Open-E JovianVHR Frequently Asked Questions (FAQ)

Immutable backup refers to a backup copy that, once created, cannot be altered, encrypted, or deleted. It's crucial because it provides the strongest defense against cyber threats like ransomware, insider threats, and accidental deletions. If your primary data is compromised, an immutable backup ensures you have a pristine, unchangeable copy to restore from, guaranteeing business continuity and data integrity.

This powerful synergy creates a multi-layered, immutable backup system.

• Open-E JovianVHR leverages ZFS snapshots, which are inherently read-only and cannot be modified or deleted by typical malware. This provides a foundational layer of immutability at the storage level.
• The Veeam Hardened Repository adds another layer by using the XFS immutable attribute, protecting backup files for a set period. It also employs "single-use credentials" for writing data, making it extremely difficult for attackers to gain persistent access.

This dual-layer approach means even if one layer is compromised, the other maintains the immutable backup.

Open-E JovianVHR's ZFS foundation is key.

• Copy-on-Write (CoW): Ensures that when data changes, new blocks are written, preserving the original data.
• ZFS Snapshots: These are read-only point-in-time copies of your data, making them immune to modification or deletion by ransomware. Deleting them requires specific administrative access to the Open-E JovianVHR management interface.
• Data Integrity: ZFS constantly verifies data integrity with checksums, protecting against silent data corruption, which is vital for maintaining the reliability of your immutable backup.

The Veeam Hardened Repository adds critical security enhancements:

• Immutable Attribute: Sets an XFS on backup files, preventing modification or deletion for a specified duration.
• Single-Use Credentials: Credentials used to write backups are discarded immediately after the operation, preventing their reuse by attackers.

Two layers of immutability create a "defense-in-depth" strategy. If an attacker manages to bypass one layer (e.g., a sophisticated zero-day exploit targeting the Veeam server or Linux OS), they still face the robust protection of the other layer (the underlying ZFS snapshots on Open-E JovianDSS). This drastically minimizes the risk of a single point of failure and significantly increases the probability of successful recovery from your immutable backup.

Absolutely.

• Veeam Fast Clone (XFS Reflinks): On the Hardened Repository, this technology allows for highly efficient synthetic full backups and backup transformations, saving significant storage space and time.
• Open-E JovianVHR Performance: With ZFS's Adaptive Replacement Cache (ARC), L2ARC (SSD read cache), and ZIL/SLOG (SSD write log), Open-E JovianVHR provides robust I/O performance for the LUNs presented to the Hardened Repository, ensuring fast writing and reading of your immutable backup data.
• Deduplication and Compression: Both Veeam and Open-E JovianDSS offer these features, further optimizing storage utilization for your immutable backup copies.

This combined solution provides clear, auditable evidence of data immutability, which is increasingly required for various regulatory compliances (e.g., NIS2, GDPR, HIPAA). The distinct, verifiable layers of protection demonstrate due diligence in safeguarding critical data, making it easier to meet stringent audit requirements for your immutable backup strategy.