u/LippyGrips

I'm trying to set up ZFS snapshot replication with Sanoid/Syncoid. I have a backup server connect to the production server and pull the snapshots with Syncoid. Snapshots are pruned on the backup server with Sanoid.

I'm considering a scenario where production is compromised, creating bogus snapshots to force a prune on the backup server upon next pull.

I haven't managed to determine what the best practices are to avoid this, how's everyone else handling this? Am I stuck rolling my own service that manages snapshot holds on the backup server or is this a solved problem?

Thanks!