Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Deployment Guide for Azure Kubernetes Services (AKS) Cluster
  3. Deploying MSDP Scaleout
  4. Prerequisites
NetBackup™ Deployment Guide for Azure Kubernetes Services (AKS) Cluster

Prerequisites

A working Azure Kubernetes cluster (AKS cluster)
  • Azure Kubernetes cluster

    • Your Azure Kubernetes cluster must be created with appropriate network and configuration settings.

      Supported Azure Kubernetes cluster version is 1.21.x and later.

    • Availability zone for AKS cluster must be disabled.

    • At least one storage class is backed with Azure disk CSI storage driver "disk.csi.azure.com", and allows volume expansion. It must be in LRS category with Premium SSD. For example, the built-in storage class "managed-csi-premium". It is recommended that the storage class has "Retain" reclaim.

    • Cert-Manager must be installed.

    • A Kubernetes Secret that contains the MSDP credentials is required.

      See Secret.

    • Enable AKS Uptime SLA.

      AKS Uptime SLA is recommended for a better resiliency.

      For information about AKS Uptime SLA and to enable it, see Azure Kubernetes Service (AKS) Uptime SLA.

  • Azure container registry (ACR)

    Use existing ACR or create a new one. Your Kubernetes cluster must be able to access this registry to pull the images from.

  • Node Pool

    You must have a dedicated node pool for MSDP Scaleout created. Azure availability zone must be disabled.

    The Azure autoscaling allows your node pool to scale dynamically as required. If Azure autoscaling is not enabled, ensure the node number is not less than MSDP Scaleout size.

    It is recommended that you set the minimum node number to 1 or more to bypass some limitations in AKS.

  • Client machine to access AKS cluster

    • A separate computer that can access and manage your AKS cluster and ACR.

    • It must have Linux operating system.

    • It must have Docker daemon, the Kubernetes command-line tool (kubectl), and Azure CLI installed.

      The Docker storage size must be more than 6 GB. The version of kubectl must be v1.19.x or later. The version of Azure CLI must meet the AKS cluster requirements.

    • If AKS is a private cluster, see Create a private Azure Kubernetes Service cluster.

  • Static Internal IPs

    If the internal IPs are used, reserve the internal IPs (avoid the IPs that are reserved by other systems) for MSDP Scaleout and add DNS records for all of them in your DNS configuration.

    The Azure static public IPs can be used but is not recommended.

    If Azure static public IPs are used, create them in the node resource group for the AKS cluster. A DNS name must be assigned to each static public IP. The IPs must be in the same location of the AKS cluster.

Existing NetBackup environment

MSDP Scaleout connects to the existing NetBackup environment with the required network ports 1556 and 443. The NetBackup primary server should be 10.0 or later. The NetBackup environment can be anywhere, locally or remotely. It may or may not be in AKS cluster. It may or may not be in the same AKS cluster.

If the NetBackup servers are on Azure cloud, besides the NetBackup configuration requirements, the following settings are recommended. They are not MSDP-specific requirements, they just help your NetBackup environment run smoothly on Azure cloud.

  • Add the following in /usr/openv/netbackup/bp.conf

    HOST_HAS_NAT_ENDPOINTS = YES
  • Tune sysctl parameters as follows:

    net.ipv4.tcp_keepalive_time=120
    
    net.ipv4.ip_local_port_range = 14000 65535
    
    net.core.somaxconn = 1024

    Tune the max open files to 1048576 if you run concurrent jobs.

Feedback

Was this page helpful?
Previous

Deploying MSDP Scaleout

Next

Installing the docker images and binaries

Feedback

Was this page helpful?