> Essential > Virtualization > Google Cloud Platform

System Requirements for Protecting Google Cloud Platform Instances

Verify that your environment meets the system requirements for protecting Google Cloud Platform (GCP) instances with Commvault.

Commvault Packages

Access nodes for GCP instances must have the Virtual Server Agent package installed.

Deployment and Other Requirements

Access nodes for GCP instances must be present on Google Cloud. You can designate one access node to back up instances from multiple projects (to which access rights are provided in your GCP service account). For faster backups and restores, designate at least one access node for every GCP region.

Important

You must enable the Cloud Resource Manager API. If you do not enable the API, all backup jobs will fail (including backup jobs for clients that were created in a previous release).

Important

You can define discovery rules by a project parameter, in addition to region and zone parameters.

If an environment has discovery rules that are defined using zone or region parameters, then the following are true:

  • Multiple projects can fall within a region or a zone.

  • All instances in those multiple projects are backed up.

In this situation, backups might include instances that do not need to be backed up, and so incur unnecessary costs. Review all rules to ensure that only instances that need to be backed up are backed up.

Operating System Requirements

Access nodes for GCP instances must run one of the following operating systems.

Linux Access Nodes

  • Install the Virtual Server Agent on a Linux machine that runs any of the following operating systems:

    • CentOS Linux 7.4, 7.5, 7.6, 7.7, 7.8, or 7.9, (x64)

    • Red Hat Enterprise Linux (RHEL) 7.4, 7.5, 7.6, 7.7, 7.8, 7.9, 8.x, or 9.x, (x64, ARM)

      Note:

      • For RHEL/OEL 9.0 and 9.1 VSA access nodes, if the libssl.so.3 and libcrypto.so.3 VDDK 8.0.1 load fails, upgrade openssl-libs to the latest version to use VDDK 8.0.1. Upgrading will protect the VMware workloads.

      • To use a machine that runs RHEL 7.7 as a VSA proxy, you must install the pcre-devel-8.32-17.el7.x86_64 package.

    • Rocky Linux 8.x or 9.x

Windows Access Nodes

  • Microsoft Windows Server 2022 x64 Editions (Standard, DataCenter, and Core)

  • Microsoft Windows Server 2019 (Standard, Datacenter) (64-bit only) x64 Editions (Standard, DataCenter, and Core)

  • Microsoft Windows Server 2016 x64 Editions (Standard, DataCenter, and Core)

  • Microsoft Windows Server 2012 R2 x64 Editions

Note

Due to a limitation with Microsoft Storage Spaces, a Windows access node that has the same or higher OS version as the source VM cannot protect the guest VM. To address this, you can either use a lower Windows OS version or switch to a Linux access node to perform the operations.

Firewall Requirements

Tunnel ports (for example, 8400 and 8403) must be opened in the security group for the instance to enable installation of the VSA package to GCP instances and communication with the CommServe system.

If you deploy a CommServe host in an environment with firewalls, create a persistent route from the CommServe host to the access node, as documented in Setting Up a Network Gateway Connection Using a Predefined Network Topology.

If a firewall access node is installed, configure Internet options for the firewall access node machine. On the HTTP Proxy tab of the Internet Options dialog box, enter the user name and password for the firewall access node machine, using only the user name and not including the domain name with the user name.

To access GCP backup and restore services, incorporate the following URLs in your firewall or access node settings:

  • https://compute.googleapis.com/compute/v1/projects

  • https://content-cloudkms.googleapis.com/v1

  • https://cloudresourcemanager.googleapis.com/v1

  • https://storage.googleapis.com

  • https://storage.googleapis.com/storage/v1/b

  • https://storage.googleapis.com/upload/storage/v1/b

Configuring a Firewall to Install the VSA Package on a Cloud VM or Instance

To deploy the access node or MediaAgent on a cloud VM or instance when other components (such as the CommServe host) are on premises <Category>, configure a firewall for an access node in the cloud between the on premises components and the cloud VM or instance.

Hardware Specifications

For information about hardware requirements for the Virtual Server Agent, see Hardware Specifications for Virtual Server Agent.

DISCLAIMER

Certain third-party software and service releases (together, "Releases") may not be supported by Commvault. You are solely responsible for ensuring Commvault’s products and services are compatible with any such Releases.

Loading...