{"id":10056,"date":"2021-07-30T11:00:55","date_gmt":"2021-07-30T01:00:55","guid":{"rendered":"https:\/\/www.penguinpunk.net\/blog\/?p=10056"},"modified":"2021-07-30T10:53:55","modified_gmt":"2021-07-30T00:53:55","slug":"cohesity-dataprotect-delivered-as-a-service-saas-connector","status":"publish","type":"post","link":"https:\/\/www.penguinpunk.net\/blog\/cohesity-dataprotect-delivered-as-a-service-saas-connector\/","title":{"rendered":"Cohesity DataProtect Delivered As A Service &#8211; SaaS Connector"},"content":{"rendered":"<p><a href=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2015\/10\/cohesity.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-3134\" src=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2015\/10\/cohesity.png\" alt=\"\" width=\"412\" height=\"50\" srcset=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2015\/10\/cohesity.png 412w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2015\/10\/cohesity-300x36.png 300w\" sizes=\"auto, (max-width: 412px) 100vw, 412px\" \/><\/a><\/p>\n<p>I recently wrote about my experience with <a href=\"https:\/\/www.penguinpunk.net\/blog\/cohesity-dataprotect-delivered-as-a-service-a-few-notes\/\">Cohesity DataProtect Delivered as a Service<\/a>. One thing I didn&#8217;t really go into in that article was the networking and resource requirements for the SaaS Connector deployment. It&#8217;s nothing earth-shattering, but I thought it was worthwhile noting nonetheless.<\/p>\n<p>In terms of the VM that you deploy for each SaaS Connector, it has the following system requirements:<\/p>\n<ul>\n<li class=\"no-margin\">4 CPUs<\/li>\n<li class=\"no-margin\">10 GB RAM<\/li>\n<li class=\"no-margin\">20 GB disk space (100 MB throughput, 100 IOPs)<\/li>\n<li class=\"no-margin\">Outbound Internet connection<\/li>\n<\/ul>\n<p>In terms of scaleability, the advice from Cohesity at the time of writing is to deploy &#8220;one SaaS Connector for each 160 VMs or 16 TB of source data. If you have more data, we recommend that you stagger their first full backups&#8221;. Note that this is subject to change. The outbound Internet connectivity is important. You&#8217;ll (hopefully) have some kind of firewall in place, so the following ports need to be open.<\/p>\n<table>\n<tbody>\n<tr>\n<td>\n<h5 id=\"h_ad20de18a2\" data-post-processed=\"true\"><b>Port<\/b><\/h5>\n<\/td>\n<td>\n<h5 id=\"h_b48eb804ba\" data-post-processed=\"true\"><b>Protocol<\/b><\/h5>\n<\/td>\n<td>\n<h5 id=\"h_c5ec6f83b4\" data-post-processed=\"true\"><b>Target<\/b><\/h5>\n<\/td>\n<td>\n<h5 id=\"h_49ab6f9f57\" data-post-processed=\"true\"><b>Direction (from Connector)<\/b><\/h5>\n<\/td>\n<td>\n<h5 id=\"h_d4de2e6715\" data-post-processed=\"true\"><b>Purpose<\/b><\/h5>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p class=\"no-margin\">443<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">TCP<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">helios.cohesity.com<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">Outgoing<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">Connection used for control path<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p class=\"no-margin\">443<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">TCP<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">helios-data.cohesity.com<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">Outgoing<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">Used to send telemetry data<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p class=\"no-margin\">22, 443<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">TCP<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">rt.cohesity.com<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">Outgoing<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">Support channel<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p class=\"no-margin\">11117<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">TCP<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">*.dmaas.helios.cohesity.com<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">Outgoing<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">Connection used for data path<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p class=\"no-margin\">29991<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">TCP<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">*.dmaas.helios.cohesity.com<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">Outgoing<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">Connection used for data path<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p class=\"no-margin\">443<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">TCP<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">*.cloudfront.net<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">Outgoing<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">To download upgrade packages<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p class=\"no-margin\">443<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">TCP<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">*.amazonaws.com<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">Outgoing<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">For S3 data traffic<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p class=\"no-margin\">123, 323<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">UDP<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">ntp.google.com or internal NTP<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">Outgoing<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">Clock sync<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p class=\"no-margin\">53<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">TCP &amp; UDP<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">8.8.8.8 or internal DNS<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">Bidirectional<\/p>\n<\/td>\n<td>\n<p class=\"no-margin\">Host resolution<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Cohesity recommends that you deploy more than one SaaS Connector, and you can scale them out depending on the number of VMs \/ how much data you&#8217;re protecting with the service.