/images/avatar.png

Cloud.Virt.AI.Sec

Cloud · Virt · AI · Sec

Welcome to Cloud.Virt.AI.Sec

VDP v12.1 Security Feature Deep Dive Series (Part 1) - Ransomware Detection

I’m genuinely excited to share this deep dive into Veeam Data Platform v12.1’s security enhancements. When Veeam released this major update late last year, they packed it with significant security features that deserve proper attention. Starting today, I’ll be exploring each of these capabilities in detail, breaking down how they work and how to make the most of them.

For this first installment, let’s dive into ransomware detection. In v12.1, Veeam introduced a comprehensive malware detection module that consists of two core components: Inline Entropy Scan and Index Scan. Both work together to provide multiple layers of protection against sophisticated attacks.

One-Click Deployment Script: K3S+vSphere CSI

I’ve previously shared two articles about using K10 for instant recovery of Kubernetes applications. This feature has specific requirements for Kubernetes environments. Back then, I walked you through the manual deployment process in detail. Today, I’m excited to bring you a one-click deployment script that makes everything incredibly simple.

If you have a basic VMware environment and can connect to GitHub/k8s.io networks, this script will be a game-changer. Just run the script, wait about 10 minutes, and you’ll have a ready-to-use single-node K3s environment.

Further Security Hardening for Ubuntu Systems Used as Veeam Hardened Repositories

After the release of Veeam v12, the official documentation provides methods for further system security hardening after building a Veeam hardened repository based on Ubuntu 20.04, and offers a fully automated configuration script. Therefore, after using my Configurator to build the Ubuntu repository, you can use this automated configuration script for more secure hardening.

Since the official script includes some US military compliance configurations that are not suitable for Chinese users, I have modified Veeam’s official script and republished it to make it suitable for Chinese users.

MySQL Backup and Restore Best Practices with Veeam

In the Veeam data protection platform, application support is extremely comprehensive, ranging from automatic application-aware processing for image-level backups to specialized application plugin backups. Veeam covers almost all mainstream data sources in the market. However, many people often wonder why MySQL backup isn’t prominently featured in the Veeam data protection platform. Today, I’ll explain what’s going on and how you should approach MySQL backup and recovery using Veeam.

MySQL Data Storage Engines

Before discussing MySQL backup, we need to talk about MySQL’s data storage engines because different engines directly determine MySQL’s data backup and recovery capabilities. In MySQL, InnoDB is the most commonly used storage engine by default. Tables created with the Create Table command without specifying an Engine parameter will use the InnoDB engine by default, and Oracle officially recommends using the InnoDB engine for typical MySQL usage unless there are special requirements. Of course, besides this engine, MySQL also supports other engines for special cases, such as MyISAM, MEMORY, CSV, BLACKHOLE, and others. For more information about storage engines, you can refer to the official documentation.

Veeam's Major H2 2023 Product Line Update

Just yesterday, Veeam officially GA’d the important updates for their entire data protection platform product line in the second half of this year. Almost every product has been updated with a new version. If you’re a Veeam power user, when you visit your Veeam homepage at https://my.veeam.com, you’ll see a full screen where all products show “New” status - these are all newly available versions released this week for download.

VRO Fundamentals (Part 10) - Implementing Fully Automated Container Disaster Recovery with VRO and K10