A service of Daily Data, Inc.
Contact Form

Unix Server Tech Knowledge Base

User Tools

Site Tools

Trace:
unix:freebsd:system_builds:airgap:start

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
unix:freebsd:system_builds:airgap:start [2026/01/20 01:33] – rodolicounix:freebsd:system_builds:airgap:start [2026/01/20 01:37] (current) – rodolico
Line 1: Line 1:
-====== Air Gap Server Documentation ======+====== Air Gap Server ======
  
 An **air gap server** is a computer system physically isolated from unsecured networks, including the Internet, to protect critical data from remote cyberattacks. This isolation—combined with full disk encryption and strict physical access controls—provides defense-in-depth against ransomware, unauthorized access, and compromised source systems. The system typically remains powered off except during scheduled backup operations, with data transferred via encrypted removable media ("sneakernet"). This approach is particularly valuable for long-term backup storage where the reduced attack surface and offline state dramatically limit exposure to both network-based and physical threats, making it an essential component of a comprehensive disaster recovery and business continuity strategy. An **air gap server** is a computer system physically isolated from unsecured networks, including the Internet, to protect critical data from remote cyberattacks. This isolation—combined with full disk encryption and strict physical access controls—provides defense-in-depth against ransomware, unauthorized access, and compromised source systems. The system typically remains powered off except during scheduled backup operations, with data transferred via encrypted removable media ("sneakernet"). This approach is particularly valuable for long-term backup storage where the reduced attack surface and offline state dramatically limit exposure to both network-based and physical threats, making it an essential component of a comprehensive disaster recovery and business continuity strategy.
Line 5: Line 5:
 ===== Documentation ===== ===== Documentation =====
  
-  * [[airgap:concepts|Air Gap Server Concepts]] — Security principles, encryption strategies, and implementation best practices +  * [[unix:freebsd:system_builds:airgap:concepts|Air Gap Server Concepts]] — Security principles, encryption strategies, and implementation best practices 
-  * [[airgap:sneakernet_implementation|Sneakernet Implementation]] — Production deployment guide for automated ZFS replication via encrypted transport media+  * [[unix:freebsd:system_builds:airgap:sneakernet_implementation|Sneakernet Implementation]] — Production deployment guide for automated ZFS replication via encrypted transport media
  
 ===== Quick Links ===== ===== Quick Links =====
  
-  * [[airgap:concepts#encryption_strategy|Encryption Strategy]] — GELI, split-keys, and transport encryption +  * [[unix:freebsd:system_builds:airgap:concepts#encryption_strategy|Encryption Strategy]] — GELI, split-keys, and transport encryption 
-  * [[airgap:concepts#example_workflow|Example Workflow]] — Typical backup cycle walkthrough +  * [[unix:freebsd:system_builds:airgap:concepts#example_workflow|Example Workflow]] — Typical backup cycle walkthrough 
-  * [[airgap:sneakernet_implementation#installation|Installation Guide]] — Getting started with sneakernet +  * [[unix:freebsd:system_builds:airgap:sneakernet_implementation#installation|Installation Guide]] — Getting started with sneakernet 
-  * [[airgap:sneakernet_implementation#key_management|Key Management]] — Generating and rotating encryption keys+  * [[unix:freebsd:system_builds:airgap:sneakernet_implementation#key_management|Key Management]] — Generating and rotating encryption keys
  
 ===== External Resources ===== ===== External Resources =====
unix/freebsd/system_builds/airgap/start.1768894433.txt.gz · Last modified: 2026/01/20 01:33 by rodolico