更新时间:2024-10-25 GMT+08:00

配置备份服务器

将一台安装了eBackup备份软件的服务器初始化为备份服务器,并配置相关参数。

前提条件

  • 安装前准备请提前规划备份服务器的相关网络平面参数。
  • 已准备跨平台远程访问工具如“PuTTY”。
  • 已获取eBackup服务器“root”账号的登录密码。

操作步骤

  1. “root”账号登录待配置的eBackup服务器。

    “root”账号初始密码为“Cloud12#$”

    使用跨平台访问工具登录,或在VMware vSphere Client工具中的控制台登录。

  2. 执行cd 备份软件安装包所在目录命令进入初始配置脚本目录。

    备份软件安装包所在目录为/opt/eBackup_8.0.0-LHC01/action。

  3. 执行sh ebackup_utilities.sh config命令,开始进行初始化配置。

    回显如下信息。

    Please select network type for this machine:
     1.ipv4
     2.ipv6

  4. 输入“1”,按“Enter”。

    1
    Please select a role for this machine:
     1.Backup Server 
     2.Backup Proxy 
     3.Backup Manager 
     4.Backup Workflow Server 

  5. 输入“1”,按“Enter”。

    1
    ===================================================================================================
    Note:
    In the following steps you will be required to configure four network planes for eBackup.
    The definition of each network plane is as follows:
    Backup management plane: the communication plane for eBackup to provide external services.
    Internal communication plane: the communication plane between backup server and backup proxy.
    Production management plane: the communication plane between eBackup and the management plane of the production end.
    Storage plane: the communication plane between eBackup and the storage plane of the production end and communication plane between eBackup and backup storage.
    ====================================================================================================
    
    Set network adapter for 'Backup management' network plane:
    [1] bond1 MAC=28:6E:D4:88:C6:F2 IP=192.168.1.10 MASK=255.255.254.0 
    [2] bond2 MAC=28:6E:D4:88:C6:F3 IP=10.10.1.10 MASK=255.255.254.0 
    Which network adapter from the above list would you like to bind to the 'Backup management' network plane?

  1. 配置备份服务器网络平面。

    此处需要为备份服务器的五个网络平面绑定相应的网卡,具体绑定哪张网卡请根据规划网络中的网络规划进行选择。

    本节以备份服务器配置两张网卡,备份管理平面、生产管理平面、内部通信平面、生产存储平面绑定在同一张网卡,备份存储平面绑定在一张网卡为例说明。

    1. 选择备份管理平面需要绑定的网卡,按“Enter”。

      如果选择bond1作为备份管理平面需要绑定的网卡,请输入“1”。

      1
      Set network adapter for 'Internal communication' network plane:
      [1] bond1 MAC=28:6E:D4:88:C6:F2 IP=192.168.1.10 MASK=255.255.254.0 
      [2] bond2 MAC=28:6E:D4:88:C6:F3 IP=10.10.1.10 MASK=255.255.254.0 
      Which network adapter from the above list would you like to bind to the 'Internal communication' network plane?
    2. 选择内部通信平面需要绑定的网卡,按“Enter”。
      1
      Set network adapter for 'Production management' network plane:
      [1] bond1 MAC=28:6E:D4:88:C6:F2 IP=192.168.1.10 MASK=255.255.254.0 
      [2] bond2 MAC=28:6E:D4:88:C6:F3 IP=10.10.1.10 MASK=255.255.254.0 
      Which network adapter from the above list would you like to bind to the 'Production management' network plane?
    3. 选择生产管理平面需要绑定的网卡,按“Enter”。
      1
      Set network adapter for 'Production Storage' network plane:
      [1] bond1 MAC=28:6E:D4:88:C6:F2 IP=192.168.1.10 MASK=255.255.254.0 
      [2] bond2 MAC=28:6E:D4:88:C6:F3 IP=10.10.1.10 MASK=255.255.254.0 
      Which network adapter from the above list would you like to bind to the 'Production Storage' network plane?    
    4. 选择生产存储平面需要绑定的网卡,按“Enter”。
      1
      Set network adapter for 'Backup Storage' network plane:
      [1] bond1 MAC=28:6E:D4:88:C6:F2 IP=192.168.1.10 MASK=255.255.254.0 
      [2] bond2 MAC=28:6E:D4:88:C6:F3 IP=10.10.1.10 MASK=255.255.254.0 
      Which network adapter from the above list would you like to bind to the 'Backup Storage' network plane?
    5. 选择备份存储平面需要绑定的网卡,按“Enter”。
      2
      Enter a floating IP address that is in the same network segment as the internal communication plane.
    6. 设置浮动IP地址。

