This topic describes how to configure a Windows server as a proxy server for the host on which a backup client is installed.

Prerequisites

A proxy server is built.

If you encounter any problems when building a proxy server, see Step 1: Prepare a proxy server. This step describes the method for building the Apache HTTP server as a proxy server in Windows. This method is only for reference because the Apache HTTP server is a third-party service that is not provided by Hybrid Backup Recovery (HBR).

Background information

If the host whose data is to be backed up cannot access the Internet, you can configure a proxy server for the host.

Step 1: Prepare a proxy server

  1. Prepare a server with Internet access for configuring the proxy service.
  2. Install Microsoft Visual C++ Redistributable for Visual Studio 2015-2019.
  3. Download a binary package of Apache HTTP Server 2.4 and decompress the package.
  4. Modify the configuration file Apache24\conf\httpd.conf.
    Note In Define SRVROOT "\Apache24", change the path to the installation directory of Apache. For example, if Apache is installed in the root directory of the D drive, you can change the path to D:\Apache24.
    • Load modules.
      LoadModule proxy_module modules/mod_proxy.so
      LoadModule proxy_connect_module modules/mod_proxy_connect.so
      LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
      LoadModule proxy_http_module modules/mod_proxy_http.so
    • Specify any port as the listening port, for example, Listen 8888.
    • Set access permissions.
      ProxyRequests On
      ProxyVia On
      <Proxy *>
      Require all granted
      </Proxy>
  5. Double-click Apache24\bin\httpd.exe to start the proxy service.

Step 2: Create a client

  1. Log on to the HBR console.
    If your server or virtual machine runs a Linux operating system without a graphical user interface (GUI), use an intermediate host with a GUI as an agent to log on to the HBR console.
  2. In the left-side navigation pane, choose Backup & Recovery > On-Premises Backup. On the On-Premises Backup page, select File.
  3. Select a region where you want to store backup data.
    Note
    • If you use a Virtual Private Cloud (VPC), select the region of the VPC where the data to be backed up resides. This guarantees a fast backup.
    • If you do not use a VPC but expect optimal backup performance, we recommend that you select a region that is close to the location where the data to be backed up resides.
    • If you do not use a VPC but expect disaster recovery, we recommend that you select a region distant from the location where the data to be backed up resides to avoid losing data during a disaster.
  4. On the page that appears, click Create Client in the upper-right corner.
  5. In the Create Client pane that appears, set parameters as required.
    Parameter Description
    Backup Vault Config Specifies whether to create a backup vault or select an existing backup vault. A backup vault is a repository used by HBR to store backup data in the cloud. You can back up data from multiple backup clients to the same vault. Backup vaults reside in different regions. You can only select or create backup vaults in the current region.
    • If you have created backup vaults, set the value to Select Vault and select a backup vault from the Vault Name drop-down list.
    • If you have not created any backup vaults, set the value to Create Vault and set Vault Name to create a backup vault. The vault name can be a maximum of 64 characters in length.
    Source Client The source of the backup client. You can select an activated client or create a client.
    Client Name The name of the backup client. The client name can be a maximum of 64 characters in length.
    Software Platform The operating system that is running on the host from which you want to back up data. Valid values:
    • Windows 32-bit
    • Windows 64-bit
    • Linux 32-bit
    • Linux 64-bit
    Network Type
    • Virtual Private Cloud (VPC): Select this option when the host from which you want to back up data resides in a VPC and is in the same region as the backup vault.
    • Public Network: Select this option when VPCs are unavailable.
    Transmit Data On HTTPS Specifies whether to enable HTTPS-encrypted transmission. Your data will be encrypted and stored in a backup vault. You can choose whether to use HTTPS to encrypt the data during transmission. Note that using HTTPS will degrade the data transmission performance. If you modify this configuration, the modification takes effect when the next backup or restore job starts.
  6. Click Create and then Download Client.
    Note You can install a file backup client to back up data from your host to HBR. After you create a file backup client, you can also find the client in the client list and download the installation package of the client at any time.
  7. Click Download Certificate.

Step 3: Install the client

Select an installation directory, decompress the installation package, and then install the backup client.
Note Make sure that enough space is available in the installation directory because operational logs and an executable file are all stored in the installation directory.
  • If your host runs Windows, run the executable file decompressed from the installation package, select an installation directory, and then follow the instructions to install the client.
  • If your host runs Linux, decompress the installation package to a specified directory and run the ./setup command to install the client.

Step 4: Activate the client

After the backup client is installed, you can use the following methods to activate the backup client.

  • (Recommended) Activate the backup client in the HBR console
    1. Log on to the HBR console.
    2. On the On-Premises Backup page, select File. On the page that appears, find the target file backup client and choose More > Activate Client in the Actions column. In the Activate Client step of the Create Client pane, set the parameters as described in the following table to activate the client.
      Parameter Required Description
      Client IP Address Yes The IP address of the file backup client that your current host can access. It can be an internal IP address or a public IP address. For example, the IP address can be the default IP address 127.0.0.1, 12.34.56.78:8011, or 87.65.43.21:8443.
      Note The IP address must be reachable from your current browser.
      AccessKey Id Yes The AccessKey ID and AccessKey secret of the Resource Access Management (RAM) user used to access HBR. You can obtain the AccessKey ID and AccessKey secret of a RAM user under your Alibaba Cloud account for which HBR is activated. For more information, see Create an AccessKey for a RAM user.
      AccessKey Secret Yes
      Create Client Password Yes The password used to log on to the file backup client. The password must be at least six characters in length.
      Data Network Proxy No The URL of the proxy server used to transmit backup data.
      Note You can configure a data network proxy only for a file backup client whose version is 1.11.11 or later.
      Control Network Type No The type of the network through which you call the HBR API.
      Control Network Proxy No The URL of the proxy server used to call the HBR API.
      Message Channel Network Type No The type of the network through which the server delivers messages to the file backup client.
    3. Click Activate Client.

      The webpage of the file backup client appears. Then, you can use the file backup client to back up data. If you fail to activate a file backup client, you can reactivate the client. For more information, see How can I reactivate a file backup client?

  • Activate the backup client in a browser
    1. Enter the URL of the backup client in a browser to log on to the backup client. The URL is in the format of http://Client IP address:Port number, for example, http://10****:8011.
    2. On the Register page that appears, set the parameters as described in the following table and click Register.
      Parameter Required Description
      Certificate File Yes The certificate used to verify the validity of the file backup client. Select and upload the certificate downloaded in Step 2: Create a client.
      Access Key ID Yes The AccessKey ID and AccessKey secret of the RAM user used to access HBR. You can obtain the AccessKey ID and AccessKey secret of a RAM user under your Alibaba Cloud account for which HBR is activated. For more information, see Create an AccessKey for a RAM user.
      Access Key Secret Yes
      Backup Data Network No The type of the network through which you back up data. You can select Public Network or Alibaba Intranet.
      Control Network Proxy No The URL of the proxy server used to call the HBR API. The URL consists of the username, password, IP address, and listening port number of the proxy server.

      If identity authentication is not required, you can leave the username and password blank.

      Data Network Proxy No The URL of the proxy server used to transmit backup data.

      The URL consists of the username, password, IP address, and listening port number of the proxy server. If identity authentication is not required, you can leave the username and password blank.

      Control Network Type No The type of the network through which you call the HBR API.
      Message Channel Network Type Yes The type of the network through which the server delivers messages to the file backup client.

After the file backup client is activated, you can use it to back up files.