Backup units

IONOS offers you the possibility to set up and manage backups for your virtual servers. This is done in cooperation with a provider specializing in backup and recovery solutions (Acronis).

For this you need so-called "Backup Units", for the creation of which you need the corresponding permission.

You can create and manage Backup Units in the Backup Unit Manager.

When you create a Backup Unit, you assign name and password to it. They are required for logging on to the Backup Management Console in which you can manage your backups and backup schedules.

In order to create backups for a server, a backup agent needs to be installed that communicates with the backup system and assigns backups to the respective Backup Unit.

The communication between the server with the backup agent and the backup system requires an internet connection. Backups are stored in compressed form, which has a positive effect on costs. Backups are charged per Backup Unit.

Backup unit manager

The Backup Unit Manager allows you to create and manage the Backup Units you need for the setup of a backup system. Access to Backup Units can be controlled as with other resources. You can also log on to the Backup Management Console in the Backup Unit Manager.

To open it, go to:

Menu Bar > Resource Manager > Backup Unit Manage

There you can do the following:

Managing permissions

Permissions are required for certain actions in the DCD.

These are as follows:

  • Create data center.

  • Create snapshots.

  • Reserve IP blocks.

  • Access Activity-Log-API.

  • Create Cross Connect elements.

  • Use object storage.

  • Create Managed Kubernetes Clusters.

Contract owners and administrators have these permissions by default. They can manage and assign them to other users in the User Manager.

Prerequisites

  • You are logged on to the DCD. (?)​

  • You are the contract owner or an administrator. (?)​

How to manage permissions

  • Create a new group. (?)​

    • or -

  • Open an existing group.

    Menu Bar > Resource Mana Backupper > User Manager > Groups

  • Select the required group.

  • Grant permission:

    • In the Privileges tab, activate the checkbox of the appropriate privilege.

    • In the Members tab, add users to the group that you wish to authorize. (?)​

    Members of the selected group now have the required authorization.

  • Remove permission:

    • Remove user(s) from the group with the privilege in question.

      • or -

    • Deactivate the checkbox of the privilege for the group.

    The privilege is no longer available to the selected users.

Creating a backup unit

Setting up automated backups requires so-called Backup Units in which the backups of a group of servers are contained.

When you create a Backup Unit, you need to assign a name and a password. The name must be unique throughout your contract. The contract number is added automatically (format: <Contract number>-Name-name, e. g. 012345678-test).

Because Backup Units have an ACL (access control list), they can be shared with other users like other resources.

Backup Units are managed in the Backup Unit Manager.

Prerequisites

  • You are logged on to the DCD. (?)​

  • You are the contract owner or an administrator. (?)​

    • or -

  • You have the permission "Create Backup Units". (?)​

How to create a backup unit

  • In order to open the dialog for the creation of Backup Units, do the following:

    • Open the Backup Unit Manager.

      Menu Bar > Resource Manager > Backup Unit Manager

    • Click on + Create.

      • or -

    • Go to Menu Bar > Backup Console > Create Backup Unit.

      • or -

    • Prior to provisioning a new server using a IONOS image, you can create a Backup Unit in the settings.

      Inspector > Backup Unit > + Create Backup Unit.

  • In the dialog that appears, enter a unique name, a password and an e-mail address to which the backup systems may send status reports.

  • Confirm your entries by clicking Create unit.

    The Backup Unit is created.

You can now:

Managing access to resources

Users who are not contract owners or administrators need access rights to view, use, or edit resources in a virtual data center. These access rights are assigned to groups and inherited to group members.

Access to the following resources can be managed:

  • Data centers.

  • Images.

  • Snapshots.

  • Private Cross Connects.

  • IP addresses.

  • Managed Kubernetes Clusters.

Access rights

Users can access a resource with the following access rights:

  • Read: Users may see and use but not modify the resource. Read access is automatically granted as soon as a user is assigned to a group with this access right.

  • Edit: Users may modify and delete the resource.

  • Share: Users may share the resource including their access rights with groups to which they belong.

Resource owner

A user who created a resource is the owner of that resource and can specify its access rights.

The owner is shown in the Security tab of a resource.

