Azure 備份 - 常見問題集Azure Backup - Frequently asked questions

本文提供「Azure 備份」服務的常見問題解答。This article answers common questions about the Azure Backup service.

復原服務保存庫Recovery services vault

每個 Azure 訂用帳戶中可以建立的保存庫數目是否有任何限制?Is there any limit on the number of vaults that can be created in each Azure subscription?

是。Yes. 您可以為每個訂用帳戶的 Azure 備份支援區域,最多建立 500 個復原服務保存庫。You can create as many as 500 Recovery Services vaults, per supported region of Azure Backup, per subscription. 如果您需要其他保存庫,請建立其他訂用帳戶。If you need additional vaults, create an additional subscription.

針對每個保存庫註冊的伺服器/電腦具有數目限制嗎?Are there limits on the number of servers/machines that can be registered against each vault?

每個保存庫可以註冊最多 1000 部 Azure 虛擬機器。You can register upto 1000 Azure Virtual machines per vault. 如果您使用的是 MAB 代理程式,則每個保存庫可以註冊最多 50 個 MAB 代理程式。If you are using MAB Agent, you can register upto 50 MAB agents per vault. 而且您可以將 50 部 MAB 伺服器/DPM 伺服器註冊至保存庫。And you can register 50 MAB servers/DPM servers to a vault.

如果我的組織有一個保存庫,如何在還原資料時,將來自不同伺服器的資料隔離?If my organization has one vault, how can I isolate data from different servers in the vault when restoring data?

當您設定備份時,要一起復原的伺服器資料應該使用相同的複雜密碼。Server data that you want to recover together should use the same passphrase when you set up backup. 如果您只想要復原特定的伺服器,請使用該伺服器專用的複雜密碼。If you want to isolate recovery to a specific server or servers, use a passphrase for that server or servers only. 例如,人力資源伺服器可能使用一組加密複雜密碼,而會計伺服器使用另一組,並且儲存體伺服器使用第三組。For example, human resources servers could use one encryption passphrase, accounting servers another, and storage servers a third.

我是否可以在訂用帳戶之間移動保存庫?Can I move my vault between subscriptions?

否。No. 保存庫是於訂用帳戶層級上建立,且無法重新指派至其他訂用帳戶。The vault is created at a subscription level, and can't be reassigned to another subscription.

我是否可以將備份資料移至另一個保存庫?Can I move backup data to another vault?

否。No. 儲存在保存庫中的備份資料無法移至不同的保存庫。Backup data stored in a vault can't be moved to a different vault.

是否可以在備份之後從 GRS 變更為 LRS?Can I change from GRS to LRS after a backup?

否。No. 復原服務保存庫只能在儲存任何備份之前,變更儲存體選項。A Recovery Services vault can only change storage options before any backups have been stored.

我是否可以針對備份到「復原服務保存庫」的 VM 執行「項目層級還原」(ILR)?Can I do an Item Level Restore (ILR) for VMs backed up to a Recovery Services vault?

否,不支援 ILR。No, ILR isn't supported.

Azure 備份代理程式Azure Backup agent

哪裡可以找到有關適用於 Azure VM 備份之 Azure 備份代理程式的常見問題?Where can I find common questions about the Azure Backup agent for Azure VM backup?

  • 針對在 Azure VM 上執行的代理程式,請參閱這個常見問題集For the agent running on Azure VMs, read this FAQ.
  • 針對用來備份 Azure 檔案資料夾的代理程式,請參閱這個常見問題集For the agent used to backup up Azure file folders, read this FAQ.

VMware 和 Hyper-V 備份VMware and Hyper-V backup

我可以將 VMware vCenter 伺服器備份到 Azure 嗎?Can I back up VMware vCenter servers to Azure?

是。Yes. 您可以使用「Azure 備份伺服器」將 VMware vCenter Server 和 ESXi 主機備份至 Azure。You can use Azure Backup Server to back up VMware vCenter Server and ESXi hosts to Azure.

我是否需要個別授權才能復原完整的內部部署 VMware/Hyper-V 叢集?Do I need a separate license to recover an full on-premises VMware/Hyper-V cluster?

您不需要針對 VMware/HYPER-V 保護進行個別授權。You don't need separate licensing for VMware/Hyper-V protection.