      浮动IP地址为内部通信平面浮动IP地址。请确保浮动IP地址跟内部通信平面IP地址在同一网段中,且未被使用。

      回显如下信息,表示配置成功。

      192.168.1.12
      Configuration succeeded.
      grep: this version of PCRE is compiled without UTF support
      The ebk_accelerator agent of OceanStor BCManager eBackup was started successfully.
      Start:ebk_accelerator service succeeded.
      start reload gaussdb
      grep: this version of PCRE is compiled without UTF support
      The ebk_backup agent of OceanStor BCManager eBackup was started successfully.
      Start:ebk_backup service succeeded.
      grep: this version of PCRE is compiled without UTF support
      The ebk_copy agent of OceanStor BCManager eBackup was started successfully.
      Start:ebk_copy service succeeded.
      grep: this version of PCRE is compiled without UTF support
      The ebk_delete agent of OceanStor BCManager eBackup was started successfully.
      Start:ebk_delete service succeeded.
      grep: this version of PCRE is compiled without UTF support
      The ebk_mgr agent of OceanStor BCManager eBackup was started successfully.
      Start:ebk_mgr service succeeded.
      grep: this version of PCRE is compiled without UTF support
      The ebk_restore agent of OceanStor BCManager eBackup was started successfully.
      Start:ebk_restore service succeeded.
      grep: this version of PCRE is compiled without UTF support
      The ebk_vmware agent of OceanStor BCManager eBackup was started successfully.
      Start:ebk_vmware service succeeded.
      
      service hcp start:completed
      You can access the eBackup UI using the following link.
       https://192.168.1.10:8088 or 192.168.1.10
      Alternatively, you can access the eBackup CLI through SSH session.

  2. 依次执行以下命令进行安全加固。

    加固后禁止使用“root”账号直接登录,请使用“hcp”账号登录,“hcp”账号的初始密码为“PXU9@ctuNov17!”

    cd /opt/huawei-data-protection/ebackup/bin/StandardHardening

    echo -e "yes\nyes\n"|./StandardSuseHardening.sh

    • 执行该命令会重启eBackup服务器,如需登录eBackup服务器请您稍后重试。
    • 执行安全加固后,执行date命令查看当前时间,需要确保当前时间与选择目标上云region的时间保持一致,如果偏差 10min以上可能会导致备份失败。

  3. (可选)如果备份上云的带宽小于100Mbits,可能会因网络质量导致备份失败,为了降低失败概率,可以执行如下命令,优化部分参数:

    vim /opt/huawei-data-protection/ebackup/microservice/ebk_vmware/conf/hcpconf.ini

    查找并修改如下三个参数

    ProductStorageMemoryPoolBlockNum 从64修改为8

    BackupStorageMemoryPoolBlockNum 从64修改为8

    CommonTaskUsingMaxThread4Backup 从8修改为2

    执行上述参数修改后,执行如下命令重启进程生效:

    cd /opt/huawei-data-protection/ebackup/microservice/ebk_vmware/script

    sh ebackup_stop.sh

    sh ebackup_start.sh

    备份带宽的规划应该与备份数据量正相关,如果备份数据量较大而带宽较小,可能会出现备份时间过长的情况。