Network architecture for deploying the backup instance

To deploy the backup instance, use one of the following architectures:

• Single copy Backup Offering
• Dual copy Backup Offering

Single copy Backup Offering

Using a single copy Backup Offering, you can take a backup of your workload in a single data center.

By studying the network architecture diagram of single copy Backup Offering, you can understand the following concepts:

• The architecture of single copy Backup Offering deployed in IBM data center
• The requirements for AIX and Linux VMs on Power to access the Compass backup servers through the IBM Cloud network

Compass Accelerator Vaults are backup server instances that are preconfigured in IBM Cloud data centers and are replicated across other regions.

Do not deploy any additional resources to the Backup Offering VPC.

The Backup as a Service (BaaS) VPC is created when the Backup Offering is provisioned. The BaaS VPC enables Virtual Private Endpoints (VPEs) for private IP connectivity to the managed backup server instances. When you deploy the backup server instance, an automation process creates the following network segments:

• Local Transit Gateway, if it does not exist
• BaaS VPC for the dedicated use of the backup activity
• VPE for secure connectivity to each of the backup servers
• Security group with inbound rule, address prefix, and subnet

The Backup Offering VPC and the Power Virtual Server workspaces must exist in the same region and be connected by using the local Transit Gateway. You can connect your on-premises workloads to the Transit Gateway through the Direct Link connection. You can use VPN connection in place of a Direct Link connection.

Dual copy Backup Offering

Using a dual copy Backup Offering, you can take a backup of your workload in two different data center regions.

By studying the network architecture diagram of dual copy Backup Offering, you can understand the following concepts:

• The architecture of dual copy Backup Offering that is deployed in IBM data center
• The requirements for AIX and Linux VMs on Power to access the Compass backup servers through the IBM Cloud network

Compass backup servers are preconfigured in data centers and are also replicated across the other regions.

Do not deploy any additional resources to the Backup Offering VPC.

The Backup Offering VPC is a managed backup server instance that is deployed when the Backup Offering is provisioned. When you deploy the backup server instance, an automation process creates the following network segments:

• Local Transit Gateway if it does not exist
• VPC for backup activity only
• VPE for each of the backup servers
• Security group with inbound rule, address prefix, and subnet

The Backup Offering VPC and the Power Virtual Server workspaces must exist in the same region and be connected by using the local Transit Gateway. You can connect your on-premises workloads to the Transit Gateway through the Direct Link connection. You can use VPN connection in place of a Direct Link connection.

Provisioning the backup instance in IBM data center

To create and deploy a backup server instance from the IBM Cloud catalog, complete the following steps:

1. Log in to the IBM Cloud catalog with your credentials.

   To create or edit VPC and Transit Gateway, you must have roles with permissions such as writer or editor for your IBM Cloud account.

2. In the search box, type Compass Backup and click Secure Automated Backup with Compass tile.

3. Select a deployment location for your backup instance.

It is recommended not to deploy any additional resources to the Backup Offering VPC.

4. Define the fields – Pricing plan, Service name, Resource group, your IBM Cloud API key, and Compass organization name according to your business needs. Also, specify the VPC subnet IP range that you want to use to access the Compass Vaults.

5. Click Create.

6. Compass creates and connects the Backup VPC to the Power Virtual Server workspace that you want to back up by using the local Transit Gateway. A Transit Gateway is created if it does not exist.

   For more information, see Ordering IBM Cloud Transit Gateway and Using virtual private endpoints for VPC to privately connect to IBM Cloud Transit Gateway.

7. Click Launch Compass UI that will redirect you to the Cobalt Iron Compass Commander page where you need to complete the setup. For more information, see Cobalt Iron documentation.

Pricing in IBM data center

When you use the Backup Offering, you are billed monthly through IBM Cloud for the amount of data that is backed up for the region. The backup data is the stored data after duplication and compression. For more information about pricing plans, see Cobalt Iron - Secure Automated Backup. The page is accessible from the IBM Cloud catalog. You can generate an estimate of the cost based on your expected usage from the Summary pane.

In your account, the following deployments are made:

• Establishes the connectivity between Power Virtual Server instances and the backup server through a Transit Gateway connection to the backup VPC. The automation when the Backup Offering is provisioned establishes this connection.

• Achieve the name resolution for the backup server connection by using the file on the agent system available at /etc/hosts path or by adding CNAME entries to the DNS server associated with the agent system.

Supported data centers

The single copy Backup Offering is available in the following data centers:

• DAL10
• DAL12
• FRA04
• FRA05
• MAD02
• MAD04
• OSA21
• SAO01
• SAO04
• SYD04
• SYD05
• TOK04
• WDC07
• WDC06

The dual copy Backup Offering is available in the following data center pairs: