Re:Don’t Wanna Pay Ransom Gangs? Test Your Backups
by rhizome on Monday July 19, 2021 @08:26PM
(#27888847)
So a complete hot standby?
[ Parent
| on HN ]
Re:Don’t Wanna Pay Ransom Gangs? Test Your Backups
by Godel_unicode on Tuesday July 20, 2021 @02:32AM
(#27890681)
Sounds like a DR test; spin up an entire new thing to make sure the backups worked, then turn it off. Costs a few hours of extra resources.
Re:Don’t Wanna Pay Ransom Gangs? Test Your Backups
by dspillett on Tuesday July 20, 2021 @09:12AM
(#27893274)
I do something similar with my home mail server (not sure I'd go with self-hosting if I started fresh today, but it has run without issue other than maintenance for upgrades & such for well over a decade). I have a second copy running in a low spec VM. Every day it wipes itself down and restores the latest backup, I check regularly (a couple of times per week) to see that it is running and has copies of recent mail (that part could be more automated but I've never go round to it...). It wasn't setup for DR specifically, but it is on a separate network so if push came to shove I could ramp up its resources, change a few DNS settings, open up relevant bits of its firewalling, and have it take over, if the main server failed in a way it hadn't copied yet.
Re:Don’t Wanna Pay Ransom Gangs? Test Your Backups
by rhizome on Tuesday July 20, 2021 @04:01PM
(#27898524)
Could be; it's ambiguous. But yeah, not updating DNS could be just declining to test operation in the wilds of outside traffic before tearing it all down.
That said, in this way, maybe a periodic "DR" that actually replaces the current operations would be a helpful...well, not test, but..."resilience practice" maybe? It could be a new twist on continuous deployment: continuous recovery.