[Yandex Cloud documentation](../../../index.md) > [Yandex Cloud Backup](../../index.md) > [Concepts](../index.md) > [Connecting resources to Cloud Backup](index.md) > VMs and servers outside Yandex Cloud

# Connecting VMs and servers from outside Yandex Cloud to Cloud Backup 


With Yandex Cloud Backup, you can create backups of external resources, i.e., servers or VMs, located outside Yandex Cloud.

Cloud Backup allows you to store backups of your resources in our highly available and fault-tolerant [Yandex Object Storage](../../../storage/index.md) as well as manage backups and restore your resources using native Yandex Cloud [interfaces](../../../overview/concepts/interfaces.md). You can also use Cloud Backup to streamline the migration of VMs and servers from your infrastructure or a third-party provider infrastructure to the Yandex Cloud infrastructure.

To create backups of external VMs or servers, you need to install the [Cloud Backup agent](../agent.md) on those VMs or servers.

{% note info %}

To install the Cloud Backup agent, you need the `backup.user` [role](../../security/index.md#backup-user) or higher.

{% endnote %}

For more on installing the Cloud Backup agent on VMs or servers located outside Yandex Cloud, see [Connecting a VM or server from outside Yandex Cloud to Cloud Backup](../../operations/external/connect.md).

After installing the Cloud Backup agent, [link](../../operations/policy-vm/attach-and-detach-vm.md#attach-vm) your VM or server to a [backup policy](../policy.md).

## Supported operating systems {#supported-oss}

Currently, the Cloud Backup agent can be installed on VMs and servers running the following operating systems:

* CentOS 7.
* Debian 11.
* Ubuntu 16.04 LTS.
* Ubuntu 18.04 LTS.
* Ubuntu 20.04 LTS.
* Ubuntu 22.04 LTS.
* Ubuntu 24.04 LTS.

For a complete list of supported operating systems, see the [backup provider documentation](https://docs.cyberprotect.ru/ru-RU/CyberBackupCloud/21.06/user/#supported-operating-systems-and-environments.html).

## Updating the operating system kernel {#os-kernel-update}

Updating the Linux [kernel](https://en.wikipedia.org/wiki/Linux_kernel) on a [resource](../index.md#protected-resources) connected to Cloud Backup may affect the performance of the Cloud Backup agent: it will not be able to create a backup of the resource or recover it from a backup.

This may affect the agent’s performance, since the SnapAPI module (developed by the [backup provider](../index.md#providers) for the agent to work with disks and built by the [DKMS framework](https://en.wikipedia.org/wiki/Dynamic_Kernel_Module_Support) for a specific Linux kernel) may not update after updating the kernel and may therefore cease to match the kernel version.

To restore the Cloud Backup agent’s performance affected by a Linux kernel update, you need to update the version of the Linux kernel headers DKMS refers to when building the SnapAPI module. Once the kernel header version matches the kernel version, DKMS will rebuild the SnapAPI module for the required Linux kernel version at the next start of the resource.

For information on how to upgrade the Linux kernel header version, see [Recovering the Cloud Backup agent after a Linux kernel update](../../operations/backup-baremetal/restore-agent.md).

## Network access permissions {#vm-network-access}

For the Cloud Backup agent to be able to exchange data with the [backup provider servers](../index.md#providers), make sure the VM or server has consistent internet access and network access to the IP addresses of the Cloud Backup resources as per the table below:

{% list tabs group=traffic %}

- Outgoing traffic {#outgoing}

  Port range | Protocol | Destination name | IPv4 CIDR
  --- | --- | --- | ---
  `80` | `TCP` | `Address range` | `213.180.193.0/24`
  `80` | `TCP` | `Address range` | `213.180.204.0/24`
  `443` | `TCP` | `Address range` | `84.47.172.0/24`
  `443` | `TCP` | `Address range` | `84.201.181.0/24`
  `443` | `TCP` | `Address range` | `178.176.128.0/24`
  `443` | `TCP` | `Address range` | `213.180.193.0/24`
  `443` | `TCP` | `Address range` | `213.180.204.0/24`
  `7770-7800` | `TCP` | `Address range` | `84.47.172.0/24`
  `8443` | `TCP` | `Address range` | `84.47.172.0/24`
  `44445` | `TCP` | `Address range` | `51.250.1.0/24`

{% endlist %}

Make sure the VM or sever network settings do not block outgoing traffic to the specified resources.

{% note tip %}

When installing the Cloud Backup agent on your VM or server, you may need to install some missing software components from the internet. To have this done, allow all outgoing network traffic for the network interface for as long as the installation continues. Once the Cloud Backup agent is installed, you can restrict network traffic once again in line with the permissions [required](#vm-network-access) for the agent to operate.

{% endnote %}

#### See also {#see-also}

* [Connecting a VM or server from outside Yandex Cloud to Cloud Backup](../../operations/external/connect.md)
* [Recovering the Cloud Backup agent after a Linux kernel update](../../operations/backup-baremetal/restore-agent.md)
* [Connecting Yandex Compute Cloud VMs to Cloud Backup](compute.md)
* [Connecting Yandex BareMetal servers to Cloud Backup](baremetal.md)