{"id":11209,"date":"2022-10-17T07:20:41","date_gmt":"2022-10-16T21:20:41","guid":{"rendered":"https:\/\/nsrd.info\/blog\/?p=11209"},"modified":"2022-10-17T07:20:46","modified_gmt":"2022-10-16T21:20:46","slug":"dynamic-nas-protection","status":"publish","type":"post","link":"https:\/\/nsrd.info\/blog\/2022\/10\/17\/dynamic-nas-protection\/","title":{"rendered":"Dynamic NAS Protection"},"content":{"rendered":"\n

NAS is one of those platforms that presents operational challenges for backup and recovery, simply because the operating systems are effectively closed \u2013 it’s not just a case of installing an agent like you would on say, Windows or Linux.<\/p>\n\n\n\n

Many NAS systems include snapshot and replication capabilities, but these will only get you so far: they’re on-platform<\/em> for a start, meaning they have limited utility if an administrator goes rogue, an attacker gets into your network, or you have a catastrophic datacentre event. Also, who wants to store a decade’s worth of long term retention as snapshots? Talk about a recipe for platform lock-in!<\/p>\n\n\n\n

When it comes to backup and recovery for NAS, there are two routes: NDMP, and proxied protection via a host that is<\/em> running an agent. NetWorker and Avamar, being children of an earlier age, make use of NDMP. The challenge with NDMP is that the standard is now in life-support\/maintenance mode.<\/p>\n\n\n\n

So being a newer product, PowerProtect Data Manager has elected to go down the proxied protection route. Eschewing NDMP gives Data Manager the option of providing excellent innovation in NAS protection \u2013 which is why it’s referred to as Dynamic<\/em> NAS protection. Data Manager intelligently slices the NAS shares it protects into multiple slices, built up on the fly based on the layout and size of the filesystem to enable rapid multi-streaming of even individual shares. There’s a great technical paper over at the Dell Infohub<\/a><\/strong> that describes that process which I’d thoroughly recommend for more details.<\/p>\n\n\n\n

Another advantage of a proxied NAS protection is you are no longer reliant on the NAS vendor implementing NDMP in order to protect it. Data Manager can still integrate with NAS platforms for more advanced protection (e.g., with Dell storage arrays to coordinate snapshots to wrap around the backup), but no longer needing NDMP supported systems to protect NAS is a huge boon.<\/p>\n\n\n\n

In today’s post, I’m going to do an end-to-end step through dynamic NAS protection of a NAS platform that definitely doesn’t<\/strong> support NDMP: my home lab’s Synology system.<\/p>\n\n\n\n

Adding NAS as an Asset Source<\/h2>\n\n\n\n

The starting point is to (a) enable NAS as an asset source, and then (b) add the NAS shares you need to protect.<\/p>\n\n\n\n

You start by going to Infrastructure > Asset Sources<\/strong> and enable NAS, if it isn’t already. In my example below, my server was only protecting VMware based systems:<\/p>\n\n\n\n

\"\"<\/a>
Adding NAS as an Asset Source – Part 1<\/figcaption><\/figure>\n\n\n\n

Clicking the +<\/strong> button lets you select the asset sources you want to add to the system:<\/p>\n\n\n\n

\"\"<\/a>
Adding NAS as an Asset Source – Part 2<\/figcaption><\/figure>\n\n\n\n

Clicking the “Enable Source” button enables configuration of NAS sources and assets for protection. This includes a popup giving general instructions for the process flow you’ll have to follow. <\/p>\n\n\n\n

Back in the Infrastructure > Asset Sources view, you’ll now find a NAS tab, where you can add NAS systems for protection. <\/p>\n\n\n\n

\"\"<\/a>
Adding NAS as an Asset Source – Part 3<\/figcaption><\/figure>\n\n\n\n

Clicking Add<\/strong> will bring up a dialog box where you can enter details of the system you want to protect:<\/p>\n\n\n\n

\"\"<\/a>
Adding NAS as an Asset Source – Part 4<\/figcaption><\/figure>\n\n\n\n
\"\"<\/a>
Adding NAS as an Asset Source – Part 5<\/figcaption><\/figure>\n\n\n\n

