Azure 备份体系结构和组件Azure Backup architecture and components

可以使用 Azure 备份服务将数据备份到 Azure 云平台。You can use the Azure Backup service to back up data to the Azure cloud platform. 本文汇总了 Azure 备份体系结构、组件和流程。This article summarizes Azure Backup architecture, components, and processes.

Azure 备份有什么功能?What does Azure Backup do?

Azure 备份可以备份数据、计算机状态,以及本地计算机和 Azure 虚拟机 (VM) 实例上运行的工作负荷。Azure Backup backs up the data, machine state, and workloads running on on-premises machines and Azure virtual machine (VM) instances. 有许多 Azure 备份方案。There are a number of Azure Backup scenarios.

Azure 备份的工作原理是什么?How does Azure Backup work?

可以使用许多方法备份计算机和数据:You can back up machines and data by using a number of methods:

  • 备份本地计算机Back up on-premises machines:

    • 可以使用 Azure 备份 Microsoft Azure 恢复服务 (MARS) 代理直接将本地 Windows 计算机备份到 Azure。You can back up on-premises Windows machines directly to Azure by using the Azure Backup Microsoft Azure Recovery Services (MARS) agent. 不支持 Linux 计算机。Linux machines aren't supported.
    • 可将本地计算机备份到备份服务器 - System Center Data Protection Manager (DPM) 或 Microsoft Azure 备份服务器 (MABS)。You can back up on-premises machines to a backup server - either System Center Data Protection Manager (DPM) or Microsoft Azure Backup Server (MABS). 然后,可将备份服务器备份到 Azure 中的恢复服务保管库。You can then back up the backup server to a Recovery Services vault in Azure.
  • 备份 Azure VMBack up Azure VMs:

    • 可以直接备份 Azure VM。You can back up Azure VMs directly. Azure 备份会将一个备份扩展安装到 VM 上运行的 Azure VM 代理。Azure Backup installs a backup extension to the Azure VM agent that's running on the VM. 此扩展备份整个 VM。This extension backs up the entire VM.
    • 可以通过运行 MARS 代理来备份 Azure VM 上的特定文件和文件夹。You can back up specific files and folders on the Azure VM by running the MARS agent.
    • 可将 Azure VM 备份到 Azure 中运行的 MABS,然后可将 MABS 备份到恢复服务保管库。You can back up Azure VMs to the MABS that's running in Azure, and you can then back up the MABS to a Recovery Services vault.

详细了解可以备份哪些内容,以及支持的备份方案Learn more about what you can back up and about supported backup scenarios.

数据备份到何处?Where is data backed up?

Azure 备份将备份的数据存储在恢复服务保管库中。Azure Backup stores backed-up data in a Recovery Services vault. 保管库是 Azure 中的联机存储实体,用于保存备份副本、恢复点和备份策略等数据。A vault is an online-storage entity in Azure that's used to hold data, such as backup copies, recovery points, and backup policies.

恢复服务保管库具有以下功能:Recovery Services vaults have the following features:

  • 使用保管库可以方便地组织备份数据,并将管理开销降至最低。Vaults make it easy to organize your backup data, while minimizing management overhead.
  • 在每个 Azure 订阅中,最多可以创建 500 个保管库。In each Azure subscription, you can create up to 500 vaults.
  • 可以监视保管库中的备份项,包括 Azure VM 和本地计算机。You can monitor backed-up items in a vault, including Azure VMs and on-premises machines.
  • 可以使用 Azure 基于角色的访问控制 (Azure RBAC) 来管理对保管库的访问。You can manage vault access with Azure role-based access control (Azure RBAC).
  • 指定如何复制保管库中的数据以实现冗余:You specify how data in the vault is replicated for redundancy:
    • 本地冗余存储 (LRS) :若要防范数据中心发生故障,可以使用 LRS。Locally redundant storage (LRS): To protect against failure in a datacenter, you can use LRS. LRS 将数据复制到存储缩放单元。LRS replicates data to a storage scale unit. 了解详细信息Learn more.
    • 异地冗余存储 (GRS) :若要防范区域范围的服务中断,可以使用 GRS。Geo-redundant storage (GRS): To protect against region-wide outages, you can use GRS. GRS 会将数据复制到次要区域。GRS replicates your data to a secondary region. 了解详细信息Learn more.
    • 恢复服务保管库默认使用 GRS。By default, Recovery Services vaults use GRS.

