Hlangana ne-Veeam Backup entsha yesisombululo se-AWS

Ekuqaleni kukaDisemba, kwakhululwa isixazululo esisha I-Veeam Backup ye-AWS ukwenza isipele nokutholwa kwengqalasizinda yamafu ye-Amazon Elastic Compute Cloud (Amazon EC2).

Ngosizo lwayo, ungakha amakhophi ayisipele wezenzakalo ze-EC2 futhi uwagcine kusitoreji samafu I-Amazon Simple Storage Service (Amazon S3), futhi udale amaketanga ezifinyezo ze-EC2 ngefomethi yomdabu.

Ukuthola kabusha idatha, i-Veeam Backup ye-AWS inikeza izinketho ezilandelayo:

• Ukuthola sonke isenzakalo se-EC2
• Ukubuyisela amavolumu esibonelo
• Ibuyisela amafayela namafolda e-OS yesivakashi yesibonelo

Ngaphezu kwalokho, njengoba isixazululo sidala izipele ngefomethi ye-Veeam, ungasebenzisa i-Veeam Backup & Replication ukuze ugcine amakhophi ezipele ze-EC2 endaweni yokugcina ekhona, bese uhambisa idatha phakathi kwengqalasizinda yamafu, ebonakalayo kanye nengaphakathi.

Futhi-ke, abasebenzisi bazojabula ngokuthi isisombululo esisha sinenguqulo yamahhala. Ukuze uthole ukwaziswa okwengeziwe nge-Veeam Backup ye-AWS, wamukelekile ekati.

Izici Eziyinhloko

Ngokungeziwe emandleni asevele ashiwo okudala ngokuzenzakalelayo izifinyezo ze-Amazon EBS nokugcina ama-backups efwini le-Amazon S3, isisombululo siyasebenza:

• Ukuqinisekiswa kwezinto eziningi kwabalawuli abagcina ikhophi yasenqolobaneni
• Ukuvikelwa kwedatha okusekelwe kunqubomgomo
• Ukwesekwa kokuhlukaniswa kwendima ye-IAM
• Ukusekelwa kokucushwa kwesifunda
• I-algorithm eyakhelwe ngaphakathi yokuhlolwa kokuqala kwezindleko zezinsizakalo, esiza ukulawula izinkokhelo.

Yebo, njengoba sekushiwo kakade, kukhona ilayisense yamahhala, i-BYOL (yakha ilayisensi yakho), kanye nelayisensi esekelwe ekusetshenzisweni kwezinsiza - wonke umuntu angakhetha elungile.

Izigaba zomsebenzi

Kafushane, izigaba eziyinhloko zimi kanje:

1. Sihlola ingqalasizinda yethu ukuthi iyahambisana yini nezidingo zesistimu ezichaziwe lapha.
2. Faka i-Veeam Backup ye-AWS njengoba kuchazwe ngezansi.
3. Cacisa izindima ze-IAM. Ziyadingeka ukuze ufinyelele izinsiza ze-AWS ezisetshenziselwa ukwenza isipele nokuthola kabusha:
   • Uma uhlela ukwenza isipele izimo ze-EC2 ngaphakathi kwe-akhawunti efanayo ye-AWS, ungasebenzisa indima Okuzenzakalelayo Ukubuyisela Isipele - idalwa ngesikhathi sokufakwa kwe-Veeam Backup ye-AWS. Le ndima inamalungelo adingekayo okufinyelela zonke izimo ze-EC2 namabhakede e-S3 ngaphakathi kwe-akhawunti ye-AWS lapho i-Veeam Backup ye-AWS isetshenziswa khona (i-akhawunti yokuqala ye-AWS).
   • Uma uhlela ukwenza isipele noma ukubuyisela idatha evela ezimweni ze-EC2 phakathi kwama-akhawunti amabili ahlukene e-AWS, noma ufuna ukusebenzisa indima ye-IAM ezinikele enesethi encane yamalungelo omsebenzi ngamunye, uzodinga ukudala izindima ezidingekayo ze-IAM ngaphakathi kwe-akhawunti yokuqala ye-AWS. bese uwangeza ku-Veeam Backup ye-AWS. Lokhu kuxoxwa ngokuningiliziwe ku imibhalo.

4. Silungiselela ingqalasizinda eyisipele, okuyilezi:
   • Ilungiselela inqolobane ye-S3.

     Qaphela: Uma uzosebenzisa izifinyezo ezidalwe ngokomdabu kunezipele ukuze uvikele idatha yakho, ungakwazi ukweqa leli phuzu, ngoba Inqolobane ye-S3 ayidingeki kulesi simo.

   • Ukusetha izilungiselelo zenethiwekhi zezingxenye ezisizayo izimo zabasebenzi.
     Abasebenzi - Lezi yizimo ezisizayo ze-EC2 esebenzisa i-Linux OS. Zethulwa kuphela isikhathi sokwenza ikhophi yasenqolobaneni (noma ukutholwa) futhi zisebenza njengommeleli oyisipele. Kuzilungiselelo zabasebenzi, uzodinga ukucacisa i-Amazon VPC, i-subnet neqembu lezokuphepha lapho lezi zimo ezisizayo zizoxhumeka khona. Ungafunda ngakho konke lokhu lapha.

5. Bese sidala inqubomgomo esisekelweni sokuthi amakhophi ayisipele noma izifinyezo zezenzakalo ze-EC2 zizokwakhiwa. Ngizokhuluma ngalokhu kafushane ngezansi.
6. Ungakwazi ukubuyisela kusuka kukhophi eyisipele - okwengeziwe kulokho ngezansi.

Ukuthunyelwa nokumisa

I-Veeam Backup ye-AWS iyatholakala ku- Indawo yeMakethe ye-AWS.

Isixazululo senziwa kanje:

1. Siya ku-AWS Marketplace ngaphansi kwe-akhawunti ye-AWS esihlela ukuyisebenzisela ukufaka isisombululo.
2. Vula i-Veeam Backup yekhasi le-AWS, khetha i-edishini esiyidingayo (ekhokhelwayo noma mahhala). Funda kabanzi mayelana nama-edishini lapha.
   • I-Veeam Backup ye-AWS Free Edition
   • I-Veeam Backup ye-AWS Ekhokhelwayo Edition
   • I-Veeam Backup ye-AWS BYOL Edition

3. Chofoza phezulu kwesokudla Qhubeka nokuBhalisa.

   

4. Ekhasini lokubhalisa, hamba esigabeni Imibandela (imibandela yokusebenzisa) bese uchofoza lapho Bonisa Yokuxhumana, landela isixhumanisi Isivumelwano selayisense yomsebenzisi wokugcina funda isivumelwano selayisense.
5. Bese ucindezela inkinobho Qhubekela ku-Ukumisa bese uqhubekela ekucushweni.
6. Ekhasini Lungiselela le softhiwe setha izilungiselelo zokufaka:
   • Kusukela ohlwini Inketho Yokugcwaliseka (izinketho zokuthumela) khetha inketho yomkhiqizo wethu - I-VB yokuthunyelwa kwe-AWS.
   • Kusukela kuhlu lwezinguqulo Isoftware Version khetha inguqulo yakamuva ye-Veeam Backup ye-AWS.
   • Kusukela kuhlu lwezifunda Isifunda khetha isifunda se-AWS lapho isenzakalo se-EC2 esinesipele se-Veeam se-AWS sizosetshenziswa khona.

   Qaphela: Ungafunda kabanzi mayelana nezifunda ze-AWS lapha.

7. Bese ucindezela inkinobho Qhubekela ku-Launch ukuqhubeka nokuqalisa.

   

8. Ekhasini Yethula le softhiwe landela lezi zinyathelo:
   • Esigabeni Imininingwane Yokumiswa hlola ukuthi zonke izilungiselelo zilungile.
   • Kusukela ohlwini lwezenzo Khetha Isenzo khetha Yethula i-CloudFormation.
   • I-Veeam Backup ye-AWS ifakwe kusetshenziswa isitaki se-AWS CloudFormation.

     Qaphela: Lapha, isitaki iqoqo lezinsiza zefu ezingaphathwa njengeyunithi ehlukile: idaliwe, isusiwe, isetshenziselwa ukusebenzisa izinhlelo zokusebenza. Ungafunda okwengeziwe emibhalweni ye-AWS.

     Phusha Qalisa bese uvula iwizadi yokudala isitaki Dala iwizadi yesitaki.

