Backing up multitenant environment

Question

Hi All

We have an upcoming project where we are expected to protect a multi-tenant cloud environment. The backup solution to be used is Avamar integration with Data Domain.

Now customer has raised certain questions which I would need to get clarity on:

1) Data integrity : How is one user's data segregated from another's and thus secure ? Can we create volume pools in Data Domain and assign on a dataset ?

2) Encryption : I believe since DD Boost Library doesn't supports encryption, data can't be encrypted. Or is there any way ?

3) Type of backup: I know Avamar with DD as a target supports Full, incremental and differential. Will I be able to perform incremental of image level backups ? I am aware CBT can be used.

4) Multi Node : Why do we need multi node grid when DD is used as storage device ? Can we integrate DD with single avamar node ?

Thanks in advance !

Pratique2511 · Answer

Hi Steve

Please find my answers :

1. What are the requirements for data isolation from tenant to tenant? Specifically, nothing out yet. but they don't want their data accessible to others.

2. Is it required to be encrypted at rest, or is in-flight encryption acceptable? In flight would be preferable.

3. Yes, this is going to be a complete VMware environment. All backups via VADP.

4. The nodes have already been bought (1X3) . I was looking if AVE would be compatible with DD990 ES30 or any other single node Avamar server.

Appreciate your response !!

Rattacasa · Answer

Prateek, Please excuse this very 'consultant-answer' (which includes asking more questions), but I figure it will be helpful for others to assist as well. 1. What are the requirements for data isolation from tenant to tenant? 2. Is it required to be encrypted at rest, or is in-flight encryption acceptable? 3. Assuming a VMware environment, using CBT you can pull 'incremental' backups of a full VM image. 4. For the hardware grid, there's a minimum node requirement-- however, have you considered leveraging Avamar VE? That may fit your needs/requirements and would reduce cost and minimize the hardware footprint. Just a thought. Best, Steve

Pratique2511 · Answer

Hi Steve

Thanks for the link. As per the doc, DDOS 5.5 is not supported on DD990, so no use for me. Although, I appreciate you in bringing into light the new feature.

Talking about encryption, the Avamar-DD integration guide states:

"The connection between Avamar client (in this case Avamar proxy) and Data Domain is not encrypted.The DD Boost library does not support encryption between client and Data domain syste. Backups of avamar client taken on avamar server are encrypted."

Thanks

Rattacasa · Answer

Which versions of each does the integration guide reference? Best, Steve

Rattacasa · Answer

1. Check out this link-- specifically page 5 around "SMT"

2. I believe you'd retain the in-flight encryption using Avamar to drive the backups to Data Domain, but I don't have a document handy to verify, so you may need to validate that if it's a requirement.

4. AVE is a yes (Is DataDomain supported on Avamar Virtual Edition?)

Hope this is helpful for you.

Best,

Steve

Pratique2511 · Answer

For SMT, refer to the link you sent me on page 3 under "Supported systems"

For encryption, I checked out Avamar 7.0 integration guide with Data Domain which will state the same. And avamar 7.1 with ddos 5.5 will only support inflight encryption. Again ddos 5.5, not compatible with dd990.

Avamar

Backing up multitenant environment

Was this post helpful?