The threat landscape
Ransomware, insider threats and accidental deletion are increasing. A significant percentage of organizations experience data-loss events annually, and downtime costs can reach millions of dollars per hour for critical systems.
Cloud Backup Solution
Unified Data Protection Inside Your Cloud
EasyStack Cloud Backup v10 is a production-grade, unified data-protection solution built on the EOS Digital Native Engine. It provides agent-based and agentless backup for OpenStack workloads, file systems and cloud-native applications — with multi-tenant isolation, token-based authentication, scheduling, retention policies and one-click restore.
Summary
A unified, sovereign data-protection platform — without data leaving your domain
Data is the foundation of every digital business, yet enterprise data is under constant threat — from ransomware, hardware failures, human error and regulatory non-compliance. Traditional backup solutions are often fragmented, agent-heavy and poorly integrated with private cloud and AI platforms.
EasyStack Cloud Backup v10 integrates natively with EasyStack Cloud Infrastructure Platform (ECF) and EasyStack AI Infrastructure Platform (EAF), using a lightweight Proxy VM to discover and protect OpenStack workloads. It supports backup to local disks, NFS, S3-compatible object storage and EasyStack volume disks, with token-based client registration for secure multi-tenant operations.
Scheduling plans, retention policies, full/incremental backups and Cloud-Init password reset for restored VMs complete the protection lifecycle.
Sovereign protection
Protect private cloud and AI workloads without data leaving the sovereign domain.
OpenStack-native
Back up and restore OpenStack VMs, volumes, files and databases.
Single console
Reduce backup management complexity through one graphical console.
Compliance-ready
Meet compliance requirements with audit logs and multi-tenant isolation.
Why Modern Backup
Four forces making backup a strategic imperative
Threats, regulation, VMware replacement and modern workloads are converging at the same time.
Regulatory & sovereignty requirements
Regulations such as Indonesia's PDP Law, Thailand's PDPA and Europe's GDPR require data to be protected, auditable and often kept within national borders. Public cloud backup services may violate these requirements — EasyStack Cloud Backup enables sovereign, on-premises data protection.
VMware replacement drives modernization
As enterprises replace VMware with open platforms like EasyStack ECF, they need backup tools that support the new environment. Traditional VMware-centric backup solutions may not support KVM, OpenStack, containers or AI workloads — EasyStack Cloud Backup fills this gap.
AI & container workloads need protection
AI inference services, containerized applications and Kubernetes persistent volumes need backup and restore capabilities. EasyStack Cloud Backup integrates with ECNF and EAF to protect these modern workloads.
Challenges
Seven recurring blockers in enterprise backup
Legacy backup tools were not designed for heterogeneous, sovereign, cloud-native environments.
Fragmented tools
Separate backup products for VMs, files, databases and containers increase cost and complexity.
Agent overhead
Traditional agents consume resources and require maintenance on every protected host.
Multi-tenancy
Cloud providers and large enterprises need tenant-isolated backup with quota control.
Sovereignty
Backup data must remain within the enterprise or national borders.
Recovery complexity
Restoring VMs, volumes or files must be fast, reliable and verifiable.
Compliance
Audit logs, retention policies and access control are mandatory for regulated industries.
Scale
Backup must scale from 3 nodes to thousands without performance degradation.
Solution Architecture
Five components on one digital-native foundation
EOS as the operating system, with management, proxy, storage and token services woven into a unified protection lifecycle.
EOS — Digital Native Engine
The microservices-based, fully symmetric distributed cloud operating system that powers ECF and EAF.
- Unified lifecycle management for over 150 microservices
- OTA smooth upgrades with zero business impact
- High availability and fault self-healing; open APIs for integration
MicroservicesSymmetric HAOTA upgrade
Management Server
Central console for the entire protection lifecycle.
- Storage registration, client management and policy creation
- Scheduling, monitoring and one-click restore
Single consolePolicy engine
Proxy VM & Client Agent
Lightweight discovery and execution layer for OpenStack workloads.
- Proxy VM connects to the OpenStack endpoint and discovers all VMs under a project (Keystone V3)
- Client Agent installed on protected hosts or proxy VMs performs backup and restore tasks
Workload discoveryKeystone V3
Storage Medium
Flexible backup targets registered through the graphical console with capacity monitoring and usage alerts.
- Local block devices (e.g., /dev/vdb1) and EasyStack volume disks
- NFS shares, S3-compatible object storage and optional tape libraries
Local diskNFSS3 objectVolume disk
Token Service
Secure client registration and multi-tenant authentication.
