Back up without thinking about it
By default ToutWAF backs itself up every 24 hours and keeps the 7 most recent archives; you can choose a time, an interval or a cron expression.
النسخ الاحتياطي
Back up ToutWAF (and the linked ToutPanel) from one page: a daily schedule, a restore test after every backup, encrypted archives, off-site targets, a guided restore with a preview and an automatic rollback if it fails.
Where to find it in the console : Console: Infrastructure > Backups; command line: toutwafctl backup and toutwafctl restore.
What it is for
A backup that restores
Right after it is made, each local archive is restored to a blank: database integrity, same inventory, no private key in clear. An archive that does not restore is not a success and raises an alert.
Encrypted before it leaves
Every archive is encrypted (AES-256-GCM) before it is written or sent anywhere: with a passphrase, or with the installation's master key.
Restore without surprises
The restore guide compares the archive to the live database and says what would change before you confirm. If the console does not come back healthy, the previous data is put back.
What is backed up and where
The state of the control plane: the data plane holds nothing unique, you reinstall it and enrol it again.
The control plane
Database (policies and versions, sites, users, audit log, lists, certificates, integrations, events on request) and the master key. Secrets are sealed before they reach the database.
Off-site targets
A directory, S3, SFTP (server fingerprint pinned), WebDAV or a command, each with its own schedule, retention and bandwidth limit. Under licence: the local backup stays free.
ToutPanel
When a ToutPanel is linked, the page shows the state of its backup plans and can create one from the console. Its archives stay in ToutPanel.
Command line
toutwafctl backup create, list, download, targets, run, verify; toutwafctl restore for an offline restore, with the service stopped.
Stale backup alert
A default rule alerts when the last good backup of a destination is older than 36 hours.
Standby console
A second console can follow the first and take over by hand. Under licence.
The important point: the master key
It unseals integration passwords, SSO secrets, TOTP seeds and ACME credentials.
- A passphrase backup also carries the master key and restores on another server; a master-key backup is useless without that key.
- ToutWAF can generate the passphrase for you, shown once: keep a copy outside the server.
- Test a restore before you need it.
After a disaster
The documentation checklist, in short.
- Install a new host with the same version (or newer), restore ToutPanel first if it is linked, then ToutWAF.
- Nodes keep their token as long as the control plane's data directory was restored; otherwise create new enrolment tokens.
- Traffic is not interrupted by a control-plane outage: nodes serve their last good policy.
What is not done, or not proven
We prefer to say it plainly.
- No real S3, SFTP or WebDAV target has been tried: the tests use the directory target.
- No real ToutPanel and no backup on a real machine (systemd, full disk, system time zones): everything was tested with a fake ToutPanel API. The restore is tested in a fresh directory.
- The settings and accounts of ToutPanel itself cannot be reached with the token ToutWAF holds: save them from ToutPanel.
- Not done yet: a single destination and history for ToutPanel and ToutWAF archives, and backups in the PDF reports.
Use cases
Before an upgrade
You create a named backup, download it, then upgrade with a way back.
A copy off the server
A scheduled SFTP or S3 target, with a restore test after every upload.
Come back after an outage
On a new host, you follow the restore guide and check with the Doctor.
What is included, by edition
The basics are free; the advanced options need a paid offer. An option under licence stays visible in the console, locked, never hidden.
الإصدارمجاني مشمول في جميع العروض، ومنها العرضان المجانيان (Free وFree +)Pro وما فوق العروض المدفوعة: ظاهرة في وحدة التحكم ومقفلة دون ترخيص. ابتداءً من Pro ما لم يُذكر Agency أو Enterprise
لم تُجرَّب بعد في ظروف حقيقية تعمل في اختبارات المنتج، لكنها لم تُجرَّب بعد مع الخدمة أو النظام أو العتاد الحقيقي. تعرض وحدة التحكم الملاحظة نفسها في المكان الذي تضبط فيه الوظيفة.
- نسخ احتياطي محلي مجدول لوحدة التحكم مع اختبار استعادة بعد كل نسخةمجاني
- استعادة موجَّهة مع معاينة وإعادة تشغيل تلقائية وتراجعمجاني
- لا أسرار بنص واضح في النسخة الاحتياطية: المفاتيح والرموز وكلمات المرور مختومة بالمفتاح الرئيسيمجاني
- خطط النسخ الاحتياطي في ToutPanel المرتبط، تُشغَّل من الصفحة نفسهامجاني
- وجهات خارج الموقع: S3 وSFTP وWebDAV أو أمرPro وما فوق
- خادم النسخ الاحتياطي: ملفات وقواعد بيانات (MySQL وMariaDB وPostgreSQL) للخوادم المراقَبة، مشفّرة بمفتاح استرداد لا يحتفظ به غيرك، ومتحقَّق منها باختبار استعادةPro وما فوق
- وحدة تحكم احتياطية: نسخة مشفّرة ومتحقَّق منها كل ساعة، وتولٍّ موجَّه ويدوي لم تُجرَّب بعد في ظروف حقيقيةAgency وما فوق
- التولّي من وحدة تحكم احتياطية لا يُقفل أبداً، حتى بدون ترخيصمجاني
العودة إلى القيمة الافتراضية لخيار متقدم ممكنة دائماً. ما يحدث عند انتهاء ترخيص مدفوع موصوف في الأسئلة الشائعة عن الأسعار: 48 ساعة سماح، ثم 48 ساعة للقراءة فقط، ثم تُعطَّل حماية WAF حتى التجديد.
الأسعار Read the documentation
ضع درعاً أمام تطبيقاتك اليوم
ثبّته على خادمك الخاص، أو راسلنا للحديث عن التراخيص.