Veeam proxy ports used.

Veeam proxy ports used Make sure to open this port on a Linux-based backup proxy server. So you are seeing a connection on 445 regardless when you use a guest interaction Port used as a control channel (only for jobs that use an ESXi target with the console agent enabled). Port used for communication between Veeam ONE Web Services and Reporting Service on the Veeam ONE Server. 6160. Oct 2, 2022 · Hi, Veeam newbie here looking for recommendation on how to make optimal use of our network cards. 1. veeam. One important thing to keep in mind while sizing the repository gateway is that it might also be used to handle secondary tasks such as backup copy jobs. Backup server, guest interaction proxy (Enterprise and Enterprise Plus editions) Source Windows machine with Microsoft Exchange. May 5, 2025 · Default ports used for communication with the Veeam backup server. On the Proxy tab, select the Allow proxy appliance to act as internet proxy for virtual machines in this lab check box. vPower NFS Service The vPower NFS Service is a Microsoft Windows service that runs on a Microsoft Windows machine and enables this machine to act as an NFS server. 1(custom port) > goes back through mgmt IP in redirects it appears. . Committing VM Snapshot . Data between the Veeam Agent for Linux computer and backup repositories is transferred directly, bypassing Veeam backup servers. To. vmx) using NFC over port 902. IP 3 > 127. For more information, see Deployment Scenarios for Windows-based Backup Proxy Servers. Feb 18, 2020 · Re: Veeam proxy firewall ports Post by foggy » Fri Oct 02, 2020 9:59 pm this post Hi Kevin, these ports should be open in both directions, and please also consider the requirements for backup proxy and backup repository ports. Jan 16, 2015 · I need to know the exact ports required\used between Backup\Mount servers and target VM (customer subnet) for file-level restore. Used to send email notifications. I understand that direct connection to the repository server is probably inevitable, with ports restricted and documented. I re-added the servers to the server list and the backup proxy list. Backup. Ports used to deploy the runtime coordination process on the source machine. Depending on the repository type, you should open the ports for communication with the source proxy and also those required for communication with Windows or Linux server, depending on the platform used. UIService process for managing database connections. 2500 to 3300. Data between the Veeam Agent computer and backup repositories is transferred directly, bypassing Veeam backup servers. May 6, 2025 · Ports used by the Veeam Backup & Replication console to communicate with the backup server. For requirements and limitations that backup proxies have, see Requirements and Limitations for VMware Backup Proxies. Veeam server can serve as proxy too, however if you cannot make proxy server to be physical then it'd better to stay with hotadd mode because there is not much sense to have direct SAN via VM since direct SAN approach was meant to let you avoid ESXi stack Jul 14, 2014 · No IP or port specifics. Ports used to communicate with the Microsoft SQL Server installed on the target machine during application-item Apr 2, 2025 · To learn what ports are required for other Veeam Backup & Replication components in the Veeam Cloud Connect infrastructure, see the Ports section in the Veeam Backup & Replication User Guide. 6005 to 65535 Nov 24, 2022 · Firstly, RE firewall rules, you could scope this to ensure that only your guest interaction proxy/proxies can communicate on the RPC ports, to limit abuse. Veeam Kasten Plug-in for Veeam Backup & Replication. 443 May 6, 2025 · Ports used by the Veeam Backup & Replication console to communicate with the backup server. Stay tuned for more posts in this series! Until then, here are some resources you can use to supplement this Oct 30, 2024 · Linux backup proxies use the transport service for connection with backup infrastructure components. Default certificate port used by Enterprise Manager for collecting data from backup servers that have Veeam Backup & Replication 12 or later installed. TCP port 902 (Veeam Data Mover) 4. Before You Begin. The port number can be changed. According to the documentation I need from the backup proxy (on the Veeam server in this case) ports TCP 49152-65535 to be open to the server with the large drive being used as a repository. Dec 20, 2023 · As with the Veeam Repository, look to the Veeam Best Practice Guide for actual Proxy sizing guidelines. If the default port number is already in use, Veeam Agent for Microsoft Windows Service will try to use the next port number. Jan 10, 2025 · From. How it works . Veeam backup repository or gateway server. Hope this helps! If you use automatic mode selection, Veeam B&R will scan the backup proxy configuration and its connection to the VMware infrastructure to choose the optimal transport mode. Please take a look at our User Guide (page 59) for more info on the used networks ports. You should have this port opened to successfully backup your VMs. Feb 19, 2024 · hi veeam communityI want to turn on the firewall of the backup server and configure the firewallI have veeam backup and enterprise manager on my serverThe servers that are backed up are mostly on hyper-v cluster. Port. Required to connect to a Linux machine. ) The originating Veeam component would use a "source" port of 49152+ and use port 2500 (for example) as destination. In the Veeam ports list the 1058 is only required from Backup server to Windows server using vpower services Apr 11, 2025 · Default command port used for communication with Lenovo ThinkSystem DM/DG Series over HTTP. butler. 