DBacked is a command-line tool and SaaS product that creates, encrypts and stores backups of your MySQL, PostgreSQL or MongoDB database. It monitors your backups and sends you an email if a problem is detected. The CLI tool is open-source and free to use with your own S3 bucket.
Hello hunters!
Thanks @mrsimonbennett for the hunt ๐บ
I'm @geekuillaume, the creator of DBacked. While I was working on different projects, I tried to find the best way to backup my databases. Most of the available solutions are based on a small script in a cron job but it was lacking a big feature: being alerted if the backup was failing. I also wanted full E2E encryption and Docker support. That's why I created DBacked.
DBacked is a open-source command-line tool paired with an optional SaaS product. The tool is installed on your server and it creates, encrypt and send your database backup. It can be configured to store everything on your own AWS S3 Bucket or, with the Pro plan, directly on DBacked servers. Security is my priority and everything has been done to be sure your data is always available and cannot leak.
The open-source tool documentation is available here: https://dbacked.github.io/agent/
I'm eager to read your comments ๐
While I have no reason to doubt the binaries embedded inside the agent (pg_dump, mysqldump and mongodump) are legitimate, I have no way of auditing them either. Additionally these binaries and their integrity checking is controlled by dbacked's servers, meaning they can be swapped arbitrarily at any time (by themselves or an attacker). I would need to see their source for these binaries, and a way of pinning which version I am using before I could seriously consider this product from a security perspective.
Pros:
Automating a problem I'd rather not think about
Cons:
Pre-compiled binaries inside "open source" agent, MD5 used for backup integrity
Thanks for the comment @jamescun ! I'm planning on adding a config field to change the binaries location. I've included the script I use to download and compile the binaries, it's very easy to use. Concerning MD5, it's only used for corruption detection, not for hashing password on anything else. The risks associated with a MD5 collision happening during the upload are almost non-existent. I'm using this because AWS S3 which only supports MD5 (https://docs.aws.amazon.com/fr_f...).
Report
It just works! And the fact that it's open source is awesome. The way it works is pretty amazing too: the database dump, encryption, compression and upload is all done in memoryโฆ
Very good project, it's funny that yesterday I wrote an shell script for this purpose, if I saw this I wouldn't bother :D but it works like a charm anyway great execution, congratz!
@ashpangeek The restore process is explained in the documentation here: https://dbacked.github.io/agent/.... It's fully interactive and streams the backup into the database directly for the fastest restore possible.
DBacked
While I have no reason to doubt the binaries embedded inside the agent (pg_dump, mysqldump and mongodump) are legitimate, I have no way of auditing them either. Additionally these binaries and their integrity checking is controlled by dbacked's servers, meaning they can be swapped arbitrarily at any time (by themselves or an attacker). I would need to see their source for these binaries, and a way of pinning which version I am using before I could seriously consider this product from a security perspective.
Pros:Automating a problem I'd rather not think about
Cons:Pre-compiled binaries inside "open source" agent, MD5 used for backup integrity
DBacked
It just works! And the fact that it's open source is awesome. The way it works is pretty amazing too: the database dump, encryption, compression and upload is all done in memoryโฆ
Pros:Open source and extremely optimized
Cons:Can't think of anything
Formcarry
Clarify
DBacked
Product Hunt
DBacked
DBacked