New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Anything better than rsync.net for borg backup?
I've used rsync.net for 3 years with borg backup. $18/year for 100GB. It looks like they have a new deal for $19.20/year for 200GB, so I'll probably switch to that. My renewal is in the next week or two.
Are there any other providers I should consider? 200GB should be sufficient for now, and it has to support borg backup (running borg on the host, not just storage space).
Comments
borgbase is $25/y for 250gb, so your $19.2 is cheaper, esp. if you do not need more storage. I would still recommend to compare those plans. I also think the Borgbase founder is active here but don't remember the user name.
it's @m4nu
I mean, Hetzner has storage boxes, but they start at 1 TB (rounded 4 € / month)
Our backup servers have Borgbackup installed:
https://netdynamics24.com/backup-services.php
We have borg available if a customer requests it: https://microtronixdc.com/products/backup-storage
There is a discount code lurking here in the forum for half price.
Utah
Utah
Backup Storage Test IP
Thanks, @iKeyZ. Yes. Still here. Not following other's pricing usually. Our smallest plan is $24/year and you can add 10 separate repos that are all isolated and could be in different regions too. This may be an advantage. You can also put up to 1 TB on the Small plan, so it's easier to fully use the base rate you're paying for.
There is still a coupon for new users too, which is
NEST30for 30% off the first year.You can contact us and we will provide test IPs, etc.
You should always consider borgbase because they are solid and seem to know what they are doing. I appreciate what m4nu has done there.
If I was forced to point to something special at rsync.net (at least in the borg area) I would say your ability to define daily/weekly/monthly snapshots on your account that are immutable.
Your discounted plan does not come with any by default but you can still create any schedule you like and we are in charge of creating/rotating these snapshots and, again, they are immutable - you cannot change or delete them - so it is the ultimate ransomware/malware/Mallory protection.
Where can I find the 200gb rsync.net offer? Minimum on the site seems to be 800gb.
Nvm: found it. https://www.rsync.net/products/borg.html. Single region though.
You can make it geo-redundant after the fact - multiply the price by 1.75x (not quite double).
Interesting they have a 1TB lifetime plan for $480 on a single location, which is breakeven if you use their service for 5 years.
These guys have been around for a long time, might actually be a decent proposition.
I'm seeing $540.
If you go through the borg page, it's $480 - https://www.rsync.net/signup/order.html?code=experts
I use NetDynamics with Borg and it works great. Speed wise it's much faster than others I have tried, e.g. Hetzner Storage Box.
Thank you for your feedback!
For what it's worth, I've got another year of rsync.net, $19.20/year for 200GB this time. It's worked well for the past 3 years, and transfer speed is fast.
@david Thanks for following up and for letting us know what you decided to do! Good luck with rsync.net. I've heard that rsync.net works great! Best! Tom
Is there somewhere you can get these non-standard offers?
Check here, under "Special Pricing for Borg accounts."
https://www.rsync.net/products/borg.html
Make sure whichever host you use supports configuring SSH keys to use Borg append-only mode. It's important for ransomware protection, so that malware on the client system can't erase the backups.
If you have SSH access then you can just do that in the authorized_keys file yourself.
What's the likelihood that malware operates the Borg (or Restic) on the client machine in such a way as to cause erasing (or altering) existing backups? Assuming backup is encrypted and needs password to access of course...
If your backup is automated (e.g. using Borgmatic), then malware can use the credentials in the backup config. There's a few common backup apps on Linux (Borgmatic, Backupninja, restic, Jetbackup, and a few others) and it'd be trivial for malware to just look for all of them.
Especially for ransomware, it's beneficial to the malware author if you can't easily recover, which includes deleting any backups where possible.
I should have mentioned that malware isn't the only concern. Another concern is someone gaining unauthorized access to the server (for example, through an insecure SSH server, privilege escalation vulnerability through something running on the server, etc). You really don't want an attacker to be able to delete the backups
I have two Borgmatic repos for each of my servers and VPSes. One is on my HostHatch 10TB storage VPS, and one is on my home server.
Looking into borg append-only mode, it seems not ideal. My backup space is limited, and I purge daily and compact weekly. I just use the command line client with custom scripts. I could use a server-side ZFS snapshot to preserve data, though (as mentioned earlier by rsync_dot_net). I think that would be better.
is it possible to mount your backup storage as windows shared folders? creating users linked to subfolders, etc? I was using hetzner for many years but i could try yours (but i need this feature for my windows users). thanks.
...
My backup is automated, but using a password stored in the OS keychain that I retrieve at runtime using a scripted command. Thus the malware must know a couple of things:
- that it must use the scripted command
- the scripted command syntax
- the name of the password to retrieve from the keychain
Would you say I'm still vulnerable?
You can have a different, more protected SSH key that has full access and use that to purge, or do the purge on the backup server (it'll have to have the repo password though)
I have setup zfs snapshots at rsync.net to match my borg retention cycles. It does count against the storage allocation, but so far seems to take up minimal additional space, since most of the data is already somewhere in the borg files.
This way there are read-only copies of the backups, just in case something goes wrong. The snapshots are in a hidden directory, .zfs.