Borg to remote site

[VVStz]

Hi,

I have a similar question to #8621

but I would like to deepen it.

I would like to backup machine A to machine B ( connected trough vpn )

I need the data flowing be the minimal as possible.

The connection trough ssh is not ideal here, as it's encrypted and ~complex.

So NFS seem a good candidate.

So if machine B do not have borg and serve only an NFS mount point.

Will this impact the data flow ? Because I suppose A need to read B to know the data delta etc..

Edit: nice software btw !! and written in Python ❤️🐍

Thanks

[ThomasWaldmann]

Thanks, we like python, too. :-)

When using a ssh:// repo, borg 1.x runs in client/server mode. That means that additionally to the client there is also an agent running at the repository location (on the repo server). That agent can do some stuff locally, helping to minimize network I/O, e.g. when it does a repository check or a compaction.

That is not the case if you don't use client/server. Then you only have the client and if you use NFS, all file I/O will have to go over the network.

The deduplication always happens client-side and the client knows (via the chunks index) what's already in the repo, so that part does not make a difference (client/server vs. only client).

[VVStz]

Thanks @ThomasWaldmann I've tried up and it work amazingly :) But now I have a bug afterward :'( #8654

[alsoeric]

One thing I've learned about running Borg through SSH through a VPN is that performance is not good. It's about 10 times slower than straight SSH directly to the remote site.

From what I can tell, the possible reasons for this. increased latency caused by the VPN, multiple levels of encryption, VPN and SSH, and mismatch in packet size.

[ThomasWaldmann]

On modern CPUs, crypto is often HW accelerated and thus has not a big speed impact (as when doing it in SW).

Tunneling TCP in TCP is known to have issues, this is why many VPNs use UDP.

Wireguard is known for good speed, did you use that?

Also, why do you use a VPN for borg at all? Maybe just use ssh (might require port forwarding)?

[alsoeric]

I used OpenVPN, as that was all that was available. Eventually, I bypassed the VPN and connected directly to the Borg machine via a firewall pinhole. I'll have to try it again with wireguard. Thanks for the nudge!