We recently purchased a second (larger) TrueNAS unit running SCALE, to be able to maintain an offsite replica of our onsite Veeam repository also running on a TrueNAS SCALE box. I'm not sure if this is a Veeam question or a TNS question, but here's the idea. I'll call the original box TNS1, and the new replica TNS2.
I would like to maintain an exact replica on TNS2 of the filesystem where the Veeam repository is located on TNS1, but can I leave the CIFS share unconfigured on TNS2 until I might need it for a disaster scenario? My thought is, if the only link between the 2 TNS servers is the private network that replication happens over, and TNS2 is not accessible over the Windows network, the replicated data would be safe. Then if TNS1 is attacked and somehow the data is gone, I would create the CIFS share on TNS2 and present that to Veeam for the restores to begin.
Is this a valid design to mitigate a potential attack that destroys backup data from the Veeam repository?
I would like to maintain an exact replica on TNS2 of the filesystem where the Veeam repository is located on TNS1, but can I leave the CIFS share unconfigured on TNS2 until I might need it for a disaster scenario? My thought is, if the only link between the 2 TNS servers is the private network that replication happens over, and TNS2 is not accessible over the Windows network, the replicated data would be safe. Then if TNS1 is attacked and somehow the data is gone, I would create the CIFS share on TNS2 and present that to Veeam for the restores to begin.
Is this a valid design to mitigate a potential attack that destroys backup data from the Veeam repository?
