Configure a proxy server for the host on which a backup client is installed

Step 1: Prepare a proxy server

1. Prepare a server with Internet access for configuring the proxy service.
2. Install Microsoft Visual C++ Redistributable for Visual Studio 2015-2019.
   VC_redist.x64.exe

   VC_redist.x86.exe

3. Download a binary package of Apache HTTP Server 2.4 and decompress the package.
4. Modify the configuration file Apache24\conf\httpd.conf.
   Note In Define SRVROOT "\Apache24", change the path to the installation directory of Apache. For example, if Apache is installed in the root directory of the D drive, you can change the path to D:\Apache24.

   • Load modules.

     LoadModule proxy_module modules/mod_proxy.so
     LoadModule proxy_connect_module modules/mod_proxy_connect.so
     LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
     LoadModule proxy_http_module modules/mod_proxy_http.so

   • Specify any port as the listening port, for example, Listen 8888.
   • Set access permissions.

     ProxyRequests On
     ProxyVia On
     <Proxy *>
     Require all granted
     </Proxy>

5. Double-click Apache24\bin\httpd.exe to start the proxy service.

Step 2: Create a client

1. Log on to the HBR console.
   If your server or virtual machine runs a Linux operating system without a graphical user interface (GUI), use an intermediate host with a GUI as an agent to log on to the HBR console.
2. In the left-side navigation pane, choose Backup & Recovery > On-Premises Backup. On the On-Premises Backup page, select File.
3. Select a region where you want to store backup data.
   Note

   • If you use a Virtual Private Cloud (VPC), select the region of the VPC where the data to be backed up resides. This guarantees a fast backup.
   • If you do not use a VPC but expect optimal backup performance, we recommend that you select a region that is close to the location where the data to be backed up resides.
   • If you do not use a VPC but expect disaster recovery, we recommend that you select a region distant from the location where the data to be backed up resides to avoid losing data during a disaster.
4. On the page that appears, click Create Client in the upper-right corner.
5. In the Create Client pane that appears, set parameters as required.

   Parameter	Description
   Backup Vault Config	Specifies whether to create a backup vault or select an existing backup vault. A backup vault is a repository used by HBR to store backup data in the cloud. You can back up data from multiple backup clients to the same vault. Backup vaults reside in different regions. You can only select or create backup vaults in the current region. If you have created backup vaults, set the value to Select Vault and select a backup vault from the Vault Name drop-down list. If you have not created any backup vaults, set the value to Create Vault and set Vault Name to create a backup vault. The vault name can be a maximum of 64 characters in length.
   Source Client	The source of the backup client. You can select an activated client or create a client.
   Client Name	The name of the backup client. The client name can be a maximum of 64 characters in length.
   Software Platform	The operating system that is running on the host from which you want to back up data. Valid values: Windows 32-bit Windows 64-bit Linux 32-bit Linux 64-bit
   Network Type	Virtual Private Cloud (VPC): Select this option when the host from which you want to back up data resides in a VPC and is in the same region as the backup vault. Public Network: Select this option when VPCs are unavailable.
   Transmit Data On HTTPS	Specifies whether to enable HTTPS-encrypted transmission. Your data will be encrypted and stored in a backup vault. You can choose whether to use HTTPS to encrypt the data during transmission. Note that using HTTPS will degrade the data transmission performance. If you modify this configuration, the modification takes effect when the next backup or restore job starts.

6. Click Create and then Download Client.
   Note You can install a file backup client to back up data from your host to HBR. After you create a file backup client, you can also find the client in the client list and download the installation package of the client at any time.
7. Click Download Certificate.

Step 3: Install the client

Step 4: Activate the client

After the backup client is installed, you can use the following methods to activate the backup client.

• (Recommended) Activate the backup client in the HBR console
  1. Log on to the HBR console.
  2. On the On-Premises Backup page, select File. On the page that appears, find the target file backup client and choose More > Activate Client in the Actions column. In the Activate Client step of the Create Client pane, set the parameters as described in the following table to activate the client.

     Parameter	Required	Description
     Client IP Address	Yes	The IP address of the file backup client that your current host can access. It can be an internal IP address or a public IP address. For example, the IP address can be the default IP address 127.0.0.1, 12.34.56.78:8011, or 87.65.43.21:8443. Note The IP address must be reachable from your current browser.
     AccessKey Id	Yes	The AccessKey ID and AccessKey secret of the Resource Access Management (RAM) user used to access HBR. You can obtain the AccessKey ID and AccessKey secret of a RAM user under your Alibaba Cloud account for which HBR is activated. For more information, see Create an AccessKey for a RAM user.
     AccessKey Secret	Yes
     Create Client Password	Yes	The password used to log on to the file backup client. The password must be at least six characters in length.
     Data Network Proxy	No	The URL of the proxy server used to transmit backup data. Note You can configure a data network proxy only for a file backup client whose version is 1.11.11 or later.
     Control Network Type	No	The type of the network through which you call the HBR API.
     Control Network Proxy	No	The URL of the proxy server used to call the HBR API.
     Message Channel Network Type	No	The type of the network through which the server delivers messages to the file backup client.

  3. Click Activate Client.

     The webpage of the file backup client appears. Then, you can use the file backup client to back up data. If you fail to activate a file backup client, you can reactivate the client. For more information, see How can I reactivate a file backup client?

• Activate the backup client in a browser
  1. Enter the URL of the backup client in a browser to log on to the backup client. The URL is in the format of http://Client IP address:Port number, for example, http://10****:8011.
  2. On the Register page that appears, set the parameters as described in the following table and click Register.

     Parameter	Required	Description
     Certificate File	Yes	The certificate used to verify the validity of the file backup client. Select and upload the certificate downloaded in Step 2: Create a client.
     Access Key ID	Yes	The AccessKey ID and AccessKey secret of the RAM user used to access HBR. You can obtain the AccessKey ID and AccessKey secret of a RAM user under your Alibaba Cloud account for which HBR is activated. For more information, see Create an AccessKey for a RAM user.
     Access Key Secret	Yes
     Backup Data Network	No	The type of the network through which you back up data. You can select Public Network or Alibaba Intranet.
     Control Network Proxy	No	The URL of the proxy server used to call the HBR API. The URL consists of the username, password, IP address, and listening port number of the proxy server. If identity authentication is not required, you can leave the username and password blank.
     Data Network Proxy	No	The URL of the proxy server used to transmit backup data. The URL consists of the username, password, IP address, and listening port number of the proxy server. If identity authentication is not required, you can leave the username and password blank.
     Control Network Type	No	The type of the network through which you call the HBR API.
     Message Channel Network Type	Yes	The type of the network through which the server delivers messages to the file backup client.

After the file backup client is activated, you can use it to back up files.