Recommendation Needed, Desktop Backp

gpriatko

Ars Tribunus Militum
1,562
Please excuse this post if it's not in the right place.

I've worn a bunch of hats including IT Director for small companies that I've co-founded, but I've been out of the IT game for ages and haven't posted on Ars even longer than that.

My issue is that one of my partners and I are day traders. We've got four laptops to backup, two Win11 Pro and two Win12 Pro. Will eventually be running RAID-1 on all laptops and probably running as near to identical HW/SW on all four machines as possible.

We load all of the needed tools onto both machines. We each have a primary and a hot spare. We have disk images to restore each of the machines in case of theft of general ineptitude. I'll work out site diversity for the backup/restore later.

Want to use external SSD storage for backups (very familiar with data retention and TBW issues). Looking at dual bay enclosures. Want to us native Windows tools to build the RAID on the external drives. OS level SW RAID is fine. Using an integrated RAID controller just introduces yet another dependency.

Don't want cloud storage.

My goal is to keep things simple. I've setup multi-site, multi-tiered systems years ago, don't want/need that kind of thing now. I'd rather not introduce 3rd party tools. Been doing backups on two of the machines using Windows File history and backups on the other two machines using Windows Backup and Restore. I'm not feeling comfy with the native Windows tools. They're pretty lightweight and Win B&R is deprecated.

FWIW, the strangest bug that I've seen with Win B&R is that if I've been going backups to two external drives, anytime that I swap between drives, Win B&R thinks that it needs to do a full backup rather than an incremental. Is that just me or is it a feature?

Anyway, recommendations would be very welcome.

Cheers All.
 

SplatMan_DK

Ars Tribunus Angusticlavius
7,794
Subscriptor++
Balancing your needs with simplicity and the small scale you are working with, I'd say take a look at an Acronis subscription. Their tools are decent quality and includes cloud backup (which you say you don't want, but it's encrypted so take another look at the convenience as only delta is uploaded for daily backups).

I haven't used them for a few years, but had only positive experience when I used them up until mid 2021. Their offering is very well aligned with their asking price.

If you insist on not using cloud storage, save the images to a local drive. You can attach a drive permanently, and automate a daily image backup.
 
  • Like
Reactions: gpriatko

gpriatko

Ars Tribunus Militum
1,562
SplatMan_Dk, thanks for your response.

Sorry but cloud is absolutely off the table.

Also, we don't want backup drives permanently attached to laptops. Backup devices need to be physically remote from users. Seeing as how I won't set up NAS, this means storing the backup drives in a safe place when not running jobs. I'm sure that not everyone sees it that way. OTOH, decades of IT experience produces some pretty strong superstitions :)

At some point archives need to be migrated, What can you tell me about migrating Acronis archives? When I was rsync-ing Linux servers over the net between remote offices and the admins were walking the SW RAID sets offsite, I knew that I was in a garden, but the walls were very low. Along came Veritas, and HW RAID, and tape drives, and the walls got higher. IOW, I'm trying not to get locked in to any 3rd party solutions for archives.

FWIW, beyond the whole 'bit rot' issue, I know that no solution is going to last forever, At some point archives need to migrate.
 

Nulls

Ars Tribunus Militum
2,451
If you want to manage everything including manually managing the OS and the RAID setup then you will need a small server. I don't recommend it though.

I would look at something like a Synology for this a small 4 bay NAS, and use that for backup, it would be easier to setup and manage then trying to do it manually.

Synology has a backup tool that it provides or you can use pretty much any other solution you want and set it up as a file share location for backup.

For drives depending on the model you can add SSD drive for a cache for performance, but for backups I think regular hard drives made for NAS would be sufficient.
 
  • Like
Reactions: gpriatko

gpriatko

Ars Tribunus Militum
1,562
Nulls, thanks for the response.

I'd rather stick with direct attached storage for backups. It's just a preference. A NAS is yet another thing that needs managing and direct attached storage feels like less overhead.

OTOH, if I don't like the direct attached solutions that I find, I'll probably give in and set up server or a NAS box. But I'm really trying to avoid bringing more computers into the house.

I will admit to having issues with bit rot rearing its ugly head on any RAID beyond a simple mirror. There are still plenty of RAID controllers that don't validate what they've written. I'm not going to be worrying about that if I'm connecting a dual bay SSD and letting the OS build the mirror on the external drive, I think that I still trust OS level RAID-1. Maybe I'm wrong?
 

Paladin

Ars Legatus Legionis
32,552
Subscriptor
You have effectively 2 laptops. Right? And a couple spares that are spares, you don't generate new data on them, right? So 2 laptops.

Stick a USB drive on each machine, run the free Veeam Endpoint Backup software and backup to the USB drive. Swap it out when desired. Take it off site if desired.

Forget the RAID stuff, a simple external SSD will be fine for backups, especially if you cycle a couple of them and you have spare laptops. No need for raid on the laptops either, that is a pain and provides little benefit for the complexity if you already have good backups. This is assuming your windows install is just a plain Windows 10/11 install with a few apps installed for your work stuff and nothing else. Heck, it's almost not even worth doing full backups if that is the case. Just backup your important files and you can reinstall Windows to a fresh drive/machine in 10 minutes anyway. Restore your files and you're done.

Keep it simple. I've been using the Veeam Free Endpoint Backup software for over 5 years now and it works great. Never had an issue that wasn't caused by something simple like a dying USB drive or whatever. The software has been totally reliable.
 
  • Like
Reactions: gpriatko

gpriatko

Ars Tribunus Militum
1,562
Paladin, thanks for the reply.

{Going to edit this. I think that when I wrote this last night, I'd misread what you wrote,}

Well, a hot spare with last year's files isn't as useful as a hot spare synched to your production machine. And maybe sometimes your spare is more like devtest. You load things on it that you're not ready to load onto the 'production' box.

I think that I'm headed in the direction of Macrium. I've used their disk imaging tools several times. But I need to get some experience with how they do snapshots. Whichever tool I get, I need to convince myself that navigating the timeline is smooth. I suppose that snaphots is the right word? I'm not talking about 'last full backups'. I mean, show me what my directories looked like on any day that I choose.

I agree that I don't need to go full Enterprise Level. I'll just throw more storage at the problem, Don't need block level backup, file level backup is fine with me. Same for dedup.

Fortunately, the laptops aren't Power Books, so a failed SSD doesn't send the machine to the landfill. OTOH, although Time Machine is, in some ways a terrible product at least Apple is storing snapshots. Sure, they throw away the oldest ones when the disk gets full but that's easily solved with a little attention to free space and buying more disks.

SSDs don't die every day, but they do die. Setting up RAID-1 on a laptop is very simple. Same goes for RAID on the external drive. I don't want to live in a world where one failed NAND chip obliterates years of snapshots.
 
Last edited:

Paladin

Ars Legatus Legionis
32,552
Subscriptor
OK yeah in that case, you probably just need more external drives. I still would not worry about it to that degree though unless you find a really good hardware solution for the external drives. So far all the external RAID enclosures I have seen have been either complete junk that randomly blows all your data or they are the price and complexity of a NAS so you might as well just have a NAS and back that up on to a USB drive.

I haven't used Macrium for more than basic drive cloning for hardware migration but I would guess they have a decent backup product. I do just fine with Veeam Free Endpoint Backup on my mix of personal machines and a few one-off work machines that don't play well with enterprise backup software or can't do network backups for whatever reason.
 

gourish

Smack-Fu Master, in training
1
To avoiding cloud storage, I have the following simple backup system in place. Storage is using USB type C hubs which take NVMe drives, in this case Sabrent hubs and 2GB drives. Connected is only made to synchronise, then disconnected and stored. I use the common three generations of record, with one of them off site. Rather than creating an image file, I use the excellent Free File Sync in Mirror mode to make a direct copy. This takes only a minute or two to update the record, since only changes are made. You can immediately check individual files, and verify the file data with explorer etc.


I store data as above, but also take an image of the OS after major updates. Clearly this takes longer, but is necessary less often.
 

gpriatko

Ars Tribunus Militum
1,562
This maybe isn't a particularly well-formed question but, what about the future?

Even when we'd just write stuff to tapes from the command line, you could imagine multiple reasons why your new drives would not be able to read your old tapes. What about now? Ignoring bit rot, what's the recommendation to prevent your archive from turning into a massive write only memory?

What I mean is, how do you do a migration? For example, one of my partners has a 'backup drive' with a TB of Windows File History snapshots. There are over 1100 snapshots. There's no way to say 'Show me (insert arbitrary date)". The archive is in a proprietary format. How do I move that to a different platform?

I could brute force it by restoring every single snapshot to a target disk and then backing that up with a new tool, but that sounds crazy.
 
Last edited:

oikjn

Ars Scholae Palatinae
969
Subscriptor++
I"ll give another vote for Veeam backup community edition. You can setup each machine independently if you want, but if you do have a central computer "server" available, that can be used to make sure things are backup up as expected. You can backup to a NAS or an attached drive or any number of other options and the backups themselves are pretty painless. Recovery is pretty smooth as well. I have used Acronis and Veeam and settled in on Veeam here.
 

gpriatko

Ars Tribunus Militum
1,562
oikjn, thanks for the recommendation.

