Backup vault support for Cloud SQL instances encrypted with customer-managed encryption keys (CMEK) is generally available (GA), providing immutable and indelible storage with enforced retention. For more information, see Back up Cloud SQL instances to a backup vault.
]]>You can now view the Google Cloud Backup and DR Service protection summary at the organization and folder levels. To learn more about protection summary, see Find unprotected resources using protection summary.
]]>These features are now available:
Replication Optimization: Introduced a deletion replication optimization for AGM-BA to reduce operational blockages and improve platform performance.
Expanded Linux Support: Qualified Linux CBT support has been added for specific kernel versions of RHEL 8 (ranging from 4.18.0-477.128.1 to 4.18.0-553.117.1) and RHEL 9 (ranging from 5.14.0-284.156.1 to 5.14.0-611.47.1), including dedicated support for the SAP OS family, notably RHEL 9.6 for SAP kernels from 5.14.0-570.64.1 to 5.14.0-570.106.1.
SAP HANA Restore Enhancements: Enhanced restore functionality to support alternate host restores and optimized subsequent backups to prevent full backups after an alternate host restore.
Tomcat Vulnerability Mitigation: Upgraded Apache Tomcat to version 9.0.117 to address several high-severity vulnerabilities, including CVE-2026-24734, CVE-2026-34487, and CVE-2026-29146.
These issues have been resolved:
vCenter Connectivity: Resolved a critical regression where similarities in IP prefixes caused the Backup Appliance (BA) to incorrectly identify ESX host alternate IPs as potential hostnames for vCenter, leading to server-side certificate validation failures.
SAP HANA Backups: Fixed a hang in the dd command during SAP HANA Backint backups by implementing a utility to detect and clean non-printable or binary characters from catalog files.
Resource Cleanup: Improved the reliability of the appliance by ensuring loopback devices are properly removed following failed Onvault NFS restore jobs.
Restore Stability: Addressed intermittent "Image not found" errors (Error 1263) during restore operations and implemented an early exit in omdtool to prevent gRPC cleanup crashes.
Backup Management: Corrected an issue where empty vdiskname entries in the appvdisk table blocked automated cleanup for PDSnap backups and converted the vmtaskcompletiontimeout into a dynamic parameter for better flexibility.
Reporting and UI: Enhanced reporting by adding pool names to ZFS listings and removed legacy agent download links from the index-post.html file.
Expanded OS Support: Qualified Linux Change Block Tracking (CBT) support for multiple new RHEL 8 and 9 kernels, including versions 8.8, 8.10, 9.2, 9.4, and 9.7.
Verbose Process Logging: Added enhanced verbose logging for fingerprint computation and verification to assist in troubleshooting verification failures.
HANA Backup and Restore Stability: Resolved HANA backup failures by improving the matching logic for alternate IP addresses and addressed restore job failures (error 5728) caused by missing configuration files during the database freeze phase.
SAP IQ Log Management: Fixed an issue where SAP IQ log backups would fail due to invisible characters in temporary log file paths.
Cleanup and Expiration Improvements: Resolved recurring cleanup job failures (error 1271) by ensuring failed backup images are assigned valid cloud credential IDs.
Log Reliability and Diagnostics: Prevented root filesystem exhaustion by rate-limiting excessive UDSAgent logging during custom app activities. Additionally, the UDPINFO logging limit was increased to 10KB to prevent the truncation of large XML messages, facilitating better debugging.
Vulnerability Remediation: Addressed over 38 security vulnerabilities identified in internal and customer scans, including remediations for Kernel, OpenSSL, rsync, glibc, and OpenJDK packages.
]]>Announcing the general availability (GA) of a 1-hour backup frequency for Compute Engine instances to support mission-critical workloads requiring a lower RPO.
Backup and DR Service now supports Shielded VMs during the restore process, meaning no changes to org policies are required, maintaining a continuous security posture.
You can now take application-consistent backups of disk data, enabling the execution of custom pre- and post-scripts. This allows databases and filesystems to be paused or flushed to disk properly before the backup, ensuring a consistent and usable state upon recovery.
