Back to guides list

4.4. Connecting Acronis Backup Software to Storage Backends via Acronis Backup Gateway

The Acronis Backup Gateway storage access point (also called “gateway”) is intended for service providers who use Acronis Backup Cloud and/or Acronis Backup Advanced and want to organize an on-premise storage for their clients’ backed-up data.

Acronis Backup Gateway enables a service provider to easily configure storage for the proprietary deduplication-friendly data format used by Virtuozzo.

Acronis Backup Gateway supports the following storage backends:

  • Virtuozzo Infrastructure Platform clusters with software redundancy by means of erasure coding,
  • NFS shares,
  • public clouds, including a number of S3 solutions as well as Microsoft Azure, OpenStack Swift, and Google Cloud Platform.

While your choice should depend on scenario and requirements, it is recommended to keep Acronis backup data in the local storage cluster. In this case, you can have the best performance due to WAN optimizations and data locality. Keeping backups in an NFS share or a public cloud implies the unavoidable data transfer and other overhead, which reduces overall performance.

Note

  1. When configuring Acronis Backup Gateway, you will need to provide the credentials of your administrator account in the Acronis backup software.
  2. In cases when not local but external storage (e.g., NFS) is used with Acronis Backup Gateway, redundancy has to be provided by said external storage. Acronis Backup Gateway does not provide data redundancy or perform data deduplication itself.

4.4.1. Understanding the Infrastructure

The Acronis Backup Gateway storage access point runs as services on the Virtuozzo Infrastructure Platform nodes. It should be deployed on multiple Virtuozzo Infrastructure Platform nodes for high availability.

../_images/stor_image53.png

4.4.2. Connecting to the Virtuozzo Infrastructure Platform Cluster via Acronis Backup Gateway

Before you proceed, make sure that the Virtuozzo Infrastructure Platform cluster has enough space for backups.

To connect Acronis Backup Cloud or Acronis Backup Advanced to the local Virtuozzo Infrastructure Platform cluster via Acronis Backup Gateway, do the following:

  1. On the INFRASTRUCTURE > Traffic types screen, make sure that the ABGW private and ABGW public traffic types are added to your networks.

  2. On the STORAGE SERVICES > Backup > NODES screen, select a check box next to each cluster node where you want the gateway services to run.

    ../_images/stor_image54.png

  3. Click Create Gateway then This Virtuozzo Infrastructure Platform cluster.

    ../_images/stor_image54_1.png

  4. For each node, make sure the network interface that is connected to a network with the ABGW private traffic type is selected in the drop-down list. The gateway service will listen on the IP address assigned to this interface. The corresponding interface that is connected to a network with the ABGW public traffic type will be selected automatically. Click NEXT.

    Note

    If necessary, click the cogwheel icon and assign Acronis Backup Gateway roles on the Network Configuration screen.

    ../_images/stor_image55.png

  5. Click NEXT.

  6. On the Volume Parameters tab, select the desired tier, failure domain, and data redundancy mode.

    ../_images/stor_image56.png

    Note

    1. Redundancy by replication is not supported for Acronis Backup Gateway.
    2. You can later change the erasure coding mode on the Acronis Backup Gateway > Parameters panel.

  7. Click NEXT.

  8. On the DNS Configuration tab, specify the external DNS name for this gateway, e.g, backupgateway.example.com. Make sure that each node running the gateway service has a port open for outgoing Internet connections and incoming connections from your Acronis backup software. Backup agents will use this address and port to upload the backed-up data.

    ../_images/stor_image56_4.png

    Important

    1. Configure your DNS server according to the example suggested in the management panel.
    2. Each time you add or remove a node to or from the Acronis Backup Gateway cluster, adjust the DNS settings accordingly.

  9. Click NEXT.

  10. Depending on the Acronis product you use, specify the following on the Registration tab:

    • In Account Server Name, specify the address of the Acronis Backup Cloud management portal (e.g., https://cloud.acronis.com/) or the hostname/IP address and port of the Acronis Backup Advanced management server (e.g., http://192.168.1.2:9877).
    • In Acronis Account, specify the credentials of the Acronis Backup Cloud or Acronis Backup Advanced administrator account.

  11. Click DONE.

4.4.3. Connecting to External NFS Shares via Acronis Backup Gateway

Note

  1. Virtuozzo Infrastructure Platform does not provide data redundancy on top of NFS volumes. Depending on the implementation, NFS shares may use their own hardware or software redundancy.
  2. In the current version of Virtuozzo Infrastructure Platform, only one cluster node may store backups on an NFS volume.