Access restriction using 2-factor authentication

In addition to enabling access to resources for users of authorized groups only, data centers and snapshots can be even further protected by restricting access to users who have 2-factor authentication activated. Other users cannot see or select these resources - even if they belong to an authorized group.

See also:

Depending on their role, users can: set access rights

Set access rights at the resource level

Prerequisites

  • You are the contract owner or an administrator. (?)​

    • or -

  • You have permission to share the required resource. (?)​

  • You need to be a member of the group for which you want to specify the access rights of a resource.

  • You are logged on to the DCD. (?)​

How to set access rights at the resource level

  • Select the required resource:

    • Data Center: Open the data center. (?)​

    • Images: Menu Bar > Resource Manager > Image Manager >Image tab.

    • Snapshots: Menu Bar > Resource Manager > Image Manager > Snapshot tab.

    • IP addresses: Menu Bar > Resource Manager > IP Manager.

    • Cross-Connects: Menu Bar > Resource Manager > Cross Connect Manager.

    • Kubernetes Cluster: Menu Bar > Resource Manager > Kubernetes Manager

  • Select the required resource.

  • Open Security > Visible to Groups.

  • Enable access:

    • From the + Add Group menu, select the required groups.

      Read access is granted. Users may see and use, but not modify the resource.

    • (Optional) Select further permissions ("Edit", "Share"). You may only share permissions that you have yourself.

  • Restrict or disable access:

    • Select the required group.

    • Deactivate the check box of the permission.

      Read access is retained.

      • or -

    • Click on Remove group.

      Access is disabled for all members of the selected group.

  • (Optional) To protect the resource (data center, snapshots) more thoroughly by only allowing access to users whose login is secured with 2-factor authentication, activate the 2-Factor Protected check box. (?)​

Set access rights in the user manager

Contract owners and administrators can also define in the User Manager who may access a resource to what extent.

Prerequisites

  • You are the contract owner or an administrator. (?)​

  • You are logged on to the DCD. (?)​

How to set access rights in the user manager

  • Open the User Manager.

    Menu Bar > Resource Manager > User Manager

  • Assign groups to a resource

    • In the Resources tab, select the required resource.

    • Open the Visible to Groups tab.

    • Enable access:

      • From the + Add Group list, add the required groups.

      • (Optional) To enable write access or sharing of a resource, activate the respective check box.

    • Disable access:

      • Deactivate the checkbox of the permission.

        • or -

      • Click on Remove Group.

    • (Optional) To protect the resource (data center, snapshots) more thoroughly by only allowing access to users whose login is secured with 2-factor authentication, activate the 2-Factor Protected check box. (?)​

  • Assign resources to a group

    • In the Groups tab, select the required group.

    • Open the Resources of Group tab.

    • Enable access:

      • Select the required resource by clicking on + Grant Access.

        This enables read access to the selected resource.

      • (Optional) To enable write access or sharing of a resource, activate the respective check box.

    • Disable access:

      • Select the required resource.

      • Deactivate the check box of the appropriate permission.

        • or -

      • Click on Revoke Access.

Deleting a backup unit

If you no longer need a backup unit and its backups, you can delete them to save costs and space. Deleting a Backup Unit also deletes all backups it contains.

When you delete a server and its storage devices or an entire data center, their backups are not deleted automatically. Only when you delete a Backup Unit will the backups it contains be deleted, too.

If you no longer need the backups of deleted VMs and want to save costs, you need to delete them manually in the Backup Management Console.

Prerequisites

  • You are the contract owner or an administrator. (?)​

    • or -

  • You have permission to edit the desired backup unit. (?)

  • You are logged on to the DCD. (?)​

How to delete a backup unit

  • Open the Backup Unit Manager.

    Menu Bar > Resource Manager > Backup Unit Manager

  • Select the required Backup Unit.

  • Click on Delete.

  • In the dialog that appears, confirm your action by entering your password and clicking OK.

    The selected item is deleted and cannot be restored.

    The Backup Unit and the backups it contains are deleted.

Setting up backups

In order to create backups, you need so-called "Backup Units", which you can create in the Backup Unit Manager provided you have the corresponding user rights.