  • 如果您是 System Center 客戶,請使用 System Center Data Protection Manager (DPM) 來保護 VMware VM。If you're a System Center customer, use System Center Data Protection Manager (DPM) to protect VMware VMs.
  • 如果您不是 System Center 客戶,您可使用 Azure 備份伺服器 (預付型方案) 來保護 VMware VM。If you aren't a System Center customer, you can use Azure Backup Server (pay-as-you-go) to protect VMware VMs.

DPM 和 Azure 備份伺服器備份DPM and Azure Backup Server backup

支援哪些 DPM 版本?Which DPM versions are supported?

支援的 DPM 版本彙總於支援對照表中。Supported DPM versions are summarized in the support matrix. 建議您安裝最新的 DPM 更新,並在 DPM 伺服器上執行最新版本的「Azure 備份」代理程式。We recommend that you install the latest DPM updates, and run the latest version of the Azure Backup agent on the DPM server.

是否可以向多個保存庫註冊伺服器?Can I register the server to multiple vaults?

否。No. 只能向一個保存庫註冊 DPM 或「Azure 備份」伺服器。A DPM or Azure Backup server can be registered to only one vault.

可以使用 Azure 備份伺服器來為實體伺服器建立裸機復原 (BMR) 備份嗎?Can I use Azure Backup Server to create a Bare Metal Recovery (BMR) backup for a physical server?

是。Yes.

可以使用 DPM 備份 Azure Stack 中的應用程式嗎?Can I use DPM to back up apps in Azure Stack?

否。No. 雖然您可以使用 Azure 備份來保護 Azure Stack,但 Azure 備份不支援使用 DPM 來備份 Azure Stack 中的應用程式。You can use Azure Backup to protect Azure Stack, Azure Backup doesn't support using DPM to back up apps in Azure Stack.

如果我已安裝「Azure 備份」代理程式來保護檔案和資料夾,是否可以安裝 System Center DPM 將內部部署工作負載備份至 Azure?If I've installed Azure Backup agent to protect my files and folders, can I install System Center DPM to back up on-premises workloads to Azure?

是。Yes. 但您應該先安裝 DPM,然後再安裝「Azure 備份」代理程式。But you should set up DPM first, and then install the Azure Backup agent. 依此順序安裝元件可確保「Azure 備份」代理程式能與 DPM 搭配運作。Installing components in this order ensures that the Azure Backup agent works with DPM. 不建議或不支援在安裝 DPM 之前先安裝代理程式。Installing the agent before installing DPM isn't advised or supported.

一般備份General backup

在備份排程方面是否有任何限制?Are there limits on backup scheduling?

是。Yes.

  • 您一天最多可以備份 Windows Server 或 Windows 機器三次。You can back up Windows Server or Windows machines up to three times a day. 您可以將排程原則設定為每天或每週排程。You can set the scheduling policy to daily or weekly schedules.
  • 您一天最多可以備份 DPM 兩次。You can back up DPM up to twice a day. 您可以將排程原則設定為每天、每週、每月及每年。You can set the scheduling policy to daily, weekly, monthly, and yearly.
  • 您一天可以備份 Azure VM 一次。You back up Azure VMs once a day.

支援使用哪些作業系統來進行備份?What operating systems are supported for backup?

「Azure 備份」支援使用下列作業系統來備份檔案和資料夾,以及受「Azure 備份伺服器」和 DPM 保護的應用程式。Azure Backup supports these operating systems for backing up files and folders, and apps protected by Azure Backup Server and DPM.

