Off-site Proxmox backups: cloud and tape

If your Proxmox backups sit in the same building as the servers they protect, you do not have a backup strategy. You have a copy that shares the fate of the original. This article is about the decision to externalise, and the realistic options for doing it.

Why on-site is not enough

A local Proxmox Backup Server is fast and convenient, and it covers the common case: someone deleted a VM, a disk failed, an update went wrong. It does not cover the cases that actually end companies:

• Ransomware. Modern attacks specifically seek out and encrypt backup systems reachable from the network. A backup server on the production LAN is a target, not a safety net.
• Physical loss. Fire, flood, theft, a power event that takes the rack. One location, one failure.
• Insider error or malice. A single administrator account that can reach both production and backups is a single point of failure.

The fix is distance: a copy that is somewhere else, and that the production environment cannot reach on its own.

The 3-2-1 rule, in plain terms

The widely cited rule says: three copies of your data, on two different media, with one copy off-site. It is not dogma, it is a minimum. The off-site copy is the part that survives the scenarios above. Everything else is convenience.

Two ways to externalise

Off-site cloud backup. Your Proxmox Backup Server replicates to a second PBS instance in a different location. Restores are fast over the network, the copy is geographically separate, and with client-side encryption the remote operator never sees your data in clear. This is the modern default for most teams.

Tape. Tape is offline by nature. Once a cartridge is written and removed, no network attack can reach it. For long-term retention, regulatory archival, or a true air-gapped last line of defence, exporting Proxmox Backup Server data to tape still has no equal. It is slower to restore, which is exactly why it is paired with cloud backup rather than replacing it.

The right answer for most organisations is both: off-site cloud backup for fast, recent recovery, and tape for the long-tail, air-gapped archive.

Making it a managed concern

Externalising backups is easy to plan and easy to let slip: replication that silently stops, encryption keys nobody can find, tape rotations that depend on one person remembering. The value is only real if it is operated and verified.

That is what Cloud-PBS provides: managed, off-site Proxmox Backup Server storage, client-side encrypted, with restore testing built in, and the option to externalise further to tape for air-gapped retention. Your Proxmox VE platform stays on Cloud-PVE; your recovery copy lives somewhere safe, and someone makes sure it stays that way. Talk to us about externalising your Proxmox backups.