Skip to content

Nuface Blog

้šจๆ„้šจๆ‰‹่จ˜ Casual Notes

Menu
  • Home
  • About
  • Services
  • Blog
  • Contact
  • Privacy Policy
  • Login
Menu

Proxmox Backup Server Architecture and Remote Disaster Recovery Strategy

Posted on 2025-10-312025-10-31 by Rico

๐Ÿ”ฐ Introduction

In a modern enterprise virtualization environment, backup and disaster recovery (DR) are the final line of defense to ensure system resilience and data protection.

Beyond virtualization and high availability, Proxmox VE also provides a powerful native backup solution โ€”
the Proxmox Backup Server (PBS).

This article explains:
1๏ธโƒฃ The architecture and principles of PBS
2๏ธโƒฃ How to integrate it with Proxmox VE
3๏ธโƒฃ Best practices for remote replication and off-site disaster recovery


๐Ÿงฉ 1. What Is Proxmox Backup Server?

Proxmox Backup Server (PBS) is an open-source backup platform designed specifically for Proxmox virtualized environments.
Unlike traditional backup tools, PBS offers:

  • Native backup integration for VMs and LXC containers
  • Zstandard (ZSTD) compression and chunk-based deduplication
  • Incremental backup and version retention
  • AES-256-GCM encryption
  • Built-in remote sync and replication

Itโ€™s effectively a dedicated backup and restore engine built to work seamlessly within the Proxmox ecosystem.


๐Ÿงฑ System Architecture

         โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”
         โ”‚      Proxmox VE Cluster     โ”‚
         โ”‚   (VM / CT / Config Data)   โ”‚
         โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜
                        โ”‚
               Encrypted Backup Stream
                        โ”‚
        โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”
        โ”‚     Proxmox Backup Server (PBS) โ”‚
        โ”‚   โ”œโ”€โ”€ Datastore (ZFS / EXT4)   โ”‚
        โ”‚   โ”œโ”€โ”€ Deduplication Engine     โ”‚
        โ”‚   โ”œโ”€โ”€ Index / Chunk Storage    โ”‚
        โ”‚   โ””โ”€โ”€ Verification & Pruning   โ”‚
        โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜
                        โ”‚
              Remote Sync (PBS โ†’ Remote PBS)
                        โ”‚
        โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”
        โ”‚  Offsite Backup Server (DR Site)โ”‚
        โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜

โš™๏ธ 2. Installation and Setup

1๏ธโƒฃ System Requirements

ComponentRecommended Spec
CPUx86_64 with AES-NI support
Memory16 GB or more
StorageSSD or ZFS RAIDZ2 pool
Network1 Gbps minimum; 10 Gbps recommended for replication

2๏ธโƒฃ Installation

Download the latest ISO from:
๐Ÿ‘‰ https://www.proxmox.com/en/downloads

After installation, access the web interface:

https://<PBS-IP>:8007/

Default user: root@pam


3๏ธโƒฃ Create a Datastore

In the Web UI:

  • Navigate to Datastore โ†’ Add
  • Define the storage path (e.g., /backup1)
  • Set retention and verification schedules

CLI example:

pbs-datastore create backup1 /backup1

๐Ÿง  3. Integrating PBS with Proxmox VE

Step 1 โ€“ Add PBS Storage to Proxmox VE

In Datacenter โ†’ Storage โ†’ Add โ†’ Proxmox Backup Server,
enter the PBS IP, datastore name, and credentials.

CLI method:

pvesh create /storage --storage pbs1 \
--type pbs \
--server 192.168.10.50 \
--datastore backup1 \
--username root@pam

Step 2 โ€“ Schedule Backups

In Datacenter โ†’ Backup โ†’ Add, define:

  • Mode: Snapshot
  • Frequency: Daily or Weekly
  • Target Storage: pbs1
  • Compression: zstd
  • Content: VM / CT / Config

CLI example:

vzdump 101 --mode snapshot --compress zstd --storage pbs1

Step 3 โ€“ Verify Backup Results

Check the logs on the PBS host:

journalctl -u proxmox-backup

Or view Tasks โ†’ Backup Logs in the Web UI.
Successful jobs show TASK OK.


๐Ÿงฉ 4. How PBS Optimizes Backup Performance

Chunk-Based Deduplication

PBS breaks data into small chunks and only stores unique ones.
If identical data exists in previous backups, it references those chunks instead of re-saving them.
This reduces storage usage by 60โ€“80%, even across multiple VMs.

Incremental Backup

Incremental jobs only transfer changed chunks,
making daily backups extremely fast โ€” often completing in just minutes.