作業系統OS SKUSKU 詳細資料Details
WorkstationWorkstation
Windows 10 64 位元Windows 10 64 bit 企業版、專業版、家用版Enterprise, Pro, Home 機器應該執行最新的服務套件和更新。Machines should be running the latest services packs and updates.
Windows 8.1 64 位元Windows 8.1 64 bit Enterprise、ProEnterprise, Pro 機器應該執行最新的服務套件和更新。Machines should be running the latest services packs and updates.
Windows 8 64 位元Windows 8 64 bit Enterprise、ProEnterprise, Pro 機器應該執行最新的服務套件和更新。Machines should be running the latest services packs and updates.
Windows 7 64 位元Windows 7 64 bit Ultimate、Enterprise、Professional、Home Premium、Home Basic、StarterUltimate, Enterprise, Professional, Home Premium, Home Basic, Starter 機器應該執行最新的服務套件和更新。Machines should be running the latest services packs and updates.
伺服器Server
Windows Server 2016 64 位元Windows Server 2016 64 bit Standard、Datacenter、EssentialsStandard, Datacenter, Essentials 含最新的服務套件/更新。Wit the latest service packs/updates.
Windows Server 2012 R2 64 位元Windows Server 2012 R2 64 bit Standard、Datacenter、FoundationStandard, Datacenter, Foundation 含最新的服務套件/更新。With the latest service packs/updates.
Windows Server 2012 64 位元Windows Server 2012 64 bit Datacenter、Foundation、StandardDatacenter, Foundation, Standard 含最新的服務套件/更新。With the latest service packs/updates.
Windows Storage Server 2016 64 位元Windows Storage Server 2016 64 bit Standard、WorkgroupStandard, Workgroup 含最新的服務套件/更新。With the latest service packs/updates.
Windows Storage Server 2012 R2 64 位元Windows Storage Server 2012 R2 64 bit Standard、Workgroup、EssentialStandard, Workgroup, Essential 含最新的服務套件/更新。With the latest service packs/updates.
Windows Storage Server 2012 64 位元Windows Storage Server 2012 64 bit Standard、WorkgroupStandard, Workgroup 含最新的服務套件/更新。With the latest service packs/updates.
Windows Server 2008 R2 SP1 64 位元Windows Server 2008 R2 SP1 64 bit Standard、Enterprise、Datacenter、FoundationStandard, Enterprise, Datacenter, Foundation 含最新的更新。With the latest updates.
Windows Server 2008 64 位元Windows Server 2008 64 bit Standard、Enterprise、DatacenterStandard, Enterprise, Datacenter 含最新的更新。With latest updates.

針對 Azure VM Linux 備份,「Azure 備份」支援 Azure 所背書的散發套件清單,但 CoreOS Linux 除外。For Azure VM Linux backups, Azure Backup supports the list of distributions endorsed by Azure, except Core OS Linux. 只要 VM 上有 VM 代理程式可用並可支援 Python,其他自備的 Linux 散發套件便可能可以運作。Other bring-your-own Linux distributions might work as long as the VM agent is available on the VM, and support for Python exists.

資料備份是否有大小限制?Are there size limits for data backup?

大小限制如下:Sizes limits are as follows:

OS/機器OS/machine 資料來源的大小限制Size limit of data source
Windows 8 或更新版本Windows 8 or later 54,400 GB54,400 GB
Windows 7Windows 7 1700 GB1700 GB
Windows Server 2012 或更新版本Windows Server 2012 or later 54,400 GB54,400 GB
Windows Server 2008、Windows Server 2008 R2Windows Server 2008, Windows Server 2008 R2 1700 GB1700 GB
Azure VMAzure VM 32 個資料磁碟32 data disks

資料磁碟最大可達 4095 GBData disk up to 4095 GB

如何判斷資料來源大小?How is the data source size determined?

下表說明如何決定每個資料來源大小。The following table explains how each data source size is determined.

資料來源Data source 詳細資料Details
磁碟區Volume 從所要備份之單一磁碟區 VM 備份的資料量。The amount of data being backed up from single volume VM being backed up.
SQL Server 資料庫SQL Server database 所要備份之單一 SQL 資料庫大小的大小。Size of single SQL database size being backed up.
SharePointSharePoint 所要備份之 SharePoint 伺服陣列中內容和設定資料庫的總和。Sum of the content and configuration databases within a SharePoint farm being backed up.
ExchangeExchange 所要備份之 Exchange Server 中所有 Exchange 資料庫的總和。Sum of all Exchange databases in an Exchange server being backed up.
BMR/系統狀態BMR/System state 所要備份之機器的 BMR 或系統狀態的每個個別複本。Each individual copy of BMR or system state of the machine being backed up.

使用「復原服務保存庫」來備份的資料量是否有限制?Is there a limit on the amount of data backed up using a Recovery Services vault?

您可使用「復原服務保存庫」來備份的資料量並無任何限制。There is no limit on the amount of data you can back up using a Recovery Services vault.

如果我在備份作業開始後予以取消,是否會刪除已傳輸的備份資料?If I cancel a backup job once it has started, is the transferred backup data deleted?