备份代理Backup agents

Azure 备份提供不同的备份代理,具体取决于要备份哪种类型的计算机:Azure Backup provides different backup agents, depending on what type of machine is being backed up:

代理Agent 详细信息Details
MARS 代理MARS agent
  • 在独立的本地 Windows Server 计算机上运行,可以备份文件、文件夹和系统状态。Runs on individual on-premises Windows Server machines to back up files, folders, and the system state.
  • 在 Azure VM 上运行,可以备份文件、文件夹和系统状态。Runs on Azure VMs to back up files, folders, and the system state.
  • 在 DPM/MABS 服务器上运行,可将 DPM/MABS 本地存储磁盘备份到 Azure。Runs on DPM/MABS servers to back up the DPM/MABS local storage disk to Azure.
Azure VM 扩展Azure VM extension 在 Azure VM 上运行,可以将其备份到保管库。Runs on Azure VMs to back them up to a vault.

备份类型Backup types

下表解释了不同的备份类型及其使用时机:The following table explains the different types of backups and when they're used:

备份类型Backup type 详细信息Details 使用情况Usage
完整Full 完整备份包含整个数据源。A full backup contains the entire data source. 占用的网络带宽比差异或增量备份更多。Takes more network bandwidth than differential or incremental backups. 用于初始备份。Used for initial backup.
差异Differential 差异备份存储自初始完整备份以来发生更改的块。A differential backup stores the blocks that changed since the initial full backup. 使用较少的网络带宽和存储量,且不保留未更改数据的冗余副本。Uses a smaller amount of network and storage, and doesn't keep redundant copies of unchanged data.

效率不高,因为需要传输并存储每次后续备份之后未发生更改的数据块。Inefficient because data blocks that are unchanged between later backups are transferred and stored.
Azure 备份不使用此备份类型。Not used by Azure Backup.
增量Incremental 增量备份仅存储自上次备份以来发生更改的数据块。An incremental backup stores only the blocks of data that changed since the previous backup. 存储和网络效率高。High storage and network efficiency.

使用增量备份时,无需使用完整备份进行补充。With incremental backup, there's no need to supplement with full backups.
DPM/MABS 使用此备份类型来备份磁盘,备份到 Azure 的所有方案都使用此备份类型。Used by DPM/MABS for disk backups, and used in all backups to Azure. 不用于 SQL Server 备份。Not used for SQL Server backup.

SQL Server 备份类型SQL Server backup types

下表解释了 SQL Server 数据库使用的不同备份类型及其使用时机:The following table explains the different types of backups used for SQL Server databases and how often they're used:

备份类型Backup type 详细信息Details 使用情况Usage
完整备份Full backup 完整数据库备份将备份整个数据库。A full database backup backs up the entire database. 完整备份包含特定数据库中或一组文件组或文件中的所有数据。It contains all the data in a specific database or in a set of filegroups or files. 完整备份还包含足够的日志用于恢复该数据。A full backup also contains enough logs to recover that data. 每天最多可以触发一次完整备份。At most, you can trigger one full backup per day.

可以选择每天或每周创建完整备份。You can choose to make a full backup on a daily or weekly interval.
差异备份Differential backup 差异备份基于最新的、以前的完整数据备份。A differential backup is based on the most recent, previous full-data backup.

它只捕获自完整备份以来发生更改的数据。It captures only the data that's changed since the full backup.
每天最多可以触发一次差异备份。At most, you can trigger one differential backup per day.

不能在同一天配置完整备份和差异备份。You can't configure a full backup and a differential backup on the same day.
事务日志备份Transaction log backup 日志备份可以实现时间点还原,精度可达到特定的秒。A log backup enables point-in-time restoration up to a specific second. 最多可以配置为每隔 15 分钟创建事务日志备份。At most, you can configure transactional log backups every 15 minutes.

备份类型的比较Comparison of backup types

存储消耗、恢复时间目标 (RTO) 和网络消耗因每种备份类型而异。Storage consumption, recovery time objective (RTO), and network consumption varies for each type of backup. 下图比较了不同的备份类型:The following image shows a comparison of the backup types:

