IT教程FG194-NBU备份策略最佳实践

1. 备份策略概述

备份策略是确保数据安全的核心，需要根据业务需求和数据重要性制定合理的备份策略。更多学习教程www.fgedu.net.cn

# 查看当前备份策略
# bpclimagelist -l

# 示例输出
—————————————————————————————————-
Image Set List:
Creation Time: 04/01/2026 20:00:00
Policy Name: Full_Backup
Client Name: server01
Backup ID: server01_1234567890
Expiration Time: 04/08/2026 20:00:00
Backup Type: FULL
Size: 1024000 KB
Storage Unit: Primary_Disk
Status: 0
—————————————————————————————————-

生产环境风哥建议：制定备份策略时，需要考虑RTO（恢复时间目标）和RPO（恢复点目标），确保在灾难发生时能够快速恢复数据。

2. 保留策略设计

保留策略定义了备份数据的保留时间，需要根据业务合规要求和数据价值制定。学习交流加群风哥微信: itpux-com

# 创建保留策略
# bpretlevel -add -ptype Retention -pname “7_Day_Retention” -days 7

# 查看保留策略
# bpretlevel -list

# 示例输出
Retention Levels:
Name: 7_Day_Retention
Type: Retention
Value: 7 days
Name: 30_Day_Retention
Type: Retention
Value: 30 days
Name: 90_Day_Retention
Type: Retention
Value: 90 days

# 应用保留策略到备份策略
# bpplinfo Full_Backup -modify -retention 7_Day_Retention

# 验证保留策略设置
# bpplinfo Full_Backup -L

# 示例输出
Policy Name: Full_Backup
Policy Type: Standard
Active: yes
Effective date: 01/01/2026 00:00:00
Client Encrypt: no
Client-side Deduplication: no
Compress: no
Retention Level: 7_Day_Retention (7 days)
…

3. 备份计划设计

备份计划需要平衡业务需求和系统资源，避免在业务高峰期进行备份操作。

# 创建备份计划
# bpplsched -add Full_Backup -stype FULL -freq 0 -cal 2 -incr 0 -window 21:00-06:00 -days Mon Tue Wed Thu Fri Sat Sun

# 查看备份计划
# bpplsched Full_Backup

# 示例输出
Schedule: FULL
Type: FULL
Frequency: 0 (weekly)
Calendar: 2 (Calendar Week)
Backup Window: 21:00-06:00
Days: Mon Tue Wed Thu Fri Sat Sun
Storage Unit: Primary_Disk
Maximum Jobs: 10
Priority: 0

风哥风哥提示：备份计划应避免在业务高峰期进行，建议在系统负载较低的夜间或周末执行。

4. 备份类型选择

根据数据变化频率和恢复需求，选择合适的备份类型。

# 创建差异备份计划
# bpplsched -add Diff_Backup -stype DIFF -freq 0 -cal 2 -incr 0 -window 21:00-06:00 -days Mon Tue Wed Thu Fri

# 创建增量备份计划
# bpplsched -add Incr_Backup -stype INCR -freq 0 -cal 2 -incr 0 -window 21:00-06:00 -days Mon Tue Wed Thu Fri

# 查看所有备份计划
# bpplsched -all Diff_Backup Incr_Backup

# 示例输出
Schedule: DIFF
Type: DIFF
Frequency: 0 (weekly)
Calendar: 2 (Calendar Week)
Backup Window: 21:00-06:00
Days: Mon Tue Wed Thu Fri
Storage Unit: Primary_Disk
Maximum Jobs: 8
Priority: 1

Schedule: INCR
Type: INCR
Frequency: 0 (weekly)
Calendar: 2 (Calendar Week)
Backup Window: 21:00-06:00
Days: Mon Tue Wed Thu Fri
Storage Unit: Primary_Disk
Maximum Jobs: 10
Priority: 2

5. 存储分层策略

根据数据访问频率和重要性，将备份数据存储到不同层级的存储介质中。

# 创建存储单元
# nbdevconfig -createstu -storage_unit Primary_Disk -media_server media01 -diskpath /backup/disk01 -max_media_servers 2 -max_disk_volumes 100

