Search <book_title>...

NetBackup™ Deployment Guide for Amazon Elastic Kubernetes Services (EKS) Cluster

Last Published: 2022-09-08

Product(s): NetBackup (10.1)

About the Load Balancer service

Key features of the Load Balancer service:

Load balancer services are created in primary server and media server deployment that allows you to access the NetBackup application from public domains.
In primary server or media server CR spec, networkLoadBalancer section is used for handling the IP address and DNS name allocation for load balancer services. This section combines to sub fields type, annotations, and ipList whereas these fields are optional. If ipList is provided in CR spec, IP address count must match the replica count in case of media server CR whereas in case of primary server CR, only one IP address needs to be mentioned.
NetBackup supports the network load balancer with AWS Load Balancer scheme as internet-facing.
The networkLoadBalancer section can be used to provide static IP address and dns name allocation to the Load Balancer services.
FQDN must be created before being used. Refer below sections for different allowed annotations to be used in CR spec.
- User must add the following annotations:
  service.beta.kubernetes.io/aws-load-balancer-subnets: <subnet1 name>
  In addition to the above annotations, if required user can add more annotations supported by AWS. For more information, see AWS Load Balancer Controller Annotations.
  Example: CR spec in primary server,
```
networkLoadBalancer: 
type: Private 
annotations:
  service.beta.kubernetes.io/aws-load-balancer-subnets: <subnet1 name> 
  ipList: 
  "10.244.33.27: abc.vxindia.veritas.com"
```
  CR spec in media server,
```
networkLoadBalancer: 
type: Private 
annotations:
   service.beta.kubernetes.io/aws-load-balancer-subnets: <subnet1 name> 
   ipList: 
  "10.244.33.28: pqr.vxindia.veritas.com" 
  "10.244.33.29: xyz.vxindia.veritas.com"
```
  The IP address, the subnet provided in ipList and annotations in networkLoadBalancer section in CR spec must belong to same availability zone that of the node group.
  Note:
  The subnet provided here should be same as the one given in node pool used for primary server and media server.

If NetBackup client is outside VPC or to access Web UI from outside VPC, then client CIDR must be added with all NetBackup ports in security group rule of cluster. Run the following command, to obtain the cluster security group:

aws eks describe-cluster --name <my-cluster> --query cluster.resourcesVpcConfig.clusterSecurityGroupId

For more information on cluster security group, see .

Add inbound rule to security group. For more information, see Add rules to a security group.

Default ports used in the Load Balancer service

Primary server:
- 1556
  Used as bidirectional port. Primary server to/from media servers and primary server to/from client require this TCP port for communication.
- 8443
  Used to inbound to java nbwmc on the primary server.
- 443
  Used to inbound to vnet proxy tunnel on the primary server. Also, this is used Nutanix workload, communication from primary server to the deduplication media server.
- 13781
  The MQBroker is listening on TCP port 13781. NetBackup client hosts - typically located behind a NAT gateway - be able to connect to the message queue broker (MQBroker) on the primary server.
- 13782
  Used by primary server for bpcd process.
- Port 22
  Used by NetBackup IT Analytics data collector for data collection.
Media server:
- 1556
  Used as bidirectional port. Primary server to/from media servers and primary server to/from client require this TCP port for communication.
- 13782
  Used by media server for bpcd process.