Ekupheleni kukaJanuwari, i-Update 4 ikhishwe i-Veeam Availability Suite 9.5, egcwele izici ezifana nokunye ukukhululwa okukhulu okugcwele. Namuhla ngizokhuluma kafushane mayelana nokuqanjwa okuyinhloko okusetshenziswe ku-Veeam Backup & Replication, futhi ngithembisa ukubhala nge-Veeam ONE maduze nje. Kulesi sibuyekezo sizobheka:

• izinguqulo zezinhlelo nezinhlelo zokusebenza manje isisombululo esizisekelayo
• ukusebenza nengqalasizinda yamafu
• ukuthuthukiswa kwekhophi yasenqolobaneni
• ukuthuthukiswa kokululama
• okusha ku-vSphere nokusekelwa kwe-Hyper-V

Sizophinde sifunde ngentuthuko ekusebenzeni ngemishini ebonakalayo esebenzisa i-Linux, ama-plugin amasha nezinye izici.

Ngakho-ke, wamukelekile ekati.

Isekela iWindows Server 2019, Hyper-V 2019, izinhlelo zokusebenza zakamuva nezinkundla

IMicrosoft Windows Server 2019 isekelwa njenge:

• isivakashi OS semishini ebonakalayo evikelwe
• iseva yokufaka i-Veeam Backup & Replication kanye nezingxenye zayo ezikude
• umshini ongenziwa ikhophi yasenqolobaneni kusetshenziswa i-Veeam Agent ye-Microsoft Windows

Ukwesekwa okufanayo kunikezwa I-Microsoft Windows 10 Isibuyekezo sika-Okthoba 2018.

Inguqulo entsha ye-hypervisor iyasekelwa I-Microsoft Windows Server Hyper-V 2019, okuhlanganisa ukusekelwa kwama-VM nge-virtual hardware version 9.0.

Okwamasistimu nezinhlelo zokusebenza ezidumile I-Microsoft Active Directory 2019, Shintsha i-2019 и I-SharePoint 2019 Ukwenza ikhophi yasenqolobaneni kuyasekelwa kucatshangelwa ukusebenza kohlelo lokusebenza (ukucubungula okuqaphela uhlelo lokusebenza) nokubuyiselwa kwezinto zohlelo kusetshenziswa amathuluzi e-Veeam Explorer.

Usekelo lusetshenziswe kuma-VM asebenzisa i-Windows guest OS Isizindalwazi se-Oracle 18c - futhi kucatshangelwa ukusebenza kohlelo lokusebenza, okuhlanganisa ikhophi yasenqolobaneni yamalogi kanye nekhono lokubuyisela endaweni ekhethiwe.

Ngaphezu kwalokho, i-VMware vSphere 6.7 U1 ESXi, i-vCenter Server ne-vCenter Server Appliance (VCSA), kanye ne-VMware vCloud Director 9.5 manje ziyasekelwa.

Izinketho zokulondoloza ikhophi eziguquguqukayo nge-Capacity Tier

Isigaba Samandla indlela entsha yokugcina izipele endaweni yokugcina ikhophi ye-scale-out (SOBR) enekhono lokulayisha idatha ngokuzenzakalelayo kwisitoreji samafu.

Ngosizo lwe-Capacity Tier kanye nezinqubomgomo zokugcina, ungakwazi ukuhlela isistimu yokugcina yezigaba eziningi ephumelelayo, lapho "ebudeni bezingalo" (okungukuthi, endaweni yokugcina yokusebenza ngokwanele) kuzoba nezipele ezintsha uma kwenzeka ululama ngokushesha. Ngemva kokuphela kwesikhathi esimisiwe, bazodlulela esigabeni “sokusha kwesibili” futhi bazoya ngokuzenzakalelayo kusayithi elikude - kulokhu, baye emafini.

I-Capacity Tier idinga:

1. eyodwa noma ngaphezulu amakhosombe e-SOBR aqukethe i-1 noma ngaphezulu indawo yokugcina
2. inqolobane eyodwa yamafu (okuthiwa inqolobane yokugcina into)

I-Cloud S3 Iyahambisana, i-Amazon S3, i-Microsoft Azure Blob Storage, i-IBM Cloud Object Storage iyasekelwa.

