81–90 of 158 posts
I use B2 as the backend for my personal backups using restic (which I would highly recommend https://github.com/restic/restic ). I don't have a ton of data to backup, so even with hourly backups (restic only backs up when there are changes) I have ~100GB and it runs me a whopping $0.60/month. I almost feel guilty when I get the bill. But the minute I need to pick a storage platform in a professional context I know wh…
Earlier quoted context omitted.
It has been a while since I looked but CFs R2 was cheaper than s3 the last I looked, never used it though.
It depends. Cloudflare R2 has unlimited free egress; if you’re using a Cloudflare Worker already and proxying the download, then Backblaze B2 becomes cheaper again because egress is free and unlimited. Here’s my rough pricing notes: https://gist.github.com/Manouchehri/733e6235457e60de24fdbb15... One useful trick is if you’re already using a Cloudflare Worker, you can force cache fetches to Backblaze B2 (or any S3 pro…
https://blog.cloudflare.com/updated-tos/ > Finally, we made it clear that customers can serve video and other large files using the CDN so long as that content is hosted by a Cloudflare service like Stream, Images, or R2.
> Video and large files hosted outside of Cloudflare will still be restricted on our CDN
It is a bit confusing, espec when they only enforce it at super high usage/when it becomes an issue, but makes sense that a Worker isn't a magical free pass when you don't get charged Bandwidth on them either
Earlier quoted context omitted.
For $9/month you would get a lot more features from the backup service. The interesting ones being File Sharing and Extended Version History. So it depends if you want those, as well as a nice web UI. And at 1TB the numbers get closer, at 2TB it becomes cheaper to use the backup service. The main thing for me is legacy. In my will it is a lot easier to explain how to get files from the standard backup plan, rather th…
That’s $9 per computer, not directly comparable to raw storage to use however you want. I get there are ways around this (host a local centralized backup) but that then sort of destroys the turnkey part anyway.
I use B2 as the backend for my personal backups using restic (which I would highly recommend https://github.com/restic/restic ). I don't have a ton of data to backup, so even with hourly backups (restic only backs up when there are changes) I have ~100GB and it runs me a whopping $0.60/month. I almost feel guilty when I get the bill. But the minute I need to pick a storage platform in a professional context I know wh…
For $9/month you would get a lot more features from the backup service. The interesting ones being File Sharing and Extended Version History. So it depends if you want those, as well as a nice web UI. And at 1TB the numbers get closer, at 2TB it becomes cheaper to use the backup service. The main thing for me is legacy. In my will it is a lot easier to explain how to get files from the standard backup plan, rather th…
They generate a public/private key pair for the user. The client gets the public key and the server gets the private key. During backups the data is encrypted on the client with a symmetric key (which I believe is generated on the client). The encrypted data is sent to the server. The symmetric key is encrypted using the public key and also sent to the server.
On a restore they use the private key on the server to decrypt the encrypted symmetric key, use that key to decrypt the backup data, and then make the decrypted files available in a zip file that the user can download. The download is over HTTPS so is encrypted in transit.
If you don't like the idea of them having such access to your private key they do offer an option to add additional protection [1]:
> The user’s private key which is stored safely in our data center is protected by a password that is highly guarded. But for some users this is not good enough and we allow the user to secure this file with their own password. When this is done it is impossible to access the data without the user’s password. Unfortunately, this also means we can’t help the user if they ever forget this password so we don’t recommend it for most users.
If you do that then when you restore you have to enter that password on their site when requesting the restore, so their server can decrypt the private key.
They give some more detail in their "Security Question Round-up!" [2]:
> The answer shows a weak point in the Backblaze system. As you prepare a restore, you must type in your private passphrase into the restore server. This is not written to disk, but held in RAM and for the period of time of decrypting all your files, and they are then stored in "clear text" on our very highly secured servers until they are ZIPPED up and offered to you to be downloaded. At that moment you can download them (by HTTPS only), then you can "delete the restore zip" which means you close the window of time that your files are available in plain text.
> So to recap: if you never actually prepare a restore, we cannot possibly know what is in your files, but if you prepare a restore (let's say of a few files) then for the couple minutes they are being prepared and downloaded they are in "plain text" on a HIGHLY SECURE system in the Backblaze datacenter. At that moment, if a Backblaze employee were malicious enough and dedicated enough and was watching (which is actually pretty hard, we get thousands of restores every day so it would fly by quickly) they could see your filenames appear on the Linux servers right before they are ZIPPED up into a new bundle. A few minutes of exposure.
> We actually want to improve this to provide a password encrypted ZIP file for download, and then the FINAL improvement is to actually allow you to download the private encryption key, download the encrypted files, and provide the pass phrase in the privacy of your computer. We hope to add this functionality in the future.
