6 Steps to Harden ZFS NAS Storage for Zmanda Pro

In this guide, we’ll cover the steps IT Administrators and Storage Engineers can take to configure ZFS NAS storage as a data-resilient backup target with Zmanda Pro. This configuration will provide robust protection against threats such as ransomware. We will focus on hardening the ZFS NAS storage to ensure the backed-up data remains secure and highly resilient.

The steps below highlight the ease of using advanced ZFS capabilities.

Step 1: Setting Up ZFS NAS Storage

Select a Supported NAS or General Purpose OS

1. Choose a Supported Operating System: Ensure your NAS or server is running a supported OS such as FreeBSD, GNU/Linux, or Illumos that is compatible with OpenZFS.

Select Quality Hardware Components

2. Hardware Platform: Use a reliable server or ZFS NAS hardware platform with a quality host bus adapter (HBA) and network adapters.

3. Storage Devices: Choose quality SAS, SATA, or NVMe storage devices. Plan for RAID-Z2 (N+2) parity for distributed parity and robustness.

Configuring the Storage Pool (zpool)

4. Create the Storage Pool:

zpool create -f tank raidz2 /dev/sdX /dev/sdY /dev/sdZ 

This command creates a RAID-Z2 pool named tank with three devices.

Step 2: Configuring ZFS Datasets

Create Datasets for Backups

5. Create a Dataset:
   zfs create tank/backups

Set Dataset Properties for Data Protection

6. Enable Compression:
   zfs set compression=on tank/backups
   
7. Set Read-Only Access:
   zfs set readonly=on tank/backups
   
8. Enable Data Checksums: This is enabled by default in ZFS to ensure data integrity.

Step 3: Implementing Snapshots and Replication

Configure Regular Snapshots

9. Automate Snapshots:

Add the following cron job for hourly snapshots:

0 * * * * /sbin/zfs snapshot tank/backups@hourly-$(date +\%Y-\%m-\%d-\%H)

Replicate Snapshots to Remote Locations

10. Send Snapshots to a Remote Server:

zfs send tank/backups@hourly-$(date +\%Y-\%m-\%d-\%H) | ssh user@remote-server zfs receive remote-tank/backups

Step 4: Implementing Data Immutability and Access Controls

Configure Read-Only and No-Exec Properties

11. Set No-Exec Property:

zfs set exec=off tank/backups

Unmount Datasets When Not in Use

12. Unmount Dataset:

zfs unmount tank/backups

Implement Delegated Administration

13. Delegate ZFS Permissions:

zfs allows users create,destroy,mount tank/backups

Step 5: Configuring Zmanda Pro to Use the ZFS NAS Storage

Add ZFS Dataset as Backup Target in Zmanda Pro

14. Configure Backup Target in Zmanda Pro:

• Go to the User’s account page on the Zmanda Pro console
• Navigate to the Storage Vaults tab
• Click Add New Vault and choose the type of storage: TBD HOW TO ADD ZFS NAS TARGET
• See Zmanda Pro Storage Vault documentation for more information.

Schedule Regular Backups

15. Schedule Backup Jobs:

• Go to the Users page on the Zmanda Pro console.
• Select the User associated with the device you want to back up.
• Under Protected Items, find the item you wish to back up and click Run Backup.
• In the setup wizard, select the Storage Vault you want to use and adjust any other settings as necessary.
• Click Backup to start the backup process.

Learn more about initializing backups in Zmanda Pro.

Step 6: Monitoring and Maintenance

Monitor Snapshot Integrity

16. Monitor Backups

Utilize Zmanda Pro’s reporting and logging capabilities to monitor backup job success.

17. Verify ZFS Snapshots:

zfs list -t snapshotRegularly check the integrity and existence of snapshots.

Regularly Test Restores

18. Test Restore Processes:

• Periodically test restoring data from snapshots to ensure the recovery process works as expected.
• Use Zmanda Pro’s Restore Simulation functionality to validate that backups can be correctly restored from the ZFS dataset.

If you want more information about why ZFS NAS storage is a key component of data resiliency, read this blog post: Understanding ZFS and Its Role in Data Resiliency.

Conclusion

By following these steps, IT Administrators and Storage Engineers can effectively configure ZFS-based NAS storage as a hardened backup target for Zmanda. This setup not only enhances data resiliency but also provides a robust defense against ransomware and other data threats. Leveraging ZFS’s advanced features, such as snapshots, replication, and data immutability, alongside Zmanda’s powerful backup capabilities, ensures that your enterprise data remains secure, recoverable, and resilient in the face of evolving digital threats.

You can also talk to a data protection expert to get a free 30-minute consultation or book a demo to get a complete walk-through of the product.

About Zmanda Pro

Zmanda Pro is a comprehensive, reliable, and scalable option for large enterprises and SMBs. Zmanda offers advanced backup and recovery services that include disaster recovery and continuous backup capabilities.

Zmanda Pro is based on an open-source Restic framework, our solutions integrate effortlessly with cloud platforms such as OpenShift, OpenStack, Kubernetes, and Red Hat OpenStack Platform. Check out our compatibility matrix to figure out the workloads we support.

Want to see Zmanda Pro in action? Start your free trial today.