Ukudala isitaki se-AWS CloudFormationUkudala isitaki se-AWS CloudFormation:

1. Ohambweni Cacisa isifanekiso Ungashiya izilungiselelo zesifanekiso sesitaki esizenzakalelayo.
2. Ohambweni Cacisa imininingwane yesitaki Sifaka izilungiselelo zesitaki sethu.
   • Ensimini Igama lesitaki faka igama; Ungasebenzisa izinhlamvu ezinkulu nezincane, izinombolo namadeshi.
   • Esigabeni sezilungiselelo Ukucushwa Kwesibonelo:
     Kusukela ohlwini Uhlobo lwesibonelo lwe-Veeam Backup yeseva ye-AWS udinga ukukhetha uhlobo lwesibonelo se-EC2 okuzofakwa kuso i-Veeam Backup ye-AWS (ngemuva kwalokhu sizoyibiza I-Veeam Backup yeseva ye-AWS). Kunconywa ukukhetha uhlobo t2.phakathi.
     Kusukela ohlwini Ukubhangqa Okubalulekile Kwesipele Se-Veeam Yeseva ye-AWS udinga ukukhetha ipheya yokhiye abazosetshenziselwa ukuqinisekiswa kule seva entsha. Uma ipheya yokhiye edingekayo ingekho ohlwini, udinga ukuyidala njengoba kuchaziwe lapha.
     Cacisa ukuthi uyafuna yini ukunika amandla ukwenza isipele okuzenzakalelayo kwamavolumu e-EBS Yesipele Se-Veeam seseva ye-AWS (ngokuzenzakalelayo, i.e. weqiniso).
     Cacisa ukuthi ingabe i-Veeam Backup yeseva ye-AWS idinga ukuqaliswa kabusha esimweni sokwehluleka kwesofthiwe.
     Cacisa ukuthi ingabe i-Veeam Backup yeseva ye-AWS idinga ukuqaliswa kabusha esimweni sokwehluleka kwengqalasizinda.

3. Esigabeni sezilungiselelo zenethiwekhi Ukucushwa Kwenethiwekhi:
   • Cacisa ukuthi uyafuna yini ukudala ikheli le-Elastic IP le-Veeam Backup yeseva ye-AWS. Bona lapha ukuze uthole imininingwane eyengeziwe.
   • Ensimini Amakheli e-IP Omthombo Avunyelwe ukuze axhumeke ku-SSH cacisa ububanzi bamakheli e-IPv4 lapho ukufinyelela ku-Veeam Backup yeseva ye-AWS nge-SSH kuzovunyelwa.
   • Ensimini Amakheli e-IP Omthombo Avunyelwe ukuze axhumeke ku-HTTPS cacisa ububanzi bamakheli e-IPv4 okuzovunyelwa kuwo ukufinyelela ku-Veeam Backup ye-AWS interface.
     Isikhawu sekheli le-IPv4 sicaciswe kumbhalo we-CIDR (isibonelo, 12.23.34.0/24). Ukuze uvumele ukufinyelela kuwo wonke amakheli e-IPv4, ungafaka u-0.0.0.0/0. (Kodwa-ke, le nketho ayinconywa ngoba yehlisa ukuphepha kwengqalasizinda.)

4. Ngokusekelwe kumakheli e-IPv4 ashiwo, i-AWS CloudFormation idala iqembu lokuvikela le-Veeam Backup ye-AWS, elinemithetho efanele yethrafikhi engenayo nge-SSH ne-HTTPS. (Ngokuzenzakalela, imbobo 22 isetshenziselwa ithrafikhi engenayo nge-SSH, kanye nembobo engu-443 ye-HTTPS.) Uma uzocacisa iqembu elihlukile lokuvikela le-Veeam Backup ye-AWS phakathi nokufakwa kwesixazululo, ungakhohlwa ukungeza mathupha. imithetho efanele kuleli qembu futhi uhlole ukuthi livunyelwe yini ukufinyelela ezinsizeni ze-AWS (ezisohlwini lwesigaba Sezimfuneko segayidi yomsebenzisi).
5. Esigabeni I-VPC kanye ne-Subnet udinga ukukhetha i-Amazon Virtual Private Cloud (Amazon VPC) kanye ne-subnet lapho kuzoxhunywa khona i-Veeam Backup yeseva ye-AWS.
6. Ohambweni Lungiselela izinketho zesitaki cacisa omaka be-AWS, izimvume zendima ye-IAM, nezinye izilungiselelo zesitaki.