Announcing the Preview launch of cross-region backups. You can now protect resources against regional outages by storing backups in a distinct secondary region, providing a cost-effective way to ensure regional resilience and maintain strict control over data residency. To learn more about cross-region backups, see Backup vaults for immutable and indelible backups.
Filestore enhanced backups are now generally available (GA). Enhanced backups are managed and stored by Backup and DR Service and provide immutable and indelible backups through backup vault, fine grained scheduling, backup protection against source instance deletion and centralized monitoring and reporting.
For more information on protecting Filestore instances using Backup and DR Service, see Back up Filestore instances to a backup vault.
]]>Announcing the general availability (GA) of multi-region backup vaults for Cloud SQL instances.
This release extends our robust data protection capabilities, allowing you to store your Cloud SQL instance backups in backup vaults in multi-region storage locations.
]]>protectiontype field into the report
manager database.runquery utility script would fail on
RHEL 8.8 due to output redirection.Announcing the release of the Backup and DR local MCP server. With this you can use natural language prompts to manage Backup and DR jobs.
]]>AlloyDB enhanced backups are now generally available (GA). Enhanced backups are managed and stored by Backup and DR Service and provide immutable and indelible backups through backup vault, fine grained scheduling, backup protection against source project deletion and source cluster deletion, PiTR using logs and centralized monitoring and reporting.
For more information on protecting AlloyDB clusters using Backup and DR Service, see Protect and recover an AlloyDB cluster to a backup vault.
]]>Backup vault support for Compute Engine instances and Persistent Disk encrypted with customer-managed encryption keys (CMEK) is now generally available.
]]>Backup/Recovery appliance non-disruptive update:
Cost reports are now generally available for Backup and DR Service. Use cost reports to view resource specific Backup & DR Billing costs to gain granular insights into service spend and take actions to optimize resource allocation.
]]>You can now use cost reports to view resource-specific Backup and DR billing costs to gain granular insights into service spending and to take actions to optimize resource allocation.
Protection summary is now generally available for Backup and DR Service. Use Protection summary to identify and fix data protection gaps across your projects.
]]>Backup/Recovery appliance non-disruptive update:
Addressed multiple OpenSSH vulnerabilities, including CVE-2025-26465 and CVE-2025-26466.
Enhanced performance for restore and clone of VMware VMs.
Expanded Linux CBT support for new kernels on RHEL 8 and 9.
]]>Backup Vault: CMEK support for Compute Engine (GA) Backup Vault now supports data protection for Compute Engine instances and Persistent Disks encrypted with Customer-Managed Encryption Keys (CMEK). This capability is currently available via Allow-list General Availability; please contact your Google Cloud sales representative to request access.
]]>Cloud SQL enhanced backups are now generally available (GA). With enhanced backups, backups are managed and stored in a centralized backup management project that leverages Backup and DR service to provide enforced retention, granular scheduling, and longer retention. Enhanced backups now also support point-in-time-recovery (PITR) after instance deletion.
For more information about the available options and their limitations, see Backup options.
For more information about enhanced backups pricing, see Backup and DR pricing.
]]>Resolved a decryption failure that occurred when accessing KMS keys.
Added Change Block Tracking (CBT) support for RHEL 8.8 SAP kernels.
]]>Announcing the public preview launch of Database Center support for resources protected with Backup and DR Service. Database Center is an AI-assisted dashboard that highlights fleet-wide data points.The integration is designed to provide Database Center users with a single, unified, and accurate view of the data protection posture for all databases protected by Backup and DR Service.This capability is available today, at no additional cost, for all Cloud SQL customers who have protected their databases through Backup and DR Service enhanced protection.
]]>Announcing the Public Preview launch of AlloyDB for PostgreSQL enhanced backups with Backup and DR Service. This enables advanced data protection capabilities offered by Backup and DR Service including backup vault support, granular scheduling through backup plans, and centralized management.
A new backup vault setting, Prevent deletion for duration specified in backup rule, is now available. When enabled, this feature locks backups for the exact retention period defined in the associated backup plan, overriding the vault's local minimum retention and preventing manual deletion.
