DailyGlimpse

Production Backup Strategy: 3-2-1 Rule, Object Lock, and Restic with S3

Business
May 16, 2026 · 3:00 PM

In professional IT environments, a solid backup strategy is non-negotiable. This lesson covers the industry-standard 3-2-1 rule: maintain at least three copies of your data, on two different media types, with one copy stored off-site. For added ransomware protection, an immutable copy is recommended.

We compare popular backup tools—Restic, Borg, and rsnapshot—using a decision matrix to help you choose based on your needs. The focus then shifts to a production-ready Restic setup: configure an S3 bucket with Object Lock enabled, automate backups with a systemd timer, and implement a retention policy using commands like forget --keep-daily 7 --weekly 4 --monthly 12 --yearly 3. Health checks via healthcheck.io ensure you’re alerted if backups fail.

Finally, we emphasize the importance of regularly testing restores. A backup that hasn’t been restored is no backup at all. Perform quarterly restore drills to validate your strategy and ensure data integrity.