kodwa ukuba kukho umnqweno onzulu wokufunda isihloko, ndiyakwazi ukucebisa amanqaku Yintoni i-RPC?, Njani I-RPC iyasebenza kunye noluhlu olude Iimpazamo zeRPC.

Izizathu eziphambili zeempazamo ze-RPC kwiilogi zethu ziyimizamo engaphumeleli yokunxibelelana phakathi kwamacandelo e-VBR (umncedisi> ummeleli, umzekelo) kwaye ngokuphindaphindiweyo ngenxa yeengxaki zonxibelelwano.

Umphezulu ophezulu phakathi kwazo zonke impazamo Iseva ye-RPC ayifumaneki (1722). Ngamagama alula, umxhasi akakwazanga ukuseka umdibaniso kunye nomncedisi. Njani kwaye kutheni - akukho mpendulo inye, kodwa ngokuqhelekileyo yingxaki ngokuqinisekiswa okanye ngokufikelela kwinethiwekhi kwi-port 135. Le yokugqibela iqhelekile kwiziseko ezingundoqo kunye nokunikezelwa kwe-port eguqukayo. Kulo mxholo, kukho ukulingana yahlula HF. Kwaye uMicrosoft unayo isikhokelo voluminous ukufumana unobangela wokusilela.

Eyesibini eyona mpazamo idumileyo: Azisekho iziphelo ezifumanekayo kwimaphu yesiphelo (1753). Umxhasi weRPC okanye umncedisi akaphumelelanga ukuzabela yona izibuko. Ngesiqhelo kwenzeka xa umncedisi (kwimeko yethu, umatshini wondwendwe) uqwalaselwe ukwabela amazibuko ukusuka kuluhlu olumxinwa oluphelile. Kwaye ukuba ungena kwicala lomxhasi (kwimeko yethu, iseva yeVBR), oku kuthetha ukuba iVeeamVssAgent yethu ayiqalanga okanye ayibhaliswanga njengojongano lweRPC. Kukho kwakhona kwesi sihloko yahlula HF.

Ewe, ukugqiba iimposiso eziphezulu ezi-3 ze-RPC, masikhumbule umnxeba wokusebenza we-RPC awuphumelelanga (1726). Ibonakala ukuba unxibelelwano lusekiwe, kodwa izicelo ze-RPC aziqwalaselwa. Ngokomzekelo, sicela ulwazi malunga nesimo se-VSS (ngokukhawuleza ngoku ngoku umgodi wesithunzi wenziwa apho, kwaye sizama ukunyuka), kwaye ekuphenduleni kwethu, thula kwaye ungawunaki.

Windows Tape Backup API efunekayo ukusebenza ngamathala eencwadi okanye iidrive. Njengoko benditshilo ekuqaleni: asinako ukonwaba ngokubhala abaqhubi bethu kwaye emva koko sibandezeleke ngenkxaso yesixhobo ngasinye. Ke ngoko, i-vim ayinabo nabaphi na abaqhubi bayo. Konke nge-API eqhelekileyo, inkxaso ephunyezwa ngabathengisi be-hardware ngokwabo. Okuninzi okusengqiqweni, akunjalo?

I-SMB / CIFS Ngaphandle komkhwa, wonke umntu ubhala ngapha nangapha, nangona kungekhona wonke umntu okhumbulayo ukuba i-CIFS (iNkqubo yeFayile ye-Intanethi ye-Intanethi) yinguqulelo yabucala ye-SMB (iBloko yoMyalezo weServer). Ngoko ke akukho nto iphosakeleyo ngokuwenza ngokubanzi la magama. I-Samba sele isetyenziswe kwi-LinuxUnix, kwaye inezinto zayo ezikhethekileyo, kodwa ndiyaphuma. Yintoni ebalulekileyo apha: xa uVeeam ecela ukubhala into kwi-UNC umendo (uluhlu lweseva), umncedisi usebenzisa i-hierarchy yabaqhubi benkqubo yefayile, kuquka i-mup kunye ne-mrxsmb, ukubhala kwibhola. Ngokufanelekileyo, aba baqhubi baya kuvelisa iimpazamo.

Awukwazi ukwenza ngaphandle Winsock API. Ukuba kukho into ekufuneka yenziwe kwinethiwekhi, iVBR isebenza ngeWindows Socket API, eyaziwa ngokuba yiWinsock. Ke ukuba sibona iqela le IP: Port kwilog, yiyo le. Amaxwebhu asemthethweni anoluhlu olufanelekileyo lwezinto ezinokwenzeka mpazamo.

ekhankanywe ngasentla I-WMI (I-Windows Management Instrumentation) luhlobo lwe-API enamandla yokulawula yonke into kunye nawo wonke umntu kwihlabathi leWindows. Umzekelo, xa usebenza neHyper-V, phantse zonke izicelo kumamkeli zihamba ngayo. Ngelizwi, into ayinakuphinda ithathelwe indawo kwaye inamandla kakhulu kubuchule bayo. Ngomzamo wokunceda ukufumanisa ukuba kuphi kwaye yintoni ephukile, isixhobo esakhelwe ngaphakathi seWBEMtest.exe sinceda kakhulu.

Kwaye okokugqibela kuluhlu, kodwa akubalulekanga kangako - VSS (Volume Shadow Storage). Isihloko singenakuphela kwaye siyimfihlakalo njengoko amaxwebhu amaninzi abhalwe kuwo. Ikopi yeShadow iqondwa ngokulula njengohlobo olukhethekileyo lwesnapshot, eyona nto iyiyo. Enkosi kuye, unokwenza i-application-consident backups kwi-VMware, kwaye phantse yonke into kwi-Hyper-V. Ndinezicwangciso zokwenza inqaku elahlukileyo ngokucudisa kwiVSS, kodwa okwangoku ungazama ukufunda le nkcazo. Lumka nje, kuba. ukuzama ukuqonda i-VSS ngephanyazo kunokukhokelela ekulimaleni kwengqondo.

Kule, mhlawumbi, sinokuyeka. Ndiqwalasela umsebenzi wokucacisa izinto ezisisiseko ezigqityiweyo, ngoko ke kwisahluko esilandelayo siza kujonga iinkuni. Kodwa ukuba unayo nayiphi na imibuzo, zikhululeke ukubabuza kwizimvo.

umthombo: www.habr.com

Yongeza izimvo