Have PBS set up and operated - WZ-IT plans setup, retention and operations, on request as hosted PBS operations at a second site. For existing backups, the restore test demonstrates an agreed recovery path.
Proxmox Backup Server (PBS) is an open-source backup solution from Proxmox Server Solutions GmbH, built specifically to protect Proxmox VE environments. PBS backs up virtual machines, LXC containers and physical hosts incrementally, deduplicated and encrypted, which significantly reduces both storage usage and network load. The software is licensed under the GNU AGPLv3 and is fully free to use (Proxmox product page); an optional subscription provides the stable enterprise repository and vendor support.
PBS is designed as a standalone system. It runs on its own Debian-based machine and talks to the systems it protects over an efficient client-server protocol. That makes it far more than a script that copies disk images: PBS is a central backup platform with its own data store, integrity checking and access control.
The PBS setup guide covers installation, datastore, PVE integration and acceptance.
Guest backups do not replace host backups. Restore a PVE host with PBS separates host configuration and guest data.
What Proxmox Backup Server actually does
PBS acts as the central backup server for one or many Proxmox VE instances. Backups land in a so-called datastore, which can sit on local disk, on ZFS, on attached storage, or since version 4 on S3-compatible object storage.
The connection follows a client-server model:
- Proxmox VE talks to PBS natively. You add the backup server as a storage target and back up VMs and containers directly from the web interface or on a schedule.
- The proxmox-backup-client additionally backs up physical Linux hosts as well as individual directories and file systems.
- Management, monitoring and restore all run through the web interface, a REST API and the command line.
Restores are granular: an entire VM, a single container, individual files from a backup, or a full bare-metal restore.
Proxmox Backup Server costs and licence: free or subscription?
Yes. PBS is fully licensed under the GNU AGPLv3. There is no feature gating, no limit on the number of VMs, clients or datastores, and no storage cap. The difference between free and paid use lies in the repository and support, not in the feature set:
- Without a subscription you use the no-subscription repository with current, but less heavily tested updates.
- With a subscription you get the enterprise repository with especially stable packages plus vendor support.
The subscription is billed per server and year and includes unlimited backup storage and unlimited backup clients. The official tiers (as of October 2026, Proxmox pricing overview):
| Tier | Price per server/year | Support |
|---|---|---|
| Community | EUR 560 | Community support, enterprise repo |
| Basic | EUR 1,120 | 5 tickets/year, 1 business day response |
| Standard | EUR 2,240 | 15 tickets/year, 4-hour response |
| Premium | EUR 4,480 | Unlimited tickets, 2-hour response |
Prices exclude VAT. Response times apply to critical requests (Severity 1) during the applicable coverage hours. The vendor includes 24/7 ticket support for Premium from 19 October 2026; Standard follows by the end of 2026. We recommend Community only for non-production use. The PBS vs. Veeam cost example uses the same price basis; the vendor pricing page remains authoritative.
For the full picture of Proxmox VE and PBS costs, see How much does Proxmox cost?.
The core features at a glance
PBS differs from simple backup scripts through a set of features that together make up a dependable enterprise backup:
- Incremental ("incremental forever"): after the first full backup, PBS transfers only changed data blocks. For running VMs a dirty bitmap tracks the changes, which makes daily backups very fast.
- Deduplication: data is split into chunks identified by their SHA-256 hash (PBS docs, technical overview). Identical blocks are stored only once across all VMs and snapshots in a datastore. This is the single biggest lever on storage usage.
- Compression: chunks are additionally compressed with Zstandard, saving space and transfer time.
- Client-side encryption: AES-256 in GCM mode, performed on the client. The key stays on the client and the server only stores encrypted chunks. Our guide on encrypted offsite backups at Hetzner goes into the details.
- Verify jobs: PBS checks stored backups for integrity on a schedule, catching silent data corruption (bit rot) before it surfaces in a real recovery.
- Pruning and garbage collection: a retention policy (keep-last, keep-daily, keep-weekly, keep-monthly, keep-yearly) marks old snapshots for removal. Garbage collection then frees the storage by removing chunks that are no longer referenced.
- Tape backup (LTO): for air-gapped and long-term archiving, PBS writes backups to LTO tape, including label and tape-library management.
- Remote sync and S3: datastores can be synchronized between PBS instances. Since version 4, PBS also supports S3-compatible object storage as a backend, officially in version 4.2 and with parallel sync jobs.
PBS vs. vzdump: where is the difference?
Proxmox VE ships its own backup tool, vzdump. It produces a full archive per VM or container on each run and works well for simple, occasional backups. As soon as storage efficiency, long retention and provable integrity matter, PBS shows its strengths.
| Feature | vzdump | Proxmox Backup Server |
|---|---|---|
| Backup type | Full archive per run | Incremental, deduplicated |
| Storage usage | High (per full backup) | Low (dedup + compression) |
| Deduplication | No | Yes, datastore-wide |
| Encryption | No (external only) | Client-side, AES-256-GCM |
| Integrity checking | No | Verify jobs against bit rot |
| Central management | Per host | Central for many hosts |
| Single-file restore | Limited | Yes, granular |
| Tape / S3 | No | Yes |
vzdump stays useful for one-off backups or setups without a dedicated backup server. For business operations with multiple hosts, PBS is the clear standard.
Planning backups: strategy for businesses
If you are weighing PBS against Veeam, see features, limits and a cost example in Proxmox Backup Server vs. Veeam.
A backup server alone is not a strategy. The proven baseline is the 3-2-1 rule: at least 3 copies of the data on 2 different media, 1 of them at a different location. PBS covers this cleanly in technical terms:
- A local datastore for fast, frequent day-to-day restores.
- An offsite copy via a second PBS or an S3 backend at a separate location. From a ransomware perspective the pull direction is decisive: the external server pulls the data and is not reachable from the source. Our how-to on the offsite pull architecture with PBS explains exactly how this works.
- A separate protection path against encryption malware through tape, removable datastores, or a separate immutable or offline copy. As a precautionary operating rule, we recommend using neither Object Lock retention nor external lifecycle deletion rules on the active PBS bucket. This recommendation follows from the required deletion permissions and retention management by PBS (PBS documentation).
- Restore tests: a backup that has never been restored is only an assumption. Regular, documented restore tests belong in a robust strategy. Whether specific requirements apply in a NIS2 context depends on the organisation and its legal classification.
Current version: Proxmox Backup Server 4.2
The current release is Proxmox Backup Server 4.2, published on 29 April 2026. It is based on Debian 13.4 (Trixie), uses Linux kernel 7.0 as the new default and ships ZFS 2.4. The main highlights:
- S3-compatible object storage is now officially supported as a backend.
- Parallel sync jobs via worker threads increase throughput, especially over high-latency networks.
- Encrypted sync allows snapshots to be encrypted and decrypted on push and pull sync.
- Namespace management lets administrators move backup groups and namespaces within a datastore.
The hardening checklist covers protection of PVE access. The PBS backup encryption guide expands on key management and recovery.
Operations and support
A backup is only worth something when the restore works when it counts. That is exactly where we come in: WZ-IT designs, builds and operates Proxmox Backup Server environments with deduplication, client-side encryption, offsite pull protection and regular, documented restore tests. Learn more on our page about Proxmox Backup Server as a managed service, or talk to us directly in a free initial consultation.