Before you proceed, make sure that:

  1. The NFS share has enough space for backups;
  2. Each NFS export is used by only one gateway. In particular, do not configure two Virtuozzo Infrastructure Platform installations to use the same NFS export for backup storage.

To connect Acronis Backup Cloud or Acronis Backup Advanced to an external NFS share via Acronis Backup Gateway, do the following:

  1. On the INFRASTRUCTURE > Traffic types screen, make sure that the ABGW private and ABGW public traffic types are added to your networks.

  2. On the STORAGE SERVICES > Backup > NODES screen, select a check box next to a cluster node where you want the gateway services to run.

  3. Click Create Gateway and Network File System.

    ../_images/stor_image56_1.png

  4. Make sure the network interface that is connected to a network with the ABGW private traffic type is selected in the drop-down list. The gateway service will listen on the IP address assigned to this interface. The corresponding interface that is connected to a network with the ABGW public traffic type will be selected automatically. Click NEXT.

    Note

    If necessary, click the cogwheel icon and assign Acronis Backup Gateway roles on the Network Configuration screen.

    ../_images/stor_image56_2.png

  5. On the Volume Parameters tab, specify the hostname or IP address of the NFS share as well as the export name. Click NEXT.

    ../_images/stor_image56_3.png

  6. On the DNS Configuration tab, specify the external DNS name for this gateway, e.g, backupgateway.example.com. Make sure that each node running the gateway service has a port open for outgoing Internet connections and incoming connections from your Acronis backup software. Backup agents will use this address and port to upload the backed-up data.

    ../_images/stor_image56_4.png

    Important

    1. Configure your DNS server according to the example suggested in the management panel.
    2. Each time you add nodes to the Acronis Backup Gateway cluster, adjust the DNS settings accordingly.

  7. Click NEXT.

  8. Depending on the Acronis product you use, specify the following on the Registration tab:

    • In Account Server Name, specify the address of the Acronis Backup Cloud management portal (e.g., https://cloud.acronis.com/) or the hostname/IP address and port of the Acronis Backup Advanced management server (e.g., http://192.168.1.2:9877).
    • In Acronis Account, specify the credentials of the Acronis Backup Cloud or Acronis Backup Advanced administrator account.

  9. Click DONE.

4.4.4. Connecting to Public Cloud Storage via Acronis Backup Gateway

With Acronis Backup Gateway, you can have Acronis Backup Cloud or Acronis Backup Advanced store backups in a number of public clouds: Amazon S3, IBM Cloud, Alibaba Cloud, IIJ, Cleversafe, Microsoft Azure, Swift object storage, Softlayer (Swift), Google Cloud Platform as well as solutions using S3 with the older AuthV2-compatible authentication methods. However, compared to the local Virtuozzo Infrastructure Platform cluster, storing backup data in a public cloud increases the latency of all I/O requests to backups and reduces performance. For this reason, it is recommended to use the local Virtuozzo Infrastructure Platform cluster as storage backend.

Since backups are cold data with specific access rights, it is cost-efficient to use storage classes that are intended for long-term storage of infrequently accessed data. The recommended storage classes include the following:

  • Infrequent Access for Amazon S3,
  • Cool Blob Storage for Microsoft Azure,
  • Nearline and Coldline Storage for Google Cloud Platform.

Note that real data storage costs may be 10-20% higher due to additional fees for operations like data retrieval and early deletion.

Important

  1. When working with public clouds, Acronis Backup Gateway uses the local storage as the staging area as well as to keep service information. It means that the data to be uploaded to a public cloud is first stored locally and only then sent to the destination. For this reason, it is vital that the local storage is persistent and redundant so the data does not get lost. There are multiple ways to ensure the persistence and redundancy of local storage. You can deploy Acronis Backup Gateway on multiple cluster nodes and select a good redundancy mode. If Virtuozzo Infrastructure Platform with the gateway is deployed on a single physical node, you can make the local storage redundant by replicating it among local disks. If Virtuozzo Infrastructure Platform with the gateway is deployed in a virtual machine, make sure it is made redundant by the virtualization solution it runs on.
  2. Make sure the local storage cluster has plenty of logical space for staging. For example, if you perform backup daily, provide enough space for at least 1.5 days’ worth of backups. If the daily backup total is 2TB, provide at least 3TB of logical space. The corresponding raw storage required will vary depending on the encoding mode: 9TB (3TB per node) in the mode 1+2, 5TB (1TB per node) in the mode 3+2, etc.
  3. You must update Acronis Backup Agents to version 4492 (Windows/Mac) or 4470 (Linux). Otherwise agents’ attempts to place backups in the new storage backend will result in “Backup failed” errors.
  4. If you are to store backups in an Amazon S3 cloud, keep in mind that Acronis Backup Gateway may sometimes block access to such backups due to the eventual consistency of Amazon S3. It means that Amazon S3 may occasionally return stale data as it needs time to render the most recent version of the data accessible. Acronis Backup Gateway detects such delays and protects backup integrity by blocking access until the cloud updates.

