Skip to main content

AWS Backup for VMware Cloud on AWS workloads - The Design

This blog post provides the high level design for implementing the Native AWS Backup to protect the VMware Workloads hosted on VMware Cloud on AWS. 


VMware Cloud on AWS

VMware Cloud on AWS enables customers to deploy the SDDC and consume vSphere workloads as a managed service on AWS global infrastructure. VMC is a jointly engineered solution by VMware and AWS that provides customers with a true hybrid cloud experience.

As customers continue to adopt VMware Cloud on AWS, data protection for the VMs and workloads hosted on the VMC SDDC is becoming increasingly important. Customers should also be able to comply with data regulations and manage backup costs effectively.

This post will go over the design considerations and best practices for enabling Native AWS Backup for VMs hosted on VMC SDDC. We'll go over different architecture design options and use cases that address customer needs.

AWS Backup for VMware

We can centrally protect our VMware workloads hosted on VMC SDDC thanks to AWS Backup support for VMware. AWS Backup enables us to demonstrate the status of compliance with our organizational data protection policies by monitoring backup, copy, and restore operations and generating unified auditor-ready reports to help us meet data governance and regulatory requirements. 

How does AWS Backup work with VMware SDDC


AWS Backup connects to VMware workloads via the AWS Backup gateway, which we will deploy in our VMC SDDC Compute Cluster. AWS Backup gateway discovers VMs via VMware vCenter Server, takes VM snapshots, and manages backup and restore data between AWS Backup and the VMC SDDC. We can assign VMs to your backup policies using tags, VM Resource IDs, or group assignment by VM folder or hypervisor, which centrally govern data protection of VMware VMs with supported AWS Backup services. Following these steps, AWS Backup begins securely backing up VMs into AWS Backup's storage vaults. You can view your VMware backups in AWS Backup and restore them on-premises, to VMware Cloud on AWS, VMware Cloud on AWS Outposts, Amazon EBS, or Amazon EC2 as needed. 

The detailed deployment steps to be followed in the next blog post. 

Deciding the Network path for the Backup traffic 


The great advantage of VMware Cloud on AWS is that it can integrate seamlessly with native AWS services like AWS backup. During the SDDC onboarding process, customers are able to establish high-bandwidth and low-latency connectivity to a designated VPC, which is often referred to as the connected VPC. This connectivity is established using cross-account Elastic Network Interface (ENI) between the NSX Edge appliance in the VMware-managed shadow account and a subnet within the AWS connected VPC in the customer-managed account. 

Advantage of ENI


Virtual machine workloads running on the VMC SDDCs and accessing native services hosted in the connected VPC (AWS Backup) will use the ENIs rather than the VMware Transit Connect, improving operations efficiency and lowering data transfer costs.

Because the VM backup size is large (daily, weekly, and monthly), it is recommended to use ENI to avoid cluttering the network bandwidth of VPN, Direct Connect, VMware Transit Connect, or the Internet path. 


The Architecture 






The detailed deployment steps to be followed in the next blog post. 
Labels:
Location: Amsterdam, Netherlands

Popular posts from this blog

Fixing Tanzu Kubernetes Pod to External Services Connectivity Issues with NSX-T

Fixing Tanzu Kubernetes Pod to External Services Connectivity Issues with NSX-T Last month I got a call from a customer who was pulling their hair out over a networking issue. They had just deployed VMware Tanzu Kubernetes Grid on their vSphere with Tanzu environment, everything looked good in the dashboards, all pods were running, but their applications inside the pods could not reach external databases running on traditional VMs in the same datacenter. The frustrating part was that some pods could reach external services perfectly fine, while others would just timeout. There was no clear pattern. Let me tell you how we figured this out and fixed it. The Initial Problem Here is what the customer setup looked like: vSphere 8.0 with Tanzu enabled NSX-T 4.1.2 for networking Three Tanzu Kubernetes clusters running different microservices applications External PostgreSQL database running on traditional VMs (non-Kubernetes) External API services running on another se...
Read more

Troubleshooting vSAN Storage Policy Migration Failures in VMware Cloud Foundation 9.0

Recently I had a customer who migrated their VMware infrastructure from vSphere 7.0 to VMware Cloud Foundation 9.0. After the migration, they wanted to update their vSAN storage policies to take advantage of the new vSAN ESA (Express Storage Architecture) features. However, when they tried to change the storage policy for their production VMs, the operation kept failing with a cryptic error message. The error they were getting was: "Cannot complete operation due to insufficient resources to satisfy current storage policy." This was strange because they had plenty of disk space available. The vSAN cluster was only at 45% capacity, and all the hosts were healthy. Let me walk through how we troubleshooted and fixed this issue. Understanding the Problem First, let's understand what was happening in their environment: They had a 6-node vSAN cluster running VCF 9.0 vSAN was configured with the new ESA architecture They were trying to migrate VMs fro...
Read more

Unlocking VMware Cloud Foundation 9.0: A Strategic Blueprint for Enterprise Transformation

The evolution of VMware under Broadcom represents not disruption, but clarification—a focused vision toward unified private cloud excellence. As organizations navigate this transformation, the opportunity has never been greater to build truly modern, efficient, and powerful infrastructure with VMware Cloud Foundation. After architecting VMware solutions across diverse enterprise environments, I've observed a pattern: organizations that embrace VMware Cloud Foundation (VCF) strategically—rather than viewing the transition as a burden—emerge with significantly more capable, cost-effective, and future-ready infrastructure. This post shares a practical framework for successfully modernizing your VMware environment, maximizing your investment, and positioning your organization for the AI-driven, cloud-native future. Understanding the VMware Cloud Foundation Vision Let's start with clarity about what Broadcom and VMware are building: VMware Cloud Foundati...
Read more