๐Ÿ—„๏ธ 5. Remote Replication & Disaster Recovery

Step 1 โ€“ Native PBS Remote Sync

PBS includes a built-in sync-job function that replicates data to a remote site.

Example:

pbs-admin sync-job create dr-sync \
    --source "pbs@pam@192.168.10.50:backup1" \
    --store backup1 \
    --remote 192.168.20.50 \
    --interval 1d

This syncs the datastore daily to an offsite PBS for disaster recovery.


Step 2 โ€“ Network Security

  • All PBS sync traffic is encrypted via TLS
  • Use VPNs (WireGuard / IPsec) for secure remote transport
  • Bandwidth throttling and compression can optimize slow links

Step 3 โ€“ Architecture Example

Primary Datacenter                     DR Site
โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€     โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€
Proxmox VE Cluster             Proxmox Backup Server (DR)
      โ”‚                                   โ”‚
      โ–ผ                                   โ–ผ
Proxmox Backup Server โ”€โ”€โ”€โ–ถ PBS Sync โ”€โ”€โ”€โ–ถ Remote PBS
 (Primary Storage)            (Incremental Replication)

๐Ÿงฐ 6. Verification and Recovery

1๏ธโƒฃ Restore a VM

From the Proxmox VE interface:

  • Select the VM โ†’ Restore
  • Choose the backup version stored in PBS
  • Define the target node and disk format

2๏ธโƒฃ Offsite Recovery

If the primary site fails:

  • Deploy a new Proxmox VE host at the DR site
  • Connect it to the remote PBS
  • Restore selected VMs from replicated backups

๐Ÿ’ก A 1 TB VM can typically be restored in under 30 minutes, depending on bandwidth and compression ratio.


๐Ÿง  7. Best Practices

CategoryRecommendation
StorageUse ZFS with compression and checksum enabled.
Backup FrequencyDaily incremental + weekly full backup.
VerificationSchedule periodic โ€œVerifyโ€ jobs to validate integrity.
Remote SyncRun PBS sync daily to DR site.
SecurityEnable encryption keys and store them offline.

โœ… Conclusion

Proxmox Backup Server (PBS) is more than just a backup tool โ€”
itโ€™s a complete data protection and disaster recovery solution for Proxmox environments.

With deduplication, incremental backup, and remote synchronization,
PBS delivers enterprise-grade reliability and efficiency using open-source technology.

๐Ÿ’ฌ In the next article, weโ€™ll explore
โ€œProxmox + Ceph Integration and Distributed Storage Deploymentโ€,
to build a highly scalable, fault-tolerant virtualization infrastructure.

Recent Posts

  • Postfix + Letโ€™s Encrypt + BIND9 + DANE Fully Automated TLSA Update Guide
  • Postfix + Letโ€™s Encrypt + BIND9 + DANE TLSA ๆŒ‡็ด‹่‡ชๅ‹•ๆ›ดๆ–ฐๅฎŒๆ•ดๆ•™ๅญธ
  • Deploying DANE in Postfix
  • ๅฆ‚ไฝ•ๅœจ Postfix ไธญ้ƒจ็ฝฒ DANE
  • DANE: DNSSEC-Based TLS Protection

Recent Comments

  1. Building a Complete Enterprise-Grade Mail System (Overview) - Nuface Blog on High Availability Architecture, Failover, GeoDNS, Monitoring, and Email Abuse Automation (SOAR)
  2. Building a Complete Enterprise-Grade Mail System (Overview) - Nuface Blog on MariaDB + PostfixAdmin: The Core of Virtual Domain & Mailbox Management
  3. Building a Complete Enterprise-Grade Mail System (Overview) - Nuface Blog on Daily Operations, Monitoring, and Performance Tuning for an Enterprise Mail System
  4. Building a Complete Enterprise-Grade Mail System (Overview) - Nuface Blog on Final Chapter: Complete Troubleshooting Guide & Frequently Asked Questions (FAQ)
  5. Building a Complete Enterprise-Grade Mail System (Overview) - Nuface Blog on Network Architecture, DNS Configuration, TLS Design, and Postfix/Dovecot SNI Explained

Archives

  • December 2025
  • November 2025
  • October 2025

Categories

  • AI
  • Apache
  • Cybersecurity
  • Database
  • DNS
  • Docker
  • Fail2Ban
  • FileSystem
  • Firewall
  • Linux
  • LLM
  • Mail
  • N8N
  • OpenLdap
  • OPNsense
  • PHP
  • QoS
  • Samba
  • Switch
  • Virtualization
  • VPN
  • WordPress
© 2025 Nuface Blog | Powered by Superbs Personal Blog theme