Regula 3-2-1 explicata
3 copii ale datelor, pe 2 medii diferite, cu 1 copie off-site. Plus extensia 3-2-1-1-0: 1 copie immutable, 0 erori la restore test.
Arhitectura recomandata
- Productie: VM-uri pe VMware/Hyper-V/Proxmox
- Backup primar: Veeam Backup Server cu repository pe NAS/SAN dedicat
- Backup secundar: Hardened Linux repository cu immutability (xfs reflink + chattr +i)
- Off-site: Replicare via WAN Accelerator la datacenter secundar
- Optional cloud: Veeam Cloud Connect sau S3 object lock
Politica backup
- Daily: incremental cu 14 zile retentie
- Weekly: full backup, 8 saptamani retentie
- Monthly: archive, 12 luni retentie
- Yearly: compliance archive, 7 ani
Test restore (cel mai ignorat pas!)
Backup care nu poate fi restored = backup care nu exista. Veeam SureBackup ruleaza automated test recovery lunar intr-un sandbox izolat. Verifica boot + ping + custom scripts.
RTO / RPO
- Critical apps (ERP, DB): RTO 1h, RPO 15min (CDP)
- Important (file server): RTO 4h, RPO 1h
- Standard (intern): RTO 24h, RPO 24h
Ransomware protection
Immutable backups + air-gap (tape sau hardened repo) sunt OBLIGATORII in 2026. Veeam Hardened Repository nu poate fi sters nici de root pentru durata retention.