[1] https://www.backblaze.com/blog/how-to-make-strong-encryption...
[2] https://help.backblaze.com/hc/en-us/articles/217664798-Secur...
Earlier quoted context omitted.
Maybe they moved them again to confirm location was the issue
“All 40 of the Dell servers which make up these two Vaults were relocated to the top of 52U racks, and it appears that initially they did not like their new location. Recent data indicates they are doing much better, and we’ll publish that data soon. ” Italics mine. Seems like they changed something.
Earlier quoted context omitted.
It depends. Cloudflare R2 has unlimited free egress; if you’re using a Cloudflare Worker already and proxying the download, then Backblaze B2 becomes cheaper again because egress is free and unlimited. Here’s my rough pricing notes: https://gist.github.com/Manouchehri/733e6235457e60de24fdbb15... One useful trick is if you’re already using a Cloudflare Worker, you can force cache fetches to Backblaze B2 (or any S3 pro…
My understanding is a worker isn't a way around that, they clarified that all in their blog here: https://blog.cloudflare.com/updated-tos/ > Finally, we made it clear that customers can serve video and other large files using the CDN so long as that content is hosted by a Cloudflare service like Stream, Images, or R2. > Video and large files hosted outside of Cloudflare will still be restricted on our CDN It is a bit…
> we made it clear that customers can serve video and other large files using the CDN so long as that content is hosted by a Cloudflare service like Stream, Images, or R2.
But when I click through to the specific CDN terms it still says:
> Unless you are an Enterprise customer, Cloudflare offers specific Paid Services (e.g., the Developer Platform, Images, and Stream) that you must use in order to serve video and other large files via the CDN.
A plain reading of this would still make me think putting the CDN in front of video files on R2 was forbidden. It is now clear that you can use (the very expensive) Stream to serve video, sure.
I use B2 as the backend for my personal backups using restic (which I would highly recommend https://github.com/restic/restic ). I don't have a ton of data to backup, so even with hourly backups (restic only backs up when there are changes) I have ~100GB and it runs me a whopping $0.60/month. I almost feel guilty when I get the bill. But the minute I need to pick a storage platform in a professional context I know wh…
Same, but with rclone. My bill is <1$/m. Love it.
https://blog.sapico.me/posts/how-i-backup-my-servers/
I'm basically backing up to: /backups/type/{day-of-month} and backups/type/latest every day.
Earlier quoted context omitted.
It supports append only(which is a MUST for backup software) and is declarative.
I a world of 8 billion people, it's important to realize what one considers a "must" is another person's "don't care". I'm one of them.
Earlier quoted context omitted.
My understanding is a worker isn't a way around that, they clarified that all in their blog here: https://blog.cloudflare.com/updated-tos/ > Finally, we made it clear that customers can serve video and other large files using the CDN so long as that content is hosted by a Cloudflare service like Stream, Images, or R2. > Video and large files hosted outside of Cloudflare will still be restricted on our CDN It is a bit…
I continue to be super confused by this. The blog post says, as you quote: > we made it clear that customers can serve video and other large files using the CDN so long as that content is hosted by a Cloudflare service like Stream, Images, or R2. But when I click through to the specific CDN terms it still says: > Unless you are an Enterprise customer, Cloudflare offers specific Paid Services (e.g., the Developer Plat…
> The Cloudflare Developer Platform consists of the following Services: (i) Cloudflare Workers, a Service that permits developers to deploy and run encapsulated versions of their proprietary software source code (each a “Workers Script”) on Cloudflare’s edge servers; (ii) Cloudflare Pages, a JAMstack platform for frontend developers to collaborate and deploy websites; (iii) Cloudflare Queues, a managed message queuing service; (iv) Workers KV, D1, Durable Objects, Vectorize, Hyperdrive, and R2, storage offerings used to serve HTML and non-HTML content...
Key part being the last bit there, they specifically call out products which can be used to serve non-html content as part of the Dev Plat, and Workers is not one of them.
Cloudflare employees in the past have specifically and repeatedly say CDN in front of R2 is fine, but nothing about Workers except really old posts that predate the ToS changes and the blog post.
Earlier quoted context omitted.
For $9/month you would get a lot more features from the backup service. The interesting ones being File Sharing and Extended Version History. So it depends if you want those, as well as a nice web UI. And at 1TB the numbers get closer, at 2TB it becomes cheaper to use the backup service. The main thing for me is legacy. In my will it is a lot easier to explain how to get files from the standard backup plan, rather th…
First make sure you understand how they handle encryption. The features and ease of use come at the cost of some security. They generate a public/private key pair for the user. The client gets the public key and the server gets the private key. During backups the data is encrypted on the client with a symmetric key (which I believe is generated on the client). The encrypted data is sent to the server. The symmetric k…