This is an archive version of the document. To get the most up-to-date information, see the current version.System Requirements
Before you start using Veeam Backup for GCP, consider the following requirements:
The following network ports must be open to ensure proper communication of components in the Veeam Backup for GCP infrastructure.
From | To | Protocol | Port | Description |
|---|---|---|---|---|
Workstation web browser | Backup appliance | TCP | 443 | Required to access the Web UI component from a user workstation. |
Worker instance | TCP | 443 | Required to access the File Level Recovery for Veeam Backup browser running on a worker instance during the file-level recovery process. | |
Backup appliance | Worker instance | RPC | 643 | Required to communicate with the Worker service running on worker instances. |
TCP | 9999 | Required to perform file-level recovery. | ||
Ubuntu Security Update Repository (security.ubuntu.com) | HTTP | 80 | Required to get OS security updates. | |
Veeam Update Notification Server (repository.veeam.com) | TCP | 443 | Required to download information on available product updates. | |
SMTP server | TCP | 587 | Required to send email notifications. Note: You cannot use the TCP port 25 that is most commonly used by SMTP servers — the port is always blocked by Google Compute Engine. For more information, see Google Cloud documentation. |
IAM Role Permissions
Google Cloud Identity and Access Management (IAM) roles that Veeam Backup for GCP uses to perform data protection and disaster recovery operations must have permissions to access GCP services and resources. The minimal set of permissions for IAM roles is described in this Veeam KB article.
The backup appliance and worker instances must have outbound internet access to the following GCP APIs: