Delphi Cloud
Contact Us

Getting started with Delphi Cloud Backup

Written by
Improved by
Updated at October 29, 2025

Cloud Backup is a service for creating backups and restoring Delphi Cloud resources and their data.

Create a Delphi Compute Cloud VM connected to Cloud Backup and link it to a backup policy.

For more information on the minimum required VM characteristics and supported operating systems, see Connecting Compute Cloud VMs and Delphi BareMetal servers to Cloud Backup.

To get started with Cloud Backup:

  1. Get your cloud ready.
  2. Create your infrastructure.
  3. Activate Cloud Backup.
  4. Create your VM.
  5. Link your VM to a backup policy.

If you no longer need the resources you created, delete them.

Get your cloud ready

Sign up for Delphi Cloud and create a billing account:

  1. Navigate to the management console and log in to Delphi Cloud or create a new account.
  2. On the Delphi Cloud Billing page, make sure you have a billing account linked and it has the ACTIVE or TRIAL_ACTIVE status. If you do not have a billing account, create one and link a cloud to it.

If you have an active billing account, you can navigate to the cloud page to create or select a folder for your infrastructure.

Learn more about clouds and folders here.

The cost of VM backup resources includes:

Create your infrastructure

Prepare a network

You can use an existing cloud network and subnet or create new ones.

Creating a cloud network with subnets

  1. In the management console, go to the folder where you want to create a VM connected to Cloud Backup.

  2. In the list of services, select Virtual Private Cloud.

  3. Click Create network.

  4. In the Name field, enter a name for the network. The naming requirements are as follows:

    • It must be from 2 to 63 characters long.
    • It can only contain lowercase Latin letters, numbers, and hyphens.
    • It must start with a letter and cannot end with a hyphen.

  5. Keep Create subnets enabled.

  6. Click Create network.

For more information, see Creating a cloud network.

Configure the security group

You can use an existing security group or create a new one.

Creating a new security group
  1. In the management console, go to the folder where you want to create a VM connected to Cloud Backup.
  2. In the list of services, select Virtual Private Cloud.
  3. In the left-hand panel, select Security groups.
  4. Click Create security group.
  5. Enter a name for the security group.
  6. In the Network field, select the network that the security group will belong to.
  7. Click Create.

Add VM outgoing traffic rules to the security group:

  1. In the management console, go to the folder where you want to create a VM connected to Cloud Backup.

  2. In the list of services, select Virtual Private Cloud.

  3. In the left-hand panel, select Security groups.

  4. Next to the security group you want to add rules to, click and select Edit.

  5. Under Rules, navigate to the Egress tab and click Add.

  6. Add the following outgoing traffic rules one by one:

    Port range Protocol Destination name CIDR blocks
    80 TCP CIDR 213.180.193.0/24
    80 TCP CIDR 213.180.204.0/24
    443 TCP CIDR 84.47.172.0/24
    443 TCP CIDR 84.201.181.0/24
    443 TCP CIDR 178.176.128.0/24
    443 TCP CIDR 213.180.193.0/24
    443 TCP CIDR 213.180.204.0/24
    7770-7800 TCP CIDR 84.47.172.0/24
    8443 TCP CIDR 84.47.172.0/24
    44445 TCP CIDR 51.250.1.0/24

    Tip

    When installing the Cloud Backup agent on your VM or BareMetal server, you might need to install missing software components from the internet. To do this, add the following outbound traffic rule to the security group:

    • Port range: 0-65535
    • Protocol: Any (Any)
    • Destination name: CIDR
    • CIDR blocks: 0.0.0.0/0

    Once the Cloud Backup agent is installed, you can delete this rule.

  7. Click Save.

For more information, see Creating a security group.

Set up a service account

  1. In the management console, select the folder where you want to create a VM connected to Cloud Backup.

  2. In the list of services, select Identity and Access Management.

  3. Click Create service account.

  4. Enter a name for the service account. The naming requirements are as follows:

    • It must be from 2 to 63 characters long.
    • It can only contain lowercase Latin letters, numbers, and hyphens.
    • It must start with a letter and cannot end with a hyphen.

  5. Click Add role and select the backup.editor role.

  6. Click Create.

For more information, see Creating a service account.

Activate Cloud Backup

To activate the service, you need at least the backup.editor role for the folder in which you want to create backups of VMs or BareMetal servers.

When you enable the service, the backup provider starts. For more information about the backup provider and data sent to it, see Service activation and backup provider.

  1. In the management console, select the folder you want to create a VM with a Cloud Backup connection in.

  2. In the list of services, select Cloud Backup.

  3. If you have not activated Cloud Backup yet, click Activate.

    If there is no Activate button, and you can create a VM connected to Cloud Backup, it means the service has already been activated. Proceed to the next step.

Create a VM

  1. In the management console, select the folder where you want to create a VM connected to Cloud Backup.

  2. In the list of services, select Compute Cloud.

  3. In the left-hand panel, select Virtual machines.

  4. Click Create virtual machine.

  5. Select Advanced setup.

  6. Under Boot disk image, select an image with a supported OS, e.g., Ubuntu 20.04.

  7. Under Location, select the availability zone where your VM will reside.

  8. Under Disks and file storages and Computing resources, set the preferred VM parameters.

    The minimum VM and BareMetal server specification to install and correctly run the Cloud Backup agent is as follows:

    • Free disk space:

      • For Linux-based VMs: 2 GB.
      • For Windows-based VMs: 1.2 GB.

