To make an offsite backup work, first identify which system creates each copy and trace the data path all the way to its destination. Velero backs up Kubernetes resources and, when configured, persistent-volume data to its backup storage location or through a volume snapshot or file-system mechanism. Proxmox Backup Server (PBS) stores backups in datastores and can pull data from a remote PBS datastore with a sync job. Those are distinct roles: a green Velero job or a successful PBS sync alone does not prove that an offsite, recoverable copy of your application exists.
There is no deployment detail or task log here to diagnose a particular failure. Use the checks below to locate the break in your own data flow, then verify the copy and restore it into an isolated test environment.
As an Amazon Associate I earn from qualifying purchases.
How Velero and PBS fit into a 3-2-1 design
Velero backs up Kubernetes resources and configured volume data
Velero handles backup operations through Kubernetes custom resources and controllers. Its documented workflow uploads Kubernetes object data to cloud object storage and can call a cloud-provider API to take persistent-volume snapshots when requested. Depending on how the cluster is configured, volume data may instead be protected through a file-system backup mechanism. Confirm which method your deployment actually uses; a backup of Kubernetes objects does not by itself establish that persistent-volume contents are included.
Recommended Free Tools
Velero’s BackupStorageLocation documentation for version 1.17 describes a required backup storage location and its object-storage provider and bucket configuration. Velero also documents synchronizing backup data from that object store back into Kubernetes metadata, including for migration. The cited documentation does not establish a direct integration that writes Velero backups into a PBS datastore. If your design uses PBS, identify the actual export, transfer, or import mechanism rather than treating a Velero storage location and PBS datastore as interchangeable.
#1 Best Overall
- Value NAS with RAID for centralized storage and backup for all your devices. Check out the LS 700 for enhanced features, cloud capabilities, macOS 26, and up to 7x faster performance than the LS 200.
- Connect the LinkStation to your router and enjoy shared network storage for your devices. The NAS is compatible with Windows and macOS*, and Buffalo's US-based support is on-hand 24/7 for installation walkthroughs. *Only for macOS 15 (Sequoia) and earlier. For macOS 26, check out our LS 700 series.
- Subscription-Free Personal Cloud – Store, back up, and manage all your videos, music, and photos and access them anytime without paying any monthly fees.
- Storage Purpose-Built for Data Security – A NAS designed to keep your data safe, the LS200 features a closed system to reduce vulnerabilities from 3rd party apps and SSL encryption for secure file transfers.
- Back Up Multiple Computers & Devices – NAS Navigator management utility and PC backup software included. NAS Navigator 2 for macOS 15 and earlier. You can set up automated backups of data on your computers.
Velero backups are not strictly atomic: changes made while a backup is running can be omitted. For applications that need consistent data, make the PV method explicit and determine whether application-level quiescing or backup hooks are needed. Match instructions to your installed Velero release: the “How Velero Works” page warns that it describes the latest development version, which may differ from the version running in your cluster.
PBS stores datastore backups and can sync from a remote PBS
PBS stores backups in datastores. Its storage documentation covers datastores on standard Unix filesystems, multiple datastores with retention settings, removable datastores, and S3-compatible object-storage backends. A PBS remote sync job pulls a remote datastore’s contents into a local datastore; it is not the same operation as configuring Velero’s BackupStorageLocation.
Rank #2
- Entry-level NAS Personal Storage：UGREEN NAS DH2300 is your first and best NAS made easy. It is designed for beginners who want a simple, private way to store videos, photos and personal files, which is intuitive for users moving from cloud storage or external drives and move away from scattered date across devices. This entry-level NAS 2-bay perfect for personal entertainment, photo storage, and easy data backup (doesn't support Docker or virtual machines).
- Set Your Devices Free, Expand Your Digital World: This unified storage hub supports massive capacity up to 64TB.*Storage drives not included. Stop Deleting, Start Storing. You can store 22 million 3MB images, or 2 million 30MB songs, or 43K 1.5GB movies or 67 million 1MB documents! UGREEN NAS is a better way to free up storage across all your devices such as phones, computers, tablets and also does automatic backups across devices regardless of the operating system—Window, iOS, Android or macOS.
- The Smarter Long-term Way to Store: Unlike cloud storage with recurring monthly fees, a UGREEN NAS enclosure requires only a one-time purchase for long-term use. For example, you only need to pay $459.98 for a NAS, while for cloud storage, you need to pay $719.88 per year, $2,159.64 for 3 years, $3,599.40 for 5 years. You will save $6,738.82 over 10 years with UGREEN NAS! *NAS cost based on DH2300 + 12TB HDD; cloud cost based on 12TB plan (e.g. $59.99/month).
- Blazing Speed, Minimal Power: Equipped with a high-performance processor, 1GbE port, and 4GB RAM on Board, this NAS handles multiple tasks with ease. File transfers reach up to 125MB/s—a 1GB file takes only 8 seconds. Don't let slow clouds hold you back; they often need over 100 seconds for the same task. The difference is clear.
