How to Develop an Effective Backup Policy

我不是女神ヾ 2022-08-10 15:58 9阅读 0赞

本文转载自：http://www.openlogic.com/wazi/bid/188047/How-to-Develop-an-Effective-Backup-Policy

# Open Source Software Technical Articles #

*  [**Home**][Home]
 *  [**Search**][Search]
 *  [**Products and Support**][Products and Support]
 *  [**Services**][Services]
 *  [**Open Source Training**][Open Source Training]
 *  [**Enterprise OSS Blog**][Enterprise OSS Blog]
 *  [Wazi Technical Blog][]
 *  [About Wazi][]
 *  [Attributions and Licensing][]
 *  [Supply Chain Compliance][]
 *  [How to Contribute][]
 *  [Contributors][]
 *  [**Resources Library**][Resources Library]
 *  [**Community**][Community]
 *  [**Company**][Company]
 *  [**Contact Us**][Contact Us]

### Want the Best of the Wazi Blogs Delivered Directly to your Inbox? ###

First name \*

Last name \*

Business Email Address \*

Phone Number \*

Company Name

Send posts on these projects:

(Check all that apply.)

*  ActiveMQ
 *  Apache
 *  JBoss App Server
 *  CentOS
 *  WildFly
 *  JBoss
 *  MySQL
 *  PostgreSQL
 *  Tomcat

*  Contact me to Discuss OpenLogic Support Pricing?

###  ###

--------------------

### **[Enterprise Developer Support 24 x 7 for Apache, CentOS, Tomcat, PostSQL and more. Get a Support Quote by clicking here!][Enterprise Developer Support 24 x 7 for Apache_ CentOS_ Tomcat_ PostSQL and more. Get a Support Quote by clicking here]** ###

--------------------

### Subscribe to Wazi by Email ###

Your email:

### Latest Posts ###

*  [More GDB tips and tricks][]
 *  [An introduction to systemd for CentOS 7][]
 *  [Sharing documents and calendars from ownCloud][]
 *  [Modify web content with Apache's mod\_substitute and mod\_headers][Modify web content with Apache_s mod_substitute and mod_headers]
 *  [How to set up a highly available Apache cluster using Heartbeat][]
 *  [How to create a marketing campaign using SugarCRM][]
 *  [Net-SNMP installation and configuration][]
 *  [Allow students to upload assignment files in Moodle][]
 *  [Create forms easily with Drupal's Webform module][Create forms easily with Drupal_s Webform module]
 *  [Use ModSecurity to protect web applications against zero-day exploits][]

### Connect with Us! ###

#  #

[Current Articles][Wazi Technical Blog] | [![RSS Feed][]][RSS Feed 1] [RSS Feed][RSS Feed 1]

### How to Develop an Effective Backup Policy ###

Posted by  [Anatoliy A. Dimitrov][] on Fri, Feb 03, 2012

[![Email This][] Email Article][Email This_Email Article]

[Tweet][]

in**Share**

Can we all agree that bulletproof backups are essential for all businesses? For serious backup administration, you have to write a documented backup policy that facilitates reliable backups being created and tested – and then enforce it. Here's how to create a backup policy that's right for your organization.

A Google search will turn up several [example][] [backup][] [policies][]. Notice how short and practical they are. This is essential to every backup policy – it has to be focused, with clear instructions and definitions. Backup policies are not standardized, but all of them have to address the following issues, not necessarily in this order:

### What to Back Up ###

Backups should contain only otherwise unobtainable data files. You can skip temporary and cache files because they don't contain essential data or can be easily recreated. You can usually ignore non-configuration system files unless the server installation is very specific and would require too much time to reinstall from scratch.

Because it's not always easy to differentiate which files are custom, sometimes it's easier to back up whole systems. Many popular backup solutions, especially in virtualization, offer exactly such functionality. The biggest benefit is such solutions is that they let you restore entire servers in the shortest time possible and with as little confusion as possible. However, they are usually proprietary and non-transparent, limiting you to what the software designers think your needs are.

### How to Back Up ###

A typical backup policy will involve three types of backups. **Full backups** contain all the information needed to restore a service. Naturally, they require the most resources and take the longest time to run, which means you won't want to run full backups every time you want to save data. **Differential backups** contain the cumulative changes since the last full backup. Such backups can be performed more frequently because they take less resources and time. Restoring information from differential backups, however, requires more time, because you must work with both the target differential backup and the most recent full backup. **Incremental backups** are similar to differential backups, except that they reflect only the changes since the previous differential backup; they don't compare with the original full backup directly, so they demand even less resources to create, but take more time and resources to restore.

What's the best mix of full, differential, and incremental backups? The answer differs for every business, depending on several factors, including budget. **Restore time**, for instance, plays a key role in determining backup policy. The shorter the restore time your business needs, the more you need your backups in a form closest to the original and in an easily accessible location. Another factor to consider is your **backup window**, which is the time your data is available to be backed up.