- Tokens are bound to a tenant, created by the platform administrator, and not case-sensitive or user-specific
- Clients are automatically mapped to tenants, enabling backup-as-a-service with strict isolation
Token-based authTenant isolation
Core Capabilities
Seven capabilities across the protection lifecycle
From policy creation to scheduling, monitoring, restore and compliance — each capability is production-proven.
Capability
What EasyStack Cloud Backup delivers
Policy-Based Backup
Policies define backup scope (VMs, volumes, files), full vs. incremental, retention rules, optional pre/post scripts, compression and encryption.
Scheduling Plans
Daily, weekly or monthly runs; specific days of the week; multiple start times per day; incremental with periodic full backups.
Execution & Monitoring
Jobs run automatically on schedule; the console shows status (running, success, warning, failure), duration, capacity, speed, real-time traffic graphs and detailed logs.
Restore & Recovery
Full VM restore, file-level restore, restore to original or new project, point-in-time selection and key-pair injection; restored VMs can be validated before cutover.
Cloud-Init Password Reset
On restore, resets the cloud host password when Cloud-Init is installed and running; if unspecified, a default password is assigned and users are prompted to change it.
Security & Compliance
Multi-tenant isolation, RBAC access control, audit logs retained ≥180 days, encrypted transmission, one-way hashed API keys; data never leaves the sovereign domain.
Scalability & Performance
Supports 3-node to thousands of nodes, parallel backup streams, incremental-forever with synthetic full, optional LAN-free backup and source-side deduplication/compression.
Deployment Scenarios
Seven scenarios, one backup foundation
Explore how EasyStack Cloud Backup protects workloads across private cloud, sovereign cloud, hosting and AI environments.
Private Cloud Data Protection
Back up OpenStack VMs, volumes and files for ECF-based private clouds.
Sovereign Cloud Backup
Keep backup data within national borders for government, finance and healthcare.
Cloud Hosting Provider
Offer multi-tenant backup-as-a-service with token-based tenant isolation.
VMware Replacement
Protect KVM/OpenStack workloads after migrating from VMware.
AI Infrastructure Protection
Back up EAF model repositories, inference configurations and AI workspaces.
Container & Kubernetes
Protect persistent volumes and application data in ECNF environments.
Edge & Remote Sites
Lightweight proxy VM for remote backup to central storage.
Business Value & ROI
Measurable value across cost, risk and agility
EasyStack Cloud Backup delivers quantifiable business outcomes.
Reduced management complexitySingle console for VMs, files and databases.
Lower TCOReuse existing ECF/EAF infrastructure; no separate backup hardware required.
Improved RTORestore VMs in minutes; file-level restore in seconds.
Compliance readinessAudit logs, retention and multi-tenancy built in.
Sovereign data protectionData never leaves the enterprise or country.
Operational efficiencyAutomated scheduling and monitoring reduce manual effort by >50%.
ScalabilityGrow from 3 nodes to thousands without redesign.
Cost savings
By integrating backup into the EasyStack platform, enterprises avoid purchasing and managing separate backup servers, agents and storage. The solution reuses existing ECF storage and network infrastructure, reducing capital and operational expenditures.
Risk mitigation
Ransomware recovery, accidental-deletion restoration and compliance audit readiness reduce business risk. The ability to restore VMs with Cloud-Init password reset simplifies disaster recovery.
Agility
Self-service restore and policy-based automation enable IT teams to respond quickly to business requests. Multi-tenant support allows cloud providers to offer backup as a value-added service.
Customer Evidence
Proven in production across regions and industries
Leading providers and regulated enterprises rely on EasyStack Cloud Backup.
Leading Cloud Service Provider (Indonesia)
Reused legacy servers to migrate from Mirantis; completed 4 major version smooth upgrades over 5 years; operations cost reduced by 60%, customer SLA achieved 99.99%. EasyStack Cloud Backup protects tenant workloads with token-based isolation.
Large State-Owned Commercial Bank (China)
Built one of the largest private clouds in China's banking industry, with over 20,000 servers. EasyStack Cloud Backup protects core transaction systems, channel systems and data warehouses, with audit logs meeting regulatory requirements.
Shinjiru Technology Sdn Bhd (Malaysia)
Deployed EasyStack ECF 621 as its unified hyperconverged cloud infrastructure, replacing legacy virtualization to deliver 99.99% availability. EasyStack Cloud Backup provides tenant-isolated backup for customer VMs, with scheduling and retention policies managed through a single console.
Provincial Government Cloud Platform (China)
Adopted EasyStack one-cloud-multi-chip architecture to manage x86 and ARM server clusters. EasyStack Cloud Backup protects government extranet applications and public service systems, with data remaining within the province.
Ready to unify your data protection?
Talk to our solution architects about backup for OpenStack, sovereign data residency, VMware replacement paths and AI workload protection — built on the EOS Digital Native Engine.