Re: Using rsync to remote backup encrypted files?

Kelly Jones wrote:
> I use rsync to backup files remotely.
> 
> This works great if they're unencrypted: a small change in a large
> file requires very little bandwidth to sync.
> 
> But if I encrypt files, this no longer works: a small change in a
> large file could result in a completely different file, so I lose the
> benefit of rsync.
> 
> How do people workaround this? I know online backup companies (like
> mozy.com) must solve this problem somehow?
> 

I use encfs.
I also eat an extra copy of things that go off-site.
That may be a problem if you have a lot of stuff that goes offsite.

rsync to local snapshot (see rsnapshot) or mirror on local encfs volume.
rsync the encfs cypher-text offsite.

Not quite as secure as some other crypts.
It obscures filenames, but retains directory structure and file sizes.
So...  that helps crackers a little.
However, the encryption is pretty good, so if allowing crackers to see
file sizes and directory structure doesn't worry you much it is OK.

The plus side is that it is rather rsync friendly.

I think a lot of people use amanda's encryption capability for off-site.
amanda is a rather mature and popular OSS package that works a lot
like a layer on top of tar.

           aaron

_______________________________________________
NMLUG mailing list
[email protected]
http://lists.b9.com/cgi-bin/mailman/listinfo/nmlug