VPS for Backup Server: Secure Offsite Data Protection
The 3-2-1 backup rule demands an offsite copy. An AnubizHost VPS serves as your offsite backup destination — geographically separate from your production servers, with large storage volumes, encrypted transport, and retention policies you control completely. Stop relying on cloud storage pricing that explodes at scale.
Need this done for your project?
We implement, you ship. Async, documented, done in days.
Why Use a VPS for Backups
Cloud backup services like AWS S3 or Backblaze B2 charge per GB stored and per GB transferred. For databases and file systems measured in terabytes, monthly costs escalate quickly. A VPS with attached storage provides predictable pricing — you pay the same whether you store 100 GB or fill the entire volume.
A VPS also gives you full control over your backup infrastructure. Install your preferred backup software, configure encryption, set retention policies, and manage deduplication — without being locked into a proprietary backup vendor's ecosystem.
AnubizHost offshore VPS adds geographic diversity to your backup strategy. If your production servers are in one region, placing your backup VPS in a different offshore location protects against regional disasters, data center fires, and jurisdiction-specific seizure orders.
Backup Software and Strategies
Restic is our top recommendation for VPS-based backups. It provides encrypted, deduplicated, incremental backups that minimize storage usage and transfer time. Back up to the VPS over SFTP or REST server, and restore individual files or entire snapshots with a single command.
BorgBackup offers similar features with excellent compression ratios (LZ4 or ZSTD). Its append-only mode protects backup archives from ransomware on the source server — even if an attacker compromises your production server, they cannot delete or encrypt your Borg backups on the VPS.
rsync remains the simplest option for file-level backups. Pair it with --link-dest for space-efficient incremental snapshots, or use rsnapshot for automated rotation with daily, weekly, and monthly retention tiers. For databases, schedule pg_dump or mysqldump before the rsync run.
Encryption and Security
Backups contain your most sensitive data — databases, configs, credentials, user files. Every byte should be encrypted before it leaves your production server. Restic and BorgBackup encrypt client-side by default, meaning your AnubizHost VPS stores only ciphertext. Even with physical access to the storage, the data is unreadable without your passphrase.
Restrict VPS access to SSH key authentication only — disable password login entirely. Create a dedicated backup user with limited permissions: write access to the backup directory, no sudo, no shell access. This minimizes the blast radius if a backup credential is compromised.
For additional protection, configure your backup VPS firewall to accept connections only from your production server's IP addresses. This prevents unauthorized access even if an SSH key leaks. AnubizHost's firewall manager makes this a one-click configuration.
Set Up Your Backup VPS
Backups are storage-heavy but CPU-light. Our 2 vCPU / 2 GB plan with a large storage volume is perfect for most backup workloads. Size your storage at 2-3x your source data to accommodate retention and deduplication overhead.
Deploy a minimal Linux installation, install your backup software, configure SSH keys and firewall rules, and schedule your backup cron jobs. The first backup is a full transfer; subsequent backups are incremental and complete in minutes.
Test your restores regularly — a backup you cannot restore is not a backup. AnubizHost VPS lets you spin up a temporary instance, restore your backup to it, and verify data integrity. With our snapshot functionality, you can test restores without affecting the backup VPS itself. Protect your data with AnubizHost.
Why Anubiz Labs
Ready to get started?
Skip the research. Tell us what you need, and we'll scope it, implement it, and hand it back — fully documented and production-ready.