Connecting VMs and servers from outside Yandex Cloud to Cloud Backup
With Yandex Cloud Backup, you can create backups of external resources, i.e., servers or VMs, located outside Yandex Cloud.
Cloud Backup allows you to store backups of your resources in our highly available and fault-tolerant Yandex Object Storage as well as manage backups and restore your resources using native Yandex Cloud interfaces. You can also use Cloud Backup to streamline the migration of VMs and servers from your infrastructure or a third-party provider infrastructure to the Yandex Cloud infrastructure.
To create backups of external VMs or servers, you need to install the Cloud Backup agent on those VMs or servers.
Note
To install the Cloud Backup agent, you need the backup.user role or higher.
For more on installing the Cloud Backup agent on VMs or servers located outside Yandex Cloud, see Connecting a VM or server from outside Yandex Cloud to Cloud Backup.
After installing the Cloud Backup agent, link your VM or server to a backup policy.
Supported operating systems
Currently, the Cloud Backup agent can be installed on VMs and servers running the following operating systems:
- CentOS 7.
- Debian 11.
- Ubuntu 16.04 LTS.
- Ubuntu 18.04 LTS.
- Ubuntu 20.04 LTS.
- Ubuntu 22.04 LTS.
- Ubuntu 24.04 LTS.
For a complete list of supported operating systems, see the backup provider documentation.
Updating the operating system kernel
Updating the Linux kernel on a resource connected to Cloud Backup may affect the performance of the Cloud Backup agent: it will not be able to create a backup of the resource or recover it from a backup.
This may affect the agent’s performance, since the SnapAPI module (developed by the backup provider for the agent to work with disks and built by the DKMS framework for a specific Linux kernel) may not update after updating the kernel and may therefore cease to match the kernel version.
To restore the Cloud Backup agent’s performance affected by a Linux kernel update, you need to update the version of the Linux kernel headers DKMS refers to when building the SnapAPI module. Once the kernel header version matches the kernel version, DKMS will rebuild the SnapAPI module for the required Linux kernel version at the next start of the resource.
For information on how to upgrade the Linux kernel header version, see Recovering the Cloud Backup agent after a Linux kernel update.
Network access permissions
For the Cloud Backup agent to be able to exchange data with the backup provider servers, make sure the VM or server has consistent internet access and network access to the IP addresses of the Cloud Backup resources as per the table below:
| Port range | Protocol | Destination name | IPv4 CIDR |
|---|---|---|---|
80 |
TCP |
Address range |
213.180.193.0/24 |
80 |
TCP |
Address range |
213.180.204.0/24 |
443 |
TCP |
Address range |
84.47.172.0/24 |
443 |
TCP |
Address range |
84.201.181.0/24 |
443 |
TCP |
Address range |
178.176.128.0/24 |
443 |
TCP |
Address range |
213.180.193.0/24 |
443 |
TCP |
Address range |
213.180.204.0/24 |
7770-7800 |
TCP |
Address range |
84.47.172.0/24 |
8443 |
TCP |
Address range |
84.47.172.0/24 |
44445 |
TCP |
Address range |
51.250.1.0/24 |
Make sure the VM or sever network settings do not block outgoing traffic to the specified resources.
Tip
When installing the Cloud Backup agent on your VM or server, you may need to install some missing software components from the internet. To have this done, allow all outgoing network traffic for the network interface for as long as the installation continues. Once the Cloud Backup agent is installed, you can restrict network traffic once again in line with the permissions required for the agent to operate.