Backup system (SRK)

A backup system (SRK) is a specialized hardware and software solution designed for automatic creation of data backup copies, their secure storage and rapid recovery in case of loss, damage or encryption of information as a result of technical failures, human errors, cyberattacks (in particular, ransomware) or actions of intruders. A backup system is an integral element of any serious IT infrastructure, since even the most modern data storage system cannot guarantee protection from all threats — ransomware can encrypt data both on the main and on the backup array, if backup copies are stored in the same logical environment. That is why backup is built on the 3-2-1 principle: three copies of data on two different types of media, one of which is located outside the main site (offline or in a geographically remote data center).

Operating principles of a backup system and key metrics

The main task of a backup system is to minimize two key metrics: RPO (Recovery Point Objective) — the maximum acceptable amount of data loss, measured by the time between the last backup copy and the moment of failure, and RTO (Recovery Time Objective) — the maximum acceptable time for restoring system operability after a failure. For critical systems (bank transactions, production management systems), RPO can be seconds, and RTO — minutes, which requires the use of continuous data protection (CDP — Continuous Data Protection). For less critical systems, RPO of several hours and RTO of a day are acceptable. Modern backup systems support various backup methods: full backup — creation of a complete copy of all data; incremental backup — only changes since the last backup of any type are saved; differential backup — changes since the last full backup are saved. By combining these methods, you can build an optimal backup strategy that balances between the speed of creating backup copies and the speed of recovery. To maximize efficiency, the COD technology is used, which allows applying deduplication (removal of duplicate blocks) and compression methods, which significantly reduces the required disk space (up to 10-20 times) and speeds up the process of data transfer over the network.

Architecture, components and deployment of a backup system

A typical architecture of a backup system includes several key components. A backup server is the central coordinator that manages policies, schedules and execution of backup tasks. Backup agents are software modules installed on protected servers and workstations, responsible for reading data and transferring it to the server. A storage target is a repository for storing backup copies, which can be a storage system, a tape library, a cloud storage or a dedicated backup server with a large disk array. For large distributed infrastructures, a multi-level scheme is used with intermediate media servers, which take on the load of data transfer and allow flexibly configuring copy policies. An important component is the backup catalog — a database containing information about all created copies and their contents, necessary for quick search and recovery of the required data. When installing and commissioning a backup system, it is important to properly design the network infrastructure: backup traffic creates a significant load on communication channels, so it is recommended to allocate a separate network (backup network) or use traffic isolation technologies (VLAN, network policies). High-quality installation of the system is ensured with the involvement of installation service specialists, who guarantee correct configuration and integration of all components, including configuring integration with virtual infrastructure (plugins for VMware/Hyper-V) and applications.

Backup systems in import substitution conditions and protection from ransomware

The Russian backup system market is represented both by foreign vendors that have left or limited their activities, and by actively developing domestic products included in the register of Russian software. Domestic backup systems are certified by FSTEC and provide the necessary level of protection for critical information infrastructure (CII). Special attention is paid to protecting backup copies from ransomware: modern backup systems support immutable repositories where data cannot be changed or deleted, even by the system administrator, use multi-factor authentication to access backup management and storage, and also ensure isolation of the backup network from the corporate network. A comprehensive approach to building a backup system includes auditing the current infrastructure, determining RPO and RTO requirements for each criticality, developing backup and recovery regulations, selecting equipment and software, installation, configuration, writing documentation and staff training. Only such an approach allows guaranteeing that in a critical situation the data will be restored in full and within the established deadlines, and the business will not suffer catastrophic losses.