# 创建磁带存储单元
# nbdevconfig -createstu -storage_unit Tape_Library -media_server media01 -robot_number 1 -drive_pool Default

# 查看存储单元
# nbdevconfig -liststu

# 示例输出
Storage Unit Name: Primary_Disk
Media Server: media01
Type: Disk
Status: UP
Max Media Servers: 2
Max Disk Volumes: 100

Storage Unit Name: Tape_Library
Media Server: media01
Type: Tape
Status: UP
Robot Number: 1
Drive Pool: Default

# 创建存储生命周期策略
# nbstl -add -name “Tiered_Backup” -description “Tiered backup storage strategy”

# 添加存储阶段
# nbstl -addstage -name “Tiered_Backup” -num 1 -unit Primary_Disk -residence Primary_Disk -on_disk yes -retention 7

# 添加磁带阶段
# nbstl -addstage -name “Tiered_Backup” -num 2 -unit Tape_Library -residence Tape_Library -on_disk no -retention 30

# 应用存储生命周期策略到备份策略
# bpplinfo Full_Backup -modify -storage_unit Primary_Disk -st_lifecycle Tiered_Backup

# 验证存储生命周期策略
# nbstl -list -U

# 示例输出
Storage Lifecycle Policy Name: Tiered_Backup
Description: Tiered backup storage strategy
Number of Stages: 2
Stage 1:
Storage Unit: Primary_Disk
Residence: Primary_Disk
On Disk: Yes
Retention Level: 7 days
Stage 2:
Storage Unit: Tape_Library
Residence: Tape_Library
On Disk: No
Retention Level: 30 days

6. 网络优化策略

网络带宽是备份性能的关键因素，需要优化网络配置以提高备份速度。

# 查看网络带宽使用情况
# bptestnetconn -h client01

# 示例输出
NetBackup test connection to client01:
Client is reachable
Network speed: 1000 Mbps
Round trip time: 0.5 ms
Packet loss: 0%

# 配置网络分段
# bpnbat -AddHost -name client01 -type CLIENT -netsegment 192.168.1.0/24

# 配置多路复用
# bpplinfo Full_Backup -modify -multiplexing 4

# 配置网络带宽限制
# bpnbaz -S media01 -modify -netbackup -max_net_bandwidth 500

# 验证网络配置
# bpgetconfig | grep -i net

# 示例输出
NET_BUFFER_SZ = 65536
CLIENT_READ_TIMEOUT = 300
CLIENT_CONNECT_TIMEOUT = 120
MAX_NET_BUFFER_SZ = 262144

生产环境风哥建议：对于大型备份，建议使用专用备份网络（VLAN），并配置适当的网络带宽限制，避免影响生产业务。

7. 安全策略设计

备份数据的安全性同样重要，需要实施适当的安全措施保护备份数据。

# 启用备份加密
# bpplinfo Full_Backup -modify -encrypt 1

# 配置加密选项
# bpclient -client client01 -modify -encryption 1 -encryption_type AES-256

# 查看加密配置
# bpplinfo Full_Backup -L | grep -i encrypt

# 示例输出
Client Encrypt: yes
Encryption Type: AES-256

# 配置访问控制
# bpnbat -AddUser -login administrator -password “P@ssw0rd” -type ADMIN

# 配置角色权限
# bprdadmin -AddRole -role BackupAdmin -description “Backup Administrator”
# bprdadmin -AddUserToRole -role BackupAdmin -user administrator