19001. Veeam ONE Client May 2, 2025 · Default port used by Veeam Agent for Microsoft Windows operating in the managed mode for communication with the Veeam Backup server. Veeam Agent computer. Backup server May 6, 2020 · So, no management connection to Veeam B&R but a proxied one from Veeam B&R. Port used by Veeam Backup & Replication to connect to Kasten Plug-in for Veeam Backup & Replication. Remote Desktop Service (TermService) should be disabled Jul 20, 2012 · Port 6162 is used by the Veeam Transport Service which is responsible for managing Veeam agents during backup and replication processes. I made sure to change the port setting to 3000-5000 when setting-up the server in the Server section. Dec 1, 2019 · Hy! I will deploy a new Veeam environment. Dec 27, 2011 · an update: I removed the proxy services from both the local and remote proxy and it uninstalled the service. Dec 5, 2023 · These settings change which port the Veeam Transport Service binds to. Sep 4, 2024 · On backup infrastructure components, Veeam Backup & Replication automatically creates firewall rules for the required ports. Check the following prerequisites: The machine that you plan to use as the VMware backup proxy must meet system requirements. But my proxy appliance will be on the same VPC / Same Subnet than my Veeam server (and with direct S3 access), so I want them to communicate on private IP. Veeam Update Notification Server (agents. Aug 26, 2011 · (The proxy or Veeam server cannot resolve the ESXi host) Port (902) (The proxy can resolve the IP, but port 902 is blocked) Permissions* (The account specified in [Backup Infrastructure] for the vCenter does not have permissions) File Locks (The file Veeam is trying to read is locked within the vSphere environment) Jan 24, 2014 · We have a Veeam server and want to connect over a cross connect to a windows server with a large directly connected driver to be used as a repository. Veeam Backup & Replication console and Veeam Backup & Replication and Veeam One server. We normally do that with telnet. 9405. 445. Edit the Virtual Lab. Feb 13, 2014 · The replication jobs have been configured to only use the proxy in the main office as the source proxy and the proxy in the DR site as the target proxy. Mar 23, 2015 · Hello, I have the same issue for Linux FLR restore, the port 1058 is dropped by the FW between ESXi and the proxy making the vPowerNFS service. 10001. Re-ran job - same failure port 2501. Standard NFS ports. Port used by the Veeam. You could also put a guest interaction proxy within the VLAN if you’re only doing cross-VLAN firewall boundaries. Used to communicate with the backup server. If multiple transport modes are available for the same proxy, Veeam Backup Server will choose the mode in the following order: Direct Storage Access (Direct SAN), Virtual SP backup proxy: TCP 2500 to 3300: Default range of ports used as transmission channels for replication jobs. Mar 24, 2025 · Make sure to open this port on a backup proxy server. Apr 28, 2021 · Now with Veeam V11 I'm trying to use archive tier (to get rid of AWS VTL Storage Gateway), but when configuring the proxy appliance it tells what it'll have a Public IP address. SSH. I checked the following link, but I found only related to the replication job (TCP2500-3300). With Linux OS, you may need to. SMTP. For more information, see this Microsoft article. TCP, UDP. Applications on VMs in the virtual lab — — Oct 3, 2024 · Used to communicate with the backup server. Default range of ports used as transmission channels for jobs and restore sessions. Rocky So the guide here mentions 135 and 445 are needed so I've manually created an inbound rule on my new Windows backup repository allowing just those two ports just from the source IP of my Veeam server. 9401 [Remote console only] Port used by the Veeam Backup & Replication console during Windows file-level recovery. 6. com) TCP. You can assign the role of a VMware backup proxy to a Linux server added with single-use credentials, for example, a Linux server used as a hardened repository. Feb 20, 2024 · And, when you install Veeam and its components (Proxies, Repos, etc), the installer already creates needed Windows f/w rules on the servers, as you can see from the Ports page in the Guide (see below): Veeam Ports. TCP 6290 - Port used as a control channel for communication with the guest interaction proxy. So, to tell VEEAM to connect to the Proxy to use the Backup-IP and not the Management IP you have to override the FQDN with the Backup-IP using the hosts-file - on both sides Best regards, ARO Veeam VMware vSphere backup proxy Choosing the right Veeam proxy server design for your environment gives you much control over the impact on the vSphere infrastructure and the backup traffic flow. 2714. 135, 137 to 139, 445. In the Network transport mode, Veeam backup proxy connects to the ESXi host where the VM resides, and reads the necessary VM configuration files (such as *. In this section, you will learn how to add a Microsoft Windows proxy. 