   

7. Ohambweni Buyekeza hlola zonke izilungiselelo, khetha inketho Ngiyavuma ukuthi i-AWS CloudFormation ingase idale izinsiza ze-IAM bese ucindezela Dala isitaki.

Ngemva kokufaka, vula ikhonsoli yewebhu ngokukhomba kusiphequluli ku-DNS noma ikheli le-IP lesibonelo se-EC2 lapho i-Veeam Backup ye-AWS ifakiwe, isibonelo:
https://ec2-135-169-170-192.eu-central-1.compute.amazonaws.com

Ikhonsoli ibonisa izinsiza ezihlelelwe ukuvikela idatha kusetshenziswa i-Veeam Backup ye-AWS:

Izilungiselelo ezidingekayo zengqalasizinda, izindima, njll. zichazwe ngokuningiliziwe ku imibhalo.

Izinqubomgomo zesipele

Ukuze kuvikelwe izimo, sidala izinqubomgomo.

Ungalungiselela izinqubomgomo ezihlukene zezinhlobo ezahlukene zezinto: isibonelo, inqubomgomo edizayinelwe ukuvikela izinhlelo zokusebenza zesigaba 3 (okubaluleke kakhulu), noma izinqubomgomo zezinhlelo zokusebenza zesigaba 2 kanye nesigaba 1. Kuzilungiselelo zenqubomgomo, cacisa:

• I-akhawunti enezindima ze-IAM
• Izifunda - ungakhetha eziningana
• Okuhlelelwe ukuvikelwa - lokhu kungaba zonke izinsiza noma izimo ezikhethiwe noma (amathegi)
• Izinsiza ezingafakwa
• Izilungiselelo zesifinyezo, okuhlanganisa ukuthi zisetshenziswe yini izifinyezo kanye nokuthi kufanele kube ngakanani ubude besikhathi sokulondoloza
• Izilungiselelo zokusekela ngokulondoloza: indlela eya endaweni yokugcina, ishejuli nobude besikhathi sokulondoloza
• Isilinganiso sezindleko zamasevisi (okuningi mayelana nakho ngezansi)
• Izilungiselelo zeshejuli nezaziso

Ukuhlolwa kwezindleko zesevisi eyakhelwe ngaphakathi

I-Veeam Backup ye-AWS inezilinganiso zezindleko ezizenzakalelayo ezakhelwe ngaphakathi zokubala ngokushesha izindleko zamasevisi ayisipele ngokusekelwe kunqubomgomo ethile. Isibalo sihlanganisa amamethrikhi alandelayo:

• Izindleko zesipele
• Izindleko zesifinyezo
• Izindleko zethrafikhi - lokhu kubaluleke kakhulu uma inqolobane itholakala ngaphandle kwesifunda lapho izinto zengqalasizinda zisebenza khona (i-Amazon AWS ikhokhisa ithrafikhi kwezinye izifunda)
• Izindleko zokwenziwe
• inani lezindleko

Idatha ingathunyelwa kufayela le-CSV noma le-XML.

Izingxenye Ezisizayo - Abasebenzi

Ukuze unciphise izindleko zethrafikhi, ungalungiselela ukudalwa okuzenzakalelayo kwezingxenye ezisizayo - abasebenzi - endaweni efanayo ye-AWS njengezinto ezivikelwe. Abasebenzi bethulwa ngokuzenzakalelayo kuphela ngesikhathi sokudluliswa kwedatha kusuka/kuya efwini le-Amazon S3 noma ngesikhathi sokululama, futhi ngemva kokuqeda imisebenzi bayacishwa futhi basuswe.

Isipele

Ngokwenza isipele, i-Veeam Backup ye-AWS isebenzisa izifinyezo zomdabu (bona. Izifinyezo ze-Amazon EBS). Ngesikhathi sokwenza ikhophi yasenqolobaneni, i-Veeam Backup ye-AWS isebenzisa imiyalo ye-AWS CLI ukuze idale izifinyezo zamavolumu e-EBS anamathiselwe kusenzakalo se-EC2. Bese, kuye ngesimo sokulondoloza osikhethayo, i-Veeam Backup ye-AWS izodala noma uchungechunge lwezifinyezo zomdabu noma ikhophi yasenqolobaneni yezinga lesithombe evela kuzo ngokwesibonelo se-EC2.

