Cross-region backup replicates data from a backup vault to a replication target vault in another region under the same account, enabling data restoration if the primary region becomes unavailable.
Replication runs automatically with no manual intervention. Cloud Backup balances network latency and transfer efficiency to maintain data consistency and achieve an acceptable RPO.
The term mirror vault has been renamed to replication target vault. No action is required. Unlike the old mirror vault, a replication target vault is not deleted when replication is stopped — it becomes a standalone vault whose backup points can be managed independently, with support for immutable backup.
Supported data sources
-
ECS File
-
OSS
-
On-premises NAS
-
Alibaba Cloud NAS
-
Tablestore
-
CPFS
-
On-premises File
-
SAP HANA
For ECS instance data sources, enable remote replication only through a backup policy, not from the Vault Management page.
Limits
Unsupported vault types
The following vault types do not support cross-region backup:
-
OSS Backup (30-day free trial)
-
NAS Backup (30-day free trial)
-
Tablestore Backup (30-day free trial)
-
Replication target vaults
-
Archive vaults
-
Database Backup vaults
-
Container Backup vaults
-
Vaults in an abnormal state, such as ERROR
Replication limits
| Limit | Value |
|---|---|
| Replication target vaults per account per region | 5 |
| Replication targets per backup vault | 1 |
| VMware VM restore from replication target vault | Not supported |
Replication target vault behavior
-
A replication target vault is read-only and cannot be used as a direct target for new backup plans.
-
Backup point retention in a replication target vault mirrors the source vault lifecycle and cannot be modified.
-
The replication target vault must use the same encryption method as the source backup vault, either Cloud Backup-managed or KMS.
-
After replication is stopped, backup points in the standalone replication target vault are deleted according to their original retention period inherited from the source. The Retain at least one version policy from the source vault does not apply. You can also delete backup points manually.
Archiving behavior
-
If automatic archiving is enabled on the source vault, archive tier data is not synced to the replication target vault.
-
When standard tier data in the source vault moves to the archive tier, the corresponding data in the replication target vault is deleted.
Deletion behavior
-
To delete a source backup vault, first stop cross-region backup. Deleting the source vault does not delete the replication target vault.
Regional availability
See Features by region for supported regions.
Prerequisites
-
The source backup vault must have a Storage Vault Type of General Backup.
-
The destination vault must have a Storage Vault Type of Replication Target vault.
Verify vault types on the Vault Management page. You can also create vaults from that page, when creating a backup policy, or when configuring a backup source.
Configure cross-region backup
Enable cross-region backup from the Vault Management page or the Policy Center. Once enabled, all existing and new standard-tier data in the source vault syncs automatically to the replication target vault.
To enable Backup Vault Replication when creating or editing a policy, use the Policy Center.
Enable replication from the Vault Management page
-
Go to the Cloud Backup console - Vault Management. On the Storage Vaults page, select the region of the source backup vault.
-
In the Actions column of the target backup vault, click Configure backup vault replication.
-
In the Initiate Backup Vault Replication panel, configure the replication target vault:
-
To use an existing vault, click Select Replication Target Vault, then select the destination region and the replication target vault.
-
To create a new vault, click Create Replication Target Vault and configure the following parameters.
-
Replication target vault parameters
| Parameter | Description |
|---|---|
| Destination Region | Select the region for the replication target vault. It must differ from the source backup vault region. |
| Vault Name | Enter a name for the replication target vault. |
| Vault Description | Enter a description for the replication target vault. |
| Vault Resource Group | Select the resource group for the replication target vault. |
| Vault Encryption Method | Select an encryption method. The default is Cloud Backup-managed. If the source vault uses a custom key from Alibaba Cloud Key Management Service (KMS), select KMS and choose a KMS KeyId. Select a KMS key. |
-
The encryption method of the replication target vault must match the source backup vault.
-
After enabling encryption with KMS, the KMS key cannot be changed.
-
To encrypt a backup vault with a KMS key, first create a key in KMS.
-
Click OK.
After configuration, Cloud Backup begins syncing historical data from the source vault. You can view synchronization progress in the destination region.
Restore data from a replication target vault
To restore from a replication target vault, prepare the target resource in the same region, then create a restore job with the source vault set to the replication target vault. Configure remaining parameters as for a standard restore job.
| Data source | Step 1: Prepare target resource | Step 2: Create restore job |
|---|---|---|
| ECS File | Create an ECS instance in the same region | Restore ECS files |
| OSS | Create an OSS bucket in the same region | Create an OSS restore job |
| Alibaba Cloud NAS | Create a NAS file system in the same region | Create a NAS restore job |
| Tablestore | Create a Tablestore instance in the same region | Restore a Tablestore table |
| CPFS | Prepare a CPFS file system in the same region | Restore CPFS |
| SAP HANA | Prepare an SAP HANA instance in the same region, then register it | Restore SAP HANA |
| On-premises NAS | Prepare an on-premises NAS and install a backup client | Restore on-premises NAS |
| On-premises File | Prepare a local server, create a restore folder, and install a backup client | Restore local files |
In each restore job, set the source vault to the replication target vault and the destination to the resource prepared in step 1.
Stop cross-region backup
Once stopped, the replication relationship cannot be resumed. The detached replication target vault can only be used for data restoration.
-
Go to the region of the source backup vault in the Cloud Backup console.
-
In the Actions column of the source backup vault, click Stop backup vault replication.
-
Confirm the operation.
After stopping, new data is no longer replicated. Existing data in the replication target vault remains available for restoration.
Post-stop options
Deleting a vault permanently removes all backup data within it, making restoration impossible.
After stopping cross-region backup:
-
Delete the replication target vault: Select the replication target vault and delete it.
-
Enable immutable backup: Protect backup data from accidental deletion or ransomware before the retention period expires.
-
Delete the source backup vault: Go to the region of the source backup vault. In the Actions column of the source vault, hover over the menu icon and select Delete. Confirm the operation.
Billing
| Fee type | Billing method | Notes |
|---|---|---|
| Storage capacity fees | Subscription resource plans or pay-as-you-go | Purchase resource plans to offset storage fees. |
| Cross-region replication traffic fees | Pay-as-you-go only | No subscription plans available for traffic fees. |
Restore costs
-
No fee applies when restoring data from a replication target vault to a resource in the same region.
-
Restoring to an on-premises NAS or local server over the Internet (without a VPN or leased line) incurs outbound traffic fees based on actual data volume. On-premises NAS restore fees and Local server file restore fees.
See Cloud Backup pricing for full details.
FAQ
How do I view the replication target vault?
In the Cloud Backup console, switch to the region of the replication target vault and find it on the Storage Vaults page.
What determines the billable storage usage of a replication target vault?
The Storage Vault Data Size of the replication target vault determines billable storage usage.
Can I set the synchronization frequency for cross-region backup?
No. Data replicates continuously from the source to the replication target vault. The frequency cannot be configured.
Does a replication target vault support zone-redundant storage?
Yes. Cloud Backup automatically selects a vault type based on regional support. In regions that support zone-redundant storage (ZRS), a ZRS vault is created by default. In other regions, a locally redundant storage (LRS) vault is created.
ZRS-supported regions: China (Hangzhou), China (Shanghai), China (Beijing), China (Zhangjiakou), China (Ulanqab), China (Shenzhen), Hong Kong (China), Japan (Tokyo), Singapore, Indonesia (Jakarta), Germany (Frankfurt), and Malaysia (Kuala Lumpur).