WZ-IT Logo
BasicsProxmox

What is Proxmox Backup Server (PBS)?

Timo WevelsiepTimo WevelsiepUpdated: 29.06.2026

Editorial note: Versions, commands and prices may change. Please verify critical steps independently before production use. This guide does not replace individual consulting.

Proxmox Backup Server as a managed service - WZ-IT designs, builds and operates your PBS environment: deduplicated, encrypted, with offsite protection and documented restore tests. Book a call · More on Proxmox Backup Server

Proxmox Backup Server (PBS) is an open-source backup solution from Proxmox Server Solutions GmbH, built specifically to protect Proxmox VE environments. PBS backs up virtual machines, LXC containers and physical hosts incrementally, deduplicated and encrypted, which significantly reduces both storage usage and network load. The software is licensed under the GNU AGPLv3 and is fully free to use; an optional subscription provides the stable enterprise repository and vendor support.

PBS is designed as a standalone system. It runs on its own Debian-based machine and talks to the systems it protects over an efficient client-server protocol. That makes it far more than a script that copies disk images: PBS is a central backup platform with its own data store, integrity checking and access control.

What Proxmox Backup Server actually does

PBS acts as the central backup server for one or many Proxmox VE instances. Backups land in a so-called datastore, which can sit on local disk, on ZFS, on attached storage, or since version 4 on S3-compatible object storage.

The connection follows a client-server model:

  • Proxmox VE talks to PBS natively. You add the backup server as a storage target and back up VMs and containers directly from the web interface or on a schedule.
  • The proxmox-backup-client additionally backs up physical Linux hosts as well as individual directories and file systems.
  • Management, monitoring and restore all run through the web interface, a REST API and the command line.

Restores are granular: an entire VM, a single container, individual files from a backup, or a full bare-metal restore.

Is Proxmox Backup Server free?

Yes. PBS is fully licensed under the GNU AGPLv3. There is no feature gating, no limit on the number of VMs, clients or datastores, and no storage cap. The difference between free and paid use lies in the repository and support, not in the feature set:

  • Without a subscription you use the no-subscription repository with current, but less heavily tested updates.
  • With a subscription you get the enterprise repository with especially stable packages plus vendor support.

The subscription is billed per server and year and includes unlimited backup storage and unlimited backup clients. The official tiers (as of June 2026):

Tier Price per server/year Support
Community EUR 560 Community support, enterprise repo
Basic EUR 1,120 5 tickets/year, 1 business day response
Standard EUR 2,240 15 tickets/year, 4-hour response
Premium EUR 4,480 Unlimited tickets, 2-hour response

For the full picture of Proxmox VE and PBS costs, see How much does Proxmox cost?.

The core features at a glance

PBS differs from simple backup scripts through a set of features that together make up a dependable enterprise backup:

  • Incremental ("incremental forever"): after the first full backup, PBS transfers only changed data blocks. For running VMs a dirty bitmap tracks the changes, which makes daily backups very fast.
  • Deduplication: data is split into chunks identified by their SHA-256 hash. Identical blocks are stored only once across all VMs and snapshots in a datastore. This is the single biggest lever on storage usage.
  • Compression: chunks are additionally compressed with Zstandard, saving space and transfer time.
  • Client-side encryption: AES-256 in GCM mode, performed on the client. The key stays on the client and the server only stores encrypted chunks. Our guide on encrypted offsite backups at Hetzner goes into the details.
  • Verify jobs: PBS checks stored backups for integrity on a schedule, catching silent data corruption (bit rot) before it surfaces in a real recovery.
  • Pruning and garbage collection: a retention policy (keep-last, keep-daily, keep-weekly, keep-monthly, keep-yearly) marks old snapshots for removal. Garbage collection then frees the storage by removing chunks that are no longer referenced.
  • Tape backup (LTO): for air-gapped and long-term archiving, PBS writes backups to LTO tape, including label and tape-library management.
  • Remote sync and S3: datastores can be synchronized between PBS instances. Since version 4, PBS also supports S3-compatible object storage as a backend, officially in version 4.2 and with parallel sync jobs.

PBS vs. vzdump: where is the difference?

Proxmox VE ships its own backup tool, vzdump. It produces a full archive per VM or container on each run and works well for simple, occasional backups. As soon as storage efficiency, long retention and provable integrity matter, PBS shows its strengths.

Feature vzdump Proxmox Backup Server
Backup type Full archive per run Incremental, deduplicated
Storage usage High (per full backup) Low (dedup + compression)
Deduplication No Yes, datastore-wide
Encryption No (external only) Client-side, AES-256-GCM
Integrity checking No Verify jobs against bit rot
Central management Per host Central for many hosts
Single-file restore Limited Yes, granular
Tape / S3 No Yes

vzdump stays useful for one-off backups or setups without a dedicated backup server. For business operations with multiple hosts, PBS is the clear standard.

