Help answer threads with 0 replies.
Go Back > Forums > Linux Forums > Linux - Security
User Name
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.


  Search this Thread
Old 07-11-2010, 05:41 PM   #1
Registered: May 2006
Location: Sydney
Distribution: Debian etch, SkoleLinux
Posts: 77

Rep: Reputation: 15
Backup securely with rsync

To copy from production to standby over the internet I use a cron job
rsync -avze 'ssh -p 8022' --exclude-from= ....
My question is: should the cron job run on the production or the standby system.
Root access to the remote system is given by a pass phrase-less ssh key.

Currently I run rsync on the production system. I guess that it is more secure
because the standby needs no ssh login to production.

Running rsync on the standby would use less resources on production. I am concerned that in this case there would be pass phrase-less access from standby to production.

What is your experience?
Old 07-11-2010, 06:44 PM   #2
LQ Guru
Registered: Oct 2003
Location: Bonaire, Leeuwarden
Distribution: Debian /Jessie/Stretch/Sid, Linux Mint DE
Posts: 5,195

Rep: Reputation: 1043Reputation: 1043Reputation: 1043Reputation: 1043Reputation: 1043Reputation: 1043Reputation: 1043Reputation: 1043
I run it on the production system. I believe that the waiting time while transferring the data is relatively large, hence the average increase in system load should be small.

Besides, I think it is safer to make connection to the outside world from within your LAN than the other way around.

Why don't you use the -u switch?

Old 07-12-2010, 05:53 PM   #3
Registered: May 2006
Location: Sydney
Distribution: Debian etch, SkoleLinux
Posts: 77

Original Poster
Rep: Reputation: 15
Thank you jlinkels,
-u switch: rsync does not copy uptodate files even without -u switch.
Not sure, but I think -u affects how rsync decides what is uptodate.

Anyway I want to overwrite files even if soemone on the standby has changed a file.
Old 07-13-2010, 04:53 AM   #4
Senior Member
Registered: Dec 2003
Location: Trondheim, Norway
Distribution: Debian and Ubuntu
Posts: 1,422

Rep: Reputation: 431Reputation: 431Reputation: 431Reputation: 431Reputation: 431

I do it the other way. The production system needs to be exposed to the internet anyway, and with ssh on a non-standard port and keys only, it's fairly secure. Then the standby doesn't need to be exposed to the internet at all. Also, I use rdiff-backup on the standby to keep the old files for a month or so. The idea is that if even if the production system is compromised, it is not possible to destroy the standby.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
rsync - backup czezz Linux - Server 2 05-26-2010 10:18 AM
Backup linux to Window server securely on schedule 18Googol2 Linux - Software 2 07-08-2009 11:42 PM
Using Rsync to Backup FredGSanford Slackware 5 08-30-2008 10:09 PM
Using RSync to backup a secondary off-site backup server pezdspencer Linux - Software 4 06-29-2007 03:40 PM
Using rsync to backup data. Best way to backup folders? Micro420 Linux - General 2 11-23-2006 01:13 AM > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 11:23 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration