{"id":23,"date":"2015-09-01T09:45:32","date_gmt":"2015-09-01T14:45:32","guid":{"rendered":"http:\/\/npsa.parentreprise.com\/?p=23"},"modified":"2017-01-22T08:32:17","modified_gmt":"2017-01-22T13:32:17","slug":"2015-09-notes-backups","status":"publish","type":"post","link":"https:\/\/kwnpsa.ca\/index.php\/2015\/09\/01\/2015-09-notes-backups\/","title":{"rendered":"2015-09: Backups"},"content":{"rendered":"<div id=\"past-event-description-wrap\" class=\"line margin-bottom\">\n<p><strong>Location:<\/strong>\u00a0 <a title=\"\" href=\"https:\/\/maps.google.com\/maps?f=q&amp;hl=en&amp;q=58+Queen+Street+South%2C+Kitchener%2C+ON%2C+ca\" target=\"_blank\">The Working Centre<\/a> 58 Queen Street South, Kitchener, ON <span class=\"event-map-link\">(<a href=\"https:\/\/maps.google.com\/maps?f=q&amp;hl=en&amp;q=58+Queen+Street+South%2C+Kitchener%2C+ON%2C+ca\" target=\"_blank\">plan<\/a>)<\/span><br \/>\n<strong>Date:<\/strong> 21 Sep 2016<\/p>\n<p><em>What do you care about when doing your backups? <\/em><br \/>\n<em>What backup products and workflows do you use? <\/em><br \/>\n<em>What products do you use to synchronize backups? Bittorrent sync? Crashplan? Others? <\/em><br \/>\n<em>How do you test your backups? Do you do disaster recovery simulations? How?<\/em><\/p>\n<p><strong>Meeting Notes<\/strong><\/p>\n<\/div>\n<p>### Discussion Questions<\/p>\n<p>&#8211; What do you care about backing up? What do you not care about?<br \/>\n&#8211; What backup products do you use?<br \/>\n&#8211; What backup workflows do you use?<br \/>\n&#8211; What products do you use? rsync? Backup Exec? Crashplan? Other?<br \/>\n&#8211; How do you test your backups?<br \/>\n&#8211; How do you test disaster recovery?<\/p>\n<p>### Linux backups for publishing<\/p>\n<p>Linux server backs up files from the last 45 days to a DVD (as much as would fit)<\/p>\n<p>+ Back up once a month<br \/>\n+ Plus nightly backups with rdiff-backup (which includes history) on a 3-disk RAID array<br \/>\n+ Would restore files from DVD<br \/>\n+ Low strain of hardware, low attack surface from web<br \/>\n+ The DVD backup was in use for 15 years<br \/>\n+ Each book project is responsible for its own backups<br \/>\n+ Restructuring a full backup would be tedious<br \/>\n+ But the most recent files are accessible (and these are the most important)<br \/>\n+ System was designed when most files were smallish, but Adobe Indesign makes big files<\/p>\n<p>### At the Working Centre<\/p>\n<p>+ Symantec Backupexec for most file servers, mail server, Active Directory<br \/>\n+ Remote sites we use Windows Server Backup + backupexec once a week<br \/>\n+ Active Directory is important but remote domain controllers is a backup<br \/>\n+ My Documents are mapped and get backed up<br \/>\n+ Desktops, bookmarks, PST files do not get backed up on clients<br \/>\n+ Weekly full backups + daily differentials for Windows<br \/>\n+ Linux: tarballs of important files + rsync to a central server<br \/>\n+ Backup server in our server room + (maybe) remote sync<br \/>\n+ Copy most important files on encrypted USB keys<\/p>\n<p>### Big Backups don&#8217;t sync!<\/p>\n<p>&#8211; DFS doesn&#8217;t work!<br \/>\n&#8211; Syncthing doesn&#8217;t work!<\/p>\n<p>### Sidebar: What is Active Directory?<\/p>\n<p>&#8211; SMB is Samba storage and network (Windows File shares)<br \/>\n&#8211; Active Directory is an LDAP database:<br \/>\n+ User accounts and passwords<br \/>\n+ Security groups<br \/>\n+ Computer accounts<br \/>\n&#8211; On Linux: there are RedHat, SuSE LDAP solutions<br \/>\n&#8211; On Samba 4, you can mimic an Active Directory domain<br \/>\n+ Linux clients can (kind of) join a domain, and log in using Active Directory credentials<br \/>\n+ Active Directory implements a bunch of open standards, so you can connect to it from Linux clients<\/p>\n<p>### What happens at REEP?