否。No. 在備份作業取消之前﹐傳輸到保存庫的所有資料均保留於保存庫中。All data transferred into the vault, before the backup job was canceled, stays in the vault. Azure 備份會使用檢查點機制,在備份期間偶爾將檢查點加入至備份資料。Azure Backup uses a checkpoint mechanism to occasionally add checkpoints to the backup data during the backup. 因為備份資料中有檢查點,所以下一個備份程序才可驗證檔案的完整性。Because there are checkpoints in the backup data, the next backup process can validate the integrity of the files. 下一個備份工作將會增量到先前備份的資料。The next backup job will be incremental to the data previously backed up. 增量備份只會傳輸新資料或變更的資料,相當於具有較佳的頻寬使用率。Incremental backups only transfer new or changed data, which equates to better utilization of bandwidth.

如果您取消 Azure VM 的備份工作,則會忽略任何傳輸的資料。If you cancel a backup job for an Azure VM, any transferred data is ignored. 下一個備份工作會傳輸自最後一個成功備份工作之後的增量資料。The next backup job transfers incremental data from the last successful backup job.

為何傳輸到「復原服務保存庫」的資料大小會小於所選取要備份的資料?Why is the size of the data transferred to the Recovery Services vault smaller than the data selected for backup?

從「Azure 備份代理程式」、DPM 或「Azure 備份伺服器」備份的資料會先經過壓縮和加密,再進行傳輸。Data backed up from Azure Backup Agent, DPM, and Azure Backup Server is compressed and encrypted before being transferred. 在套用壓縮和加密之後,保存庫中的資料會縮小 30-40%。With compression and encryption is applied, the data in the vault is 30-40% smaller.

可以從保存庫中的復原點刪除個別的檔案嗎?Can I delete individual files from a recovery point in the vault?

否,Azure 備份不支援從儲存的備份中刪除或清除個別項目。No, Azure Backup doesn't support deleting or purging individual items from stored backups.

如果我在備份作業開始後取消作業,是否會刪除已傳輸的備份資料?If I cancel a backup job after it starts, is the transferred backup data deleted?

否。No. 所有在備份作業取消前傳輸到保存庫的資料都會保留在保存庫中。All data that was transferred into the vault before the backup job was canceled remains in the vault.

  • Azure 備份會使用檢查點機制,在備份期間偶爾將檢查點加入至備份資料。Azure Backup uses a checkpoint mechanism to occasionally add checkpoints to the backup data during the backup.
  • 因為備份資料中有檢查點,所以下一個備份程序才可驗證檔案的完整性。Because there are checkpoints in the backup data, the next backup process can validate the integrity of the files.
  • 下一個備份工作將會增量到先前備份的資料。The next backup job will be incremental to the data previously backed up. 增量備份只會傳輸新資料或變更的資料,相當於具有較佳的頻寬使用率。Incremental backups only transfer new or changed data, which equates to better utilization of bandwidth.

保留和復原Retention and recovery

就 DPM 與沒有 DPM 的 Windows 機器而言,兩者的保留原則是否相同?Are the retention policies for DPM and Windows machines without DPM the same?

是,兩者都有每日、每週、每月及每年保留原則。Yes, they both have daily, weekly, monthly, and yearly retention policies.

我是否可以自訂保留原則?Can I customize retention policies?

是,您可以自訂原則。Yes, you have customize policies. 例如,您可以設定每週和每天保留需求,但無法設定每年和每月保留需求。For example, you can configure weekly and daily retention requirements, but not yearly and monthly.

我是否可以針對備份排程和保留原則使用不同的時間?Can I use different times for backup scheduling and retention policies?

否。No. 保留原則僅能套用在復原點上。Retention policies can only be applied on backup points. 例如,下圖顯示在上午 12:00 和下午 6:00 進行之備份的保留原則。For example, this images shows a retention policy for backups taken at 12am and 6pm.

排程備份和保留

如果備份保留了很長一段時間,是否需要較多時間才能復原較舊的資料點?If a backup is kept for a long time, does it take more time to recover an older data point?

否,復原最舊或最新時間點所需的時間都相同。No – the time to recover the oldest or the newest point is the same. 每個復原點的功能就像一個完整的復原點。Each recovery point behaves like a full point.

若每個復原點就像一個完整的復原點,則其是否會影響可計費的備份儲存體總數?If each recovery point is like a full point, does it impact the total billable backup storage?

典型的長期保留復原點產品會將備份資料儲存為完整的復原點。Typical long-term retention point products store backup data as full points.

