Cloud IBR (Instant Backup Recovery) With Wasabi

How do I use Cloud IBR (Instant Backup Recovery) with Wasabi?

Wasabi has been validated for use with Cloud IBR (Instant Backup Recovery). Cloud IBR is a simple, cost-effective, and fully-automated Disaster Recovery SaaS platform for your Veeam backups stored in Wasabi Object Storage, with on-demand, automation-driven Bare Metal Cloud server and storage infrastructure.

1. Introduction

Cloud IBR provides an affordable Disaster Recovery solution with an easy-to-use interface, ideal for small and medium-sized enterprises to quickly recover from ransomware attacks and natural disasters, using their Veeam backups in Wasabi. Most SMB’s recoveries are completed in less than a few hours.

The Cloud IBR SaaS platform automatically deploys PhoenixNAP’s Bare Metal Cloud servers in minutes, at locations across the US, Europe, or Asia, imports your Veeam backups stored in Wasabi Hot Cloud Storage, and immediately begins recovering your servers.

Every recovery test you run with Cloud IBR provides a full report of your disaster recovery test, which is perfect for showing proof of recovery to your auditor, insurance carrier, customer, etc.

2. Reference Architecture

3. Prerequisites

• Customers must have a fully licensed Veeam deployment v10 or later
• Veeam backups stored in a Wasabi bucket
• An active Cloud IBR subscription 
• An active Wasabi account
  • Wasabi Bucket - See our Bucket Creation Guide
  • Access & Secret Key Pair - See our Access Keys Guide

4. Configuration

4.1. Visit https://cloudibr.com to create your free demo account or join the Partner Program. Once logged in, click the link in the yellow information bar to purchase your annual membership. Once you’ve purchased your membership, you’re ready to onboard.

4.2. Navigate to S3 Repositories tab. Click on "Add Backup Repository".

4.3. Select Wasabi as the "S3 Provider".

4.4. Follow the onscreen directions to create a Read Only key at Wasabi and add your S3 bucket to Cloud IBR.

4.5. Navigate to the PhoenixNAP BMC tab.

4.6. Under Storage Requirement, you will now specify the storage required to recover the environment.  Click "Add Recovery storage" and enter the quantity of TB you require for your recovery infrastructure. Click "Save". Click "Add Desired Memory" button and select the amount of RAM you would like for your recovery infrastructure. (see https://cloudibr.com for how much RAM you can request within each subscription level)

4.7. Navigate to the Veeam Backup Encryption Keys tab. Click on "Add Veeam Encryption Key" and add all of the encryption keys you use within Veeam to encrypt backups that you send to Wasabi. Click "Save".

4.8. Navigate to the Network information tab and follow the steps below to add the Gateways and Port Mapping information. 

• Click on "Add Gateway" and enter each of the gateways from your production network that your recovery environment will require, i.e. 192.168.1.1, 192.168.2.1, 10.1.1.1.  The above IP addresses will be added to the firewall that is created for each of your recovery tests.
• Click on "Add Port Mapping" and add each port mapping that you require for public inbound access to your recovery environment. i.e. If your web server runs on IP address 192.168.1.25 and uses port 443, you will enter those two numbers and click save. Repeat for as many port mappings as you require.

4.9. Navigate to the Whitelist tab. Click on "Add Whitelist Host" and/or "Add Whitelist Network" to add as many IP’s and Networks as you wish. These IP addresses will have full access to your Veeam and ESXi recovery infrastructure.

4.10. Navigate to the VPN Users tab. Click on "Add DR Testing User" and "Add End User" to add as many accounts as you wish.

DR Testing Users will have VPN access to your recovery environment every time you run a recovery. End Users will only have VPN access when you opt to include them in the test and when you run an actual recovery.

In the two above scenarios, the specified users will receive an encrypted email with their VPN credentials and a link to download the OpenVPN software and client configuration file.

The onboarding process is now complete and you can proceed to do a recovery.

5. Recovery

To initiate a recovery, follow the steps outlined below.

5.1. Navigate to the Recoveries tab and click on "Start New Recovery". 

5.2. Select the desired "Recovery Options" and choose the desired period under "Restore latest recovery point from within last:" and click on "Initiate Recovery". 

5.3. You can now monitor the recovery process, as shown in the following screenshot. You will also receive an email from Cloud IBR upon completion of the recovery. 

5.4. Once completed, Cloud IBR will also present you with the WAN IP addresses and credentials for your Veeam and ESXi hosts, should you want to connect to them directly from one of your whitelisted IP addresses. The Cloud IBR console will also indicate if any older backups were excluded from the recovery or if there were any backup jobs that could not be decrypted.

Once the recovery is completed, this is a good time to test connectivity to all of your Port Mappings. To connect directly to your recovered servers, follow the directions in the encrypted email you receive to install the OpenVPN software and configuration file.