Veeam Backup & Replication • Re: Inquiry and Concerns Regarding Security in Veeam's Immutable Storage for Forever Incremental Backups

Hi Dan

1. Linux hardened repository.

You can't make Forever Incremental backups immutable on a hardened repository. You need to have regular full backups or those backups won't be immutable. Use XFS and weekly synthetic full backups. Then you can use Fast Clone which gives you space less full backups.

2. Backup to S3 immutable storage.

We don't have backup file on the object storage. There won't be any merge.
Restore Points are divided into small objects (default block size 1MB) on the object storage. Each of these objects is assigned an immutability date when they are stored on the object storage (specified immutability period + 1-10 days block generation)

During incremental backup sessions, only new or modified data is uploaded as new objects. When it's time to extend immutability (every 1-10 days for existing objects), we simply update the date on the existing object. There will never be a day when objects still used by most recent restore points become mutable again.

Best,
Fabian

Statistics: Posted by Mildur — Jan 05, 2024 7:58 am

---