How to setup Veeam Backup and Replication for Object Storage
Go back to Veeam Software guides or Main Page.
Here is a how to guide and best practices for setting up Veeam with Object Storage.
Terminology:
- Immutability = Cannot delete until timestamp has elapsed. ( Ransomware protection )
- Retention = Do not delete / keep until X timestamp has been achieved.
We recommend doing the following:
- Allow Wasabi endpoint hostnames through firewalls. ( Common cause of "Failed to retrieve certificate from https://" error. )
- Set retention and immutability to the same length of time, usually 30-days.
- Compliance or Governance Mode, is an important choice depending on requirements.
Compliance or Governance mode, what's the difference?
If selecting compliance mode instead of governance mode, data CANNOT be deleted until the set immutability timestamp has elapsed.
Data uploaded with an immutability of 1 year in compliance mode cannot be deleted regardless of policy. You are stuck with it until the expiration date has surpassed. Governance mode will allow a user configured with the correct policies to override the immutability; this allows for data to be deleted if a situation arises with the need, even with immutability enabled. Compliance mode is the most secure and often chosen for legal requirements.
Setting up Veeam Backup and Replication
If you have not setup Object Storage in Veeam B&R before we recommend reviewing the Veeam Documentation. We also recommend reading through the documentation explaining how immutability works to have an understanding of data usage, and how object storage is utilized by Veaam B&R including but not limited to considerations and limitations and health checks of data stored.