  • 数据源 A 由每月备份的 10 个存储块 A1-A10 组成。Data source A is composed of 10 storage blocks, A1-A10, which are backed up monthly.
  • 第一个月,存储块 A2、A3、A4 和 A9 变化,第二个月,存储块 A5 变化。Blocks A2, A3, A4, and A9 change in the first month, and block A5 changes in the next month.
  • 对于差异备份,在第二个月,将备份已更改的块 A2、A3、A4 和 A9。For differential backups, in the second month, changed blocks A2, A3, A4, and A9 are backed up. 第三个月,会再次备份这些相同的存储块,以及已更改的存储块 A5。In the third month, these same blocks are backed up again, along with changed block A5. 下次进行完整备份之前,将继续对已更改的存储块进行备份。The changed blocks continue to be backed up until the next full backup happens.
  • 对于增量备份,在第二个月,块 A2、A3、A4 和 A9 将标记为已更改和已传输。For incremental backups, in the second month, blocks A2, A3, A4, and A9 are marked as changed and transferred. 在第三个月,仅标记已更改的存储块 A5,并进行传输。In the third month, only changed block A5 is marked and transferred.

备份方法比较图

备份功能Backup features

下表汇总了不同备份类型支持的功能:The following table summarizes the supported features for the different types of backup:

功能Feature 直接备份文件和文件夹(使用 MARS 代理)Direct Backup of Files and Folders (using MARS Agent) Azure VM 备份Azure VM Backup DPM/MABS 中的计算机或应用Machines or apps with DPM/MABS
备份到保管库Back up to vault 是 是 是
依次备份到 DPM/MABS 磁盘和 AzureBack up to DPM/MABS disk, then to Azure 是
压缩发送的备份数据Compress data sent for backup 是 传输数据时不使用压缩。No compression is used when transferring data. 存储消耗略有提高,但还原速度更快。Storage is inflated slightly, but restoration is faster. 是
运行增量备份Run incremental backup 是 是 是
备份已删除重复数据的磁盘Back up deduplicated disks 部分

仅适用于本地部署的 DPM/MABS 服务器。For DPM/MABS servers deployed on-premises only.

表键

备份策略概要Backup policy essentials

  • 备份策略是按保管库创建的。A backup policy is created per vault.
  • 可为以下工作负载的备份创建备份策略:Azure VM、Azure VM 中的 SQL 以及 Azure VM 中的 SAP HANA。A backup policy can be created for the backup of following workloads: Azure VMs, SQL in Azure VMs, and SAP HANA in Azure VMs. 在 MARS 控制台中指定了使用 MARS 代理进行文件和文件夹备份的策略。The policy for files and folder backup using the MARS agent is specified in the MARS console.
  • 可将一个策略分配到多个资源。A policy can be assigned to many resources. 可以使用一个 Azure VM 备份策略来保护多个 Azure VM。An Azure VM backup policy can be used to protect many Azure VMs.
  • 策略由两个部分组成A policy consists of two components
    • 计划:何时创建备份Schedule: When to take the backup
    • 保留期:每个备份应保留多长时间。Retention: For how long each backup should be retained.
  • 可将计划定义为带有特定时间点的“每日”或“每周”计划。Schedule can be defined as "daily" or "weekly" with a specific point of time.
  • 可以针对“每日”、“每周”、“每月”、“每年”备份点定义保留期。Retention can be defined for "daily", "weekly", "monthly", "yearly" backup points.
    • “每周”是指一周中某天的备份"weekly" refers to a backup on a certain day of the week
    • “每月”是指一月中某天的备份"monthly" refers a backup on a certain day of the month
    • “每年”是指一年中某天的备份"yearly" refers to a backup on a certain day of the year
  • “每月”、“每年”备份点的保留期称为“长期保留 (LTR)”Retention for "monthly", "yearly" backup points is referred to as Long Term Retention (LTR)
  • 创建保管库时,还会创建“DefaultPolicy”,“DefaultPolicy”可用于备份资源。When a vault is created, a "DefaultPolicy" is also created and can be used to back up resources.
  • 对备份策略保留期所做的任何更改都将以追溯方式应用于除新恢复点以外的所有旧恢复点。Any changes made to the retention period of a backup policy will be applied retroactively to all the older recovery points aside from the new ones.

