The 3-2-1-1-0 Backup Rule: Configuring Immutable Storage with Veeam
The traditional 3-2-1 rule is dead. Modern protection requires the 3-2-1-1-0 rule: 3 copies, 2 media, 1 offsite, 1 immutable, and 0 errors.
What is Immutability?
Immutability leverages the 'chattr +i' attribute in Linux filesystems (XFS). Once written, the backup file cannot be modified or deleted by ANY user, including root, until a retention timer expires.
Implementing with Veeam v12
You don't need expensive appliances. A standard Dell PowerEdge R750xd running Ubuntu LTS can act as a Hardened Repository. Veeam uses single-use credentials to write data, ensuring the backup server never stores root access to the repository.