Before you proceed, make sure that the public cloud storage has enough space for backups.

To connect your Acronis backup software to a public cloud folder via Acronis Backup Gateway, do the following:

  1. On the INFRASTRUCTURE > Traffic types screen, make sure that the ABGW private and ABGW public traffic types are added to your networks.

  2. On the STORAGE SERVICES > Backup > NODES screen, select a check box next to each cluster node where you want the gateway services to run.

  3. Click Create Gateway then Public Cloud.

    ../_images/stor_image56_11.png

  4. For each node, make sure the network interface that is connected to a network with the ABGW private traffic type is selected in the drop-down list. The gateway service will listen on the IP address assigned to this interface. The corresponding interface that is connected to a network with the ABGW public traffic type will be selected automatically. Click NEXT.

    Note

    If necessary, click the cogwheel icon and assign Acronis Backup Gateway roles on the Network Configuration screen.

    ../_images/stor_image56_2.png

  5. On the Public cloud parameters tab, do the following:

    1. Select a public cloud provider. If your provider is S3-compatible but not in the list, try AuthV2 compatible.
    2. Depending on the provider, specify Region, Authentication (keystone) URL, or Endpoint URL.
    3. In case of Swift object storage, specify the authentication protocol version and attributes required by it.
    4. Specify user credentials. In case of Google Cloud, select a JSON file with keys to upload.
    5. Specify the folder (bucket, container) to store backups in. The folder must be writeable.

  6. Click NEXT.

  7. Depending on the Acronis product you use, specify the following on the Registration tab:

    • In Account Server Name, specify the address of the Acronis Backup Cloud management portal (e.g., https://cloud.acronis.com/) or the hostname/IP address and port of the Acronis Backup Advanced management server (e.g., http://192.168.1.2:9877).
    • In Acronis Account, specify the credentials of the Acronis Backup Cloud or Acronis Backup Advanced administrator account.

  8. Click DONE.

4.4.5. Re-registering Acronis Backup Gateway in a New Acronis Backup Advanced

To switch a configured Acronis Backup Gateway to a different Acronis Backup Advanced instance, re-register the gateway with that instance. To do this:

  1. On the STORAGE SERVICES > Backup screen, click Re-register.
  2. On the Registration tab, specify the following:
    • In Account Server Name, specify the hostname/IP address and port of the Acronis Backup Advanced management server (e.g., http://192.168.1.2:9877).
    • In Acronis Account, specify the credentials of the Acronis Backup Advanced administrator account.
  3. Click Done.

4.4.6. Migrating Backups from Older Acronis Storage and Acronis Storage Gateway Solutions

By means of the Acronis Backup Gateway cluster, you can migrate backups from Acronis Storage 1.5 and Acronis Storage Gateway 1.6 and 1.7 to a storage backend of your choice: your Virtuozzo Infrastructure Platform cluster, external NFS, or public cloud.

Important

  1. Before you proceed, make sure that the destination storage backend has enough space for both existing and new backups.
  2. Migration to NFS backends is not available if multiple nodes are selected as Backup Gateway.

The migration procedure can be described as follows:

  1. Root credentials for SSH access to the chosen source storage are provided to Acronis Backup Gateway.

  2. Acronis Backup Gateway sets up a proxy on the source storage that starts redirecting requests incoming from Acronis Backup Agents from the source storage to Acronis Backup Gateway.

  3. Acronis Backup Gateway starts relocating backups to the chosen storage backend. The data that remains to be migrated is shown in the Migration Backlog section on the Acronis Backup Gateway Overview screen. When the backlog empties, all data has been migrated.

    After the migration has started, the data of new and incremental backups is stored on the destination storage. Backups from the source storage are pulled in the background. The entire process is transparent to backup agents, which continue working uninterrupted.

  4. To be able to dispose of the source storage after migration completes, requests from Acronis Backup Agents are directed straight to Acronis Backup Gateway, bypassing the proxy on the source storage. Steps that you need to take depend on how the source storage is registered in Acronis Backup Cloud: under the IP address or DNS name.