其他参考Additional reference

体系结构:内置 Azure VM 备份Architecture: Built-in Azure VM Backup

  1. 为 Azure VM 启用备份时,将会根据指定的计划运行备份。When you enable backup for an Azure VM, a backup runs according to the schedule you specify.
  2. 首次备份期间,如果 VM 已运行,则会在 VM 上安装备份扩展。During the first backup, a backup extension is installed on the VM if the VM is running.
    • 对于 Windows VM,将安装 VMSnapshot 扩展。For Windows VMs, the VMSnapshot extension is installed.
    • 对于 Linux VM,将安装 VMSnapshot Linux 扩展。For Linux VMs, the VMSnapshot Linux extension is installed.
  3. 该扩展创建存储级快照。The extension takes a storage-level snapshot.
    • 对于正在运行的 Windows VM,备份服务将与卷影复制服务 (VSS) 互相配合,来创建 VM 的应用一致性快照。For Windows VMs that are running, Backup coordinates with the Windows Volume Shadow Copy Service (VSS) to take an app-consistent snapshot of the VM. 备份服务默认创建完整的 VSS 备份。By default, Backup takes full VSS backups. 如果 Azure 备份无法创建应用一致性快照,则会创建文件一致性快照。If Backup is unable to take an app-consistent snapshot, then it takes a file-consistent snapshot.
    • 对于 Linux VM,Azure 备份将创建文件一致性快照。For Linux VMs, Backup takes a file-consistent snapshot. 对于应用一致性快照,需要手动自定义前脚本/后脚本。For app-consistent snapshots, you need to manually customize pre/post scripts.
    • 可以通过并行备份每个 VM 磁盘来优化备份。Backup is optimized by backing up each VM disk in parallel. 对于每个要备份的磁盘,Azure 备份将读取磁盘上的块,并只存储已更改的数据。For each disk being backed up, Azure Backup reads the blocks on disk and stores only the changed data.
  4. 创建快照后,数据将传输到保管库。After the snapshot is taken, the data is transferred to the vault.
    • 只会复制自上次备份以来发生更改的数据块。Only blocks of data that changed since the last backup are copied.
    • 不会加密数据。Data isn't encrypted. Azure 备份可以备份使用 Azure 磁盘加密进行加密的 Azure VM。Azure Backup can back up Azure VMs that were encrypted by using Azure Disk Encryption.
    • 快照数据可能不会立即复制到保管库。Snapshot data might not be immediately copied to the vault. 在高峰期,可能需要好几个小时才能完成备份。At peak times, the backup might take some hours. 每日备份策略规定,VM 总备份时间不超过 24 小时。Total backup time for a VM will be less than 24 hours for daily backup policies.
  5. 将数据发送到保管库后,将创建恢复点。After the data is sent to the vault, a recovery point is created. 默认情况下,快照会保留两天,然后再删除。By default, snapshots are retained for two days before they are deleted. 此功能允许从这些快照执行还原操作,从而缩短还原时间。This feature allows restore operation from these snapshots, thereby cutting down the restore times. 它减少了从保管库转换数据和复制回数据所需的时间。It reduces the time that's required to transform and copy data back from the vault. 请参阅 Azure 备份即时还原功能See Azure Backup Instant Restore Capability.

无需明确允许 Internet 连接来备份 Azure VM。You don't need to explicitly allow internet connectivity to back up your Azure VMs.

备份 Azure VM

体系结构:直接备份本地 Windows Server 计算机或者 Azure VM 文件或文件夹Architecture: Direct backup of on-premises Windows Server machines or Azure VM files or folders

  1. 若要设置方案,请在计算机中下载并安装 MARS 代理。To set up the scenario, you download and install the MARS agent on the machine. 然后选择要备份的内容、运行备份的时间,以及备份在 Azure 中保留的期限。You then select what to back up, when backups will run, and how long they'll be kept in Azure.
  2. 初始备份根据备份设置运行。The initial backup runs according to your backup settings.
  3. MARS 代理使用 VSS 来创建选择进行备份的卷的时间点快照。The MARS agent uses VSS to take a point-in-time snapshot of the volumes selected for backup.
    • MARS 代理仅使用 Windows 系统写入操作来捕获快照。The MARS agent uses only the Windows system write operation to capture the snapshot.
    • 该代理不使用任何应用程序 VSS 写入器,因此不会捕获应用一致性快照。Because the agent doesn't use any application VSS writers, it doesn't capture app-consistent snapshots.
  4. 使用 VSS 创建快照后,MARS 代理将在配置备份时指定的缓存文件夹中创建一个虚拟硬盘 (VHD)。After taking the snapshot with VSS, the MARS agent creates a virtual hard disk (VHD) in the cache folder you specified when you configured the backup. 该代理还会存储每个数据块的校验和。The agent also stores checksums for each data block.
  5. 除非运行按需备份,否则增量备份会根据指定的计划运行。Incremental backups run according to the schedule you specify, unless you run an on-demand backup.
  6. 在增量备份中,将会标识已更改的文件,并创建新的 VHD。In incremental backups, changed files are identified and a new VHD is created. 该 VHD 经过压缩和加密,然后发送到保管库。The VHD is compressed and encrypted, and then it's sent to the vault.
  7. 增量备份完成后,新 VHD 将与初始复制后创建的 VHD 合并。After the incremental backup finishes, the new VHD is merged with the VHD created after the initial replication. 此合并的 VHD 提供最新状态,用于对现行备份进行比较。This merged VHD provides the latest state to be used for comparison for ongoing backup.