Izifinyezo zomdabu

I-Veeam Backup ye-AWS idala izifinyezo zomdabu zesenzakalo se-EC2 kanje:

1. Okokuqala, izifinyezo zamavolumu e-EBS anamathiselwe kulesi senzakalo ziyathathwa.
2. Izifinyezo ze-EBS zinikezwa amathegi e-AWS uma zidaliwe. Okhiye namanani alaba bomaki aqukethe imethadatha ebethelwe. I-Veeam Backup ye-AWS iphatha izifinyezo ze-EBS ngemethadatha njengezifinyezo zomdabu zesenzakalo se-EC2.
3. Uma isenzakalo se-EC2 sesivele singaphansi kwenqubomgomo yokwenza ikhophi yasenqolobaneni, i-Veeam Backup ye-AWS ihlola inombolo yamaphoyinti okuthola kabusha ochungechungeni lwezifinyezo. Uma idlula umkhawulo wenqubomgomo, iphoyinti elidala liyasuswa. Qaphela: Inqubomgomo yokugcina nokususa ngokuzenzakalela (ukugcinwa) ayisebenzi kuzifinyezo ezidalwe mathupha (sikhuluma ngezifinyezo ezidalwe ngokwehlukana). Ungakwazi ukususa izifinyezo ezinjalo njengoba kuchaziwe lapha. (Uma ngokuthi “mathupha” sisho ukwethula inqubomgomo mathupha ngaphandle kweshejuli, ukuthinta kabusha kuzosebenzela isifinyezo esidalwe ngale ndlela.)

Izipele zezinga lesithombe

Nansi indlela i-Veeam Backup ye-AWS eyenza ngayo izipele zezinga lesithombe:

1. Okokuqala, izifinyezo zamavolumu e-EBS anamathiselwe kulesi senzakalo ziyathathwa.
2. I-Veeam Backup ye-AWS isebenzisa izifinyezo ze-EBS njengemithombo eyisipele. Uma inqubo yokwenza isipele isiqediwe, lezi zifinyezo ziyasuswa.
3. Isisebenzi esingumsizi sibe sesiqaliswa endaweni ye-AWS lapho isibonelo sikhona ukuze sisize ukucubungula idatha yesibonelo ye-EC2.
4. Amavolumu e-EBS adalwa ngezifinyezo zesikhashana futhi anamathiselwe esimweni sabasebenzi.
5. Idatha ifundwa kumavolumu e-EBS esimweni somsebenzi, bese idatha idluliselwa endaweni yokugcina ye-S3, lapho izogcinwa khona ngefomethi ye-Veeam.
6. Phakathi neseshini ekhuphukayo, i-Veeam Backup ye-AWS ifunda imethadatha eyisipele kusuka kunqolobane ye-S3 futhi iyisebenzisela ukukhomba amabhulokhi ashintshile kusukela kuseshini yangaphambilini.
7. Lapho ukwenza ikhophi yasenqolobaneni sekuqediwe, i-Veeam Backup ye-AWS isusa izifinyezo zesikhashana ze-EBS nesibonelo somsebenzi ku-Amazon EC2.

Ukutholwa kwedatha

Nge-Veeam Backup ye-AWS, ungakwazi ukubuyisela idatha ngezindlela ezilandelayo:

• Endaweni yokuqala, bhala ngaphezulu isenzakalo sangempela. Yonke idatha kulesi senzakalo izocishwa yilabo abagcinwe kusipele, futhi ukulungiselelwa kwesibonelo kuzogcinwa.
• Endaweni entsha, ukudala isenzakalo esisha. Kulesi simo - uma ukhetha ukubuyisela endaweni entsha noma ngezilungiselelo ezintsha - uzodinga ukucacisa izilungiselelo ezizosetshenziswa esimweni lapho ukubuyisela sekuqediwe:
  • Isifunda
  • Izilungiselelo zokubethela
  • Igama nohlobo lwesibonelo
  • Izilungiselelo zenethiwekhi: I-Virtual Private Cloud (VPC), i-subnet, iqembu lezokuphepha

Ukutholwa kwevolumu

Ukubuyisela amavolumu esenzakalo se-EC2 kusuka kusifinyezo noma kusukela kukhophi yasenqolobaneni, kuya kweyangempela noma endaweni entsha, nakho kuyasekelwa. Esimweni sesibili, endaweni entsha udinga ukucacisa isifunda se-AWS, Indawo Yokutholakala kanye namanye amapharamitha.