7, use IP network A ESXI: version 6. Sep 11, 2017 · In this case you only should have firewall ports open to the guest interaction proxy which are: TCP 6190 - Port used for communication with the guest interaction proxy. We are a MSP. Jul 29, 2024 · To enable communication between a Windows Server (proxy) and a Veeam Backup Server, you'll need to open the following ports: From Windows Server (proxy) to Veeam Backup Server: 1. ) are in an isolated IPv6 network. Feb 5, 2019 · Guest interaction Proxy has not the same purpose as the Veeam Proxy Service. The Guest interaction proxy Server is used in a backup Job for copying the „Application Aware Executables“ to the guest. Backup server. The same data channel is used to read VM disk data, too. 443 Jan 25, 2024 · To configure the VMware backup proxy, you must add a Microsoft Windows or Linux server and assign the role of the backup proxy to it. I need which ports can be open from proxy to repository. I rebooted each server. With this configuration, if the Veeam Backup Server cannot reach the target proxy, the jobs would fail with "All target backup proxies are offline, outdated or currently being processed. 6005 to 65535 Aug 8, 2016 · Hold on to a proxy (as in previous tip) set to be a hot add proxy as full VM and full disk restore over network mode (especially over 1 Gb) would be painful. You can find the lists of the ports in the following sections of the Veeam Backup & Replication User Guide: Not sure what firewall you have, but nearly every NGFW will allow you to view traffic analysis from point to point. Backup proxy. Our servers are HP DL365s with 4 x 1Gbps on a single module and 2 x 10Gbps on a separat module. There are several physical servers, including SQL Server, which is also a cluster. 443. Port used by Veeam Agent for direct connection to the Veeam backup server using May 2, 2025 · For the list of ports used by the backup server to communicate with backup repositories, see the Veeam Backup & Replication User Guide, section Used Ports. Port used for communication with Veeam ONE internal Web API. When you add a Microsoft Windows machine to the backup infrastructure, Veeam Backup & Replication deploys Veeam Data Mover on it. TCP port 135 (RPC) 2. Jul 6, 2023 · What are the ports and the protocol used by the Veeam backup server v12? I wanted to turn on my firewall, but don't want to cause the backup, replication or restore process to fail. Nov 28, 2024 · Used to communicate with workers. This port is used to: Install and manage the Veeam. These days major concern is network security and isolation. 2741. Port used to communicate with Veeam Installer Service. Port used for communication between Veeam ONE Web Services and Monitoring Service on the Veeam ONE Server. This is a great recap of some of the most critical v9 proxy best practices. The recommendation is to apply a 3:1 ratio against the proxy compute calculation based on the number of parallel tasks required to fulfill the backup window. Sep 6, 2022 · During troubleshooting a backup environment, it’s common the necessity of test ports responsivity of our backup servers, like Veeam backup server, mount server, proxy or repositories. In the Port field, specify a port for HTTP traffic. Veeam auto-update server. The interface is divided into three sections, the first you are presented with is the following: Select the application group; Select the source you wish to get the ports from; Select the target you wish to get the ports to; Press ‘run’ to see the results. Otherwise, Veeam Backup for Microsoft 365 will add a workgroup backup proxy server. Jan 30, 2025 · To deploy a proxy, you need to add a Windows-based or Linux-based server to Veeam Backup & Replication and assign the role of the VMware backup proxy to the added server. 2742. For every TCP connection that a job uses, one port from this range is assigned: Cloud Gateway: Provider-side network extension appliance: UDP 1195: Port used to establish secure VPN connection for network extension during partial site May 5, 2023 · For those legacy operating systems, you can use the following netstat command and then manually associate the process ID with a process in Task Manager. You can simply create an ANY/ANY rule to allow all traffic, perform some tasks in VBR, then monitor what ports you see traffic flowing to/from and create rules based off of that. Guest Interaction Proxy Selection. Port 111 is used by the port mapper service. Default command port used for communication with Lenovo ThinkSystem DM/DG Series over HTTPS. 111, 2049. Note that both ports are required. Protocol. We recommend using the Veeam Ports Mapper tool for this specific use case. Perform RPC requests. TCP. 1433, 1434. Default range of ports used for communication between Veeam Agent for Linux components during data transmission. Nov 28, 2011 · 49152-65535 are dynamic client ports, typically used for "reply" traffic (review the MS KB article linked to from the Veeam KB article. Feb 26, 2025 · Ports used locally on the Veeam Agent computer for communication between Veeam Agent components and Veeam Agent for Microsoft Windows Service. I decided to have a go at manually configuring all rules and have a GP for Proxies, GP for Repo, GP for B+R etc with ports and IPs from the Veeam Ports Doc but I have got myself into a bit of a mess and am constantly tweaking rules so as not to block Veeam traffic. Feb 19, 2025 · Dynamic RPC range used by the runtime coordination process that is deployed on the target machine. 