backup as a service — virtual - proact · it can also backup physical servers and so baas-v is...

Backup as a Service —virtualFast, flexible and reliable backup and recovery. Powered by Veeam technology. Managed by us or you.

BaaS-V (Backup as a Service-virtual) is a flexible cloud backup service designed for organisations that want to protect their mission-critical data. We refer to it as -V (virtual) because it’s ideal for backing up virtual machines. It can also backup physical servers and so BaaS-V is great for highly virtualised environments that also have some physical servers. BaaS-V also supports public cloud virtual instances and has application integration. Its main unique benefit is that you can back up your hypervisor environments within seconds/minutes, without disrupting production. The service delivers reliable backups and restores and is powered by Veeam technology.

We offer two versions: managed backup for customers who want a complete, managed BaaS solution and unmanaged remote vault, for existing Veeam customers who want to backup securely and reliably to a remote site (our data centre).

Managed backup

This is a backup solution that is deployed and fully-managed by experienced Proact staff 24/7, and covered by SLAs, to help ensure backup success.

It enables you to store one, two or three copies of your source data in the same location (local) and/or in a different location (remote). For security, we encrypt backup data at rest and, where a remote location is selected, in-flight, when data travels over the Internet.

We can back up data from:

Virtual machines Physical servers Virtual instances Application data

What is BaaS-V?

01delivering business agility

Customer site

DC1

DC2

Customer public cloud

Remote vault shared

Remote vault shared

Hypervisoragentless

In-serveragent

Remote vault dedicated

Sharedfirewall

Efficientcopy

Internet

Replication

Existingfirewall

Efficientcopy

Backup

Proactlocal vaultdedicated

Sharedfirewall

Efficientcopy

LegendInternet

communication

Internalcommunication

Diagram 1: An example of a managed backup solution deployed in a private cloud that includes all possible data vault targets. The actual targets used will vary, depending on the selected deployment.


Unmanaged remote vault

If you already use Veeam Backup & Replication or Veeam Agent software, you can send one or two offsite copies of the source data to shared vaults in one or two of our data centres.

You’ll manage this solution and send the copies to the Veeam Cloud Connect service located in our data centres. The data will travel encrypted over the Internet. You’ll be responsible for applying the data encryption at rest.

Diagram 2: The diagram illustrates an unmanaged remote vault solution where the customer’s existing Veeam deployment is located in a private cloud and includes all possible data vault targets. The actual data targets used will vary depending on the selected deployment.

DC1

DC2

Remote vault shared

Remote vault shared

Sharedfirewall

Efficientcopy

Sharedfirewall

Efficientcopy

Customer site

Internet

Replication

Existingfirewall

Customer's Veeam backup

solution

LegendInternet

communication

Internalcommunication

Efficientcopy


How is BaaS-V deployed?

Managed backup

We can back up your data to a data vault location that is either local and/or remote to the source data – whichever you prefer. Depending on where the source data is (your data centre, our data centre or public cloud), we’ll store the backups in a target vault located in one or more of the following:

• Your data centre – In a dedicated hardware storage vault we provide • Our data centre – In a shared storage vault we provide (in your country to comply with data

sovereignty rules, or in another EU country)• Public cloud – In a dedicated virtual instance you provide in either Amazon AWS or Microsoft Azure

public clouds

We design the solution for you then implement it. We also provide training and documentation on incident response, our self-service portal and data restoration.


If you have Veeam Backup and Replication or Veeam Agent software, then this solution allows you to back up your data offsite — and have copies in one or two of our (Proact) data centres. This could be to one of our data centres in your country, to comply with data sovereignty laws, or to one of our other, EU-based data centres.

Veeam Backup & Replication supports two copies of the data, whilst Veeam Agent software supports one copy of the data (although Veeam Agents using Backup & Replication do not have this limitation).

We provide one or two secure multi-tenant storage vaults (known as Shared Data Vaults) via Veeam Cloud Connect. Where there are two backups, the second is in a different Proact data centre, for extra resilience.

We configure the bandwidth, we configure the storage vault capacity in our data centre and we configure your access to our shared data vaults.


How is BaaS-V managed?

Whether you choose managed or unmanaged, you’ll have access (via the Internet) to an IT service management (ITSM) system. This allows you to request changes and to view the configuration management database.

As part of your start-up package, we’ll create individual users for each administrator/manager that require access to the portal. Only these named individuals will be able to place change requests and support calls.

Every three months, a service review will give you the chance to discuss Service Management reports in a conference call chaired by a member of the service delivery team.

Managed backup

You’ll be able to manage backup and recovery (and view the status of the job) via either a self-service console or graphical user interface (GUI). Alternatively, you can request we take care of it.

When a configuration change is required, the assigned support consultant will log on to the management console located in our data centre.

Again, depending on the backup sub type, this will allow remote access to either the backup console or the source server.


You’ll perform all administrative tasks relating to the data stored in the remote vault, including configuring jobs and viewing their status. You can recover data from the remote vault using your existing Veeam management interface (e.g. Veeam Backup & Replication Console or Veeam Agent GUI). We won’t have access to your interface, allowing you to perform all administrative tasks directly.

Where a change (e.g. increase in capacity) is required on the remote vault hosted in our data centre, our support consultants will make it via a change request.


How do I back up?

Managed

You can ask us to take care of configuring, managing and scheduling backups. Alternatively, you can do it yourself, either through a self-service console or through a GUI.