Inqubo yokubuyisela ibandakanya abasebenzi.

Inqubo ngokwayo ibukeka kanjena kafushane (usebenzisa isibonelo sokubuyisela kusuka kusipele):

1. I-Veeam Backup ye-AWS yethula abasebenzi esifundeni esifiselekayo se-AWS, idale inombolo edingekayo yamavolumu e-EBS angenalutho futhi iwanamathisele esimweni somsebenzi.
2. Ibuyisela idatha kusuka kukhophi yasenqolobaneni kuya kulawa mavolumu.
3. Ikhipha amavolumu e-EBS bese iwathuthela endaweni oyifunayo (umthombo noma esinye isifunda se-AWS), lapho amavolumu agcinwa khona njengamavolumu ahlukene.
4. Isusa isenzakalo somsebenzi uma imisebenzi isiqediwe.
   Qaphela: Ungakhohlwa ukuthi ngemva kokuthola kabusha ivolumu ngeke inamathiselwe ngokuzenzakalelayo kusibonelo se-EC2 (izomane igcinwe endaweni eshiwo njengevolumu ehlukile ye-EBS).

Ukubuyisela Ifayela

Ikuvumela ukuthi ubuyisele amafayela ngamanye ngaphandle kokubuyisela sonke isibonelo.

Uma uqala ukutholwa kweleveli yefayela, uthola i-URL (esekelwe egameni le-DNS yomphakathi yesisebenzi) lapho ungabona khona sonke isakhiwo sefayela ku-OS yesivakashi, uthole amafayela adingekayo kuyo, futhi uwalayishe emshinini wendawo.
Futhi, ukuze uqinisekise ukuphepha, ungabheka isitifiketi nezigxivizo zeminwe ukuze uqiniseke ukuthi ayikho i-MiTM.

Ukuhlanganiswa ne-Veeam Backup & Replication

Uma une-Veeam Backup & Replication efakwe engqalasizinda yakho, ungalungiselela ukutholwa kwemishini yayo efwini le-Amazon EC2 usebenzisa i-Direct Restore ekusebenzeni kwe-AWS, bese uvikela le datha yefu nge-Veeam Backup ye-AWS.
I-Veeam Backup & Replication iphinde isekele ukusebenza namakhosombe e-Amazon S3 adalwa yi-Veeam Backup ye-AWS - ungabuyisela amakhophi ayisipele wezenzakalo ze-Amazon EC2 kwingqalasizinda ekhona.

Izici zenguqulo yamahhala

Inguqulo yamahhala ye-Veeam Backup ye-AWS ikuvumela ukuthi wenze isipele kuze kufike kuzimo eziyi-10 EC2; Ukubuyisela kusuka kuzipele kwenziwa ngaphandle kwemikhawulo.
Qaphela: Ukusetshenziswa okunconyiwe t2.phakathi.

Izindleko ezilinganiselwe zezinsiza ngu-9.8 USD/ngenyanga, ngokusekelwe ekusetshenzisweni okungu-XNUMX/XNUMX nezilungiselelo ezizenzakalelayo ezilandelayo:

• EC2 - 1 t3.micro isibonelo
• I-EBS - 1 GP2 ivolumu engu-8 GB
• Ukulungiselelwa kwekhosombe le-S3 - 50 GB Isitoreji Esijwayelekile S3, 13 S000 PUT izicelo, 3 S10 GET izicelo, 000 GB S3 Khetha ukusetshenziswa

Izixhumanisi eziwusizo

I-Veeam Backup yesisombululo se-AWS ivuliwe Indawo yeMakethe ye-AWS
Umhlahlandlela womsebenzisi (ngesiNgisi).

Source: www.habr.com