In this case, I elected to protect via CIFS. This included setting up credentials for accessing the NAS system as well, which I’ve shown above.<\/p>\n\n\n\n

Deploying the Protection Engine<\/h2>\n\n\n\n

As I mentioned earlier, NAS protection is either via NDMP or a proxy. For Data Manager, it’s a proxy based backup, using a protection engine<\/em>. You’ll need to deploy one, which requires an IP address\/hostname. Data Manager will handle the actual deployment for you. To do this, go to Infrastructure > Protection Engines<\/strong>.<\/p>\n\n\n\n

\"\"<\/a>
Adding a NAS Protection Engine – Part 1<\/figcaption><\/figure>\n\n\n\n

Clicking the Add button will bring up a wizard where you can choose to deploy a NAS protection engine and provide the requisite details. I’ll show the three screens of the wizard below:<\/p>\n\n\n\n

\"\"<\/a>
Adding a NAS Protection Engine – Part 2<\/figcaption><\/figure>\n\n\n\n
\"\"<\/a>
Adding a NAS Protection Engine – Part 3<\/figcaption><\/figure>\n\n\n\n
\"\"<\/a>
Adding a NAS Protection Engine – Part 4<\/figcaption><\/figure>\n\n\n\n

Once you’ve clicked the Finish<\/strong> button in the Wizard the deployment will start, and you can monitor it in the System Jobs<\/strong> area:<\/p>\n\n\n\n

\"\"<\/a>
Adding a NAS Protection Engine – System Jobs View for Deployment<\/figcaption><\/figure>\n\n\n\n

Finally, when deployment is done, you can see the status back in Infrastructure > Protection Engines<\/strong>.<\/p>\n\n\n\n

\"\"<\/a>
NAS Protection Engine Deployment Complete<\/figcaption><\/figure>\n\n\n\n

Stream Counts<\/h2>\n\n\n\n

I’ve mentioned before that Data Manager does dynamic<\/em> NAS protection, which means it automatically slices each NAS filesystem it’s reading into a number of streams \u2013 8, by default. For this configuration I wanted to halve this, since it’s only a small NAS share I’m protecting. To do that, make your way across to Infrastructure > Assets<\/strong>, and under the NAS<\/strong> tab, select the share and click Set Stream Count<\/strong> from the More Actions<\/strong> menu:<\/p>\n\n\n\n

\"\"<\/a>
Setting the NAS Share Stream Count – Part 1<\/figcaption><\/figure>\n\n\n\n
\"\"<\/a>
Setting the NAS Share Stream Count – Part 2<\/figcaption><\/figure>\n\n\n\n

Configuration a NAS Backup Policy<\/h2>\n\n\n\n

OK, so at this point I’ve got the NAS protection engine deployed, and my NAS share added. Next up is creating a policy for protection, which is relatively straight-forward.<\/p>\n\n\n\n

To get started, head over to Protection > Protection Policies<\/strong>:<\/p>\n\n\n\n

\"\"<\/a>
Adding a NAS Protection Policy – Part 1<\/figcaption><\/figure>\n\n\n\n

Click the Add<\/strong> button to start creating the new policy:<\/p>\n\n\n\n

\"\"<\/a>
Adding a NAS Protection Policy – Part 2<\/figcaption><\/figure>\n\n\n\n

Give the policy an appropriate name (and perhaps one a little more imaginative than I used) and select NAS<\/strong> type before clicking Next<\/strong>:<\/p>\n\n\n\n

\"\"<\/a>
Adding a NAS Protection Policy – Part 3<\/figcaption><\/figure>\n\n\n\n

Choose Centralised Protection<\/strong> here and click Next<\/strong> to move on to asset selection:<\/p>\n\n\n\n

\"\"<\/a>
Adding a NAS Protection Policy – Part 4<\/figcaption><\/figure>\n\n\n\n

After selecting the NAS share(s) to add (I only had one), click Next<\/strong> to configure the policy objectives: <\/p>\n\n\n\n

\"\"<\/a>
Adding a NAS Protection Policy – Part 5<\/figcaption><\/figure>\n\n\n\n

I configured the policy objectives as daily backups retained for 14 days, with immediate replication, then moved on to the backup options where I could enable indexing:<\/p>\n\n\n\n

