The 3-2-1 Backup Rule for Self-Hosted Servers
The 3-2-1 backup rule is not enterprise theater. Here is how to apply three copies, two media, one offsite to a self-hosted VPS without buying a storage vendor.
The 3-2-1 backup rule is the shortest sentence in infrastructure that will actually save your business: keep three copies of your data, on two different kinds of storage, with one copy offsite. It predates the cloud, it survives the cloud, and it applies just as cleanly to a self-hosted VPS as it did to a tape library. I run about twenty companies on my own boxes, and every one of them follows this rule, because the day a server dies is the day you find out whether you believed in it.
What does 3-2-1 actually mean for a VPS?
Break it into its three numbers and it stops being a slogan.
Three copies means the live data plus two backups. Not the live data plus one backup you rotate over. Two, so that if one backup is corrupt you still have another.
Two media means two different failure domains. On a VPS this is not literally two kinds of disk. It means the backup does not share fate with the thing it backs up. A backup sitting on the same server is not a second medium, it is the same medium waiting to die together.
One offsite means one copy lives somewhere the primary datacenter catching fire cannot touch. Different provider, different region, different account. This is the copy that saves you from the disasters that take out the whole building, not just the whole disk.
Where the naive setup breaks
The most common self-hosted backup is a nightly dump written to the same server. That is one copy, one medium, zero offsite. It protects you against exactly one thing: deleting a row by accident. It protects you against nothing else. Disk failure, a ransomware event, a fat-fingered rm, a provider suspending your account, any of those takes the server and the backup in one stroke.
The second most common setup is a nightly dump copied to object storage and never checked again. Better, but if you never verify it, you have a copy you cannot trust, which is the subject of a whole separate discipline in testing your backups with restore drills. Copies you cannot restore do not count toward your three.
How I apply 3-2-1 across the portfolio
Here is the concrete shape, and none of it requires a backup vendor.
- Copy one: the live database and files on the production box.
- Copy two: an automated snapshot on separate storage, taken on a schedule that matches how much data I am willing to lose.
- Copy three: an offsite push to object storage in a different provider and region.
For the offsite leg I use object storage I control rather than a managed backup service, so I am never locked into someone else's format or pricing. The push is encrypted before it leaves the box, so the offsite provider stores ciphertext and never sees my data. Encryption is what makes "offsite on someone else's disk" safe.
The two-media requirement is satisfied because the snapshot storage and the object storage fail independently. The datacenter losing power does not touch the offsite copy. My account getting flagged on one provider does not touch the copy on the other. That independence is the entire value of the rule.
The offsite copy is the one people skip, and the one that matters
Most people get to two copies and stop. The offsite copy feels like paranoia until the day you need it, and then it is the only thing standing between you and starting over. Whole-region outages happen. Provider account suspensions happen, sometimes over a billing glitch you did not cause. The offsite copy is your escape hatch, and it is cheap: cold object storage costs a few dollars a month for volumes that would matter to a small company.
This is the same reasoning behind wanting servers that cannot be held hostage. Ownership is not just about the primary box. It is about making sure no single party, including your own hosting provider, can take your data away and leave you with nothing.
I run all of this on plain VPS boxes through HostSSH, scripted and scheduled so the three copies happen without me thinking about them. The rule is old because it is right. Three copies, two media, one offsite. Set it up before you need it, because after you need it is too late.