In order to create backups for a server, a backup agent needs to be installed that communicates with the backup system and assigns the backups to the respective Backup Unit. This requires an internet connection.

Backups can be set up in several ways:

Automatic installation

The automatic setup of backups can only be applied to new servers prior to their first provisioning with an image provided and supported by IONOS. The default backup schedule may be changed any time after installation.

Prerequisites

  • You are logged on to the DCD. (?)​

  • You are the contract owner or an administrator. (?)​

    • or -

  • You have permission to edit the required data center. (?)​

  • You have permission "Create Internet Access". (?)​

  • You have permission "Create Backup Unit". (?)

  • (Optional) A Backup Unit to which you have access is available. (?)​

  • The VDC is open. (?)​

How to setup automatic installation

  • Set up a new server. (?)​

  • Add a boot drive to the server. (?)​

  • Select a IONOS image.

    Inspector > Images > IONOS Images

  • In the Backup Unit field, select a Backup Unit to which you wish to assign the server

  • or -

  • When no Backup Unit is available, you may create one ( Inspector > Backup Unit > + Create Backup Unit) and assign it to the server.

  • (Optional) Connect the server to an internet access. (?)​

    If you do not add an internet access, the DCD will do this automatically once you provision your server.

  • (Optional) Make further changes to your data center.

  • Provision your changes.

    The server is provisioned, the backup agent is installed and the default backup plan activated.

    After provisioning, you may open the Backup Management Console and check the registration of the VM and the activation of automated backups.

You may run a backup right away:

The backup system sends out a status report e-mail on a regular basis:

You may change the default backup schedule any time.

Manual installation

It is possible to set up automated backups on an existing server, even on servers that have been provisioned with other than IONOS images. The details of the procedure depend on the operating system used.

Prerequisites

  • You have administrator rights on the required VM.

  • You have permission "Create Backup Unit". (?)

  • (Optional) A Backup Unit to which you have access is available. (?)​

How to setup manual installation

  • If no Backup Unit is available, create one. (?)​

  • Connect to the required server.

  • Open the Backup Management Console. (?)​

  • Download the backup agent for your OS.

  • Install the backup agent and follow the instructions.

  • Register the backup agent in the Backup Management Console using the code generated during installation if this has not been done automatically.

  • Enable backups for the VM.

    Automated backups according to the default backup schedule are set up.

    You may run a backup right away and change the default backup schedule any time.

    The backup system sends out a status report e-mail on a regular basis:

Example: Windows Server 2016

  • Create a Backup Unit if none is available

  • Download the backup agent in the Backup Management Console

    Add > Add Devices

  • Start the installation process and follow the instructions of the installation wizard

  • In the Backup Management Console register the VM with its backup agent

The VM is registered

  • Enable backups for the VM

Automated backups have been set up for the selected VM.

The Backup Management Console provides detailed information and instructions on installing backup agents and managing backups.

​​

1 - Acronis Web Help 2 - IONOS User Guide

Opening the backup management console to manage backups

For the management of your backups a graphical user interface is available: the Backup Management Console. Therein you can organize your backups and backup plans, activate backup agents, and generate tokens.

The Backup Management Console only allows you access to Backup Units for which you are authorized. The login is possible at one click (single sign on) directly from the DCD, or manually using the corresponding URL provided you know the login credentials of the required Backup Unit.

The Backup Management Console is only available in English.

Prerequisites

  • You are the contract owner or an administrator. (?)​

    • or -

  • You have permission to access the desired backup unit. (?)

  • You are logged on to the DCD. (?)​

  • Your browser allows pop-ups.

How to open the backup management console to manage backups

  • Start the Backup Management Console

    • from the Menu Bar of the DCD by selecting the required Backup Unit: ​

      • or -

    • from the Backup Unit Manager

      Menu Bar > Resource Manager > Backup Unit Manager ​

      • or -

    • use the corresponding URL https://backup.ionos.com and the credentials set when the Backup Unit was created. (?)​

    The Backup Management Console is created. You can now manage the backups and backup plans of the selected Backup Unit or add further devices.

The Backup Management Console provides detailed information and instructions on installing backup agents and managing backups.

​​

1 - Acronis Web Help 2 - IONOS User Guide