    • If the source storage is already registered under the DNS name, you need to change the IP address behind it to those of the Acronis Backup Gateway nodes.

    • If the source storage is registered under the IP address, it is strongly recommended to re-register Acronis Backup Gateway in Acronis Backup Cloud under a DNS name that resolves into the IP addresses of Acronis Backup Gateway nodes. Using a DNS name will provide a smoother transition and you will not need to reconfigure Acronis Backup Cloud even if you change nodes in the Acronis Backup Gateway (you will still need to adjust the IP addresses behind the DNS name accordingly).

      Alternatively, if you do not want to use a DNS name, you need to wait for the migration to complete, shut down both the source and destination machines, and reconfigure your network so that the public interface of the destination machine gets the IP address of the source machine.

The concrete steps that you need to perform in the management panel to initiate backup migration are described in the next subsections.

4.4.6.1. Migrating Backups from Acronis Storage 1.5

  1. Update all Acronis Storage 1.5 nodes to version 1.5.65655 or newer as earlier versions are not eligible for migration. To do this, log in to each Acronis Storage 1.5 node and supply the latest ISO image on the SETTINGS > Software Update screen.

  2. Log in to the new Virtuozzo Infrastructure Platform cluster and on the STORAGE SERVICES > Backup > NODES screen, select one or more nodes and click Migrate.

  3. Select Acronis Storage 1.5 and click NEXT.

  4. Specify the DNS name of the source storage registered in Acronis Backup Cloud and click NEXT.

    ../_images/stor_image56_14.png

  5. Provide the credentials for the cloud management portal of the Acronis Backup Cloud installation that the source storage is registered in and click NEXT.

  6. Enable SSH access on all FES nodes of Acronis Storage 1.5 as instructed and click NEXT.

  7. Map the public IP addresses of FES nodes accessible via SSH to their private IP addresses and click NEXT. This step is required to access FES nodes via SSH through tunnels.

    ../_images/stor_image56_15.png

  8. Choose a destination storage type to create a gateway to:

    • local Virtuozzo Infrastructure Platform cluster,
    • external NFS, or
    • public cloud.

  9. Make sure the network interface that is connected to a network with the ABGW private traffic type is selected in the drop-down list. The corresponding interface that is connected to a network with the ABGW public traffic type will be selected automatically. Click NEXT.

    Note

    If necessary, click the cogwheel icon and assign Acronis Backup Gateway roles on the Network Configuration screen.

  10. Configure the destination storage backend:

    • For an Virtuozzo Infrastructure Platform cluster, select the desired tier, failure domain, and redundancy mode.

    • For NFS, specify a hostname or IP address, an export name and path, and choose the NFS version.

      ../_images/stor_image56_9.png

    • For public cloud, select a public cloud provider, specify credentials, and the name of the folder (bucket, container).

      Important

      You must update Acronis Backup Agents to version 4492 (Windows/Mac) or 4470 (Linux). Otherwise agents’ attempts to place backups in the new storage backend will result in “Backup failed” errors.

      ../_images/stor_image56_10.png

    Click NEXT.

  11. Review the source and destination storages and click PROCEED.

  12. On the next panel, follow the instructions to point the source storage DNS name to the IP addresses of your new Virtuozzo Infrastructure Platform cluster. Having updated the DNS configuration, click START MIGRATION. If all the backup agents have been rerouted to the new Virtuozzo Infrastructure Platform cluster, the migration will start. Otherwise you will need to wait until all backup agents have cached the new IP addresses.

    ../_images/stor_image56_16.png

Depending on data size, migration may take as long as several days.

4.4.6.2. Migrating Backups from Acronis Storage Gateway 1.6 and 1.7 (NFS)

  1. Disable the firewall or explicitly open TCP port 44446 on the source Acronis Storage Gateway.

    • To disable the firewall, run

      # systemctl stop firewalld

    • To open TCP port 44446 in the firewall, do the following:

      1. Find out the zone where port 44445 is open:

        # firewall-cmd --list-all-zones | grep active
mix_eth0 (active)

      2. Add the required port to the same zone:

        # firewall-cmd --zone=mix_eth0 --permanent --add-port=44446/tcp
# firewall-cmd --reload

  2. In the WebCP of the ABGW node, proceed to STORAGE SERVICES > Backup > NODES, select one or more nodes, and click Migrate.

