Integrate Veeam Direct-to-Cloud Backups to Backblaze B2 with Immutability
    • Dark

    Integrate Veeam Direct-to-Cloud Backups to Backblaze B2 with Immutability

    • Dark

    Article Summary

    With the release of Veeam Backup & Replication version 12 comes the ability to tier your Veeam Backup jobs directly to Backblaze B2 Cloud Storage

    If you want to set up your Backblaze B2 bucket as a part of a Scale-out Backup Repository, or you run either Veeam version 10 or version 11, see the Offload Veeam Cloud Tier Backups to Backblaze B2 with Immutability guide.

    The following video guide walks you through how to set up Backblaze B2 using Veeam Direct-to-Cloud with Immutability using the Backblaze B2 S3-Compatible API.

    Enable Backblaze B2

    Before you begin: You must have a Backblaze B2 Cloud Storage account. You can sign up here. If you already have a Backblaze account and the left navigation menu contains a B2 Cloud Storage section, your account is already enabled for Backblaze B2.

    1. Sign in to your Backblaze account.
    2. In the left navigation menu under Account, click My Settings.
    3. Under Enabled Products, select the checkbox to enable B2 Cloud Storage.
    4. Review the Terms and Conditions, and click OK to accept them. 

    Create a Bucket

    Object Lock allows immutability in Veeam to prevent your files from being changed. To protect your backups from ransomware, Backblaze strongly recommends that you enable Object Lock and use the Veeam Immutability feature. For more information about Object Lock, click here.

    Ensure that Lifecycle Settings is set to Keep all versions of the file.

    1. Sign in to your Backblaze account.
    2. In the left navigation menu under B2 Cloud Storage, click Buckets.
    3. Click Create a Bucket.
    4. Enter a name for your bucket.
      Bucket names must be at least six characters and globally unique. A message is displayed if your bucket name is already in use.
    5. Select a privacy setting: Private or Public.
      Files that are in a private bucket require authentication to perform an action, for example, downloading. Public buckets do not require authentication so you can easily share files. You can change a bucket's privacy settings at any time.
    6. If applicable, enable a Backblaze B2 server-side encryption key.
    7. Enable Object Lock to restrict a file from being modified or deleted for a specified period of time.
    8. Click Create a Bucket, and copy the value that is in the Endpoint field; you may need this value for other processes.
    9. Click Lifecycle Settings to control how long to keep the files in your new bucket.

    On the Buckets page, note the S3 endpoint. You will need this URL to connect Backblaze B2 with Veeam.

    Create an Application Key

    Application keys control access to your Backblaze B2 Cloud Storage account and the buckets that are contained in your account.

    1. Sign in to your Backblaze account.
    2. In the left navigation menu under Account, click Application Keys.
    3. Click Add a New Application Key, and enter an app key name.
          You cannot search an app key by this name; therefore, app key names are not required to be globally unique.
    4. Select All or a specific bucket in the Allow Access to Bucket(s) dropdown menu.
    5. Optionally, select your access type (Read and Write, Read Only, or Write Only).
    6. Optionally, select the Allow List All Bucket Names checkbox (required for the B2 Native API b2_list_buckets and the S3-Compatible API S3 List Buckets operations).
    7. Optionally, enter a file name prefix to restrict application key access only to files with that prefix. Depending on what you selected in step #4, this limits application key access to files with the specified prefix for all buckets or just the selected bucket.
    8. Optionally, enter a positive integer to limit the time, in seconds, before the application key expires. The value must be less than 1000 days (in seconds).
    9. Click Create New Key, and note the resulting keyID and applicationKey values.
    When you create a new app key, the response contains the actual key string, for example N2Zug0evLcHDlh_L0Z0AJhiGGdY. You can always find the keyID on this page, but for security, the applicationKey appears only once. Make sure you copy and securely save this value elsewhere.

    Add a Repository for Backblaze B2

    For this integration, you must select Make recent backups immutable for x days and set your preferred number of days.

    1. Open Veeam Backup & Replication, and click Connect.
    2. Select Backup Infrastructure in the left navigation menu, and select Backup Repositories.
    3. In the top menu, click Add Repository.
    4. Select Object storage, and select S3 Compatible.
    5.  Enter the details for your repository.
      1. Enter a name for your repository.
      2. Enter a description for your repository, and click Next.
      3. In the Service point field, enter the S3 endpoint that you created in the "Create a Bucket" task.
      4. In the Region field, enter the second part of the S3 endpoint, for example "us-east-005."
      5. In the Credentials field, click Add, enter your Backblaze B2 application key, and click Next.
    6. In the Bucket section, click Browse, select the bucket that you created, and click OK.
    7. In the Folder field, click Browse and click New Folder.
    8. Enter a name for your folder, press Enter, and click OK.
    9. Select the Make recent backups immutable checkbox, and enter the number of days to lock your files.

      Backblaze strongly recommends that you use the immutability feature to protect your organization from ransomware.

    10. To apply your settings, click Next and click Apply.
    11. After the items on the Apply page are green, click Next and click Finish.

    The Backblaze B2 repository is displayed in the Backup Repositories section of Backup Infrastructure.

    Create a Backup Job

    1. Open Veeam Backup & Replication, and click Connect.
    2. Select Home in the left navigation menu, and select Jobs.
    3. Click Backup Job, and select Virtual machine.
    4. Enter a name and a description, and click Next.
    5. Click Add, select the VMs to back up to Backblaze B2, click Add, and click Next.
    6. In the Backup Repository menu, select the backup repository that you created in the "Create a Scale-Out Repository" task, and click Advanced.
    7. In the Storage tab under Storage optimization, select Local target (large blocks), click OK, and click Next.
      This setting is optional. However, Backblaze B2 is designed to work better with larger block sizes, and this setting helps improve the performance of uploads to Backblaze B2 by Veeam.
    8. In the Schedule tab, set the scheduling options for the backup job and click Apply.
    9. To run the first backup job immediately, select Run the job when I click Finish.
    10. Click Finish.

    You can validate that the backup is running by clicking Session Tools and clicking Last 24 Hours in the left-hand column. You can see the current backup job, and when that job completes, Veeam begins a new job to offload the data to Backblaze B2 with “Offload” in the Job Name.

    Was this article helpful?