    • RAM: For backups, 1 GB of RAM is required per 1 TB of backup. The RAM requirement depends on the amount and type of data processed by the Cloud Backup agent.

    For faster data backup and recovery, the Cloud Backup agent can consume significant amounts of RAM of the backed up resource, i.e., virtual machine or BareMetal server. The agent can even use up all the available RAM, which in some cases may disrupt the resource's other services and make it impossible to complete the backup or recovery process.

    To prevent such issues, limit the amount of data the agent caches in RAM.

    Note

    Limiting the Cloud Backup agent's use of RAM may slow down the backup and recovery operations.

  9. Under Network settings:

    1. In the Subnet field, select the subnet you prepared earlier.

    2. In the Public IP address field, select Auto.

      Instead of assigning a public IP address to your VM, you can associate the subnet hosting this VM with a route table allowing internet access via a NAT gateway or a custom router.

    3. In the Security groups field, select the security group you configured earlier.

  10. Under Access:

    • Select Access by OS Login to connect and manage access to the new VM using OS Login in Delphi Identity Hub.

      With OS Login, you can connect to VMs using SSH keys and SSH certificates via a standard SSH client or the Delphi Cloud CLI. OS Login enables rotating the SSH keys used to access VMs, providing the most secure access option.

    • If you prefer not to use OS Login, select SSH key and specify the following VM access data:

      • Under Login, enter a username.

        Alert

        Do not use root or other reserved usernames. To perform operations requiring root privileges, use the sudo command.

      • In the SSH key field, select the SSH key saved in your organization user profile.

        If there are no SSH keys in your profile or you want to add a new key:

        1. Click Add key.

        2. Enter a name for the SSH key.

        3. Select one of the following:

          • Enter manually: Paste the contents of the public SSH key. You need to create an SSH key pair on your own.

          • Load from file: Upload the public part of the SSH key. You need to create an SSH key pair on your own.

          • Generate key: Automatically create an SSH key pair.

            When adding a new SSH key, an archive containing the key pair will be created and downloaded. In Linux or macOS-based operating systems, unpack the archive to the /home/<user_name>/.ssh directory. In Windows, unpack the archive to the C:\Users\<user_name>/.ssh directory. You do not need additionally enter the public key in the management console.

        4. Click Add.

        The system will add the SSH key to your organization user profile. If the organization has disabled the ability for users to add SSH keys to their profiles, the added public SSH key will only be saved in the user profile inside the newly created resource.

    If you want to add multiple users with SSH keys to the VM at the same time, specify these users' data under Metadata. You can also use metadata to install additional software on a VM when creating it.

    In public Linux images provided by Delphi Cloud, the functionality of connecting over SSH using login and password is disabled by default.

  11. Under General information, enter a name for your VM:

    • It must be from 2 to 63 characters long.
    • It can only contain lowercase Latin letters, numbers, and hyphens.
    • It must start with a letter and cannot end with a hyphen.

  12. Under Additional:

    1. Select the service account you created earlier.
    2. Enable Cloud Backup.
    3. Optionally, select a backup policy or click Create to create a new one.

  13. Click Create VM.

For more information, see Creating a VM.

Link your VM to a backup policy

When the VM switches to the Running status, the Cloud Backup agent will start installing on it. This may take from 5 to 10 minutes.

  1. Make sure the Cloud Backup agent has been installed:

    1. In the management console, select the folder where the service is activated.
    2. In the list of services, select Compute Cloud.
    3. Select the VM.
    4. Check that the value of the Cloud Backup field in the Backups section is Connected.

    Once you install the Cloud Backup agent, the VM will be added to Cloud Backup in the Virtual machines tab and you will be able to associate it with a backup policy. If you selected a backup policy when creating the VM, then the VM is already associated with the policy and no further action is required.

    Note

    If the Cloud Backup agent fails to install within 10 minutes, contact support for troubleshooting.

  2. Link your VM to a backup policy:

    1. In the management console, select the folder where you activated Cloud Backup.
    2. In the list of services, select Cloud Backup.
    3. Navigate to the Backup policies tab.
    4. Select one of the policies created by default.
    5. Under Virtual machines, click Attach a VM.
    6. Select the VM from the list and click Attach.

    You can also link your VM to a backup policy in Compute Cloud:

    1. In the management console, select the folder where the service is activated.
    2. In the list of services, select Compute Cloud.
    3. Select the VM.
    4. Under Backups, click in the Backup policies field.
    5. Select one of the policies created by default and click Save.

How to delete the resources you created

To stop paying for the resources you created:

  1. Delete the VM from Cloud Backup.
  2. Delete the VM from Compute Cloud.
  3. Delete the VM backups, if any.

What's next

See also

Next
All guides
© 2026 SDSM Analytics Pvt Ltd