  3. Select the source storage version and click NEXT.

  4. Specify the connection details for the source storage and click NEXT.

    ../_images/stor_image56_6.png

  5. Provide the credentials for the cloud management portal of the Acronis Backup Cloud installation that the source storage is registered in and click NEXT.

  6. If the source storage is registered in Acronis Backup Cloud under an IP address, you will see the DNS configuration screen. On it, click RE-REGISTER WITH DNS and specify the source storage DNS name (recommended, see above). Or, if you want to keep using the IP address, click PROCEED WITH IP.

    Important

    1. If you specified a DNS name, configure your DNS server according to the suggested example.
    2. Each time you change nodes in the Acronis Backup Gateway, adjust the DNS settings accordingly.

  7. Choose a destination storage type to create a gateway to:

    • local Virtuozzo Infrastructure Platform cluster,
    • external NFS, or
    • public cloud.

  8. Make sure the network interface that is connected to a network with the ABGW private traffic type is selected in the drop-down list. The corresponding interface that is connected to a network with the ABGW public traffic type will be selected automatically. Click NEXT.

    Note

    If necessary, click the cogwheel icon and assign Acronis Backup Gateway roles on the Network Configuration screen.

  9. Configure the destination storage backend:

    • For an Virtuozzo Infrastructure Platform cluster, select the desired tier, failure domain, and redundancy mode.

    • For NFS, specify a hostname or IP address, an export name and path, and choose the NFS version.

      ../_images/stor_image56_9.png

    • For public cloud, select a public cloud provider, specify credentials, and the name of the folder (bucket, container).

      Important

      You must update Acronis Backup Agents to version 4492 (Windows/Mac) or 4470 (Linux). Otherwise agents’ attempts to place backups in the new storage backend will result in “Backup failed” errors.

      ../_images/stor_image56_10.png

    Click NEXT.

  10. Review the source and destination storages and click START MIGRATION.

Depending on data size, migration may take as long as several days.

4.4.7. Monitoring the Acronis Backup Gateway Cluster

After you create the Acronis Backup Gateway cluster, you can monitor them on the STORAGE SERVICES > Backup > OVERVIEW screen. The charts show the following information:

  • the performance of Acronis Backup Gateway services,
  • the geo-replication speed and backlog (the amount of data waiting to be replicated),
  • migration speed and backlog (the amount of data waiting to be migrated),
  • object storage speed and backlog (the amount of data waiting to be uploaded to public cloud),
  • how many files are left in migration queue.

If backlogs do not decrease over time, it means the data cannot be replicated, migrated, or uploaded fast enough. The reason may be insufficient network transfer speed, and you may need to check or upgrade your network.

../_images/stor_image56_12.png

4.4.8. Releasing Nodes from the Acronis Backup Gateway Cluster

The Acronis Backup Gateway cluster is meant to provide access to one specific storage backend. If you need to switch the backend, e.g., from public cloud to local Virtuozzo Infrastructure Platform cluster, you need to delete the Acronis Backup Gateway cluster by releasing all its nodes and create a new one.

Note

If you delete the Acronis Backup Gateway cluster, your Acronis backup software will lose access to the specified storage backend.

To release one or more nodes from the Acronis Backup Gateway cluster, select them on the STORAGE SERVICES > Backup > NODES screen and click Release. The Acronis Backup Gateway cluster will remain operational until there is at least one node in it.

Releasing the last node is different as it means that the Acronis Backup Gateway cluster will be deleted and unregistered from your Acronis backup software.

Do the following to release the last node:

  1. On the STORAGE SERVICES > Backup > NODES screen, select the last node and click Release.

  2. On the Unregister Acronis Backup Gateway panel, choose one of the following:

    1. Graceful release (recommended, see note below). Releases the last node, deletes the Acronis Backup Gateway cluster and unregisters it from your Acronis backup software.

      ../_images/stor_image56_13.png

    2. Force release. Releases the last node, deletes the Acronis Backup Gateway cluster but does not unregister it from your Acronis backup software.

      Important

      Choose this option only if you are sure that the gateway has already been unregistered from your Acronis backup software. Otherwise, you will need to register a new gateway in your Acronis backup software and for that you will need to delete and recreate not just the Acronis Backup Gateway cluster but also the entire Virtuozzo Infrastructure Platform cluster.

  3. Specify the credentials of your administrator account in Acronis Backup Cloud or Acronis Backup Advanced and click NEXT. In case the release is forced, simply click NEXT.

Version 2.5 — Jun 27, 2018
Edit Raw Print