Uma uhlela ukusebenzisa lolu hlelo lokusebenza, uzodinga:

1. Lungiselela amakhosombe ukuze asetshenziswe njengezinga lekhosombe le-SOBR.
2. Setha inqolobane yamafu.
3. Setha indawo yokugcina ye-SOBR futhi wengeze izinga lekhosombe kuyo.
4. Lungiselela ikhosombe lamafu elibophezela ku-SOBR futhi usethe inqubomgomo yokugcina idatha nokuyilayisha emafini - lokhu kuzoba ukulungiselelwa Kwesigaba sakho Sekhono.
5. Dala umsebenzi wokulondoloza ozogcina izipele endaweni yokugcina ye-SOBR.

Ngephuzu loku-1, yonke into isobala (kulabo asebekhohliwe, kukhona imibhalo ngesiRashiya). Asiqhubekele ephuzwini lesi-2.

Isitoreji samafu njengengxenye yengqalasizinda ye-Veeam Backup

Kubhalwe ngokuningiliziwe mayelana nokusetha indawo yokugcina ifu (i-aka object storage) lapha (ngesiNgisi okwamanje). Ngamafuphi, udinga ukwenza okulandelayo:

1. Ekubukeni Gcina Ingqalasizinda khetha i-node kuphaneli yesokunxele Gcina Amakhosombe futhi kwimenyu ephezulu chofoza entweni Faka okugciniwe.
2. Sikhetha ukuthi yisiphi isitoreji samafu esizosilungisa:

   
   

3. Okulandelayo, sidlula ezinyathelweni zewizadi (ngokwesibonelo, ngizocubungula i-Amazon S3)

Qaphela: Izitolo zamakilasi ziyasekelwa Standard и Ukufinyelela Okungavamile.

1. Okokuqala, faka igama nencazelo emfushane yesitoreji sethu esisha.
2. Bese sicacisa i-akhawunti yokufinyelela i-Amazon S3 - khetha ekhona ohlwini noma chofoza Engeza bese wethula entsha. Kusukela kuhlu lwezifunda lapho izikhungo zedatha zitholakala khona Isifunda sesikhungo sedatha khetha isifunda oyifunayo.

   
   
   Yazisa: Ukuze ucacise ama-akhawunti asetshenziswa lapho usebenza nezingxenye zamafu, a Umphathi Wemininingwane Yefu.

   
   

3. Uma udinga ukulawula ithrafikhi ye-inthanethi ngesango, ungakhetha inketho Sebenzisa iseva yesango futhi ucacise isango olifunayo.
4. Sibonisa izilungiselelo zesitoreji esisha: ibhakede elifunwayo, ifolda lapho izipele zethu zizogcinwa khona, umkhawulo wenani eliphelele lesikhala (uyazikhethela) kanye nesigaba sokugcina (ngokuzithandela).

   
   
   Kubalulekile! Ifolda eyodwa ingahlotshaniswa nesitoreji sento eyodwa kuphela! Ngaphansi kwezimo akufanele ulungiselele isitoreji esinjalo esibheka kufolda efanayo.

5. Esinyathelweni sokugcina, hlola zonke izilungiselelo bese uchofoza Qeda.

Isetha ukulayisha izipele kusitoreji samafu

Manje silungiselela indawo yokugcina ye-SOBR ngokufanele:

1. Ekubukeni Gcina Ingqalasizinda khetha i-node kuphaneli yesokunxele Gcina Amakhosombe futhi kwimenyu ephezulu chofoza entweni Engeza i-Scale-out Repository.
2. Esinyathelweni senkosi Isigaba sokusebenza Sibonisa ubukhulu bayo futhi sitshele ukuthi ungagcina kanjani izipele kuzo:

   
   

3. Ohambweni Isigaba Samandla:
   • khetha inketho Nweba umthamo wendawo yokugcina isipele ngokulondoloza into (nwebisa umthamo wenqolobane ngokusebenzisa isitoreji sento) futhi ubonise ukuthi yisiphi isitoreji sento yefu ongasisebenzisa. Ungakhetha ohlwini noma uqale iwizadi yokudala ngokuchofoza Engeza.
   • siyakutshela ukuthi yiziphi izinsuku namahora ongawalayisha efwini - ukwenza lokhu, cindezela inkinobho window (iwindi lokulanda).
   • simisa inqubomgomo yesitoreji - sibonisa ngemuva kokuthi zingaki izinsuku zokugcina endaweni ye-SOBR idatha izoba "intsha yesibili" futhi ingadluliselwa emafini - esibonelweni sethu yizinsuku eziyi-15.
   • ungavumela ukubethela kwedatha lapho ulayisha efwini - ukwenza lokhu, khetha inketho Bethela idatha elayishwe endaweni yokugcina into futhi ukhombise ukuthi yimaphi amaphasiwedi agcinwe kuwo Umphathi Wokuqinisekisa, kumele isetshenziswe. Ukubethela kwenziwa kusetshenziswa i-AES 256-bit.

