[DRBD-user] : Backup "off line"

[Roland Kammerer]

On Mon, Oct 12, 2020 at 05:46:34AM -0400, Digimer wrote:
> On 2020-10-12 5:36 a.m., Anthony Frnog wrote:
> > Hi,
> > 
> > To begin, my apologies if I post à the wrong place.
> > 
> > I use DRBD (version 9) on differents servers. My DRDB cluster is a
> > shared storage for VM on Proxmox et Vmware Currently, there is a lot of
> > ransomware attacks. This is a really problem... So, if my DRBD cluster
> > is encrypted, all data will be encrypted and all VMs will be "dead".  My
> > question is: Is there a DRBD solution able to save all data stored on
> > DRDB node in order to restart my production if I have a ransowmare ?
> > 
> > 
> > Best regards Anthony  
> 
> There's no specific anti-ransomware tools in DRBD, but you could set
> something up easily enough. You could, for example, take periodic
> snapshots of the backing LVM devices (assuming you use LVs to back DRBD
> resources). You could keep N-number of snapshots and automatically cycle
> them out.

This and the rest what Digimer wrote. One of the lesser known and newer
features of LINSTOR + an extra tool for LVM to make it efficient is
actual support for snapshot shipping [1].

Best, rck

[1] https://www.linbit.com/drbd-user-guide/linstor-guide-1_0-en/#s-linstor-snapshots