Replibit Release Information
Staggered release to partners beginning May 16, 2019
This is a feature release. The primary purpose of this release is to improve the reliability and performance of the backup agent as well as improve recoverability of protected systems via virtualization and Bare Metal Restore.
Agent 2.23 contains new features, enhancements, security improvements, and big fixes to address high priority support concerns.
- Please verify that Enable Auto Update is enabled on the Settings -> Update Manager page on each of your Replibit devices.
- It is also recommended that you enable Auto-Enable Remote Assist When Upgrading so that remote access will be available to our development team should something go wrong with your upgrade.
Summary of enhancements
- GPT/UEFI dump files are now stored directly on the appliance
(Requires Appliance version 8.3.0)
- Foundations to support future back-end storage optimization
- Agent keep-alive to reduce false agent disconnect events
- Enhanced password hashing to SHA512 for higher security
(Requires Appliance version 8.3.0, see notes below)
- Improvements to reduce noise in Windows event logs
- Foundations to support Microsoft Cluster Shared Volumes
- Simple disk I/O throttling control
- TLS 1.2 Support
Summary of Bug Fixes
- Fixed issue with RAW system volumes when recovering if multiple volumes exist on disk 0
(Requires Appliance version 8.3.0)
- Fixed chkdsk errors on recovered volumes due to missing NTFS special files
- Fixes to prevent backup failures in some edge cases
- Fixes to prevent partition table mismatch errors during recovery
- Detect and repair broken or missing UEFI dump files
- Fixes to better handle Agent auto-update failures
- Fixes to update protected system metafiles on appliance when necessary
- Fixes to make agent communication with heavily loaded appliance more resilient
GPT/UEFI Dump File Enhancements
Previously, dump files created in order to regenerate the EFI boot partition were stored within the agent installation folder and transferred to the appliance as part of the regular backup process.
In order to virtualize or perform a recovery of the protected system, the appliance had to first mount the snapshot internally, retrieve the dump files, then tear down and recreate the mount point using the dump file contents.
The agent now stores the dump files directly into the backup snapshot on the appliance, making them accessible in a single step, saving 10-20 seconds when creating the recovery environment. This feature requires Appliance version 8.3.0+.
Agent Encryption Passphrase Improvements
The agent will now generate password hash strings using SHA512 combined with a random salt value to significantly enhance password security.
New agent installations will use the new hash by default. Existing agent installations can be updated to SHA512 by using the new password tool. From the Replibit agent installation folder, run ‘Set-PSPassword.ps1 -?’ for assistance.
Note: This feature requires Appliance version 8.3.0.
New agent installs will store passwords on appliance versions prior to 8.3.0 in an incompatible format and the protected system will appear to not have any password set. (Once the appliance is upgraded the password will be enforced.)
If passwords are required for new protected systems prior to the release of Appliance 8.3.0, then you may perform the following:
- After agent installation, run the Set-PSPassword.ps1 utility with the -Legacy option to generate a Legacy password.
- After updating the appliance to 8.3.0 you may run the utility again to create an SHA512 style password.
Note: Once Appliance version 8.3.0 has been released, it is recommended to run Set-PSPassword.ps1 on each protected system and upgrade the password credentials to the new SHA512 hash. This process must be performed manually on each protected system.
Disk I/O Throttling
Some protected systems occasionally experience a performance bottleneck during backups due to disk I/O limitations. The agent now supports two new feature control flags within the aristos.cfg configuration file.
- MAX_READ_MB_PER_VOLUME: Set the maximum disk read speed (per volume) in MB/sec for incremental backups. The default value is 0 (Zero) meaning unlimited.
- MAX_READ_MB_PER_VOLUME_FOR_FULL: Set the maximum disk read speed (per volume) in MB/sec for full backups. The default value is 0 (Zero) meaning unlimited.
If your protected system performance is being adversely affected by backups, try setting these flags in aristos.cfg. Adjust throttling values to find a happy medium between backup time and user experience.
It is recommended to set MAX_READ_MB_PER_VOLUME_FOR_FULL to a value high enough to ensure full backups complete in a reasonable timeframe. (e.g. 25-35MB/sec or more depending on volume size)
Note: The value for both features must be an integer. (For example: 5, not 5.5)
TLS 1.2 Support
Agent 2.23+ will automatically utilize TLS 1.2 transport security with Appliance 8.2.0 and newer. TLS 1.2 provides for more secure network transportation between agent and appliance.
Microsoft Cluster Shared Volume (CSV) Support
The Replibit agent is being enhanced to provide native support for Microsoft Cluster Shared Volumes and Failover Server.
Foundational elements of CSV support are included in Agent 2.23 but are disabled by default.
CSV support requires extensive back-end enhancements and additions that are present in Appliance version 8.3.0. Full CSV support will be enabled in a future version.
Although limited functionality is available, it is not recommended to enable the CSV support features present within Agent 2.23.