使用 MARS 代理备份本地 Windows Server 计算机

体系结构:备份到 DPM/MABSArchitecture: Back up to DPM/MABS

  1. 在要保护的计算机上安装 DPM 或 MABS 保护代理。You install the DPM or MABS protection agent on machines you want to protect. 然后,将这些计算机添加到 DPM 保护组。You then add the machines to a DPM protection group.
    • 若要保护本地计算机,DPM 或 MABS 服务器必须位于本地。To protect on-premises machines, the DPM or MABS server must be located on-premises.
    • 若要保护 Azure VM,MABS 服务器必须位于 Azure 中,并作为 Azure VM 运行。To protect Azure VMs, the MABS server must be located in Azure, running as an Azure VM.
    • 使用 DPM/MABS 可以保护备份的卷、共享、文件和文件夹。With DPM/MABS, you can protect backup volumes, shares, files, and folders. 还可以保护计算机系统状态/裸机,并使用应用感知的备份设置来保护特定的应用。You can also protect a machine's system state (bare metal), and you can protect specific apps with app-aware backup settings.
  2. 为 DPM/MABS 中的计算机或应用设置保护时,请选择备份到 MABS/DPM 本地磁盘进行短期存储,并备份到 Azure 进行联机保护。When you set up protection for a machine or app in DPM/MABS, you select to back up to the MABS/DPM local disk for short-term storage and to Azure for online protection. 此外,可以指定何时要运行备份到本地 DPM/MABS 存储的操作,以及何时要运行联机备份到 Azure 的操作。You also specify when the backup to local DPM/MABS storage should run and when the online backup to Azure should run.
  3. 受保护工作负荷的磁盘将根据指定的计划备份到本地 MABS/DPM 磁盘。The disk of the protected workload is backed up to the local MABS/DPM disks, according to the schedule you specified.
  4. DPM/MABS 磁盘由在 DPM/MABS 服务器上运行的 MARS 代理备份到保管库。The DPM/MABS disks are backed up to the vault by the MARS agent that's running on the DPM/MABS server.

备份 DPM 或 MABS 保护的计算机和工作负荷

Azure VM 存储Azure VM storage

Azure VM 使用磁盘来存储其操作系统、应用和数据。Azure VMs use disks to store their operating system, apps, and data. 每个 Azure VM 至少包含两个磁盘:一个磁盘用于操作系统,另一个用作临时磁盘。Each Azure VM has at least two disks: a disk for the operating system and a temporary disk. Azure VM 还可以使用数据磁盘来存储应用数据。Azure VMs can also have data disks for app data. 磁盘以 VHD 的形式进行存储。Disks are stored as VHDs.

  • 在 Azure 上的标准或高级存储帐户中,VHD 以页 Blob 的形式进行存储:VHDs are stored as page blobs in standard or premium storage accounts in Azure:
    • 标准存储: 为运行不关注延迟的工作负荷的 VM 提供可靠、低成本的磁盘支持。Standard storage: Reliable, low-cost disk support for VMs running workloads that aren't sensitive to latency. 标准存储可以使用标准固态硬盘 (SSD) 或标准机械硬盘 (HDD)。Standard storage can use standard solid-state drive (SSD) disks or standard hard disk drive (HDD) disks.
    • 高级存储: 高性能磁盘支持。Premium storage: High-performance disk support. 使用高级·SSD 磁盘。Uses premium SSD disks.
  • 磁盘具有不同的性能层:There are different performance tiers for disks:
    • 标准 HDD 磁盘: 基于 HDD,用作经济高效的存储。Standard HDD disk: Backed by HDDs, and used for cost-effective storage.
    • 标准 SSD 磁盘: 结合了高级 SSD 磁盘和标准 HDD 磁盘的特点。Standard SSD disk: Combines elements of premium SSD disks and standard HDD disks. 提供的一致性能和可靠性超过 HDD,而性价比仍然很高。Offers more consistent performance and reliability than HDD, but still cost-effective.
    • 高级·SSD 磁盘: 基于 SSD,为运行 I/O 密集型工作负荷的 VM 提供高性能和低延迟。Premium SSD disk: Backed by SSDs, and provides high-performance and low-latency for VMs that are running I/O-intensive workloads.
  • 磁盘可以是托管磁盘或非托管磁盘:Disks can be managed or unmanaged:
    • 非托管磁盘: VM 使用的传统磁盘类型。Unmanaged disks: Traditional type of disks used by VMs. 对于这些磁盘,可以创建自己的存储帐户,并在创建磁盘时指定该存储帐户。For these disks, you create your own storage account and specify it when you create the disk. 然后需要确定如何最大限度地利用 VM 的存储资源。You then need to figure out how to maximize storage resources for your VMs.
    • 托管磁盘: Azure 将为你创建和管理存储帐户。Managed disks: Azure creates and manages the storage accounts for you. 你只需指定磁盘大小和性能层,Azure 就会自动创建托管磁盘。You specify the disk size and performance tier, and Azure creates managed disks for you. 当你添加磁盘和缩放 VM 时,Azure 将处理存储帐户。As you add disks and scale VMs, Azure handles the storage accounts.

