Backup & recovery

Platform-neutral backup storage: Beyond the hypervisor

Platform-neutral backup storage keeps working when the hypervisor changes. Where repositories get tied to a platform and how to check.

4 min read
Beams of cyan light meeting at a single dark block in the center of a room

Platform-neutral backup storage is storage that does not care which hypervisor, operating system or backup application sits in front of it. For years that property was a minor consideration, because most estates ran one virtualization platform and expected to keep it. That expectation has weakened. Licensing changes, mergers and the spread of containers and cloud services mean the platform in use today may not be the platform in use at the end of the repository's life.

Backup data usually outlives the systems it came from. A repository bought now may hold restore points for five to seven years. The question is whether it can keep doing its job when what surrounds it changes.

What platform-neutral means in practice

A backup repository touches other systems at several points: the protocol the backup software uses to write to it, the place its own software runs, the identity system that controls who administers it and the format the data is stored in. A repository is neutral to the extent that none of those points ties it to one vendor's virtualization stack.

Where repositories become tied to a platform

DependencyHow it appearsWhat happens when the platform changes
Runs as a virtual applianceRepository is a VM in a format one hypervisor supportsAppliance must be rebuilt or converted
Stored on hypervisor datastoresBackup files live on the cluster's own storageData must be copied out before decommissioning
Platform-specific integrationPlug-in or API that exists for one hypervisor onlyNew platform may be unsupported or arrive later
Shared administrationManaged from the virtualization console and its accountsAccess model has to be rebuilt
Proprietary access protocolOnly one backup product can read the targetChanging backup software strands older data

Why the protocol matters most

Of these, the write protocol has the longest reach. A repository reached through a widely implemented interface can be used by many backup products and by more than one at the same time. The S3 API has become that interface for backup: most enterprise backup software can write to an S3-compatible target, and many support Object Lock for immutability through the same API.

Compatibility is still worth testing. Products differ in which S3 operations they use, and a target that works with one may behave differently with another. S3 backup compatibility testing sets out what to check before depending on a combination.

More than one workload type

The hypervisor is no longer the only source of backup data. Many organizations now protect virtual machines on two platforms, physical servers, Kubernetes clusters, SaaS applications and databases with their own native tools. If each of these has its own repository, the estate ends up with several small targets, each with its own capacity planning, patching and immutability settings.

A single repository that all of them can write to is simpler to run and easier to secure, provided tenants or buckets keep the data sets separate. Backup storage consolidation looks at when bringing targets together reduces work and when it concentrates risk.

Neutral does not mean unmanaged

Independence from the hypervisor moves some responsibilities to the storage team. Hardware has to be chosen and maintained, the network path between backup servers and the repository has to be sized, and the repository needs its own monitoring. These tasks exist either way. On a platform-tied repository they are hidden inside the cluster's operations, and on a neutral one they are explicit.

There is also a security benefit to the separation. A repository with its own accounts and its own management interface is not reachable by someone who has taken over the virtualization console. Backup isolation off the domain explains why that boundary matters during an incident.

Questions for a procurement review

A few questions separate neutral repositories from tied ones. Does the repository run on hardware or a platform the buyer chooses? Which backup products are certified to write to it, and with which immutability features? Can two backup products use it at once? If the hypervisor were replaced next year, what would have to change on the repository? And can data written today be read by a different backup server after a rebuild, using only the repository's address and credentials?

Where ARTESCA fits

ARTESCA is object storage software used as a backup target, deployed on servers the customer runs. It presents an S3 endpoint and has no dependency on the hypervisor that hosts the protected workloads. Immutability is provided by S3 Object Lock on each object, and in compliance mode no account, including ARTESCA administrators, can remove a lock before it expires.

ARTESCA is used as a target for Veeam and other backup software, and it grows within the same deployment from roughly 50 TB to 8.5 PB. Its administration is separate from the virtualization platform's accounts and console.

Planning for the next platform

Nobody can say with confidence which virtualization platform an organization will run in five years. The repository does not need that answer. If it speaks a standard protocol, runs independently of the hypervisor and enforces immutability itself, a platform change becomes a matter of pointing new jobs at the same target, and the backup history comes through intact.

Try ARTESCA free

Immutable object storage that scales from 20TB to petabytes. Deploy a working cluster in under an hour.

Start a free test drive