nfn wrote:
What are your backup strategies? What do you suggest as a replacement for duplicity incremental (off server) backups?
While not necessarily for the faint of heart to get set up, I use bacula (
www.bacula.org) as my primary system.
It's extremely flexible and powerful, though with that comes complexity, and it's UI options are somewhat limited. A minimum setup is a director on some central management host that is in charge of controlling the backups, one or more storage daemons that manage storage (tape or disk), and a file daemon on each node to be backed up. But you can operate with multiple directories, each with their own or shared storage daemons and independent or overlapping use of file daemons.
You can configure virtually any backup scheme you want (very flexible scheduling, including stuff like "first monday each month", in any combination of incremental, differential, full) with any desired retention times, reuse times for media, etc... Restorations can select any files from any given date in time that is still available on the media, and can restore to any file daemon and location on that system, even if not the original backup host.
Personally I have a NAS at home with my primary director and storage daemon, and have jobs to back up my 4-5 home machines, a business machine at home, 4 business machines at our sites, and 2 business Linodes. Oh, and two of my Dad's machines from his house in case he ends up calling me with a problem :-)
The home v. business machines have different schedules and retention periods, but in general it's daily incrementals for some period (between a week and a month), with differentials for a longer period (e.g., each week or every other week), and generally full once a month.
You do have to allow connections from the director to file daemons (though you could run your director on a Linode and just use the internal network) and connections from file daemons to the storage daemon being used to write the backup media. Bacula v3 adds TLS authentication but with 2.x I just used very limited firewall rules for the specific traffic needed.
-- David