Dell EMC PowerProtect DDVE in the Azure Cloud 7.8 Installation and Administration Guide

Architecture overview

DDVE is a virtual deduplication appliance that provides data protection for entry, enterprise, and service provider environments.

The following diagram represents the architecture of the DDVE on Microsoft Azure Cloud solution.

Legend:

1. To keep data traffic between DDVE and Azure storage within the Azure infrastructure, Dell Technologies recommends that you create an Azure storage service endpoint. The service endpoint keeps DDVE from depending on a NAT Gateway or Public IP address to access the hot blob container.
2. Dell Technologies recommends a VPN connection to replicate data from an on-premises host to DDVE in the cloud or the opposite way. This approach keeps data transfers secure.
3. DDVE is categorized as a backend server. It must be kept in a private subnet with a private address. Never set a public IP address for DDVE.
4. The storage account must be in the same region where the DDVE instance is running. A separate hot blob storage account with a container is required for each DDVE.

5. All DDVE instances must be secured with the appropriate security group entries.

   Typically SSH (Port 22) or HTTPS (Port 443) is used for DDVE inbound access.

   HTTPS (443) must be allowed for outbound Azure hot blob container access for DDVE.

   TCP ports 2049 and 2051 are used for DD Boost and replication purposes.

   See the DDVE documentation for more information and for a complete list of ports.