     

Ngokuzenzakalelayo, idatha iqoqwa kusuka kumazinga futhi idluliselwe endaweni yokugcina into kusetshenziswa uhlobo lomsebenzi okhethekile - Umsebenzi wokukhipha we-SOBR. Igijima ngemuva futhi iqanjwe ngenqolobane ye-SOBR nesijobelelo Ukulayisha (isb. I-Amazon Offload) futhi lenze le misebenzi elandelayo njalo emahoreni ama-4:

1. Ihlola ukuthi amaketango ekhophi yasenqolobaneni agcinwe ngokwezilinganiso ayahlangabezana yini nezimfuneko zokudlulisela endaweni yokugcina into.
2. Iqoqa amaketanga aqinisekisiwe futhi iwathumele ibhulokhi ngebhulokhi endaweni yokugcina into.
3. Irekhoda imiphumela yeseshini yayo kusizindalwazi ukuze umlawuli akwazi ukuyibuka uma kunesidingo.

Umdwebo wokudluliswa kwedatha nesakhiwo sesitoreji efwini uboniswa esithombeni esingezansi:

Kubalulekile! Ukuze udale isistimu enjalo yokulondoloza enamazinga amaningi, uzodinga ilayisense ye-edishini okungenani Enterprise.

Izipele ezilondolozwe efwini, kunjalo, zingasetshenziswa ukubuyisela ngokuqondile endaweni yokugcina. Ngaphezu kwalokho, ungaphinda uzilande kusukela efwini uye phansi futhi uzibuyisele usebenzisa ngisho ne-Veeam Backup Community Edition yamahhala.

Okusha ekusebenzeni nengqalasizinda yamafu

Ukuze usebenze ne-Amazon

• Ukubuyisela kusuka kuzipele ngokuqondile ku-AWS - kusekelwa ama-VM nge-Windows noma i-Linux guest OS, kanye nemishini ebonakalayo. Konke lokhu kungabuyiselwa emishinini ebonakalayo I-AWS EC2 VMkufaka phakathi Amazon Government Cloud и I-Amazon China.
• Ukuguqulwa kwe-UEFI2BIOS eyakhelwe ngaphakathi kuyasebenza.

Ukuze usebenze neMicrosoft Azure

• Ukwesekwa okungeziwe kokubhaliselwe kwe-Azure Government Cloud kanye ne-Azure CSP.
• Kungenzeka ukukhetha iqembu lokuphepha lenethiwekhi lapho ubuyisela ku-Azure IaaS VM.
• Lapho ungena efwini nge-akhawunti ye-Azure, manje ungacacisa umsebenzisi we-Azure Active Directory.

Okusha ekusekelweni kohlelo lokusebenza

• Usekelo lokusebenzisa izinhlelo zokusebenza emishinini ebonakalayo ye-vSphere selusetshenzisiwe Ukuqinisekiswa kwe-Kerberos. Lokhu kuzokuvumela ukuthi ukhubaze i-NTLM kuzilungiselelo zenethiwekhi ye-OS yesivakashi ukuze uvimbele ukuhlaselwa kusetshenziswa ukudluliswa kwe-hash, okubaluleke kakhulu kwingqalasizinda enokulawula okungaphansi kwezinga eliphezulu.
• Imojuli yesipele selogu yokwenziwe SQL и Oracle manje isebenzisa idrayivu engeyona yesistimu njengendawo eyisiza lapho yenza ikhophi yasenqolobaneni yamalogu С, lapho kuvame ukungabi khona indawo eyanele, kanye nevolumu enendawo enkulu yamahhala. Ku-Linux VM kuzosetshenziswa uhla lwemibhalo / var / tmp noma / tmp, futhi kuye ngesikhala esitholakalayo.
• Lapho wenza isipele izingodo I-Oracle yenza kabusha izingodo zizohlaziywa ukuze kugcinwe amaphuzu aqinisekisiwe okuthola kabusha Amaphuzu Okubuyisela Aqinisekisiwe (ziyingxenye yesici esakhelwe ngaphakathi I-Oracle Flashback).
• Ukwesekwa okwengeziwe I-Oracle Data Guard.

Isipele Esithuthukisiwe

• Ubukhulu bediski obusekelwayo kanye nosayizi wefayela eliyisipele ukhuphuke izikhathi ezingaphezu kweziyi-10: ngosayizi webhulokhi ongu-1 MB wefayela elithi .VBK, ubukhulu besayizi yediski ekhophini eyisipele manje ingaba ngu-120 TB, futhi ubukhulu bobukhulu baso sonke isipele ifayela ngu-1 PB. (Kuqinisekiswe ngokuhlola i-100 TB kuwo womabili amanani.)
• Ngokwenza izipele ngaphandle kokubethela, inani lemethadatha lincishiswa ngo-10 MB.
• Ukusebenza kokuqalwa komsebenzi okusekelayo kanye nezinqubo zokuphothulwa sekuthuthukisiwe; ngenxa yalokho, izipele zama-VM amancane zizoshesha cishe ngokuphindwe kabili.
• Imojula enesibopho sokushicilela okuqukethwe kwesithombe se-VM iklanywe kabusha, okuye kwasheshisa kakhulu ukutholwa ezingeni lefayela kanye nasezingeni lento.
• Izilungiselelo Ezincanyelwayo Zenethiwekhi manje zizosebenza kuzisheshisi ze-WAN.

Okusha ekululameni

Inketho entsha yokutakula i-VM ibizwa ngokuphelele Ukubuyisela okuhleliwe - ukubuyiselwa kancane kancane. Kule modi, i-VM ibuyiselwa kwisipele esidingekayo kuqala ku-sandbox (manje ebizwa ngokuthi i-DataLab), kuyilapho ku-OS yesivakashi ungakwazi ukusebenzisa esakho iskripthi ukuze wenze izinguquko kokuqukethwe kusizindalwazi, izilungiselelo ze-OS noma izinhlelo zokusebenza. Ama-VM anezinguquko esezenziwe kakade angadluliselwa engqalasizinda yokukhiqiza. Lokhu kungaba usizo, isibonelo, ukufaka izinhlelo zokusebenza ezidingekayo kusenesikhathi, ukunika amandla noma ukukhubaza izilungiselelo, ukususa idatha yomuntu siqu, njll.

Ungafunda okwengeziwe lapha (ngesiNgisi).

Qaphela: Kudingeka ilayisensi encane Enterprise.

Kwaphinde kwavela ithuba Vikela Ukubuyisela — ukutakula okuphephile (kusebenza cishe kuzo zonke izinhlobo zokululama). Manje, ngaphambi kokuqala inqubo yokutakula, ungabheka amafayela ohlelo lwezivakashi ze-VM (ngqo ekhophi eyisipele) amagciwane, amaTrojani, njll. — Ngale njongo, amadiski e-VM afakwe kuseva yokukhweza ehlotshaniswa nendawo yokugcina, futhi inqubo yokuskena iqaliswa kusetshenziswa isivikeli magciwane esifakwe kule seva yokukhweza. (Akudingekile ukuthi iseva yokukhweza kanye ne-VM ngokwayo ibe ne-antivirus efanayo.)

I-Microsoft Windows Defender, i-Symantec Protection Engine kanye ne-ESET NOD32 zisekelwa ngaphandle kwebhokisi; Ungacacisa enye i-antivirus uma isekela ukusebenza ngomugqa womyalo.

Ungafunda okwengeziwe lapha (ngesiNgisi).

Yini entsha nge-Microsoft Hyper-V

• Manje usungangeza amaqembu e-Hyper-V VM emisebenzini yokwenza isipele nemisebenzi yokuphindaphinda.
• Ukuthola kabusha okusheshayo kuma-Hyper-V VM kusuka kuma-backups adalwe kusetshenziswa i-Veeam Agent, kuyasekela Windows 10 I-Hyper-V njenge-hypervisor eqondiwe.