### When to Schedule Backups ###

The backup process uses CPU, memory, and network resources, along with disk I/O operations. Because of this detrimental effect on a server's performance, backups should be scheduled for less busy hours, such as after midnight. In case of a 24/7 business, you can decrease the impact on a server's performance by performing incremental backups more frequently and thus avoiding a long backup window.

When scheduling backups, also consider the possible data loss from files not saved since the last successful backup. When you cannot afford any data loss, you can implement more advanced solutions that provide near-real-time backing up, or use mirroring for constant backup.

### Ensure Backup Security, Reliability, and Availability ###

You cannot take chances with backups, and you have to consider every possible point of failure. Common backup design flaws are connected with:

*   *  Physical storage – Ensure that your backup media are in a different physical location from the main site. This will protect them from natural disasters and physical theft. In the best case, the backup media should be present only during the backup and restore processes; immediately after that they should be returned to a safe location.

*   *  Encryption – All backups should be considered by default to contain sensitive information and thus require encryption. If an unencrypted backup were to fall into the wrong hands, the information it held could be retrieved and could cause serious damages. If your backup application doesn't provide encryption on the fly, you can encrypt the backup media. [Truecrypt][] is a popular and reliable application that implements a combination of strong encryption algorithms on any media.

*   *  Online security – If you are security-paranoid, you know that nothing connected to the network is secure. Given that, you can see why a login ID with access to the main site should not have access to the backup site too. An intruder who has stolen such a login could then compromise your backups. To make access even harder, backup media should be stored offline.

### How to Perform Specific Service Backups ###

So far we've covered the basic questions and concerns that you have to address in every backup policy. However, backup policies should also answer more specific problems for your environment, in order to avoid frivolous interpretation and unexpected behavior. Let's take for example database backups.

Database backups are trickier than simple file backups because database files are more complex than those in a filesystem, and more frequently updated. Just copying a database's data directory almost certainly would result in serious problems with the data integrity when trying to restore it. Let's look at [MySQL][], a typical open source database, as an example.

[![Get an Open Source Support Quote][]][Get an Open Source Support Quote 1]

You could dump the contents of a MySQL database with standard utilities like `mysqldump`, but these usually requires a lot of system resources and locking of tables. This usually means downtime unless you have set up [MySQL replication][]. Without replication or [binary logging][], any information that changes in the time between backups is unrecoverable.

Specific application-level backups can be complex and tedious, and can significantly increases the risk of failures and incorrect backups. That's why in more complex environments it's better to create whole server backups containing everything from the server's operating system to the database service. If you're running in a virtual environment, such backups are easy to create with system snapshots and through the use of third-party applications such as [VMProtect][] for VMware.

### How to Test and Verify Backups ###

The last and most neglected point in every backup policy is backup verification. At some sites, backups are created but not verified and thus unreliable. Whether it is a MySQL dump with corrupted encoding or a forgotten independent VMware image, there is always a chance that something may go terribly wrong.

The only way to prevent disasters with backups is to test them regularly – each month or even more frequently – in order to ensure that your data restores properly and within the allowed timeframe. That's why your backup policy should clearly state who should verify the backups and when.

Backups are important to every business, but they are expensive in terms of human and system resources. That's why their planning and implementation is an important process for IT managers. Good managers test their backups regularly, while bad ones test them only during disasters.

[Follow @openlogic][Follow _openlogic]  
[Follow @CloudSwing][Follow _CloudSwing]   
  
This work is licensed under a  [Creative Commons Attribution 3.0 Unported License][]  
[![Creative Commons License][]][Creative Commons Attribution 3.0 Unported License]. [Follow @openlogic][Follow _openlogic]  
[Follow @OSCloudServices][Follow _OSCloudServices]  
  
This work is licensed under a  [Creative Commons Attribution 3.0 Unported License][]  
[![Creative Commons License][]][Creative Commons Attribution 3.0 Unported License].

Tags: [MySQL][MySQL 1], [Technical][]