]]>The following CVEs have been addressed in this release: CVE-2022-1471, CVE-2025-31651, CVE-2025-31650, CVE-2022-42003, CVE-2025-25193, CVE-2024-6763, CVE-2025-52999, CVE-2025-24970, CVE-2025-49125, CVE-2025-48734, CVE-2024-52317, CVE-2025-48988, CVE-2025-46701
Backup and DR Service 11.0.16.253 is now available to update your backup/recovery appliances. Refer to these instructions to update your appliance.
Introducing notifications and alerts for the following critical events:
You can subscribe to these events and configure email alerts.
]]>You can now set up backup vault specific workload quotas for critical resources like data sources, backups, backup plans, and backup plan associations. Until now these quotas were set up only at the project level, not at the workload level.
]]>An issue where Backup and DR Service management charges for SAP HANA backup were calculated using the allocated size of the database disk volume, rather than the amount of data in the database. This issue only affected Backup and DR Service deployments where SAP HANA was backed up using either the Volume level (LVM CBT) or Persistent Disk snapshot backup methods.
]]>Announcing the 30-Day Introductory Trial for Google Cloud Backup and DR Service
You can now activate a 30-day, full-featured introductory trial of the Backup and DR Service on any project that does not have an active Backup and DR configuration. The trial provides a hands-on experience with all features, from centralized management to our advanced immutable backup vault, without any initial commitment.
]]>Announcing the General Availability (GA) of Backup Vault support for independent Persistent Disks and Hyperdisks!
This new capability empowers you to protect application data, databases, and file shares stored on individual disks (where a full VM backup is not required) — all within a secure, immutable, logically air-gapped vault designed to withstand malicious deletion and advanced threats like ransomware.
]]>Announcing the Public Preview launch of Cloud SQL enhanced backups with Backup and DR. This enables advanced data protection capabilities offered by Backup and DR including backup vault support, granular scheduling through backup plans, and centralized management.
]]>We're excited to announce the launch of Editable Backup Plans, a new feature designed to give you more flexibility and control over your data protection strategy. You can now modify your existing backup plans directly, eliminating the need to create new plans and reassign them when your requirements change. This makes it easier than ever to adapt to evolving business needs, optimize for cost, and correct configuration errors on the fly.
What's new:
Directly Edit Key Settings: You can now change the description, schedule, backup window, and retention periods of your existing backup plans. You can also add or remove backup rules as needed.
Automatic Updates: Once a plan is edited, the changes are automatically applied to all resources protected by that plan for all future backups. There's no need to manually detach and reattach the plan.
Backward Compatibility: This new capability is available for all backup plans, including those created before this update.
Important Note: While most settings in a backup plan are now editable, the assigned backup vault cannot be changed. To store backups in a different vault, a new backup plan must be created.
]]>Announcing the General Availability (GA) of multi-region backup vaults.
You can now create backup vaults in multi-region storage locations. This new capability allows you to leverage the security benefits of backup vault, while also enhancing your ability to maintain accessibility and recoverability of critical backup data during a regional service disruption (such as natural disasters and power outages).
]]>Backup and DR Service 11.0.15.226 is now available to update your backup/recovery appliance. Refer to these instructions to update your appliance.
There is a new committed use discount (CUD) for customers using Backup and DR Service to protect Oracle databases into a backup vault. This is a way to lower backup costs in consideration of a 1-year or 3-year commitment. You can purchase CUDs from Google Cloud Marketplace via the standard process.
These issues have been fixed:
resource not found now has a useful error message.Trying to release lock or Failed to acquire lock error.uname.Staging disk is full error message has been made more useful.Backup and DR Service now supports backup and restore of Db2 databases using persistent disk snapshots. This is typically faster and simpler than previous methods and in some cases may also reduce costs.
This release introduces enhanced logging and alerting capabilities for backup/recovery appliances, enabling proactive monitoring of their health and status. You can now configure email notifications via Cloud Logging to receive timely alerts on appliance status changes or potential issues, and five new events have been added for more granular monitoring:
Vulnerabilities CVE-2024-42301, CVE-2024-42284, and CVE-2024-41092 have been fixed at kernel version 4.18.0-553.33.1.el8_10.
]]>