Yini entsha nge-VMware vSphere

• Ukusebenza kwenqolobane yokubhala ye-vPower NFS kuye kwathuthukiswa izikhathi ezimbalwa ukuze kutholakale i-VM esheshayo kanye nokusetshenziswa okuthuthukisiwe kwe-SSD.
• I-vPower NFS manje isebenza ngokuphumelelayo ngenqolobane ye-SOBR, ikuvumela ukuthi ucubungule imishini ebonakalayo eyengeziwe ngokuhambisana.
• Iseva ye-vPower NFS manje isinenketho yokugunyaza ababungazi ngekheli le-IP (ngokuzenzakalelayo, ukufinyelela kunikezwa kumsingathi we-ESXi ohlinzeka ngesitolo sedatha se-vPower NFS). Ukuze ukhubaze lesi sici ekubhaliseni kweseva yokukhweza, udinga ukuya ku HKEY_LOCAL_MACHINE
  SOFTWAREWOW6432NodeVeeamVeeam NFS bese udala ukhiye ngaphansi kwayo vPowerNFSDisableIPAuth
• Manje usungakwazi ukumisa umsebenzi we-SureBackup ukuze usebenzise inqolobane ye-vPower NFS (ngaphezu kokuqondisa kabusha ukubhala koshintsho ku-vSphere datastore). Lokhu kuxazulula inkinga yokusebenzisa i-SureBackup yama-VM anamadiski amakhulu kuno-2 TB ezimeni lapho okuwukuphela kwesistimu yokugcina i-vSphere kuyi-VMware VSAN.
• Ukusekelwa kwezilawuli ze-Paravirtual SCSI ezinamadiski ananyathiselwe angaphezu kuka-16 sekuqalisiwe.
• Ukuthuthela Ngokushesha manje kuthutha ngokuzenzakalelayo amathegi e-vSphere; lawa mathegi nawo agcinwa ngesikhathi sokutholwa kwe-VM ngokushesha.

Ukuthuthukiswa kokusekelwa kwe-Linux VM

• Kuma-akhawunti adinga ukukhushulelwa izimpande, manje asikho isidingo sokwengeza inketho NOPASSWD: KONKE ngoba sudoers.
• Usekelo olungeziwe lwenketho enikwe amandla !okudingekile kuma-sudoers (lesi isilungiselelo esizenzakalelayo, isibonelo, se-CentOS).
• Lapho ubhalisa iseva ye-Linux, manje ungashintsha ngomyalo su, uma umyalo sudo akutholakali.
• Ukuqinisekiswa kwezigxivizo zeminwe ze-SSH manje kusebenza kukho konke ukuxhumana kweseva ye-Linux ukuze kuvikelwe ekuhlaselweni kwe-MITM.
• Ukuthembeka okuthuthukisiwe kwe-algorithm yokuqinisekisa ye-PKI.

Ama-plugin amasha

I-Veeam Plug-in ye-SAP HANA - isiza ukusebenzisa isixhumi esibonakalayo se-BACKINT ukwenza ikhophi yasenqolobaneni nokuthola imininingwane ye-HANA ukuya/kusuka endaweni yokugcina ye-Veeam. Ukwesekwa kwe-HCI SAP HANA sekwenziwe. Isixazululo siqinisekiswa yi-SAP.

I-Veeam Plug-in ye-Oracle RMAN - ikuvumela ukuthi usebenzise Umphathi we-RMAN ukwenza ikhophi yasenqolobaneni kanye nokutholwa kolwazi lwe-Oracle ukuya/kusuka endaweni yokugcina ye-Veeam. (Lokhu akudingi ukumiselela ukuhlanganiswa komdabu okusekelwe ku-OCI.)

Izici ezengeziwe

• Ukusekelwa kokuhlolwa kwe-block cloning kwamafayela akhishiwe ku-Windows Server 2019 ReFS. Ukuze wenze lesi sici sisebenze, udinga ukuthola ukhiye ekubhalisweni kweseva eyisipele ye-Veeam HKEY_LOCAL_MACHINESOFTWAREVeeamVeeam Isipele Nokuphindaphinda futhi udale inani I-ReFSDedupeBlockClone (DWORD).
• Ukusetha manje kuhlanganisa i-Microsoft SQL Server 2016 SP1.
• Ukuze usebenze nge-RESTful API, usekelo lwe-JSON selusetshenzisiwe.

Yini enye ongayifunda futhi uyibuke

Ukubuka konke kwesixazululo (ngesi-Russian)
Ukuqhathaniswa kwezinhlelo (ngesiRashiya)
Imanuwali yomsebenzisi (yesiNgisi) ye VMware и I-Hyper-V

Abasebenzisi ababhalisiwe kuphela abangabamba iqhaza kuhlolovo. Ngena ngemvume, wamukelekile.

Imuphi wemikhiqizo emisha ongaba nentshisekelo yokufunda kabanzi ngawo kuqala?

• Isigaba samandla sokugcina izipele

• Ukusebenza nezingqalasizinda zamafu e-Amazon

• Ama-plugin amasha okwenza ikhophi yasenqolobaneni yolwazi lwe-SAP HANA ne-Oracle

• Izinketho ezintsha zokuthola kabusha okufakwe kusiteji, Vikela Ukubuyisela

• Izici ezintsha ze-Veeam ONE

• Okunye (ngizobhala kumazwana)

Bangu-20 abasebenzisi abavotile. Abasebenzisi abangu-8 bagobile.

Source: www.habr.com