Integrating Veeam Backup for GCP with VBR

With Veeam Backup & Replication version 11a, a new Google Cloud Platform (GCP) integration plugin now joins the previously released plugins for AWS and Azure. This plugin allows for integration with the Veeam Backup for GCP appliance, granting management of certain settings through the VBR console and backup copy job support. Configuring this integration is simple.


  1. Veeam Backup & Replication version 11a or newer is installed
  2. The following Google APIs are enabled for the project the VMs are hosted under:
    • Cloud Deployment Manager V2
    • Identity and Access Management (IAM)
    • Service Usage
  3. Google Private Access is enabled for each subnet in use

Appliance Deployment and Configuration

First, let’s begin by launching the Veeam Backup & Replication console and navigating to the Backup Infrastructure view. From here, select Managed Servers from the left-hand menu and click the Add Server button in the top menu.

Launch Backup & Replication console
Next, select Veeam Backup for GCP from the available options.
Veeam Backup for GCP option
Today, we will be deploying a brand-new backup appliance however, it is also possible to connect to a pre-existing appliance. After selecting the deployment mode, go ahead and add your GCP service account. On this screen, you can either create a new service account (which I have done) or connect to an existing account. Use the Log in hyperlink to connect to your GCP workspace using your Google login, then select the project your workload are located under and proceed to the next screen.
GCP service account
Once the account has been created, click Finish. The GCP service account should populate back in the appliance deployment window, then you should be able to set your data center and availability zone.
GCP appliance deployment window
Next, choose an instance name and set a description for the appliance.
VEEAM Backup GCP appliance
Now network settings are inputted. Here set the VPC, subnet, and network tag. The Backup server public IP address should be pre-populated, but you may need to enter the IP manually.
VEEAM Backup GCP settings
Next, set the IP information. If you have a direct connection between your Veeam server’s location and your GCP environment, set a static IP address here, otherwise leave it set to dynamic so the appliance can be assigned a public address.
VEEAM server and GCP environment connection
On the next screen, create or choose the administrator credentials you wish to use to log in to the appliance.
VEEAM Backup GCP administrator credentials
Apply the settings and wait for the appliance deployment to complete. This will take several minutes.
VEEAM Backup GCP appliance deployment
Click Next. Check the box to open the GCS repository creation wizard and click Finish.
VEEAM Backup GCS repository
Now, select a repository name and set a description.
VEEAM Backup GCS repository name description
Select the correct project and enter an HMAC key that will be used for bucket access.
Next, select the data region, select or create a bucket, and select or create a folder. This is also the time to set an encryption password for the repository if you wish to have one. Then, apply and save the settings.
Encryption Password
Before we can begin defining backup policies, we will also need to create at least one worker instance. To do this, we will need to launch the appliance’s web UI, which can be done under the Managed Servers menu.
VEEAM Backup GCS worker instance
Click Configuration on the top right, then select Worker configurations from the left-hand menu. Use the Add button to begin worker creation. Specify the deployment region and availability zone.
Backup GCS configuration
Next set the VPN network and subnet. Make sure to select a subnet that has Google Private Access enabled. Then select a firewall rule that allows HTTPS traffic. You will be presented with warnings on this screen if you have selected a subnet without Google Private Access or a firewall rule without HTTPS access.
Confirm your settings, check for any warnings, and click Finish to save the worker configuration.
VEEAM Backup GCS confirm settings

Backup Policy Configuration

Now we are ready to begin configuring backup policies. Exit the appliance configuration and select Policies from the left-hand menu. Click Add to begin setting up the first backup policy.

VEEAM Backup policy configuration
Start by giving the policy a name and description.
VEEAM Backup policy name
Now double-check the policy to interact with and select the region(s). Finally, choose what resources the policy should protect.
VEEAM Backup GCS regions
Enable backups and choose the repository created earlier.
VEEAM Backup GCS enable
Next retention is configured for backups and snapshots.
VEEAM Backup GCS retention
For each type of retention you wish to process, turn the retention on and edit the settings. Under the retention’s settings, you can set run schedules and retention periods.
VEEAM Backup GCS retention periods
After the policy schedule, you can set whether to save resources labels in the backups and whether to create custom labels on the resources.
VEEAM Backup GCS label settings
After a cost estimation for the policy, you can configure retry and notification settings, then save the policy.
VEEAM Backup GCS cost estimation
Back in the VBR console, you will now be able to see the backup policy under the Home screen’s Jobs menu. From the VBR console, you are able to start, stop, and disable the backup policy, as well as view session history.
VEEAM Backup GCS VBR console

Creating Backup Copy Jobs

From the VBR console, you are also able to create backup copy jobs of GCP backup policies. These backup copy jobs can be configured to point to regular backup repositories and to Veeam Cloud Service Provider (VCSP) repositories, meaning your GCP resources can be granted the same offsite protection as your on-premises workloads.

The process for configuring these backup copies is nearly identical to backup copies for virtual machines and agents. However, when creating a backup copy job, there is a new GCE backup option.

VEEAM Backup GCS copy
The only notable difference is that you can only select Periodic Copy (pruning) mode for the copy job.
VEEAM Backup GCS periodic copy
Here is an example of a GCP backup copy, pointed to one of Cyber Fortress’ Veeam Cloud Connect servers in their Las Vegas data center.
VEEAM Backup GCS example
In an emergency, Cyber Fortress would be able to use this backup to restore my workload back to GCP or recover it to a hypervisor in their data center until restoring back to my GCP environment is possible. See also Veeam Backup for AWS wiith VBR.
<a href="" target="_blank">Jonah May</a>

Jonah May


Jonah May is an accomplished IT professional with a wealth of experience in development and product architecture. He has held key positions in various companies, including Global Data Vault and CyberFortress. At Global Data Vault, Jonah served as the Senior Development lead, where he was responsible for managing the development of various products and solutions. Later, Jonah moved to CyberFortress, where he served as the Product Architect and Engineering Manager. He played a critical role in designing the company’s Veeam product offering for DRaaS. His extensive knowledge and expertise in Veeam products and solutions helped CyberFortress develop cutting-edge solutions that met the unique needs of its clients.

Latest posts