9396. 7, first/default kernel use network A on vSwitch0, then create second kernel use network B as I want for backup on vSwitch1. The plan is to follow the VMwar Best Practice document to allocate 2 x 1Gbps for Management and vMotion, 2 Jan 5, 2021 · Based on Veeam Backup for Nutanix AHV 3. Protection Group-Specifc Custom Transport Service Port. 22. Configuring this registry value will cause all new Veeam Agent for Linux deployments for the specified Protection Group(s) (specified by ID#) to use the assigned port for the Veeam Transport Service. Mail server. 22: Port used for communication with the proxy appliance in the virtual lab. These rules allow communication between the components. Archiver. However, by default telnet client is not installed during Windows Server and the Vee Dec 16, 2024 · Port. Use the following command to list processes associated with the specified port: Replace the port placeholder in this example with the port being tested. Sep 2, 2024 · The guest interaction proxy role can be performed by any machine that meets the requirements, including VMware backup proxy, backup repository, WAN accelerator or backup server. Our backup infrastructure servers (Management\Proxy\Repository etc. My que Feb 2, 2017 · For us the odd part is the test-netconnection fails however the there are 3 IPs on the server 1 Production 2x iSCSI\SAN - non routed IPs and naturally the proxy process picks SAN2 IP address to proxy its connection to AWS. Dec 1, 2022 · The solution for being able to install the proxy and repository services as needed is to tell Datadog to use another port, or tell Veeam too. 9404. So theoretically, you shouldn’t need to manipulate your Windows f/w. In this section, you can also find diagrams illustrating the interaction between Veeam Cloud Connect components and used ports in following scenarios: Dec 4, 2024 · Veeam ONE Server. Proxy appliance: TCP: 443: Port used for communication with the proxy appliance in the virtual lab. 25. I know IPv6 is not used by Veeam (not sure why?). 0 User Guide, i allowed traffic on port 10006 from "AHV Proxy Server" to "VeeamB&R server". 0. TCP Aug 26, 2024 · For every TCP connection that a job uses, one port from this range is assigned. The remaining requirements depend on the Backup Transport Mode you plan to use – Direct Storage (DirectSAN or DirectNFS) , Virtual Appliance (hotadd), or Network (nbd). Lenovo ThinkSystem DM/DG Series storage system. Notes. TCP port 9392 (Veeam Backup & Replication) From Veeam Backup Server to Windows The ports that Veeam requires depend on the specific components you use and how your IT environment is structured. HUM Sep 6, 2024 · In the Port field, enter a port number to access the specified computer. Nov 7, 2012 · If I understand you right, it will be a repository server rather than a proxy server. 2500-3300. Since Datadog is a company-wide deployment, it was decided to have the Veeam transport service use a different port. By default, port 8080 is used. VMware Backup Proxy Services and Components Aug 19, 2011 · Enable Proxy Appliance as Internet Proxy. Jul 15, 2015 · For direct SAN you need to have a physical proxy that has a direct access to your production storage, please see this article for details. " Dec 24, 2019 · VEEAM connects to the Proxy using the Hostname - Normally the FQDN is registered at the DNS as the Management ip. If you want to add a domain backup proxy server, select the Use domain network check box. Proxies are the work horses and are critical components to achieve good backup and restore speeds. TCP port 445 (SMB/CIFS) 3. Here are some examples of the most important ports: Veeam Backup & Replication: TCP port 10001 to 10300: These ports are used for communication between the Veeam backup server and the proxy servers and repositories. But i found that "VeeamB&R server" keep start a session with the "AHV Proxy Server" using a source port 10006 and a generic destination ports, there ports are used on the next session by the AHV proxy server to Sep 2, 2024 · The guest interaction proxy role can be performed by any machine that meets the requirements, including VMware backup proxy, backup repository, WAN accelerator or backup server. older Logs show Dec 16, 2024 · Port. If the transport service cannot be installed, Linux backup proxy require SSH connection. After Veeam backup proxy finishes reading VM data, Veeam backup server Aug 27, 2020 · vCenter vcsa: version 6. We would like to show you a description here but the site won’t allow us. For each TCP connection that a job uses, one port from this range is assigned. Veeam Backup Enterprise Manager server. Created the DNS record for ESXI with network A in DNS server, therefore vCenter I added that ESXI with FQDN Created VM proxy with network B as default gateway. Proxy service on a target proxy machine. The Veeam Proxy is used to read the productive data and send it to the Veeam Backup Repo. rcuj joco dxf seopxx yax toab yefdwp uvl hwgomz wuomzbqqf yzwxjk babvs dyfhcwo ozszggw hmrlcp