Backup strategies for businesses

A backup server alone is not a strategy. The proven baseline is the 3-2-1 rule: at least 3 copies of the data on 2 different media, 1 of them at a different location. PBS covers this cleanly in technical terms:

  • A local datastore for fast, frequent day-to-day restores.
  • An offsite copy via a second PBS or an S3 backend at a separate location. From a ransomware perspective the pull direction is decisive: the external server pulls the data and is not reachable from the source. Our how-to on the offsite pull architecture with PBS explains exactly how this works.
  • Immutability against encryption malware via S3 Object Lock, tape or removable datastores.
  • Restore tests: a backup that has never been restored is only an assumption. Regular, documented restore tests belong in any robust strategy and are effectively mandatory in a NIS2 context.

Current version: Proxmox Backup Server 4.2

The current release is Proxmox Backup Server 4.2, published on 29 April 2026. It is based on Debian 13.4 (Trixie), uses Linux kernel 7.0 as the new default and ships ZFS 2.4. The main highlights:

  • S3-compatible object storage is now officially supported as a backend.
  • Parallel sync jobs via worker threads increase throughput, especially over high-latency networks.
  • Encrypted sync allows snapshots to be encrypted and decrypted on push and pull sync.
  • Namespace management lets administrators move backup groups and namespaces within a datastore.

Operations and support

A backup is only worth something when the restore works when it counts. That is exactly where we come in: WZ-IT designs, builds and operates Proxmox Backup Server environments with deduplication, client-side encryption, offsite pull protection and regular, documented restore tests. Learn more on our page about Proxmox Backup Server as a managed service, or talk to us directly in a free initial consultation.

You'd rather not run Proxmox yourself? WZ-IT handles setup, operations and maintenance – GDPR-compliant from Germany.

Frequently Asked Questions

Answers to the most important questions

Yes. Proxmox Backup Server is licensed under the GNU AGPLv3 and is fully free to use, with no feature gating and no limit on VMs, clients or storage. An optional subscription, billed per server, provides access to the stable enterprise repository and vendor support. A subscription is recommended for production use in a business, but it is not technically required.

vzdump is the backup tool built into Proxmox VE that creates a full backup archive per VM or container on every run. PBS works incrementally and with deduplication: after the first full backup, only changed data blocks are transferred, and identical blocks are stored only once. PBS also adds central management, verification against bit rot, pruning and encryption. vzdump remains useful for simple one-off backups without a dedicated server.

PBS splits data into chunks: virtual machines into fixed 4 MiB blocks, files and containers into variable chunks using a Buzhash rolling hash. Each chunk is identified by its SHA-256 hash. Identical chunks are stored only once across all VMs and snapshots in a datastore. In practice this often cuts storage requirements to a fraction of what classic full backups would need.

PBS backs up virtual machines and LXC containers from Proxmox VE directly through the built-in integration. Using the proxmox-backup-client, you can additionally back up physical Linux hosts as well as individual directories and file systems. This makes PBS a central backup platform for mixed environments, not just a VM backup tool.

Yes. Encryption is performed client-side using AES-256 in Galois/Counter Mode (GCM), an authenticated encryption mode. The key stays on the client and the backup server only ever stores encrypted chunks. This matters most for offsite backups at a hosting provider: anyone with access to the backup storage alone cannot read the contents without the key.

The current version is Proxmox Backup Server 4.2, released on 29 April 2026. It is based on Debian 13.4 (Trixie), uses Linux kernel 7.0 and ZFS 2.4, and adds official support for S3-compatible object storage as a backend along with parallel sync jobs for higher throughput.

For production, yes. PBS should run on its own system, separate from the Proxmox VE environment, ideally on separate hardware or at a second location. Only then do your backups survive a failure or compromise of the virtualization cluster. Installing it on the same host is fine for testing but offers no protection against hardware failure.

Let's Talk About Your Idea

Whether a specific IT challenge or just an idea - we look forward to the exchange. In a brief conversation, we'll evaluate together if and how your project fits with WZ-IT.

E-Mail
[email protected]

Leading companies trust WZ-IT

  • Rekorder
  • Keymate
  • Führerscheinmacher
  • SolidProof
  • ARGE
  • Boese VA
  • NextGym
  • Maho Management
  • Golem.de
  • Millenium
  • Paritel
  • Yonju
  • EVADXB
  • Mr. Clipart
  • Aphy
  • Negosh
  • ABCO Water Systems
Timo Wevelsiep & Robin Zins - CEOs of WZ-IT

Timo Wevelsiep & Robin Zins

Managing Directors of WZ-IT

1/3 - Topic Selection33%

What is your inquiry about?

Select one or more areas where we can support you.