# 验证权限配置
# bprdadmin -ListRoles

# 示例输出
Role Name: BackupAdmin
Description: Backup Administrator
Users: administrator

8. 监控与告警策略

建立有效的监控和告警机制，及时发现和处理备份问题。

# 配置备份作业监控
# bpclimagelist -l -client client01 -hoursago 24

# 示例输出
—————————————————————————————————-
Image Set List:
Creation Time: 04/01/2026 21:00:00
Policy Name: Full_Backup
Client Name: client01
Backup ID: client01_1234567890
Expiration Time: 04/08/2026 21:00:00
Backup Type: FULL
Size: 512000 KB
Storage Unit: Primary_Disk
Status: 0
—————————————————————————————————-
Creation Time: 04/01/2026 22:00:00
Policy Name: Incr_Backup
Client Name: client01
Backup ID: client01_1234567891
Expiration Time: 04/08/2026 22:00:00
Backup Type: INCR
Size: 102400 KB
Storage Unit: Primary_Disk
Status: 0
—————————————————————————————————-

# 配置告警通知
# bpsetconfig -h media01 -s “ALERT_NOTIFICATION = EMAIL”
# bpsetconfig -h media01 -s “EMAIL_NOTIFICATION = admin@fgedu.net.cn”

# 测试告警通知
# bpemail -s “Test Alert” -m “This is a test alert” -t admin@fgedu.net.cn

# 查看告警历史
# bpclireq -listalerts

# 示例输出
Alert ID: 1
Time: 04/01/2026 23:00:00
Type: ERROR
Message: Backup job 1234 failed for client client01
Severity: Critical
Status: Unresolved

9. 备份测试策略

定期测试备份数据的可恢复性，确保在需要时能够成功恢复数据。

# 执行恢复测试
# bprestore -s “04/01/2026” -e “04/01/2026” -C client01 -D /test_restore -p Full_Backup -k “”

# 验证恢复结果
# ls -la /test_restore

# 示例输出
total 102400
-rw-r–r– 1 root root 51200000 Apr 1 23:30 test_file1.txt
-rw-r–r– 1 root root 51200000 Apr 1 23:30 test_file2.txt

# 创建恢复测试计划
# bpplsched -add Restore_Test -stype FULL -freq 0 -cal 4 -incr 0 -window 10:00-12:00 -days Sun

# 配置自动恢复测试
# bpbackup -i -p Restore_Test -s “Restore Test” -w 120

# 查看恢复测试结果
# bpclimagelist -l -policy Restore_Test

# 示例输出
—————————————————————————————————-
Image Set List:
Creation Time: 04/02/2026 10:00:00
Policy Name: Restore_Test
Client Name: client01
Backup ID: client01_1234567892
Expiration Time: 04/09/2026 10:00:00
Backup Type: FULL
Size: 102400 KB
Storage Unit: Primary_Disk
Status: 0
—————————————————————————————————-

10. 灾难恢复策略

制定完善的灾难恢复策略，确保在发生灾难时能够快速恢复系统。

# 创建灾难恢复计划
# nbemmcmd -getemmserver

# 备份NBU目录
# tar -cvzf /backup/nbu_config_backup_$(date +%Y%m%d).tar.gz /usr/openv/netbackup/db /usr/openv/netbackup/bp.conf

# 验证灾难恢复准备情况
# nbdb_admin -validate

# 示例输出
NBDB validation successful.
All database checks passed.

# 配置灾难恢复服务器
# nbemmcmd -addhost -machinename dr_server -machinetype MEDIA_SERVER -netbackupversion 8.3

# 配置复制到灾难恢复站点
# nbstl -add -name “DR_Copy” -description “Disaster recovery copy”
# nbstl -addstage -name “DR_Copy” -num 1 -unit DR_Disk -residence DR_Disk -on_disk yes -retention 90

# 验证灾难恢复配置
# nbstl -list -U -name DR_Copy

# 示例输出
Storage Lifecycle Policy Name: DR_Copy
Description: Disaster recovery copy
Number of Stages: 1
Stage 1:
Storage Unit: DR_Disk
Residence: DR_Disk
On Disk: Yes
Retention Level: 90 days

风哥风哥提示：灾难恢复策略应定期测试，确保在实际灾难发生时能够有效执行。建议每季度进行一次完整的灾难恢复演练。

本文由风哥教程整理发布,仅用于学习测试使用,转载注明出处:http://www.fgedu.net.cn/10327.html