Recommended backup strategies

## Recommended backup strategies

A robust backup plan protects your data from accidents, ransomware and hardware failure. Here are general strategies to build reliable backups for your VPS or dedicated server:

### Follow the 3 ‑2 ‑1 (and 3‑2‑1‑1‑0) rule

- **3 copies** – Keep at least three copies of your data: the production copy and two backups. One copy should be off‑site. The rule ensures redundancy by storing backups on two different media types (e.g., provider’s snapshot storage and cloud object storage) and at least one geo‑redundant off‑site copy【198595163004441†L74-L87】.
- **3‑2‑1‑1‑0 enhancement** – For increased resiliency, keep one immutable or offline copy and perform regular integrity checks so there are "zero" backup errors【103407073114584†L460-L485】. Immutable storage (e.g., object storage with versioning) protects against ransomware; periodic verification confirms backups are recoverable【103407073114584†L460-L485】.

### Understand backup types

- **Full backups** – A full backup copies all files and system configuration; it is the most reliable method but also the largest. Use full backups periodically (e.g., weekly or monthly) and combine them with lighter backups【819593156438322†L55-L66】.
- **Incremental backups** – Incremental backups store only changes since the last backup, making them efficient for daily or hourly schedules; restoration requires the last full backup plus all incrementals【819593156438322†L68-L77】.
- **Differential backups** – Differential backups save all changes since the last full backup. They strike a balance between storage and recovery speed; only two sets (the last full and the latest differential) are needed for restoration【819593156438322†L80-L90】.
- **Snapshots** – Snapshots capture the state of your server at a point in time; they are ideal before upgrades but should not be relied on as a primary backup because they reside on the same infrastructure【198595163004441†L92-L110】.

### Set appropriate frequency and retention

- Schedule backups according to your recovery point objective (RPO): dynamic databases might need hourly backups, while static websites can use daily or weekly backups【198595163004441†L129-L135】. Combine short‑term snapshots, daily incremental backups, weekly full backups and monthly archives (often called the "grandfather‑father‑son" rotation)【198595163004441†L129-L142】.
- Define a retention policy that keeps recent backups (e.g., 7 daily, 4 weekly and 12 monthly copies) and prunes older backups to save space【198595163004441†L137-L142】.

### Store backups off‑site

- Don’t rely solely on local snapshots. Off‑site copies protect you if your data centre suffers hardware failure or a ransomware attack. Options include object storage services, remote servers accessed via rsync/rclone, or even tape for archival【198595163004441†L114-L125】.
- Cloud backups integrate with many tools and offer scalability and geographic redundancy【819593156438322†L103-L112】.

### Encrypt and protect your backups

- Always encrypt backups and restrict access to them to prevent unauthorised reads【819593156438322†L172-L180】. Use encryption keys that are stored separately from the data.
- Protect your backups with strong passwords and multi‑factor authentication for cloud accounts.

### Automate and test regularly

- Use your hosting control panel, dedicated backup software or scripts to automate backup schedules, detection of file changes, and retention pruning【819593156438322†L116-L152】【103407073114584†L488-L505】.
- Test backups by performing regular restores into a staging environment; verify checksums and document recovery procedures【198595163004441†L175-L181】. A backup you haven’t tested is just a hope【198595163004441†L175-L181】.

### Tailor the strategy

- Identify critical data and prioritise its backup frequency; not all data needs the same schedule【103407073114584†L588-L590】.
- Combine backups with robust security measures, such as endpoint protection and firewalls, to reduce the risk of data loss【103407073114584†L529-L538】.

By following these best practices and leveraging the backup features included with your IllusionCloud services (standard daily backups, snapshots and optional premium backup plans), you can achieve a resilient and recoverable infrastructure.