<\/p>\n<p>If you&#8217;re having concerns with bandwidth, you can configure the bandwidth used by the SaaS Connector via Helios.<\/p>\n<p><a href=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2021\/07\/Screen-Shot-2021-07-30-at-10.40.17-am.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-10057\" src=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2021\/07\/Screen-Shot-2021-07-30-at-10.40.17-am.png\" alt=\"\" width=\"800\" height=\"282\" srcset=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2021\/07\/Screen-Shot-2021-07-30-at-10.40.17-am.png 1680w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2021\/07\/Screen-Shot-2021-07-30-at-10.40.17-am-300x106.png 300w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2021\/07\/Screen-Shot-2021-07-30-at-10.40.17-am-1024x361.png 1024w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2021\/07\/Screen-Shot-2021-07-30-at-10.40.17-am-768x271.png 768w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2021\/07\/Screen-Shot-2021-07-30-at-10.40.17-am-1536x542.png 1536w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p>Navigate to Settings -&gt; SaaS Connections and click on Bandwidth Usage Options. You can then add a rule.<\/p>\n<p><a href=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2021\/07\/Screen-Shot-2021-07-30-at-10.40.29-am.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-10058\" src=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2021\/07\/Screen-Shot-2021-07-30-at-10.40.29-am.png\" alt=\"\" width=\"800\" height=\"102\" srcset=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2021\/07\/Screen-Shot-2021-07-30-at-10.40.29-am.png 1360w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2021\/07\/Screen-Shot-2021-07-30-at-10.40.29-am-300x38.png 300w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2021\/07\/Screen-Shot-2021-07-30-at-10.40.29-am-1024x131.png 1024w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2021\/07\/Screen-Shot-2021-07-30-at-10.40.29-am-768x98.png 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p>You then schedule bandwidth usage, potentially for quiet times (particularly useful in small environments where Internet connections may be shared with end users). There&#8217;s support for upload and download traffic, and multiple schedules as well.<\/p>\n<p><a href=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2021\/07\/Screen-Shot-2021-07-30-at-10.40.37-am.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-10059\" src=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2021\/07\/Screen-Shot-2021-07-30-at-10.40.37-am.png\" alt=\"\" width=\"800\" height=\"135\" srcset=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2021\/07\/Screen-Shot-2021-07-30-at-10.40.37-am.png 1358w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2021\/07\/Screen-Shot-2021-07-30-at-10.40.37-am-300x51.png 300w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2021\/07\/Screen-Shot-2021-07-30-at-10.40.37-am-1024x173.png 1024w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2021\/07\/Screen-Shot-2021-07-30-at-10.40.37-am-768x130.png 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p>And that&#8217;s pretty much it. Once you have your SaaS Connectors deployed you can monitor everything from <a href=\"https:\/\/helios.cohesity.com\/\">Helios<\/a>.<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I recently wrote about my experience with Cohesity DataProtect Delivered as a Service. One thing I didn&#8217;t really go into in that article was the networking and resource requirements for the SaaS Connector deployment. It&#8217;s nothing earth-shattering, but I thought it was worthwhile noting nonetheless. In terms of the VM that you deploy for each [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[837,25],"tags":[792,279,832,976,1360],"class_list":["post-10056","post","type-post","status-publish","format-standard","hentry","category-cohesity","category-dataprotection","tag-backup","tag-cloud","tag-cohesity","tag-data-protection","tag-dmaas"],"_links":{"self":[{"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/posts\/10056","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/comments?post=10056"}],"version-history":[{"count":3,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/posts\/10056\/revisions"}],"predecessor-version":[{"id":10062,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/posts\/10056\/revisions\/10062"}],"wp:attachment":[{"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/media?parent=10056"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/categories?post=10056"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/tags?post=10056"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}