Microsoft private cloud backup challenges

Rate this item
(0 votes)

There are two major challenges that must be addressed when backing up a Microsoft private cloud: figuring out what needs protection and backing up virtual machines.

One of the big trends in IT is the move from relatively simple virtual server environments to private or hybrid clouds. As organizations contemplate such a transition, they must consider how a private cloud implementation will impact their backup process.

A Microsoft private cloud is built from the same basic components as a typical Hyper-V deployment: Hyper-V servers, System Center Virtual Machine Manager (SCVMM), and one or more Cluster Shared Volumes. If your organization uses Microsoft Hyper-V, you probably know how to back up these components.

When it comes to backing up a Microsoft private cloud environment, there are two challenges that must be addressed:

  • Ensuring everything necessary to rebuild the private cloud in the event of a failure is backed up.
  • The ability to back up virtual machines (VMs) residing on inaccessible virtual network segments.
  • What components require protection?

    Every private cloud is different, so each organization's backup requirements will also vary. As a general rule, backing up a Microsoft private cloud environment requires backing up the Azure Pack server, all Hyper-V servers, and SCVMM and its underlying database.

    Azure Pack is a Web application that provides tenant and administrative access to the private cloud environment. A server running Azure Pack requires IIS, the Virtual Machine Manager console, the Service Provider Foundation (part of System Center Orchestrator) and a few other miscellaneous components (such as the .NET Framework). Azure Pack also uses a SQL Server database of its own that will need to be backed up.

    As you prepare to back up a Microsoft private cloud environment, it is extremely important to include Active Directory. Microsoft private clouds require several different service accounts to function. These service accounts exist within the Active Directory database.

    Backing up virtual machines

    When backing up private cloud environments, a critical factor is tenant isolation. Private cloud environments generally provide self-service VM creation and management capabilities to authorized users. Such users are able to use the Azure Pack Tenant portal to build VMs from predefined templates. Once a VM has been created, users can configure and use it as they see fit.

    Because users can do almost anything with the VMs they own, a private cloud environment must enforce tenant isolation. In doing so, the private cloud places each tenant's virtual machines onto a separate, isolated network segment. This isolation prevents any tenant from accessing (or even seeing) another tenant's VMs.

    To put this concept into perspective, consider the way that public clouds such as Microsoft Azure or Amazon Web Services work. Public cloud providers have a number of different customers, each of whom creates their own VMs. A public cloud provider puts isolation boundaries into place to preserve each customer's security and privacy. These same boundaries also prevent the underlying cloud infrastructure from being exposed to customers. Microsoft private cloud environments use these same sorts of controls to provide tenant isolation.

    So how can a backup administrator back up VMs that exist on a completely isolated network segment? There are two approaches that can be used.

  • Back up each Hyper-V server at the host level. This will cause all the VMs to be backed up. The virtual networks, tenants and permissions are configured through SCVMM and stored in an SQL Server database, so these components will also need to be backed up.
  • Perform a guest-level backup of VMs. Guest-level backups are generally discouraged in cloud-scale environments because they can be labor-intensive. Even so, there may be some situations in which host-level backups of specific VMs are problematic.
  • If you need to perform a guest-level backup of a tenant VM, you will have to do more than just install a backup agent into the virtual machine. Remember, virtual network isolation makes the VM invisible to the backup server. The solution is to handle the backup as if you were backing up a VM from across the Internet. In most cases, tenant VMs can access the Internet. As such, you may be able to set up a logical VPN connection that allows the backup server to communicate with VMs on an isolated network segment. Care must be taken to implement firewall rules that prevent anything other than backup traffic from passing across this link.

    Backing up a Microsoft private cloud is not overly difficult, although guest-level VM backups can be challenging. As a best practice, you should avoid guest-level backups of tenant VMs unless absolutely necessary.


    Last modified on Monday, 26 October 2015 15:19
    Data Recovery Expert

    Viktor S., Ph.D. (Electrical/Computer Engineering), was hired by DataRecoup, the international data recovery corporation, in 2012. Promoted to Engineering Senior Manager in 2010 and then to his current position, as C.I.O. of DataRecoup, in 2014. Responsible for the management of critical, high-priority RAID data recovery cases and the application of his expert, comprehensive knowledge in database data retrieval. He is also responsible for planning and implementing SEO/SEM and other internet-based marketing strategies. Currently, Viktor S., Ph.D., is focusing on the further development and expansion of DataRecoup’s major internet marketing campaign for their already successful proprietary software application “Data Recovery for Windows” (an application which he developed).


    • Comment Link Ingrid Wednesday, 21 February 2018 12:42 posted by Ingrid

      Choose from fishing boats, pontoons, and more.

    • Comment Link Ilana Saturday, 10 February 2018 09:45 posted by Ilana

      Hiring an organization like Schulhoff Tree & Garden Care, Inc.

    • Comment Link Willis Saturday, 10 February 2018 05:10 posted by Willis

      Stress washing is great on your tools, too.

    • Comment Link Aliza Friday, 09 February 2018 20:57 posted by Aliza

      What's up, I log on to your blog daily. Your writing style is witty, keep doing what you're doing!

    • Comment Link Debora Tuesday, 06 February 2018 05:39 posted by Debora

      Western Washington's best junk removal service.

    • Comment Link Josie Friday, 05 January 2018 14:41 posted by Josie

      Hi, after reading this remarkable piece of writing i am too happy to
      share my experience here with friends.

    • Comment Link Troy Thursday, 14 December 2017 01:39 posted by Troy

      If some one desires expert view on the topic of blogging and site-building after that i propose him/her to go to see this blog, Keep up the nice work.

    • Comment Link Bernd Tuesday, 05 December 2017 11:10 posted by Bernd

      Hurrah! In the end I got a webpage from where I know how to truly get valuable
      facts concerning my study and knowledge.

    • Comment Link Fleta Monday, 13 November 2017 14:54 posted by Fleta

      This excellent website really has all the info I needed concerning
      this subject and didn't know who to ask.

    • Comment Link Georgiana Thursday, 09 November 2017 19:51 posted by Georgiana

      I do not even know how I ended up here, but I
      thought this post was great. I don't know who you are but
      definitely you're going to a famous blogger if you are not already ;) Cheers!

    Leave a comment

    Make sure you enter the (*) required information where indicated. HTML code is not allowed.