Frequently Asked Questions
Immutable backup refers to a backup copy that, once created, cannot be altered, encrypted, or deleted. It's crucial because it provides the strongest defense against cyber threats like ransomware, insider threats, and accidental deletions. If your primary data is compromised, an immutable backup ensures you have a pristine, unchangeable copy to restore from, guaranteeing business continuity and data integrity.
A Hardened Repository is a Linux-based server used in a backup infrastructure to protect backup files. Its key features include immutability, which prevents backup files from being modified or deleted for a set period, and single-use credentials, which enhance security against cyber threats. It is a critical component for a robust data protection strategy, especially against ransomware
The Veeam Hardened Repository adds critical security enhancements:
- Immutable Attribute: Sets an XFS on backup files, preventing modification or deletion for a specified duration.
- Single-Use Credentials: Credentials used to write backups are discarded immediately after the operation, preventing their reuse by attackers.
This powerful synergy creates a dual-layer, immutable backup system.
- Open-E JovianVHR leverages ZFS snapshots, which are inherently read-only and cannot be modified or deleted by typical malware. This provides a foundational layer of immutability at the storage level.
- The Linux Hardened Repository adds an additional layer by utilizing the XFS immutable attribute, which protects backup files for a specified period. It also employs "single-use credentials" for writing data, making it extremely difficult for attackers to gain persistent access.
This dual-layer approach means even if one layer is compromised, the other maintains the immutable backup.
Open-E JovianVHR's ZFS foundation is key.
- Copy-on-Write (CoW): Ensures that when data changes, new blocks are written, preserving the original data.
- ZFS Snapshots: These are read-only point-in-time copies of your data, making them immune to modification or deletion by ransomware. Deleting them requires specific administrative access to the Open-E JovianVHR management interface.
- Data Integrity: ZFS constantly verifies data integrity with checksums, protecting against silent data corruption, which is vital for maintaining the reliability of your immutable backup.
Absolutely.
- Veeam Fast Clone (XFS Reflinks): On the Hardened Repository, this technology allows for highly efficient synthetic full backups and backup transformations, saving significant storage space and time.
- Open-E JovianVHR Performance: With ZFS's Adaptive Replacement Cache (ARC), L2ARC (SSD read cache), and ZIL/SLOG (SSD write log), Open-E JovianVHR provides robust I/O performance for the LUNs presented to the Hardened Repository, ensuring fast writing and reading of your immutable backup data.
- Deduplication and Compression: Both Veeam and Open-E JovianDSS offer these features, further optimizing storage utilization for your immutable backup copies.
This combined solution provides clear, auditable evidence of data immutability, which is increasingly required for various regulatory compliances (e.g., NIS2, GDPR, HIPAA). The distinct, verifiable layers of protection demonstrate due diligence in safeguarding critical data, making it easier to meet stringent audit requirements for your immutable backup strategy.
The license cost is determined by two main factors:
- Total Usable Backup Capacity: You pay based on the total usable storage space you dedicate to your backups.
- Support Plan Tier and Duration: The cost also depends on the level and duration of the support plan you choose.
This model is a yearly support subscription designed to be transparent and cost-effective, with no complex fees for individual features or users.