<\/p>\n<p>&#8211; Two servers at one location<br \/>\n&#8211; Everything is backed up there: file shares, Active Directory, &#8230;<br \/>\n&#8211; Image for Windows is what he uses<br \/>\n+ Does an image backup for the servers<br \/>\n+ Saved onto a separate internal drive<br \/>\n+ Full backups are once a month + differentials<br \/>\n&#8211; Puts the monthly full on an external drive<br \/>\n&#8211; Also uses shadow copy<br \/>\n+ This gives end users previous versions<br \/>\n&#8211; JungleDisk backs up file shares to their Amazon servers<br \/>\n+ $10-15\/month for 200GB of storage<br \/>\n+ It has some historical information<br \/>\n+ Do you trust them? Yes<br \/>\n+ Information is not highly confidential<br \/>\n+ Backs up twice a day over a tunnel<br \/>\n&#8211; Incremental backups happen every day<br \/>\n&#8211; There is a RAID mirror in the server as the first level<br \/>\n&#8211; He uses Exchange online and so does not worry about backups<\/p>\n<p>### Why backupexec?<\/p>\n<p>&#8211; Wanted more granular restores of Exchange<br \/>\n&#8211; It thinks in terms of tapes<\/p>\n<p>### Lessons<\/p>\n<p>The cloud is convenient<\/p>\n<p>Redundancy is important!<\/p>\n<p>### Hardware confidence?<\/p>\n<p>&#8211; We have spare parts for hardware servers<br \/>\n&#8211; We have virtual servers<br \/>\n&#8211; RAID hard disks in the servers<br \/>\n&#8211; Brendan wants servers that are under warranty<br \/>\n+ 5 year warranties built in<br \/>\n&#8211; TWC uses gamer-quality hardware with good reviews<br \/>\n&#8211; Custom-built servers: depends<br \/>\n+ Gamer-quality or low-end business quality<br \/>\n&#8211; We use Hyper-V for virtual servers<br \/>\n&#8211; Touch Machines bought in pairs<br \/>\n+ both machines run 24-7<br \/>\n+ AMD processors<\/p>\n<p>### Backup Levels\/options<\/p>\n<p>&#8211; Encrypted USB keys<br \/>\n&#8211; DVD backups<br \/>\n&#8211; RAID arrays<br \/>\n&#8211; Previous versions\/shadow copies<br \/>\n&#8211; Offsite backups<br \/>\n&#8211; Backups to internal drives<br \/>\n&#8211; Cloud backup<\/p>\n<p>### How much should we trust encrypted backups?<\/p>\n<p>&#8211; What if the company does the encryption?<br \/>\n&#8211; What if we did the encryption?<br \/>\n&#8211; Maybe it doesn&#8217;t matter: if we are on the Internet we are in the cloud<br \/>\n&#8211; There is consent vs non-consent<br \/>\n&#8211; Is Linux more secure?<br \/>\n&#8211; Should we throw up our hands and give up?<br \/>\n&#8211; FLOSS means that although people CAN examine source code it doesn&#8217;t mean that it WILL be<\/p>\n<p>### Disaster recovery<\/p>\n<p>&#8211; If you participated in disaster recovery other people would have to do this the next time<br \/>\n&#8211; They paid for another company to provide services for backups<br \/>\n&#8211; How do you set up disaster recovery environments?<\/p>\n<p>Some people do not like backups because they can profit from the data recovery.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Location:\u00a0 The Working Centre 58 Queen Street South, Kitchener, ON (plan) Date: 21 Sep 2016 What do you care about when doing your backups? What backup products and workflows do you use? What products do you use to synchronize backups? &hellip; <a href=\"https:\/\/kwnpsa.ca\/index.php\/2015\/09\/01\/2015-09-notes-backups\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,14],"tags":[],"class_list":["post-23","post","type-post","status-publish","format-standard","hentry","category-backups","category-pastmeetings"],"_links":{"self":[{"href":"https:\/\/kwnpsa.ca\/index.php\/wp-json\/wp\/v2\/posts\/23","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kwnpsa.ca\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kwnpsa.ca\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kwnpsa.ca\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kwnpsa.ca\/index.php\/wp-json\/wp\/v2\/comments?post=23"}],"version-history":[{"count":4,"href":"https:\/\/kwnpsa.ca\/index.php\/wp-json\/wp\/v2\/posts\/23\/revisions"}],"predecessor-version":[{"id":57,"href":"https:\/\/kwnpsa.ca\/index.php\/wp-json\/wp\/v2\/posts\/23\/revisions\/57"}],"wp:attachment":[{"href":"https:\/\/kwnpsa.ca\/index.php\/wp-json\/wp\/v2\/media?parent=23"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kwnpsa.ca\/index.php\/wp-json\/wp\/v2\/categories?post=23"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kwnpsa.ca\/index.php\/wp-json\/wp\/v2\/tags?post=23"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}