注：近期参加MySQL运维学习，老师推荐该文章作为学习和技术提高的扩展阅读，先记录到自己的博客中，随后慢慢消化、学习、提高。本文章与“备份恢复”主题相关

[Home]: http://www.openlogic.com/
[Search]: http://www.openlogic.com/search/
[Products and Support]: http://www.openlogic.com/products/
[Services]: http://www.openlogic.com/solutions/
[Open Source Training]: http://www.openlogic.com/products/open-source-training/
[Enterprise OSS Blog]: http://www.openlogic.com/blog/
[Wazi Technical Blog]: http://www.openlogic.com/wazi/
[About Wazi]: http://www.openlogic.com/wazi/about-wazi/
[Attributions and Licensing]: http://www.openlogic.com/wazi/attributions-and-licensing/
[Supply Chain Compliance]: http://www.openlogic.com/wazi/supply-chain-compliance/
[How to Contribute]: http://www.openlogic.com/wazi/how-to-contribute/
[Contributors]: http://www.openlogic.com/wazi/contributors/
[Resources Library]: http://www.openlogic.com/resources-library/
[Community]: http://www.openlogic.com/community/
[Company]: http://www.openlogic.com/company/
[Contact Us]: http://www.openlogic.com/company/contact/
[Enterprise Developer Support 24 x 7 for Apache_ CentOS_ Tomcat_ PostSQL and more. Get a Support Quote by clicking here]: http://www.openlogic.com/products/support/
[More GDB tips and tricks]: http://www.openlogic.com/wazi/bid/351471/More-GDB-tips-and-tricks
[An introduction to systemd for CentOS 7]: http://www.openlogic.com/wazi/bid/351296/An-introduction-to-systemd-for-CentOS-7
[Sharing documents and calendars from ownCloud]: http://www.openlogic.com/wazi/bid/351362/Sharing-documents-and-calendars-from-ownCloud
[Modify web content with Apache_s mod_substitute and mod_headers]: http://www.openlogic.com/wazi/bid/351267/Modify-web-content-with-Apache-s-mod_substitute-and-mod_headers
[How to set up a highly available Apache cluster using Heartbeat]: http://www.openlogic.com/wazi/bid/350999/How-to-set-up-a-highly-available-Apache-cluster-using-Heartbeat
[How to create a marketing campaign using SugarCRM]: http://www.openlogic.com/wazi/bid/350806/How-to-create-a-marketing-campaign-using-SugarCRM
[Net-SNMP installation and configuration]: http://www.openlogic.com/wazi/bid/349910/Net-SNMP-installation-and-configuration
[Allow students to upload assignment files in Moodle]: http://www.openlogic.com/wazi/bid/349628/Allow-students-to-upload-assignment-files-in-Moodle
[Create forms easily with Drupal_s Webform module]: http://www.openlogic.com/wazi/bid/348914/Create-forms-easily-with-Drupal-s-Webform-module
[Use ModSecurity to protect web applications against zero-day exploits]: http://www.openlogic.com/wazi/bid/348460/Use-ModSecurity-to-protect-web-applications-against-zero-day-exploits
[RSS Feed]: /images/20220810/2f70ee5d543746c89e53fe458c01b01c.png
[RSS Feed 1]: http://feeds.feedburner.com/openlogic/wazi
[Anatoliy A. Dimitrov]: http://www.openlogic.com/wazi/?Author=Anatoliy+A.+Dimitrov
[Email This]: /images/20220810/85c5ff562786474180c561aff2dc3a9b.png
[Email This_Email Article]: http://www.openlogic.com/wazi/bid/188047/How-to-Develop-an-Effective-Backup-Policy#emart-form-anchor
[Tweet]: http://twitter.com/share
[example]: http://www.comptechdoc.org/independent/security/policies/backup-policy.html
[backup]: http://dept.wofford.edu/it/Data%20Backup%20Policy.pdf
[policies]: http://www.osuit.edu/campus_community/cis/files/backup_policy.pdf
[Truecrypt]: http://www.truecrypt.org/
[MySQL]: http://olex.openlogic.com/packages/mysql
[Get an Open Source Support Quote]: /images/20220810/d58dcaba57ff48a0b185acf3ece8f4e0.png
[Get an Open Source Support Quote 1]: http://cta-service-cms2.hubspot.com/cs/c/?&cta_guid=19a98812-f823-48dc-841e-bf029c63c6d7&placement_guid=204e2db6-1cd0-462a-83b1-51939e2e62ee&portal_id=172122&redirect_url=b9u5SYlIt%2BkYInlRC7eN8Cf1DhJk760Xvl1RJKxjikE35v%2BBCBIMJSz%2B0g3B63ZQ%2B3g8zUUn7MZHJOAdWi4GS2XkvGXACxYk&iv=ThmIocjBKYo%3D&hsutk=d50121fb9bffa9245dcc28132a280a8e&utm_referrer=http%3A%2F%2Fwww.openlogic.com%2Fwazi%2Fbid%2F188047%2FHow-to-Develop-an-Effective-Backup-Policy&canon=
[MySQL replication]: http://olex.openlogic.com/wazi/2011/use-mysql-replication-like-an-expert-to-improve-performance-and-enhance-availability/
[binary logging]: http://dev.mysql.com/doc/refman/5.1/en/binary-log.html
[VMProtect]: http://www.acronis.com/enterprise/products/vmprotect/
[Follow _openlogic]: https://twitter.com/openlogic
[Follow _CloudSwing]: https://twitter.com/CloudSwing
[Creative Commons Attribution 3.0 Unported License]: http://creativecommons.org/licenses/by/3.0/
[Creative Commons License]: /images/20220810/5759b4bb913d4023aedf3287a5de2069.png
[Follow _OSCloudServices]: https://twitter.com/OSCloudServices
[MySQL 1]: http://www.openlogic.com/wazi/?Tag=MySQL
[Technical]: http://www.openlogic.com/wazi/?Tag=Technical