Flexible Engine - File and Application Backup user guide

FAB Connection architecture models

 

Various possibilities are offered to setup the connection to the FAB service, depending on the network architecture in place in your company:

  • Direct Internet : if your data to protect has a direct internet connection
  • Using an Internet Proxy (http proxy): If your data to protect is not directly connected to the internet (behind an internet proxy like squid, ccproxy etc.). The agent setup offers you the possibility to inform the FAB agent of your http proxy configuration.

You may also want to refer to the FAB Network Flow Diagram section for the network opening settings in your company network

  • FAB Endpoint service : If your data to protect is on Flexible Engine, FAB offers the possibility to use the VPC Endpoint service to connect to FAB, rather than using the internet connection (through Elastic IP or NAT Gateway) You may refer to the VPC Endpoint documentation here for a detailed explanation on this FE network service.

 

Logical representation of generic network deployment to connect to FAB regions using different methods:

Creating FAB Endpoint connection

Note:

The FAB Endpoint service is currently available in eu-west-0 region only.
In order to provide the necessary redundancy on the FAB Endpoint connection method, it’s required to build 1 Endpoint connection for each FAB Endpoint service:

FAB-EP-PARIS-A
&
FAB-EP-PARIS-B

 

To create an endpoint connection to FAB proxy servers:

  • you need to logon to your domain Flexible Engine console, to the Network section, and Click on VPC Endpoint

 

  • On the VPC Endpoint page, Click + Create VPC Endpoint

 

  • Click on Find a service by name:

 

  • To assign FAB Proxy “FAB-EP-PARIS-A” a private IP Address from your subnet.
    1. Type in eu-west-0.FAB-EP-PARIS-A.de7ad2ef-8208-44a0-aad9-5d7699c6e413 in the VPC Endpoint Service name and click on Verify
    2. Determine the VPC / Subnet containing the servers to protect (see figure below)
    3. Click on Manual, then determine & assign an IP address for the FAB proxy (IP must be in your local subnet), click on Verify, and then click on Create Now

 

 

  • To assign FAB Proxy “FAB-EP-PARIS-B” a private IP Address from your subnet.
    1. Type eu-west-0.FAB-EP-PARIS-B.e5ad15ef-848a-47d4-9cc6-e4f31f2d0058 in the VPC Endpoint Service name and click on Verify
    2. Determine the VPC / Subnet containing the servers to protect (see figure below)
    3. Click on Manual, then determine & assign an IP address for the FAB proxy (IP must be in your local subnet), click on Verify, and then click on Create Now

 


Note:

Remember to take a note of the FAB proxy’s local IP address you will define, as it will be asked during the installation of File system agents to protect using this connection (see the File System Agent installation section).