Yandex Cloud
Search
Discuss with expertTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
    • Cloud Interconnect
    • Cloud Backup
    • Cloud Registry
    • Yandex AI Studio
    • Compute Cloud
    • Object Storage
    • Managed Service for Kubernetes®
    • Yandex BareMetal
    • Smart Web Security
    • Security Deck
    • Managed Service for PostgreSQL
    • Managed Service for ClickHouse®
    • Monium
    • Cloud CDN
    • Network Load Balancer
    • Virtual Private Cloud
    • Cloud DNS
    • Application Load Balancer
    • Yandex Cloud Video
    • Stackland
    • Yandex Cloud Router
    • Yandex Managed Service for Trino
    • Managed Service for MySQL®
    • Managed Service for Valkey™
    • Managed Service for Apache Spark™
    • Yandex StoreDoc
    • Managed Service for OpenSearch
    • Managed Service for Apache Kafka®
    • Data Transfer
    • Yandex MPP Analytics Engine for PostgreSQL
    • Yandex Managed Service for Apache Airflow®
    • Data Processing
    • Yandex MetaData Hub
    • Managed Service for YDB
    • Managed Service for Sharded PostgreSQL
    • Managed Service for YTsaurus
    • Yandex WebSQL
    • DataLens
    • Yandex Search API
    • SpeechSense
    • SpeechKit
    • DataSphere
    • Vision OCR
    • Translate
    • Yandex Identity Hub
    • Key Management Service
    • Certificate Manager
    • Yandex Lockbox
    • Audit Trails
    • SmartCaptcha
    • Cloud Desktop
    • SourceCraft Code Assistant
    • Container Registry
    • Managed Service for GitLab
    • Managed Service for Prometheus®
    • Cloud Functions
    • API Gateway
    • Yandex Cloud Postbox
    • Message Queue
    • Serverless Integrations
    • IoT Core
    • Data Streams
    • Serverless Containers
    • Cloud Notification Service
    • Yandex Query
    • Identity and Access Management
    • Yandex Cloud Console
    • Resource Manager
    • Yandex Cloud Billing
    • Yandex Cloud Quota Manager
    • Cloud Apps
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Yandex Cloud Backup
    • All guides
    • Activating the service
    • Restoring the Cloud Backup agent
    • Viewing operations on service resources
    • Limiting RAM usage by the Cloud Backup agent
    • Viewing backup statistics
    • Setting up Monium alerts
    • Overview
      • Overview
      • Compute Cloud VM
      • Servers BareMetal
      • VMs and servers outside Yandex Cloud
    • Backup policies
    • Backups
    • Interaction with an antivirus
    • Cloud Backup agent
    • Quotas
  • Access management
  • Pricing policy
  • Terraform reference
  • Monitoring metrics
  • Audit Trails events
  • Release notes
  • Troubleshooting

In this article:

  • Supported Cloud Marketplace images with automatic installation of the Cloud Backup agent
  • Unaided installation on a supported operating system
  • Updating the operating system kernel
  • Service account
  • Network access permissions
  • Connection statuses
  1. Concepts
  2. Connecting resources to Cloud Backup
  3. Servers BareMetal

Connecting Yandex BareMetal servers to Cloud Backup

Written by
Yandex Cloud
Updated at July 29, 2026
View in Markdown
  • Supported Cloud Marketplace images with automatic installation of the Cloud Backup agent
    • Unaided installation on a supported operating system
    • Updating the operating system kernel
  • Service account
  • Network access permissions
  • Connection statuses

To back up your BareMetal servers in Cloud Backup, you need them connected to the service and properly set up.

For more on connecting BareMetal servers to Cloud Backup, see Managing BareMetal servers in Cloud Backup.

For the Cloud Backup connection to work correctly, link to the server a service account with the baremetal.editor and backup.user roles or higher and configure network access.

After you connect it to Cloud Backup, link the BareMetal server to a backup policy.

Note

At the time of creating a backup, the BareMetal server must be running.

You can also link a policy to a BareMetal server when ordering the latter. A policy is linked asynchronously after you create and initialize a server and after you install and configure the Cloud Backup agent. This may take up to 10-15 minutes.