- Let AI Better Organize Your Memories: UGREEN NAS uses AI to tag faces, locations, texts, and objects—so you can effortlessly find any photo by searching for who or what's in it in seconds. It also automatically finds and deletes similar or duplicate photo, backs up live photos and allows you to share them with your friends or family with just one tap. Everything stays effortlessly organized, powered by intelligent tagging and recognition.
Write down the actual path your data takes. For example, distinguish a flow that starts with a Velero backup in object storage from a flow where a PBS sync pulls snapshots from another PBS. Do not assume one flow feeds the other unless your deployment’s transfer or integration mechanism explicitly does so.
What the 3-2-1 rule asks you to prove
Proxmox Backup Documentation, Release 4.2.7-1, states: “In short, the rule states that one should create 3 backups on at least 2 different types of storage media, of which 1 copy is kept off-site.” Its manual discusses remote PBS sync for offsite copies and tape as an additional storage medium. Apply the rule to the backups you can actually locate and restore—not merely to scheduled jobs or configured destinations.
Rank #3
- Value NAS with RAID for centralized storage and backup for all your devices. Check out the LS 700 for enhanced features, cloud capabilities, macOS 26, and up to 7x faster performance than the LS 200.
- Connect the LinkStation to your router and enjoy shared network storage for your devices. The NAS is compatible with Windows and macOS*, and Buffalo's US-based support is on-hand 24/7 for installation walkthroughs. *Only for macOS 15 (Sequoia) and earlier. For macOS 26, check out our LS 700 series.
- Subscription-Free Personal Cloud – Store, back up, and manage all your videos, music, and photos and access them anytime without paying any monthly fees.
- Storage Purpose-Built for Data Security – A NAS designed to keep your data safe, the LS200 features a closed system to reduce vulnerabilities from 3rd party apps and SSL encryption for secure file transfers.
- Back Up Multiple Computers & Devices – NAS Navigator management utility and PC backup software included. NAS Navigator 2 for macOS 15 and earlier. You can set up automated backups of data on your computers.
- Three copies: identify each copy and the system or process that created it.
- Two storage-media types: identify the actual media or storage backends in use; two named destinations do not by themselves prove two different types.
- One offsite copy: establish that a copy is stored away from the source site and can still be accessed and restored if the source site is unavailable.
How do I make my offsite backup work?
Start at the first system that reports a problem. Record the product versions, job time, status, and exact error text before changing settings. Then follow the relevant branch; a Velero storage-location problem and a PBS sync problem are different failures.
If the backup or transfer involves Velero
- Identify the intended destination. Inspect the configured BackupStorageLocation and confirm the provider, bucket, and other destination details match the design. Compare them with documentation for your installed Velero release.
- Check the backup itself. Inspect the specific backup’s status and details in Kubernetes. Establish whether Kubernetes objects were captured and whether the configured PV snapshot or file-system method ran for the volumes you need.
- Trace the next hop. If the expectation is that PBS receives this backup, find the explicit process that transfers or imports it. The Velero object-storage location is not evidence that a PBS datastore received a copy.
If a PBS remote sync is failing
- Confirm the source, destination, and direction. A PBS sync pulls from a remote datastore to a local datastore. Verify that the configured remote and both datastore names match the intended path.
- Inspect the sync task log and permissions. Check the task result and error text, along with the credentials and permissions used by the sync. Review deletion permissions as well as read access.
- Check destination availability. Confirm that the destination datastore is available. If it is a removable datastore, confirm it is mounted when the sync runs: PBS documents that a sync job fails with an error when its target removable datastore is not mounted.
- Check connectivity and trust settings. Verify network reachability and the configured credentials and certificate or fingerprint settings, as applicable to your deployment.
- Check retention and deletion behavior. Confirm the intended snapshots survive source-side pruning or deletion and that the sync configuration and user permissions match that goal.
If the job succeeds but the offsite copy is missing
Follow the copy, not just the job status: locate the expected backup at its destination and determine what system can read it back. For a Velero backup, check the configured object-storage location. For PBS, inspect the destination datastore and sync result. If the design relies on removable media, verify that the medium was present for the operation. A configured remote, an unmounted disk, or a completed upstream job is not proof that a usable offsite copy arrived.
Rank #4
- Value NAS with RAID for centralized storage and backup for all your devices. Check out the LS 700 for enhanced features, cloud capabilities, macOS 26, and up to 7x faster performance than the LS 200.
- Connect the LinkStation to your router and enjoy shared network storage for your devices. The NAS is compatible with Windows and macOS*, and Buffalo's US-based support is on-hand 24/7 for installation walkthroughs. *Only for macOS 15 (Sequoia) and earlier. For macOS 26, check out our LS 700 series.
- Subscription-Free Personal Cloud – Store, back up, and manage all your videos, music, and photos and access them anytime without paying any monthly fees.
- Storage Purpose-Built for Data Security – A NAS designed to keep your data safe, the LS200 features a closed system to reduce vulnerabilities from 3rd party apps and SSL encryption for secure file transfers.
