08-02-2025, 11:51 AM
Since you’re already using SnapSync between your two QNAP TS-873AeU units, you’ve got solid local redundancy. For the off-site part, here are a few options that may work better than the native HBS 3 approach you’re likely struggling with:
⸻
1. Duplicacy or Restic via Container Station (or VM)
These tools offer deduplicated, incremental, and optionally encrypted backups with support for Backblaze B2.
• Duplicacy supports true incremental backups with point-in-time restores and works well over SFTP, B2, Wasabi, etc.
• Restic is simpler and lighter, also works with B2, with deduplication and integrity checks.
You can run either in a Docker container, pointing at your shared folders. They both support “append-only” backup targets for immutability.
⸻
2. rclone + Backblaze B2 (with versioning or object lock enabled)
A more DIY but effective approach:
• Use rclone in a scheduled job to sync your snapshot folders or specific directories
• Pair with Backblaze B2’s versioning or Object Lock feature to ensure immutability
• Add --backup-dir and --suffix flags to preserve changed files
Example command:
rclone sync /share/Public remote:bucketname --backup-dir remote:bucketname-backups/$(date +%Y-%m-%d) --suffix "-archived"
You can use rclone in conjunction with QNAP’s built-in cron scheduler or create a simple shell script.
⸻
3. Veeam Agent for Linux (if using a VM to mirror data)
If you happen to mirror a copy of critical data to a VM or another Linux-based device, Veeam offers incremental backups with immutability on B2 and other S3 platforms. Still not ideal directly from QNAP, but worth mentioning if a VM is in play.
⸻
Important Note on Immutability:
To get true immutability in the sense of ransomware protection and undeletable archives, Backblaze B2 supports Object Lock — but you’ll need to configure your bucket with retention policies. Tools like Duplicacy and Restic support this directly.
⸻
1. Duplicacy or Restic via Container Station (or VM)
These tools offer deduplicated, incremental, and optionally encrypted backups with support for Backblaze B2.
• Duplicacy supports true incremental backups with point-in-time restores and works well over SFTP, B2, Wasabi, etc.
• Restic is simpler and lighter, also works with B2, with deduplication and integrity checks.
You can run either in a Docker container, pointing at your shared folders. They both support “append-only” backup targets for immutability.
⸻
2. rclone + Backblaze B2 (with versioning or object lock enabled)
A more DIY but effective approach:
• Use rclone in a scheduled job to sync your snapshot folders or specific directories
• Pair with Backblaze B2’s versioning or Object Lock feature to ensure immutability
• Add --backup-dir and --suffix flags to preserve changed files
Example command:
rclone sync /share/Public remote:bucketname --backup-dir remote:bucketname-backups/$(date +%Y-%m-%d) --suffix "-archived"
You can use rclone in conjunction with QNAP’s built-in cron scheduler or create a simple shell script.
⸻
3. Veeam Agent for Linux (if using a VM to mirror data)
If you happen to mirror a copy of critical data to a VM or another Linux-based device, Veeam offers incremental backups with immutability on B2 and other S3 platforms. Still not ideal directly from QNAP, but worth mentioning if a VM is in play.
⸻
Important Note on Immutability:
To get true immutability in the sense of ransomware protection and undeletable archives, Backblaze B2 supports Object Lock — but you’ll need to configure your bucket with retention policies. Tools like Duplicacy and Restic support this directly.