Posts: 1,226
Threads: 1,227
Joined: Feb 2020
Reputation:
1
We service many clients who use Google Workspace. We'd like to offer them managed offsite backups of their GW environments, and we plan to use Active Backup for Google Workspace (on Synology) to bring their backups onto our NAS (all good so far). From there, we'd like to offer an add-on service to store an additional "air-gapped" offline, immutable copy of their data, but we're not sure how to implement that. We could purchase a 2nd NAS and keep it offline, and then use external hard drives to shuttle data from the main NAS to the air-gapped NAS, but that seems so labor intensive... Or maybe there's a way to use snapshot replication? We're wondering what a guru might suggest in this situation.
Posts: 3,713
Threads: 2
Joined: Jun 2022
Reputation:
22
Snapshot replication could be a good option for creating an air-gapped offline, immutable copy of the data. You can use Synology's built-in Snapshot Replication feature to create snapshots of the data on your primary NAS and replicate them to the secondary, air-gapped NAS. By keeping the secondary NAS offline, you ensure that the data is protected against unauthorized access and tampering.
Here's a rough outline of the steps you can follow:
Set up two Synology NAS devices, one as the primary and another as the secondary.
Enable Snapshot Replication on the primary NAS.
Configure the secondary NAS to receive the snapshots from the primary NAS.
Schedule the snapshots to be taken at regular intervals, depending on your data change frequency.
After the initial replication, keep the secondary NAS offline and disconnect it from the network.
When you need to update the air-gapped copy, bring the secondary NAS online, transfer the latest snapshots, and then disconnect it again. (boot and shut down can be automated)
This way, you can ensure that the data is protected and you can provide your clients with a secure and reliable backup solution. However, note that this method requires careful planning and management to ensure that the snapshots are taken correctly and that the secondary NAS is kept secure and offline.
With future DSM there will be WORM technology that allows t write data but never be abe to delete it or change it.