- Back Up Multiple Computers & Devices – NAS Navigator management utility and PC backup software included. NAS Navigator 2 for macOS 15 and earlier. You can set up automated backups of data on your computers.
Choose an offsite path you can maintain
The right option depends on where the copy lives, who controls deletion, the required retention and restore access, and operational cost. These approaches are not interchangeable, and the documentation does not establish one as universally best.
| Approach | What it provides | Operational checks |
|---|---|---|
| Remote PBS sync | A PBS sync can pull a remote datastore’s contents to a local datastore. The Proxmox manual describes remote sync for offsite copies. | Confirm source and destination, direction, network and permissions, sync task results, retention, and deletion behavior. Make sure the destination is available. |
| Removable PBS datastore | PBS supports removable datastores. A drive kept at another site may serve as an offsite copy; a locally attached drive alone does not establish that it is offsite. | Confirm the datastore is mounted when needed. PBS says scheduled verify, prune, and garbage-collection work is skipped while a removable datastore is not mounted; a sync job fails if its target is not mounted. |
| S3-compatible PBS backend | PBS storage documentation describes S3-compatible object-storage backends. | Provision the bucket and access separately. Account for possible storage, API-request, egress, and bandwidth costs, and test that the required data can be retrieved. |
| Velero object storage | Velero uses an object-storage backup location for Kubernetes object data and can use configured mechanisms for persistent-volume data. | Verify provider and bucket configuration, PV coverage, release-specific settings, access, retention, and the next hop if PBS is expected to hold a separate copy. |
Protect copies from deletion and operational gaps
An offsite copy helps only if it survives the failure that affects the source and remains accessible for recovery. Review administrative separation, credentials, permissions, retention, and restore access for each copy. The Proxmox manual recommends limiting a sync user’s deletion permissions so that a compromised client cannot delete existing backups. It also describes sync settings that can be configured not to remove snapshots that disappeared from the source.
Best Value
- 【Advanced Home Data & Media Hub】For advanced home users who need phone backup, file storage, and centralized data management. Centralize family photos, 4K videos, movies, computer backups, and personal files in one place while running multiple apps for home entertainment and everyday data management. Suitable for households with growing digital libraries and multiple NAS use cases.
- 【Built for Creators, Media Servers & Advanced Apps】Powered by the Intel N100 Quad-Core CPU, 8GB DDR5 RAM, 2.5GbE networking, and dual M.2 NVMe slots, DXP2800 handles large files and heavier workloads with ease. Run Docker, virtual machines, and media server applications compatible with Plex—ideal for content creators, tech enthusiasts, and advanced home users managing 4K videos, RAW photos, personal media libraries, and multiple NAS apps.
- 【Up to 80TB for Growing Digital Libraries】 Supports up to 80TB of storage using two HDD bays and two M.2 NVMe SSD slots for family photos, movies, RAW photos, 4K videos, work files, and device backups. AI photo management supports recognition of people, objects, scenes, and locations, album organization, and duplicate photo detection. HDDs and SSDs are not included.
- 【AI-powered Home Surveillance】Turn DXP2800 into a centralized home surveillance hub by connecting compatible network cameras and storing recordings locally on your NAS. AI-powered features include Face Recognition, People Detection, and Pet Detection, helping advanced home users review important events more efficiently while managing home surveillance and personal data in one place.
- 【One data Center Across Your Devices】Keep files from desktops, laptops, phones, tablets, and other devices together instead of scattered across cloud accounts and external drives. Access, back up, organize, and share data across Windows, macOS, Android, iOS, web browsers, and compatible smart TVs—ideal for creators and advanced home users working across multiple devices.
For removable storage, plan around the mount state and the maintenance jobs that depend on it. For S3-compatible storage, include separately provisioned bucket access and possible storage, API, egress, and bandwidth charges in the operating plan. In either case, confirm retention and access from the recovery environment rather than assuming that a successful write guarantees future access.
How do I test a 3-2-1 backup?
Use two kinds of proof: verify stored backup data for integrity, then perform an application-level restore and boot test. PBS provides verification options for stored backup data; a verification result is useful but is not a substitute for starting a restored system and checking the workload.
- Choose a representative backup. Identify the application, backup date, and the Kubernetes resources and volume data that must be recovered.
- Run the available integrity verification. Record which backup was checked, when it was checked, and the verification result.
- Restore to an isolated target. Restore into a new guest or test environment instead of overwriting the current guest. Keep the test isolated from production services and data where appropriate.
- Boot and check the application. Confirm that the restored system starts and that the application can use the restored data. A successful resource restore alone does not establish application-level recovery.
- Record the evidence. Note the test date, source backup, destination, what was verified, boot result, and any errors or missing data. Schedule further tests often enough to keep the recovery path familiar and current.
The Proxmox manual recommends frequently restoring and booting backups, and restoring to a new guest rather than overwriting the current guest. Apply the same recovery principle to the workload protected through Velero: test the resources and volume-data path your application depends on, not only whether a backup job completed.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