When it comes to configuration, we will set a policy that meets your retention requirements (within the operating parameters of the product).

Depending on the type of server and type of data on the source client, the following backup integration and consistency methods and sub types are available:

Hypervisor agentless backup – The VM is backed up by interacting with the hypervisor. a. Storage array backupb. Hypervisor storage backupc. Hypervisor network backup

With either:a. Crash-consistent backupb. Operating system consistent backupc. Application-consistent backup

In-server agent backup – The server is backed up by sending data directly from the agentwith either:

a. Operating system-consistent backupb. Application-consistent backup

Where possible, we use snapshots to perform consistent backups to reduce the load on the source server.

The main unique feature of BaaS-V is that, for hypervisor environments, it eliminates/significantly reduces traditional backup windows (e.g. 8 hours). Backup only takes seconds or minutes and can take place during production. It doesn’t have to take place out-of-hours.

To prevent the data copy stage of the backup from causing a performance issue, BaaS-V will monitor the latency of the data stores used by the VMs every 20 seconds. If the storage latency increases (above 20ms by default), BaaS-V will delay any new backups from starting and throttle any existing backups as required until the storage latency drops below the storage latency threshold.


You’ll configure, manage and schedule your own backups via the Veeam management interface (e.g. Veeam Backup & Replication Console or Veeam Agent GUI) as normal. You’ll be responsible for setting your own policies – ones that meet your retention and resilience requirements.

How do I recover/restore?

delivering business agility 06

Managed backup

We’ll set a policy configuration to meet your retention requirements. By default, we can retain the backup for up to one year.

You can restore the data yourselves, via a self-service console or GUI. Alternatively, you can submit a restore request via the support portal/service desk. We can restore the data back to the original server and location or to a different location. We’ll do this by remotely accessing the master backup server.

If the data to be restored is in the local vault, this copy of the data will be used first to provide quicker restore times. You can check on the restore status via your monitoring portal.

Depending on the type of server and type of data on the client, the following restore methods and sub types are available:

Hypervisor agentless backupa. File/folder restoreb. Single-item restorec. Volume restored. VM restore

In-server agent backupa. File/folder restoreb. Single-item restorec. Volume restore


Your administrator restores the backup data via the Veeam management interface (e.g. Veeam Backup & Replication Console or Veeam Agent GUI).

You’ll be responsible for configuring, scheduling and managing the recovery/restoration. By default, we can retain the backup for up to one year.

We offer deleted backup protection. That means, by default, we hold any backup stored in our unmanaged remote vault for three days in a semi-deleted state (in a recycle bin). This is to protect against either accidental deletion or malicious deletion by a rogue administrator or cyber attack. To recover the deleted backup, simply log a request and we’ll copy the data to a secure FTP server or to storage media you provide.


How is BaaS-V charged?

How is BaaS-V secured?

Managed

We charge according to the number of clients (for example, virtual or physical servers) backed up, plus a cost per GB (gigabyte) of data retained. We use de-duplication and compression to save space, maximise efficiency and reduce costs — and we provide all licencing.


We charge per GB (gigabyte) of data retained in our shared data vault. We use de-duplication and compression to save space, maximise efficiency and reduce costs — and we provide the relevant shared data vault licences.

We’ve built the BaaS-V platform using enterprise-grade hardware and software purchased from established vendors. We’ve chosen this method of deploying BaaS-V to ensure stability and because there is a good feed for security updates etc.

We encrypt data in-flight and at rest. We protect the platform located in our data centre, its operating system and any management components with anti-virus software. We perform a weekly vulnerability scan to check the environment isn’t at risk from misconfiguration. And we monitor usage via a SIEM (security information event management) system.

Benefits

ProtectionProtects your data in case of accidental deletion, theft or technical issues. Make sure you also have a disaster recovery plan in place so that you can restore your entire system immediately.

ConvenientFor hypervisor environments, BaaS-V can take place during production. Doesn’t have to take place out-of-hours.

SecureBoth managed and unmanaged options feature enterprise-grade hardware and software from established vendors, encryption, anti-virus, vulnerability scanning and a SIEM system.

CompliantBacking up to create offsite copies of your data will help you comply with an ever-growing list of regulatory and legal frameworks.

Stress-freeChoose our ‘managed backup’ option and we’ll take care of everything – set up, management and maintenance – so your team can focus on other projects.

No tapeBoth managed and unmanaged options replace legacy, tape-based backup solutions.

ReliableBoth managed and unmanaged options feature enterprise-grade hardware and software, supported by established vendors.

08

FastFor hypervisor environments, BaaS-V eliminates/significantly reduces traditional 8-hr backup windows. Takes seconds or minutes.

Information is at the heart of your business. Protecting it is at the heart of ours.

Proact is Europe’s leading independent data centre and cloud services provider. By delivering flexible, accessible and secure IT solutions and services, we help companies and authorities reduce risk and costs, whilst increasing agility, productivity and efficiency.


We’ve completed over 5,000 successful projects around the world, have more than 3,500 customers and currently manage in excess of 100 petabytes of information in the cloud. We employ over 800 people in 14 countries across Europe and North America. Founded in 1994, our parent company, Proact IT Group AB (publ), listed on Nasdaq Stockholm in 1999 (under the symbol PACT).

Proact IT Group AB | Box 1205 | SE-164 28 Kista | +46 8 410 666 00 | www.proact.eu

backup as a service — virtual - proact · it can also backup physical servers and so baas-v is...

Documents