Supported Cloud Marketplace images with automatic installation of the Cloud Backup agentSupported Cloud Marketplace images with automatic installation of the Cloud Backup agent

On BareMetal servers, the Cloud Backup agent is available for automatic installation if ordering servers using the following Cloud Marketplace images:

  • CentOS 7
  • Debian 11
  • Ubuntu 18.04 LTS
  • Ubuntu 20.04 LTS
  • Ubuntu 22.04 LTS
  • Ubuntu 24.04 LTS

Note

The OS must be installed from a public image (a Yandex Cloud Marketplace product).

Unaided installation on a supported operating systemUnaided installation on a supported operating system

You can install the Cloud Backup agent manually on a BareMetal server running one of these operating systems:

  • CentOS 7.
  • Debian 11.
  • Ubuntu 16.04 LTS.
  • Ubuntu 18.04 LTS.
  • Ubuntu 20.04 LTS.
  • Ubuntu 22.04 LTS.
  • Ubuntu 24.04 LTS.

To install the agent on a server, follow this guide on connecting a BareMetal server to Cloud Backup.

If you have issues installing the Cloud Backup agent, contact support.

Updating the operating system kernelUpdating the operating system kernel

Updating the Linux kernel on a resource connected to Cloud Backup may affect the performance of the Cloud Backup agent: it will not be able to create a backup of the resource or recover it from a backup.

This may affect the agent’s performance, since the SnapAPI module (developed by the backup provider for the agent to work with disks and built by the DKMS framework for a specific Linux kernel) may not update after updating the kernel and may therefore cease to match the kernel version.

To restore the Cloud Backup agent’s performance affected by a Linux kernel update, you need to update the version of the Linux kernel headers DKMS refers to when building the SnapAPI module. Once the kernel header version matches the kernel version, DKMS will rebuild the SnapAPI module for the required Linux kernel version at the next start of the resource.

To upgrade the Linux kernel header version, follow this guide on restoring the Cloud Backup agent on a BareMetal server.

Service accountService account

A service account is a special account the Cloud Backup agent uses to get registered with the Cyberprotect provider.

When renting a BareMetal server you want to configure backups for in Cloud Backup, you need to link to it a service account with the baremetal.editor and backup.user roles or higher.

You can assign the role to an existing service account or create a new service account with required roles.

Network access permissionsNetwork access permissions

For the Cloud Backup agent to be able to exchange data with the backup provider servers, make sure the BareMetal server has network access to the IP addresses of the Cloud Backup resources as per the table below:

Outgoing traffic
Port range Protocol Destination name IPv4 CIDR
80 TCP Address range 213.180.193.0/24
80 TCP Address range 213.180.204.0/24
443 TCP Address range 84.47.172.0/24
443 TCP Address range 84.201.181.0/24
443 TCP Address range 178.176.128.0/24
443 TCP Address range 213.180.193.0/24
443 TCP Address range 213.180.204.0/24
7770-7800 TCP Address range 84.47.172.0/24
8443 TCP Address range 84.47.172.0/24
44445 TCP Address range 51.250.1.0/24

Tip

When installing the Cloud Backup agent on your BareMetal server, you may need to install some missing software components from the internet. To have this done, allow all incoming network traffic for the network interface connected to the public network for as long as the installation continues. Once the Cloud Backup agent is installed, you can restrict network traffic once again in line with the network access permissions mentioned above.

To provide network access:

  • When renting a server, select From ephemeral subnet or From a dedicated subnet in the Public address field to assign a public IP address to the server.
  • Make sure the sever network settings do not block outgoing traffic to the resources specified above.

Connection statusesConnection statuses

You can view the server connection to Cloud Backup status info in the management console on the server list page in BareMetal. The following statuses are available:

  • Connected: Cloud Backup is connected to the server, backups are being created as per the specified policies, the Cloud Backup agent is online.
  • No backup policy: Cloud Backup is connected, but there are no associated policies; no backups are being created.
  • Failed: Agent is offline, or agent registration failed.
  • Not connected: Cloud Backup is not connected to the server.

See alsoSee also

  • Managing BareMetal servers in Cloud Backup
  • Connecting Yandex Compute Cloud VMs to Cloud Backup
  • Connecting VMs and servers from outside Yandex Cloud to Cloud Backup

Was the article helpful?

Previous
Compute Cloud VM
Next
VMs and servers outside Yandex Cloud
© 2026 Direct Cursus Technology L.L.C.