No history yet

Core Architecture and Proxies

The Control Plane

The Veeam Backup Server is the brain of the entire operation. Think of it as the air traffic controller for your data protection strategy. It doesn't move the data itself, but it orchestrates everything. Its primary jobs are to manage backup jobs, track scheduling, and maintain the central configuration database, which holds all the information about your infrastructure, job settings, and backup history.

The Backup Server is the central management component. It's responsible for coordinating tasks, but the actual data processing is delegated to other components.

This server runs the Veeam Backup & Replication console and the core services that ensure jobs run on time and that all components are working together. Because it's so critical, the performance and availability of the Backup Server directly impact the reliability of your entire backup infrastructure. It's the single pane of glass for monitoring, reporting, and restoring data.

The Workhorses

If the Backup Server is the brain, then Backup Proxies are the muscle. These are the components that perform the heavy lifting. A proxy's job is to retrieve data from the source datastore, process it (compressing and deduplicating), and then send it to the backup repository. This distributed architecture allows Veeam to scale efficiently. Instead of overwhelming the Backup Server, you can deploy multiple proxies to handle the workload.

Lesson image

Sizing a proxy is critical for performance. The main constraint is the number of concurrent tasks it can handle. A good rule of thumb is to allocate one task per physical CPU core. For example, a proxy server with an 8-core CPU can typically process 8 VM disks simultaneously. You should also ensure the proxy has enough RAM, usually 2 GB per task, to handle the processing overhead.

Placement is just as important as sizing. For optimal performance, proxies should be located as close to the source data as possible to minimize network latency.

How Data Moves

A proxy can retrieve data from your virtual environment in several ways, known as transport modes. The mode Veeam chooses depends on your infrastructure and the proxy's configuration. The goal is always to move data as efficiently as possible, with the least impact on your production environment.

The most efficient method is Direct Storage Access (DSA). In this mode, the proxy connects directly to the storage area network (SAN) or NFS share where the VM disks reside. By bypassing the ESXi host's network stack, it can read data at the speed of the storage fabric. This provides the fastest data transfer rates and has a minimal impact on the virtualization hosts.

Another powerful method is the Virtual Appliance mode, commonly called HotAdd. This mode is used when the proxy is a virtual machine running on the same ESXi host as the VMs it's backing up. During the backup, Veeam attaches the target VM's disk to the proxy VM as a virtual hard disk. The proxy can then read the disk data as if it were a local disk, which is much faster than sending it over the network.

When the first two modes aren't possible, Veeam falls back to Network Mode, or . In this mode, the ESXi host reads the data from the datastore and sends it over the management network to the proxy. While NBD is universally compatible and always available, it's the slowest of the three modes and puts additional load on your production network and ESXi hosts.

Transport ModeHow It WorksBest ForPerformance
Direct Storage AccessProxy reads directly from SAN/NFSFibre Channel or iSCSI SANs, NFSHighest
Virtual Appliance (HotAdd)Attaches VM disk to a virtual proxy100% virtualized environmentsHigh
Network (NBD)Data travels over the management networkAll environments (fallback)Lowest

Application-Aware Processing

Backing up a running server isn't as simple as copying files. Applications like Microsoft SQL Server or Active Directory are constantly writing to their databases. If you just back up the disk files, you might capture the database in an inconsistent, unusable state.

To solve this, Veeam uses application-aware processing. It relies on a special type of proxy called a Guest Interaction Proxy to communicate with the guest operating system of the VM being backed up. This proxy injects a small process into the VM that coordinates with Microsoft's (VSS). VSS tells the running applications to pause their I/O and flush their memory caches to disk, creating a perfectly consistent state for the backup.

Application-aware processing is essential for guaranteeing the recoverability of transactional applications. It turns a crash-consistent backup into an application-consistent one.

By distributing the data moving and processing tasks across multiple proxies, you can build a highly concurrent and scalable architecture. The Backup Server intelligently assigns tasks to available proxies based on their workload and proximity to the data source. This allows you to protect large, complex environments without creating performance bottlenecks.

Quiz Questions 1/6

What is the primary role of the Veeam Backup Server?

Quiz Questions 2/6

You are deploying a new Veeam Backup Proxy on a virtual machine with 8 vCPUs. According to the recommended sizing guidelines, how many concurrent tasks can this proxy handle, and how much RAM should be allocated for those tasks?

Understanding this distributed architecture is the key to designing a Veeam deployment that is both powerful and efficient.