What’s Special About Veeam Cloud Connect

• No VPN required — fully encrypted tunnels between customer and provider using Veeam protocols.

• True multi‑tenancy — customers (tenants) are isolated through built‑in security domains.

• Hosted offsite backup repository (“Cloud Repository”) for Backup Copy or direct‑to‑cloud backups.

• Hosted offsite DR replication with full failover & failback for VMware and Hyper‑V.

• WAN acceleration, traffic shaping, throttling, and seeding options for bandwidth efficiency.

• End‑to‑end encryption of data at the source, in transit, and at rest.

• Supports Veeam Agents, VBR backups, NAS backups, image-based jobs, and more.
• Enables managed service models with monitoring, reporting, and billing via Veeam Service Provider Console.

Core Use Cases

1. Offsite Cloud Backup (BaaS)

• Send backup copies directly to cloud repositories hosted by VCSPs.

• Protect against site loss, ransomware, and insider threats.

• Keep immutable backup copies at the service provider for compliance.

2. Disaster Recovery as a Service (DRaaS)

• Replicate VMs to the provider’s environment using Cloud Connect Replication.

• Use Veeam‑built networking failover orchestration for swift DR.

• Failover to the cloud provider, run workloads remotely, then fail back once primary site recovers.

3. Ransomware‑Resilient Copies

• Hardened Linux repositories, Object Lock, and multi‑site retention.

• Air‑gapped/cloud‑isolated repositories reduce compromise risk.

4. Multi‑Tenant Hosting for Providers

• Clean separation of tenant data.

• Scalable architecture for thousands of customers.
• Integrates with RMM/PSA tools via VSPC API.

Key Capabilities

Multi‑Tenant Cloud Repository

• Provider allocates “Cloud Repository” space to each tenant.

• Tenants use Backup Copy jobs to send restore points offsite.

Cloud Connect Replication

• Host VM replicas at the provider’s DR environment.

• Includes full failover, partial failover, and re-IP rules.

• Tenants control their own failover from within Veeam Backup & Replication.

Network Extension Appliance

• Automates failover networking through VPN‑less overlay tunnels.

• Keeps IP addressing consistent during DR scenarios.

Secure Communication Layer

• All traffic is encrypted.

• Uses a single outgoing port (TCP 6180) from customer to provider.

WAN Acceleration & Bandwidth Optimization

• Uses Veeam’s global dedupe and cached WAN accelerator.

• Ideal for low‑bandwidth or high‑latency environments.

Provider‑side Management with VSPC

• Combine Cloud Connect with Veeam Service Provider Console for:

1. Customer onboarding
2. SLA monitoring
3. Automated billing
4. Agent deployment
5. Licensing management

Architecture Overview

Provider‑Side Components

• Cloud Connect Server – entry point for tenants

• Cloud Gateway Pool – secure transport tunnel

• Backup Repositories or SOBRs – store tenant backups

• vSphere/Hyper‑V cluster (DRaaS) – host tenant replicas

• VSPC – monitoring, automation, billing layer

Tenant‑Side Components

• Veeam Backup & Replication (or Veeam Agent)

• Backup Copy or Replication jobs

• Encrypted tunnel created automatically to provider

Security

• Encryption at source, in-flight, and at rest

• Strict tenant isolation
• Zero‑trust communication model

Business Impact

• Enables MSPs & CSPs to deliver profitable BaaS/DRaaS with minimal overhead.

• Protects enterprise workloads with offsite, immutable, isolated data copies.

• Reduces complexity by removing VPN, firewall, and networking challenges.

• Improves ransomware resilience through air‑gapped cloud storage & DR failover.
• Supports hybrid cloud strategies for backup mobility, DR, and cloud adoption.

Bottom Line