Backup storage and immutable repositories
The backup target is the part of the storage stack ransomware goes after first. A backup share the server can write to is a backup the attacker can delete. Immutability, meaning a copy nobody can alter for a fixed period, is now the baseline.
We build backup storage with at least one immutable tier: a hardened Linux repository, a deduplication appliance with retention lock, object storage with Object Lock, or offline tape for the truly paranoid.
At a glance
| On-prem | Veeam Hardened Repository (Linux, XFS), Dell PowerProtect DD, Synology WriteOnce, TrueNAS snapshots |
|---|---|
| Cloud | S3 Object Lock, Wasabi, Backblaze B2, Azure Blob immutability |
| Offline | LTO-8/LTO-9 tape, rotated USB for tiny sites |
| Rule | 3-2-1-1-0: three copies, two media, one off-site, one immutable, zero restore errors |
What RackLedge does
- Repository design and sizing
- Immutability configuration and verification
- Restore testing on a schedule
- Ransomware recovery planning
How we work
Storage projects begin with an honest capacity and performance baseline: how much data, how fast it grows, what IOPS and latency the applications actually need. That baseline decides between an entry SAN, a unified array, a NAS or a hyper-converged design, and it keeps vendors from selling you the biggest box.
We build the network under the storage as carefully as the storage itself: isolated iSCSI paths or dual FC fabrics, multipathing on every host and a failover test before anything goes live. Backups get an immutable copy and a restore test on a schedule.
Migrations are run as projects with a written cutover plan, a rollback path and a validation checklist. Old arrays are decommissioned with certified data destruction and the documentation is handed over.
Related services
More on san and nas storage
Frequently asked questions
Are cloud backups enough?
Only if they are immutable and the credentials to delete them are not on the same domain as the servers being backed up. Otherwise a compromised admin account can wipe both.
Need a hand with this?
Tell us what you are running and what is slowing you down. You get a straight assessment and a plan, with no obligation. Support desk is staffed 24/7.