\"\"<\/a>
Adding a NAS Protection Policy – Part 6<\/figcaption><\/figure>\n\n\n\n

Clicking Next brought up the summary view for the new policy:<\/p>\n\n\n\n

\"\"<\/a>
Adding a NAS Protection Policy – Part 7<\/figcaption><\/figure>\n\n\n\n

When I was happy with the policy configuration, I clicked Finish<\/strong> to have it created.<\/p>\n\n\n\n

\"\"<\/a>
NAS Protection Policy Created<\/figcaption><\/figure>\n\n\n\n

Running the Policy<\/h2>\n\n\n\n

The policy I created was configured to run overnight, so using the Protection Policies view, I selected the policy and clicked Protect Now<\/strong> button to step through the dialog for an ad-hoc run:<\/p>\n\n\n\n

\"\"<\/a>
Running the NAS Protection Policy – Part 1<\/figcaption><\/figure>\n\n\n\n
\"\"<\/a>
Running the NAS Protection Policy – Part 2<\/figcaption><\/figure>\n\n\n\n
\"\"<\/a>
Running the NAS Protection Policy – Part 3<\/figcaption><\/figure>\n\n\n\n

I didn’t need to change any of the protection options, so I just quickly stepped through them and clicked the Protect Now<\/strong> button to start the backup. Of course, while the backup was running I could monitor it through the Jobs view, and here’s a view of the completed job:<\/p>\n\n\n\n

\"\"<\/a>
NAS Protection Policy Complete<\/figcaption><\/figure>\n\n\n\n

Running a NAS Recovery<\/h2>\n\n\n\n

Of course, I wanted to check out recoveries, too! That started by going to Restore > Assets<\/strong> and clicking across to the NAS<\/strong> tab:<\/p>\n\n\n\n

\"\"<\/a>
Restoring from a NAS Backup – Part 1<\/figcaption><\/figure>\n\n\n\n

I wanted to do an indexed restore, so I clicked the File Search button and filled in a partial file name that I knew would get at least a few hits:<\/p>\n\n\n\n

\"\"<\/a>
Restoring from a NAS Backup – Part 2<\/figcaption><\/figure>\n\n\n\n

Having found some files, I selected one of them and clicked the Add button in the centre of the search view to add it to the restore list:<\/p>\n\n\n\n

\"\"<\/a>
Restoring from a NAS Backup – Part 3<\/figcaption><\/figure>\n\n\n\n

I then clicked the Restore<\/strong> button to start going through the options \u2013 in this case I wanted to overwrite the original file:<\/p>\n\n\n\n

\"\"<\/a>
Restoring from a NAS Backup – Part 4<\/figcaption><\/figure>\n\n\n\n

With the options selected I then clicked Next<\/strong>, and Restore<\/strong> on the final page after reviewing options to start the job:<\/p>\n\n\n\n

\"\"<\/a>
Restoring from a NAS Backup – Part 5<\/figcaption><\/figure>\n\n\n\n

And finally, the completed restore job:<\/p>\n\n\n\n

\"\"<\/a>
NAS Restore Job Completed<\/figcaption><\/figure>\n\n\n\n

Wrapping Up<\/h2>\n\n\n\n

All in all, configuring NAS backups in Data Manager is a quick, easy and straight-forward process, meaning you can go from nothing configured to completing your first restore in minutes.<\/p>\n\n\n\n

That’s got to be a win for a time-starved backup administrator!<\/p>\n","protected":false},"excerpt":{"rendered":"

NAS is one of those platforms that presents operational challenges for backup and recovery, simply because the operating systems are…<\/p>\n","protected":false},"author":1,"featured_media":9834,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[1520],"tags":[617,1406,1558],"class_list":["post-11209","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-powerprotect","tag-nas","tag-ndmp","tag-ppdm"],"aioseo_notices":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/12\/bigStock-Server-Room.jpg","jetpack_shortlink":"https:\/\/wp.me\/pKpIN-2UN","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts\/11209","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/comments?post=11209"}],"version-history":[{"count":5,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts\/11209\/revisions"}],"predecessor-version":[{"id":11251,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts\/11209\/revisions\/11251"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/media\/9834"}],"wp:attachment":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/media?parent=11209"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/categories?post=11209"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/tags?post=11209"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}