I considered Veeam but there's an issue.

I'm not happy about Veeam's Russian connection. They were founded by two Russian guys and until recently they had a lot of developers in Russia. It took them a long time to suspend operations in Russia after the bastards invaded Ukraine (again).

Where does Veeam fit into the SSDF (Secure Software Development Framework)?

I suppose that I could check with my Infosec contacts at VISA. The 5th floor of Metro 2 was about 50% Russian when I worked there. We have friends who were Russian developers, but left Russia for obvious reasons. The more I type the more I know that there's no way on Earth that I'm going to let this software on my network.

Yeah, maybe it's squeaky clean. Maybe, but if why take the risk if there are other solutions? This is the kind of thing that could push me to Oracle or Symantec.
 

oikjn

Ars Scholae Palatinae
969
Subscriptor++
@gpriatko you gotta do what you think it safe for you, but at that level of concern, you might want to consider taking a few classes and writing your own program since I doubt you can find any company without at least a tangential tie to something questionable somewhere. I don't know what your company handles to require more scrutiny than the DoD, but to each their own. Veeam Certifications Veeam Gov. Landing page . Those are two Veeam pages, so I guess don't trust what they say and verify them with the agencies if you are at that kind of level.
 

gpriatko

Ars Tribunus Militum
1,562
you might want to consider taking a few classes and writing your own program

Developed plenty of SW products in my time that were sold to the government and used in safety critical systems. 911 ran on top of my platforms in many places. It still makes me laugh that the CGI Golden Gate Bridge images in all of these Star Trek reboots still show a microwave dish on the top of the south tower. The software running on those radios was 'mine'. That was 30 years ago. I'm sure that 'my' systems are long gone but it still makes me laugh.

Anyway, bailed on researching Veeam having not seen the Government Systems page. Clearly this does make a difference.
 

Paladin

Ars Legatus Legionis
32,552
Subscriptor
Think about it this way: Their obvious connection to Russia in the past invited a LOT of curiosity and inspection and they are still in business. How many software packages did people look at and find that they sent data back to China? (A lot) But as far as I have heard, no one found anything wrong with Veeam. It's really quite trivial to just run stuff on a honeypot network and watch for it to do anything and capture it all so unless they made their stuff so it only uploads data once every ten years... it's probably ok. ;) Given how many researchers are out there right now looking for the next big chance for clout and even money for discovering a vulnerbility or intentional back door or security violation, if there is something to be found, it will be sooner or later. The additional scrutiny from the association with Russia actually makes me trust them a bit more when combined with their popularity. Enough people using it, enough people looking for holes in it, yeah. You would expect to find the problems if there were any.
 
My issue is that one of my partners and I are day traders. We've got four laptops to backup, two Win11 Pro and two Win12 Pro.
Couldn't you just use that time machine you have and buy a quantum backup unit?

Jokes aside it seems you're making a lot of the classic 'I know what I'm doing because I was in IT' assumptions for your current setup, what you plan and how you see it going in the original post. For a start, RAID1 on laptops - what is this meant to achieve?!? Do you really believe that will make your laptops more mission-critical? Nothing else you mention is fit for purpose for an amateur daycare, let alone an amateur day trader, while rejecting the more up to date suggestions everyone has made so far.

I'm a heavily regulated business (tho now quite hands-off) and we gave up on tapes a while ago, though I didn't pull them out of the vault to a less secure location until recently. I liked them because we know where they are, but the draw of cloud and the business as well as practical sense it makes, again even for a heavily regulated business in the investment sector, is frankly too great now. And we definitely don't store backups on Windows File History or NAS's, kek

Even my own stash at home (everything at home that's work related is handled thru work infrastructure, not this) is backed up first to a local appliance for quick rollbacks and bare metal restore, then the same appliance squirts a deduplicated backup to the backup provider's cloud - which is maybe the model you as a proper small business could be aiming for, and that'll be best done thru an MSP.

Now if money is an issue / you aren't a proper business in this sector / you don't like solutions like Veeam (that could technically be a legit concern atm) / you want to keep it simple, then I'd say a standalone NAS which can be your local backup target, which can then optionally (but obviously recommended) be backed up to a cloud of your choice. Synology NAS's aren't in the least bit challenging to install or maintain and I'm sure even you can do it, and they even have their own integrated cloud backup service - C2 - in addition to supporting other popular cloud services, and cloud data retrieval can be done in-NAS or directly on a client device. Synology say as long as you're shlepping entire backup images to and from their cloud service the data is e2ee and ear - I think they have a white paper on this if you want to look at it. That's about the most DIY I would certainly consider.
 
Last edited:
  • Like
Reactions: Wind