Moving a PBS backup to tape: why and how

Tape has an outdated image, and that is a misunderstanding. For long-term archiving and for the offline copy that survives ransomware, it remains one of the most rational media on the market. Proxmox Backup Server can write directly to LTO tape. This guide explains why you would move a PBS backup to tape, and what to decide before you start.

Why tape, still today

Three concrete reasons, not nostalgia.

• Air gap against ransomware. A tape ejected from the drive and stored in a cabinet is physically disconnected. No attacker encrypts an unplugged tape. It is the copy of last resort when the rest of the infrastructure, including online backups, has been compromised.
• Cost per terabyte over time. For cold data you must keep for years, tape storage cost stays very low compared with disk or cloud, especially at large capacity.
• Long retention and compliance. Some obligations require keeping data for several years. Tape, write-once once written (WORM), fits this need for an immutable archive well.

What Proxmox Backup Server brings

PBS is not just a disk repository. It integrates tape backup natively: you define media pools, backup sets, and you write your already-deduplicated and encrypted data to an LTO drive or library. Encryption is end to end: a lost or stolen tape stays unreadable without the key. And PBS verifies the integrity of what it writes, which avoids the nasty surprise of a corrupt archive on restore day.

The logic is simple: your Proxmox VMs back up to the PBS datastore daily, and you periodically move to tape the sets you want to archive or take off site.

The decisions to make

The technology is the easy part. The real decisions are organisational:

• What retention on tape? Monthly, quarterly, yearly. It depends on your obligations and how the data’s value changes over time.
• How often do you offload? Tape is not meant to replace the daily online backup, but to complement it for archiving and air gap.
• What physical rotation? How many tapes in circulation, who takes them off site, where they are stored, and with what traceability.
• Is the restore tested? A tape archive you have never read back is not a backup, it is a hope. Measure the restore time from tape, it is longer than from disk.

Tape’s place in a 3-2-1 strategy

Tape is not a strategy on its own. It is a building block in a 3-2-1 approach: three copies, on two different media, one of them off site. In that scheme, tape plays the offline and off-site copy, the PBS disk the fast-to-restore backup, and a cloud offload the remote copy that is immediately available.

Where it gets hard

An LTO library, a tape rotation and a documented retention can be managed, but it takes hardware, discipline and time. Many teams want the guarantee of a tested off-site copy without running a tape mechanism themselves.

That is what Cloud-PBS, our off-site Proxmox backup, covers: off-site, encrypted, verified PBS backups with tested restore, operated for you. Depending on your need for long retention and air gap, tape complements this setup rather than replacing it. If you also run a managed Proxmox cluster, the whole forms a coherent chain: managed operations on one side, off-site backup and archive on the other.