Disaster Recovery with Veeam: 3-2-1 strategy

3-2-1 rule explained

3 copies of data, on 2 different media, with 1 copy off-site. Plus extension 3-2-1-1-0: 1 immutable copy, 0 errors on restore test.

Recommended architecture

1. Production: VMs on VMware/Hyper-V/Proxmox
2. Primary backup: Veeam Backup Server with NAS/SAN repository
3. Secondary backup: Hardened Linux repository with immutability (xfs reflink + chattr +i)
4. Off-site: WAN Accelerator replication to secondary datacenter
5. Optional cloud: Veeam Cloud Connect or S3 object lock

Test restore (the most ignored step!)

A backup that can't be restored = no backup. Veeam SureBackup runs automated test recovery monthly in isolated sandbox.

Ransomware protection

Immutable backups + air-gap are MANDATORY in 2026. Veeam Hardened Repository can't be deleted even by root for retention duration.