Backup for IBM data center Workloads in IBM data center

Network architecture for deploying the Backup Offering

To deploy the Backup Offering, select one of the following architectures:

• Single copy Backup Offering
• Dual copy Backup Offering

Single copy Backup Offering

You can take a backup of your workload in a single data center by using a single copy Backup Offering,

By studying the network architecture diagram of single copy Backup Offering, you can understand the following concepts:

• The architecture of single copy Backup Offering deployed in IBM data center
• The requirements for AIX, Linux, and IBM i VSIs on Power to access the Compass backup servers through the IBM Cloud network

Compass Vaults are backup server instances that are preconfigured in IBM Cloud data centers.

Do not deploy any additional cloud resources to the Backup Offering VPC.

The Compass Backup as a Service (BaaS) VPC is created when the Backup Offering is provisioned. The BaaS VPC enables Virtual Private Endpoints (VPEs) for private IP connectivity to the managed backup server instances. When you set up the Backup Offering service, an automation process creates the following network segments:

• Local Transit Gateway, if it does not exist
• BaaS VPC for the dedicated use of the backup activity
• VPE for secure connectivity to each of the backup servers
• Security group with inbound rule, address prefix, and subnet

The Backup Offering VPC and the Power Virtual Server workspaces must exist in the same region and be connected by using the local Transit Gateway. You can connect your workloads in IBM Power Virtual Server Private Cloud in Client location to the Transit Gateway through the Direct Link connection. You can use VPN connection in place of the Direct Link connection.

Dual copy Backup Offering

You can protect your workload backups across two different data center regions by using the dual copy Backup Offering.

By studying the network architecture diagram of dual copy Backup Offering, you can understand the following concepts:

• The architecture of dual copy Backup Offering that is deployed in IBM data centers
• The requirements for AIX, Linux, and IBM i VSIs on Power to access the Compass backup servers through the IBM Cloud network

Compass Vaults are preconfigured backup servers in IBM Cloud data centers and they replicate data to preconfigured Compass Vaults in other regions.

Do not deploy any additional resources to the Backup Offering VPC.

The Backup Offering VPC is used by Compass for backup operations and is deployed when the Backup Offering is provisioned. When you set up the Backup Offering service, an automation process creates the following network segments:

• Local Transit Gateway if it does not exist
• VPC for backup activity only
• VPE for each of the backup servers
• Security group with inbound rule, address prefix, and subnet

The Backup Offering VPC and the Power Virtual Server workspaces must exist in the same region and be connected by using the local Transit Gateway. You can connect your on-premises workloads to the Transit Gateway through the Direct Link connection. You can use VPN connection in place of the Direct Link connection.

Provisioning the Backup Offering service in IBM data center

Complete the following steps to set up the Backup Offering from the IBM Cloud catalog:

1. For Compass to create or manage VPCs, Transit Gateways, and other cloud networking resources, provide an IBM Cloud API key with the following cloud resource permissions for your IBM Cloud account:

   • Transit Gateway (Resource Group specific) : transit.gateway.edit
   • VPC Infrastructure (All Resources): is.vpc.vpc.list and is.vpc.vpc.read
   • VPC Infrastructure (Resource Group specific): is.vpc.vpc.create

2. In the search box, type "Compass Backup" and click Secure Automated Backup with Compass for PowerVS tile.

3. Select a deployment location for your backup target.

   Do not to deploy any additional resources to the Backup Offering VPC.

4. Specify the Pricing plan, Service name, Resource group, your IBM Cloud API key, and Compass organization name according to your business needs. Also, specify the VPC subnet IP address range that you want to use to access the Compass Vaults.

5. Click Create.

6. Compass creates and connects the Backup VPC to the Power Virtual Server workspace that you want to back up by using the local Transit Gateway. A local Transit Gateway is created if it does not exist.

   For more information, see Ordering IBM Cloud Transit Gateway and Using virtual private endpoints for VPC to privately connect to IBM Cloud Transit Gateway.

7. Click Launch Compass UI that will redirect you to the Cobalt Iron Compass Commander page where you need to complete the setup. For more information, see Cobalt Iron documentation.

Pricing in IBM data center

When you use the Backup Offering, you are billed monthly through IBM Cloud for the stored amount of data that is backed up for the region for either single or dual copy. The backup data is the stored data after duplication and compression. For more information about pricing plans, see Secure Automated Backup with Compass for Power VS. The page is accessible from the IBM Cloud catalog. You can generate an estimate of the cost based on your expected usage from the Summary panel.

In your account, the following deployments are made:

• Connectivity is established between Power Virtual Server instances and the backup servers through a local Transit Gateway connection to the backup VPC. The automation when the Backup Offering is provisioned establishes this connection.

• Achieve the name resolution for the backup server connection by using the file on the agent system available at /etc/hosts path or by adding CNAME entries to the DNS server associated with the agent system.

Supported data centers

The single copy Backup Offering is available in the following data centers:

• DAL10
• DAL12
• DAL13
• FRA04
• FRA05
• LON04
• LON06
• MAD02
• MAD04
• OSA21
• SAO01
• SAO04
• SYD04
• SYD05
• TOK04
• WDC04
• WDC06
• WDC07

The dual copy Backup Offering is available in the following data center pairs: