Azure Backup architecture for SAP HANA backup

Azure Backup service allows you to back up data from SAP HANA databases in an application in consistent manner. This article describes the Azure Backup architecture components and processes.

How does Azure Backup work with SAP HANA databases?

Azure Backup provides a streaming backup solution to back up SAP HANA databases running on an Azure VM. This backup offering requires zero-infrastructure setup, thereby eliminating the need to deploy and manage backup-infrastructure.

Azure Backup is Backint certified by SAP, provides native backup support by using SAP HANA’s native APIs. With this solution, you can seamlessly back up and restore SAP HANA databases running on Azure VMs and use the enterprise management capabilities that Azure Backup provides.

Learn more about the added values that Azure Backup provides for SAP HANA.

Where is the data backed up?

Azure Backup stores the backed-up data in Recovery Services vaults. A vault is an online-storage entity in Azure that's used to store data, such as backup copies, recovery points, and backup policies.

Learn more about Recovery Services vault.

Backup agents

To back up SAP HANA databases running on Azure VM, you need to allow the installation of the plugin (SAP HANA Backup agent) on the Azure VM. This plugin connects with HANA Backint and helps the Azure Backup service to move data to the vault. It also enables Azure Backup to perform restores.

Backup types

Learn about SAP HANA backup types.

About architecture

See the high-level architecture of Azure Backup for SAP HANA databases. For a detailed understanding of the backup process, see the following process:

Diagram showing the backup process of SAP HANA database.

  1. To begin the backup process, create a Recovery Services vault in Azure. This vault will be used to store the backups and recovery points created over time.

  2. The Azure VM running an SAP HANA server is registered with the vault, and the databases to be backed up are discovered. To enable the Azure Backup service to discover databases, you must run this preregistration script on the HANA server as a root user.

    Note

    Ensure that the HANA instance is up and running during the discover of the databases in this instance.

  3. Also, ensure that the other pre-requisites are fulfilled.

    Important

    Ensure that the prerequisite to set up the right network connectivity is met. See the recommendation on how to set up Azure VMs running in SAP HANA with additional network components to use the backup offering.

  4. See the details about what the pre-registration script does. If you attempt to configure backup for SAP HANA databases without running this script, you might receive the error UserErrorHanaScriptNotRun.

  5. The Azure Backup service now installs the Azure Backup Plugin for HANA on the registered SAP HANA server. This plugin uses the Backup user created by the pre-registration script to perform all backup and restore operations.

  6. To configure backup on the discovered databases, choose the required backup policy and enable backups.

  7. Azure Backup for SAP HANA (a Backint certified solution) doesn't depend on the underlying disk or VM types. The backup is performed by streams generated by SAP HANA.

Backup flow

  1. The scheduled backups are managed by crontab entries created on the HANA VM, while the on-demand backups are directly triggered by the Azure Backup service.

  2. Once SAP HANA Backup Engine/Backint receives the backup request, it prepares the SAP HANA database for a backup by creating a save point, and moving data to underlying storage volumes.

  3. Backint then executes the read operation from the underlying data volumes – the index server and XS engine for the Tenant database and name server for the SYSTEMDB. Premium SSD disks can provide optimal I/O throughput for the backup streaming operation. However, using uncached disks with M64Is can provide higher speeds.

  4. To stream the backup data, Backint creates up to three pipes, which directly write to Azure Backup’s Recovery Services vault.

    If you aren’t using firewall/NVA in your setup, then the backup stream is transferred over the Azure network to the Recovery Services vault. Also, you can set up Virtual Network Service Endpoint or Private Endpoint to allow SAP HANA to send backup traffic directly to Azure Storage, skipping NVA/Azure Firewall. Additionally, when you use firewall/NVA, the traffic to Azure Active Directory and Recovery Services vault will pass through the firewall/NVA and it doesn’t affect the overall backup performance.

  5. Azure Backup attempts to achieve speeds up to 420 MB/sec for non-log backups and up to 100 MB/sec for log backups. Learn more about backup and restore throughput performance.

  6. Detailed logs are written to the backup.log and backint.log files on the SAP HANA instance.

  7. Once the backup streaming is complete, the catalog is streamed to the Recovery Services vault. If both the backup (full/differential/incremental/log) and the catalog for this backup are successfully streamed and saved into the Recovery Services vault, Azure Backup considers the backup operation is successful.

Refer to the following SAP HANA setups and see the execution of backup operation mentioned above:

SAP HANA setup scenario: Azure network - without any NVA/Azure Firewall

Diagram showing the SAP HANA setup if Azure network without any NVA/Azure Firewall.

SAP HANA setup scenario: Azure network - with UDR + NVA / Azure Firewall

Diagram showing the SAP HANA setup if Azure network with UDR + NVA / Azure Firewall.

Note

NVA/Azure Firewall may add an overhead when SAP HANA stream backup to Azure Storage/Recovery Services vault (data plane). See point 6 in the above diagram.

SAP HANA setup scenario: Azure network - with UDR + NVA / Azure Firewall + Private Endpoint or Service Endpoint

Diagram showing the SAP HANA setup if Azure network with UDR + NVA / Azure Firewall + Private Endpoint or Service Endpoint.

Next steps

Back up SAP HANA databases in Azure VMs.