ARTESCA Blog | Backup, recovery and cyber resilience

Hyper-V backups: Planning the path to object storage

Written by Joshua Silvia | Sep 20, 2026, 3:55:22 AM

Hyper-V backups reach object storage through a path that resembles the VMware one in outline and differs in every detail that matters operationally. Processing may happen on the host itself or on a separate server. Change tracking may come from the hypervisor or from a driver the backup software installs. And in a cluster, the volume a virtual machine lives on may be owned by a node other than the one running it.

Those three differences decide where backup traffic actually flows, which governs proxy and gateway placement when the target is a bucket rather than a local disk. Copying a VMware design onto a Hyper-V cluster produces a path that works and then behaves unpredictably the first time a machine moves between nodes.

The useful exercise is the same in either platform. Name every hop, decide what governs throughput at each, and note what changes when the cluster reconfigures itself.

On host and off host processing

Hyper-V backups are processed either on the hypervisor host or on a separate server. With on host processing, the backup software runs its components on the cluster node itself, so reading, compressing and encrypting the data consume resources on a machine that is also running production workloads. That is simple to deploy and common, but backup processing and virtual machine performance then draw from the same pool during the backup window.

Off host processing moves that work to a dedicated server. The volume is snapshotted through a hardware provider, the snapshot is presented to the off host server, and processing happens there with no load on the node running the machines. The cost is a set of prerequisites: shared storage with a provider capable of transportable snapshots, and visibility of those volumes from that server. When a prerequisite stops being met, the software usually falls back to on host processing and keeps succeeding.

The decision belongs in the design rather than the tuning phase. It also interacts with concurrency, since on host processing spreads work across nodes automatically while an off host server concentrates it in one place that can be sized deliberately.

How change tracking is provided

Incremental backups depend on knowing which blocks changed since the last run. On Hyper-V that comes either from the hypervisor's own change tracking or from a filter driver the backup software installs on the host. Which mechanism applies depends on the host platform and the backup software in use, and they differ under failure rather than in normal operation.

What both share is that tracking can be invalidated. A host restart, a migration, a checkpoint operation or an upgrade can reset it, and the next incremental then reads the full contents of the machine. The job type still reports incremental and the job still succeeds. Only the comparison of data read against data transferred reveals it, which makes that pair the first thing to check when a backup window grows for one night and returns to normal afterward.

In a cluster this matters more than on a standalone host, because migrations are routine. A maintenance evening that drains three nodes can leave much of the estate reading in full on the next run, with correspondingly more capacity written to the object repository.

Clustered shared volumes and where the traffic flows

A clustered shared volume is visible to every node, but one node owns it for metadata purposes. Under normal operation each node performs its own data input and output directly to the storage. Under certain conditions, including some snapshot operations, the volume enters redirected access, and traffic from other nodes is routed through the owner node over the cluster network instead.

That is the most consequential difference from a standalone host. Backup activity that triggers redirection turns the cluster interconnect into part of the storage path for every machine on that volume, not only the ones being backed up. The symptom is cluster wide slowness with no individual job looking unusual, and the evidence sits in cluster events rather than the backup console.

Ownership also determines which node's path carries backup reads when redirection is not in effect, and ownership moves with failover and maintenance. Any assumption about which segment carries backup traffic has to survive the cluster moving that ownership at three in the morning.

SymptomLikely cause in the pathWhat to check
Backups slow only for machines on one volumeVolume ownership put reads on a longer pathCurrent owner node of that volume, per task processing node
Cluster wide slowness during the backup windowThe volume entered redirected accessCluster events around the job start, interconnect utilization
An incremental reads close to the full machine sizeChange tracking was resetData read against data transferred, recent migrations and restarts
Throughput changes after a machine moves nodesProcessing moved with the machine, onto a different pathWhich node processed the task, gateway location relative to that node
Host load rises during backups with no config changeOff host processing fell back to on hostStorage provider status, volume visibility from the off host server

The last row is the quiet one. Nothing fails, and the only visible trace is the load profile on the cluster nodes.

Where proxies and gateways belong when the target is a bucket

Object storage is reached over HTTPS, and a gateway role speaks that protocol on the backup software's behalf. Every byte written to the bucket crosses it. In a cluster the temptation is to place that role on a node, since nodes have capacity and are already in the data path.

That placement creates a dependency on cluster state. A node put into maintenance takes the gateway with it or forces a role move, and the network path from processing to bucket changes with it. A gateway on a server outside the cluster keeps that route stable regardless of which node owns what, usually worth more than the resource saving. The broader trade-offs in gateway server placement apply here with the additional constraint that cluster membership is not a stable attribute.

The same reasoning applies to the network. If traffic from every node reaches one gateway, that segment must be sized for the aggregate and reachable from every node, including ones added later. Where the backup path is separated from production networks, the segmentation design has to account for a cluster that can present traffic from any member.

Where ARTESCA fits

ARTESCA is object storage software used as a backup target, deployed on infrastructure the customer runs. It receives HTTPS requests from the gateway, stores the resulting objects, and applies S3 Object Lock retention where the repository is configured for immutability. It presents an S3-compatible API, so the backup software addresses it as any object repository, cluster or standalone.

Because it runs on the customer's own infrastructure, the network between the gateway and the bucket is a local path the same team controls. In a cluster deployment that matters, since the variability introduced by ownership changes and failover is already enough to investigate without an external route added underneath it.

What the target does not influence is anything above the gateway. Processing mode, change tracking behavior and volume ownership are properties of the hypervisor platform and the backup software. Capacity planning is affected, though, since a cluster that resets change tracking after maintenance writes more than a steady state model predicts, which is a consideration when sizing a repository.

What to check before and after a cluster change

Maintenance on a Hyper-V cluster changes the backup path, so this check belongs in the maintenance procedure rather than a separate routine. After nodes are drained and returned, confirm that the next run of each affected job transferred an incremental volume rather than a full one. Two minutes per job catches the capacity surprise the same week.

Keep a written record of three facts: which processing mode the deployment uses and what it requires, where the gateway runs and why it was placed there, and which volumes carry which machines. That last one drifts constantly and deserves refreshing with any other inventory.

Finally, the cluster event log deserves a look after the first backup window following any storage or networking change. Redirected access, ownership moves and provider failures are recorded there and nowhere in the backup console, so a path problem can otherwise run unnoticed for months.