QNAP Hybrid Backup Sync

What is QNAP Hybrid Backup Sync?

QNAP Hybrid Backup Sync (HBS 3) is a comprehensive backup solution that centralizes backups from multiple sources to multiple destinations. The application supports the 3-2-1-1-0 strategy, including innovative air-gap backup protecting against ransomware.

Key Features:

• Single tool - backup, sync, and restore in one place
• Multi-destination - locally, remotely, to cloud
• Air-gap - physical backup isolation
• No additional costs - included with every QNAP NAS

Backup 3-2-1-1-0 Strategy

Definition

3-2-1-1-0 Backup Rule:

3 - Three copies of data (original + 2 copies)
2 - On two different media (NAS + cloud)
1 - One copy offsite (different location)
1 - One air-gap copy (offline)
0 - Zero errors in verification

Implementation with HBS 3

[Source Data]
     |
     +-- [Copy 1] Local NAS (RAID)
     |
     +-- [Copy 2] Remote NAS (replication)
     |
     +-- [Copy 3] Cloud (AWS S3)
     |
     +-- [Air-gap] USB disk (offline)

Backup Functions

Data Sources

Supported sources:

Source	Protocol
Windows	SMB/Agent
macOS	SMB/Time Machine
Linux	rsync/SMB
Hyper-V	VSS
NAS Servers	rsync/RTRR
Microsoft 365	API (Boxafe)
Google Workspace	API (Boxafe)

Backup Destinations

Local:

• Folder on NAS
• External USB disk
• Expansion unit (JBOD)
• Second volume

Remote:

• Another QNAP NAS (RTRR)
• rsync server
• FTP/SFTP server
• WebDAV

Cloud:

[Supported Clouds]
     |
     +-- Amazon S3 / Glacier
     +-- Microsoft Azure Blob
     +-- Google Cloud Storage
     +-- Backblaze B2
     +-- Wasabi
     +-- IBM Cloud
     +-- OpenStack Swift
     +-- S3-compatible (MinIO, etc.)

Backup Types

Full backup:

• Complete copy of all data
• Long time, large space
• Fastest restore

Incremental backup:

• Only changed data since last backup
• Fast, economical
• Restore requires chain

Deduplication:

• Block-level duplicate elimination
• Savings up to 50-70% space
• Inline processing

Air-gap Backup (Airgap+)

Concept

Air-gap backup creates a physically isolated data copy that is resistant to ransomware and cyberattacks. The disk is connected only during backup creation/verification.

Architecture with QHora

[QNAP NAS] <-- USB --> [Airgap Disk]
     ^
     |
[QHora-321/322 Router]
     |
     +-- USB connection control
     +-- Air-gap schedule
     +-- Automatic disconnect

Workflow

1. Schedule - Airgap+ enables USB port at scheduled time
2. Backup - HBS 3 performs backup to USB disk
3. Verification - Integrity check
4. Isolation - USB port is disabled
5. Report - Status notification

Advantages

• Ransomware protection - offline = inaccessible to malware
• Automation - no manual disk connection
• Compliance - meets regulatory requirements
• Simplicity - integrated with HBS 3

Boxafe - SaaS Backup

Microsoft 365

Supported services:

• Exchange Online (mail, calendar, contacts)
• OneDrive for Business
• SharePoint Online
• Teams (messages, files)

Functions:

[Boxafe for Microsoft 365]
     |
     +-- Automatic backup (schedule)
     +-- Granular restore (individual emails)
     +-- Point-in-time recovery
     +-- eDiscovery search
     +-- Retention policies

Google Workspace

Supported services:

• Gmail
• Google Drive
• Google Calendar
• Google Contacts
• Shared Drives

Boxafe Licensing

• License per user
• One-time purchase
• No storage limit (NAS limited)
• No monthly fees

Synchronization

Sync Modes

One-way sync:

• Source → Destination
• Mirror mode
• Backup-like behavior

Two-way sync:

• Bidirectional
• Conflict resolution
• Real-time or scheduled

Qsync - Enterprise Dropbox

Functions:

• Synchronization between devices
• File versioning
• Selective sync
• Offline access
• Team folders

Clients:

• Windows
• macOS
• iOS
• Android
• Web browser

Monitoring and Reporting

Dashboard

• All job status
• Execution history
• Space utilization
• Alerts and warnings

Notifications

Channels:

• Email
• Push (mobile app)
• SMS (via integration)
• Webhook

Reports

• Daily/weekly report
• Backup statistics
• Utilization trends
• Export to PDF/CSV

Disaster Recovery

Restore Scenarios

Full restore:

• Entire volume restoration
• Bare-metal recovery
• After hardware failure

Granular restore:

• Individual files/folders
• Specific version
• Self-service portal

VM restore:

• Instant VM recovery
• Restore to alternative host
• Test startup

RTO/RPO

Scenario	RPO	RTO
Local NAS	15 min	1-4h
Remote NAS	1h	4-8h
Cloud	24h	8-24h
Air-gap	24h	24-48h

Use Cases

Multi-branch Company

Scenario: 5 branches, backup to headquarters.

Solution:

[Branch 1-5: QNAP NAS]
         |
         | RTRR (encrypted)
         v
[Headquarters: QNAP NAS Enterprise]
         |
         +-- AWS S3 Glacier (archive)
         +-- Airgap+ (air-gap)

Microsoft 365 Backup

Scenario: 200 Microsoft 365 users.

Solution:

• QNAP TS-873A with Boxafe
• Exchange, OneDrive, SharePoint backup
• 7-year retention
• Granular restore for IT

Ransomware Protection

Scenario: Company after attack wants better protection.

Solution:

• Immutable snapshots
• Air-gap backup every 24h
• Replication to second DC
• Regular restore tests

Deployment with nFlo

Stages

1. Analysis

   • Data inventory
   • RPO/RTO determination
   • Strategy selection

2. Design

   • Backup architecture
   • Schedules
   • Retention

3. Implementation

   • HBS 3 configuration
   • Airgap+ configuration
   • Cloud integration

4. Testing

   • Backup tests
   • Restore tests
   • DR documentation

5. Training and Support

   • Operator training
   • DR procedures
   • Monitoring