有关磁盘存储和 VM 可用的磁盘类型的详细信息,请参阅以下文章:For more information about disk storage and the available disk types for VMs, see these articles:

备份和还原使用高级存储的 Azure VMBack up and restore Azure VMs with premium storage

可以通过 Azure 备份来备份使用高级存储的 Azure VM:You can back up Azure VMs by using premium storage with Azure Backup:

  • 在备份使用高级存储的 VM 过程中,备份服务将在存储帐户中创建名为 AzureBackup- 的临时暂存位置。During the process of backing up VMs with premium storage, the Backup service creates a temporary staging location, named AzureBackup-, in the storage account. 暂存位置大小与恢复点快照大小相同。The size of the staging location equals the size of the recovery point snapshot.
  • 确保高级存储帐户有足够的可用空间,可以容纳临时暂存位置。Make sure that the premium storage account has adequate free space to accommodate the temporary staging location. 有关详细信息,请参阅高级页 blob 存储帐户的可伸缩性目标For more information, see Scalability targets for premium page blob storage accounts. 不要修改暂存位置。Don't modify the staging location.
  • 备份作业完成后,将删除暂存位置。After the backup job finishes, the staging location is deleted.
  • 用于暂存位置的存储的价格与高级存储定价相一致。The price of storage used for the staging location is consistent with premium storage pricing.

还原使用高级存储的 Azure VM 时,可将其还原到高级或标准存储。When you restore Azure VMs by using premium storage, you can restore them to premium or standard storage. 通常情况下,你会将它们还原到高级存储。Typically, you would restore them to premium storage. 但如果你只需要 VM 中的一部分文件,则还原到标准存储可能更具成本效益。But if you need only a subset of files from the VM, it might be cost effective to restore them to standard storage.

备份和还原托管磁盘Back up and restore managed disks

可以备份使用托管磁盘的 Azure VM。You can back up Azure VMs with managed disks:

  • 像备份其他任何 Azure VM 一样备份使用托管磁盘的 VM。You back up VMs with managed disks in the same way that you do any other Azure VM. 可以直接从虚拟机设置备份 VM,或者,可以在恢复服务保管库中为 VM 启用备份。You can back up the VM directly from the virtual machine settings, or you can enable backup for VMs in the Recovery Services vault.
  • 通过基于托管磁盘的 RestorePoint 收集,可以在托管磁盘上备份 VM。You can back up VMs on managed disks through RestorePoint collections built on top of managed disks.
  • Azure 备份也支持备份包含使用 Azure 磁盘加密技术加密的托管磁盘的 VM。Azure Backup also supports backing up VMs with managed disks that were encrypted by using Azure Disk Encryption.

还原使用托管磁盘的 VM 时,可以还原到使用托管磁盘的整个 VM,或者还原到存储帐户:When you restore VMs with managed disks, you can restore to a complete VM with managed disks or to a storage account:

  • 在还原过程中,Azure 将处理托管磁盘。During the restore process, Azure handles the managed disks. 如果使用存储帐户选项,则你可以管理在还原期间创建的存储帐户。If you're using the storage account option, you manage the storage account that's created during the restore process.
  • 如果还原已加密的托管 VM,请在开始还原过程之前,确保 VM 的密钥和机密在 Key Vault 中存在。If you restore a managed VM that's encrypted, make sure the VM's keys and secrets exist in the key vault before you start the restore process.

后续步骤Next steps