  • 完整的復原點是「效率不佳的」 儲存體,但可以更輕鬆且更快速地進行還原。The full points are storage inefficient but are easier and faster to restore.
  • 增量複本「符合儲存體效益」,但需要您還原一連串的資料,而這會影響復原時間Incremental copies are storage efficient but require you to restore a chain of data, which impacts your recovery time

Azure 備份的儲存體架構透過最佳化儲存資料以進行快速還原,並降低儲存體成本支出,可讓您魚與熊掌兼得。Azure Backup storage architecture gives you the best of both worlds by optimally storing data for fast restores and incurring low storage costs. 這可確保有效率地使用您的輸入和輸出頻寬。This ensures that your ingress and egress bandwidth is used efficiently. 資料儲存體數量及復原資料所需的時間都會維持在最低。The amount of data storage, and the time needed to recover the data, is kept to a minimum. 深入了解增量備份Learn more about incremental backups.

可建立的復原點數目有限制嗎?Is there a limit on the number of recovery points that can be created?

您可以為每個受保護的執行個體最多建立 9999 個復原點。You can create up to 9999 recovery points per protected instance. 受保護的執行個體係指會備份至 Azure 的電腦、伺服器 (實體或虛擬) 或工作負載。A protected instance is a computer, server (physical or virtual), or workload that backs up to Azure.

我可以將備份至 Azure 的資料復原幾次?How many times can I recovery data that's backed up to Azure?

從 Azure 備份進行復原的次數沒有任何限制。There is no limit on the number of recoveries from Azure Backup.

還原資料時,我需要支付來自 Azure 的輸出流量嗎?When restoring data, do I pay for the egress traffic from Azure?

否。No. 復原是免費的,不會向您收取輸出流量的費用。Recovery is free and you aren't charged for the egress traffic.

變更我的備份原則時會發生什麼狀況?What happens when I change my backup policy?

套用新原則後,就會遵循新原則的排程和保留期。When a new policy is applied, schedule and retention of the new policy is followed.

  • 如果延長保留期,會標示現有的復原點,以依據新的原則加以保留。If retention is extended, existing recovery points are marked to keep them as per new policy.
    • 如果縮短保留期,則會標示現有的復原點,以便在下次清除作業中剪除然後刪除。If retention is reduced, they are marked for pruning in the next cleanup job and subsequently deleted.

加密Encryption

傳送至 Azure 的資料會經過加密嗎?Is the data sent to Azure encrypted?

是。Yes. 資料會在內部部署機器上以 AES256 加密。Data is encrypted on the on-premises machine using AES256. 資料會透過安全的 HTTPS 連結來傳送。The data is sent over a secure HTTPS link.

位於 Azure 的備份資料也會經過加密嗎?Is the backup data on Azure encrypted as well?

是。Yes. 在 Azure 中的資料會進行靜態加密。The data in Azure is encrypted-at-rest.

  • 針對內部部署備份,會使用您在備份至 Azure 時所提供的複雜密碼來提供靜態加密。For on-premises backup, encryption-at-reset is provided using the passphrase you provide when backing up to Azure.
  • 針對 Azure VM,會使用「儲存體服務加密」(SSE) 對資料進行靜態加密。For Azure VMs, data is encrypted-at-reset using Storage Service Encryption (SSE).

Microsoft 不會解密在任何時間點所備份的資料。Microsoft does not decrypt the backup data at any point.

用來加密備份資料的加密金鑰最小長度是多少?What is the minimum length of encryption the key used to encrypt backup data?

當您使用 Azure 備份代理程式時,加密金鑰應該至少包含 16 個字元。The encryption key should be at least 16 characters when you are using Azure backup agent. 在 Azure VM 中,Azure KeyVault 所使用的金鑰長度沒有限制。For Azure VMs, there is no limit to length of keys used by Azure KeyVault.

如果我錯置加密金鑰,則會發生什麼情況?What happens if I misplace the encryption key? 我是否可以復原資料?Can I recover the data? Microsoft 是否可以復原資料?Can Microsoft recover the data?

用來加密備份資料的金鑰只存在於您的站台上。The key used to encrypt the backup data is present only on your site. Microsoft 不會維護 Azure 中的複本,且無法存取金鑰。Microsoft does not maintain a copy in Azure and does not have any access to the key. 如果您忘記將金鑰放在哪裡,Microsoft 並無法復原該備份資料。If you misplace the key, Microsoft can't recover the backup data.

後續步驟Next steps

閱讀其他常見問題集:Read the other FAQs: