shouldiuse.io

Categories

VERDICT

rsnapshot Review

Depends

Should I use rsnapshot?

rsync-based backup utility - rsnapshot.org

· 1 month ago

Buy it if you administer Linux boxes and are comfortable editing a text config file and cron. Skip it if you want a GUI, built-in encryption, or someone to call when backups break.

Confidence

Medium. Based on 30 public sources: forums, distro docs, blogs, and security advisories. No named company users found.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

$0

rsnapshot

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes

Best for

  • Linux/Unix sysadmins
  • Backing up many servers to one box
  • Plain-file snapshot restores
  • Zero-budget, self-hosted setups

Not for

  • Non-technical users wanting point-and-click backup
  • Windows/macOS desktop users
  • Anyone needing built-in encryption
  • Teams wanting vendor support or cloud-native backup

Gotchas - check before you buy

high

Keep rsync patched: 2025 CVEs include CVSS 9.8 RCE with public PoCs

medium

Backup server is a single breach target; isolate its credentials

medium

No official security page or vendor advisory channel

low

Disk space usage surprises users on constrained targets

Pros and cons

Pros

  • Completely free, GPLv2 open source
  • Saves much more disk space than expected via hard links
  • Backups are plain browsable files, trivial to restore
  • Handles local and remote filesystems for many machines
  • Configurable hourly/daily/weekly/monthly retention rotation

Cons

  • No GUI; text config plus cron
  • Speed complaints are common
  • Community support only; you are the sysadmin
  • No built-in encryption; users have requested it
  • Linux-first; Windows only via Cygwin

Sources & method

- 12 sources - No rsnapshot CVEs found in reviewed sources, but it depends on rsync, which had critical vulnerabilities in 2025.

official x4review x5security x3
  • Rsync contains six vulnerabilities (VU#952657), Heap-buffer overflow, information leak, and file leak, among others.
  • CVE-2024-12084, CVSS 9.8, Severe rsync vulnerability; proof-of-concept exploits released February 2025.
  • CVE-2026-43618, Information disclosure in rsync 3.4.2 and earlier.

Key stats

  • Value for money: 5/5

    Rating

  • $0

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 5/5. Free; big disk savings via hard links
  • Ease of use: 2/5. Text config, cron, no GUI
  • Feature depth: 3/5. Snapshots and rotation, but no encryption
  • Support quality: 2/5. Community forums and docs only
  • Security posture: 2/5. Depends on rsync; 2025 critical CVEs, public PoCs
  • 5.0/5 SourceForge rating 2 reviews
  • $0 Price GPLv2 open source
  • Yes Free tier Entire tool is free
  • 2004 Around since Official HOWTO dated Jan 2004

Pricing

rsnapshot

$0

  • Unlimited snapshots via cron
  • Local and remote rsync backups
  • GPLv2, community supported

Security

No rsnapshot CVEs found in reviewed sources, but it depends on rsync, which had critical vulnerabilities in 2025.

  • Rsync contains six vulnerabilities (VU#952657)Heap-buffer overflow, information leak, and file leak, among others.10
  • CVE-2024-12084, CVSS 9.8Severe rsync vulnerability; proof-of-concept exploits released February 2025.11
  • CVE-2026-43618Information disclosure in rsync 3.4.2 and earlier.12

What users say

Long-time Unix admins praise it as fast, space-efficient, and reliable, while acknowledging its config complexity.

“rsnapshot is my #1 backup solution.”
SourceForge review
“I use rsnapshot to backup all my Unix-like systems. It's fast, efficient, and easy.”
FreeBSD Forums
“It probably all looks more complex than it really is.”
Alan Pope's blog
Full analysis

Based on 30 public sources: forums, distro docs, blogs, and security advisories. No named company users found.

Free, rock-solid rsync snapshots for Linux admins. Wrong pick if you want a GUI, encryption, or vendor support.

Methodology

Based on 30 public sources: forums, distro docs, blogs, and security advisories. No named company users found.

Read how a report is made.

Sources

  1. rsnapshot — official sitersnapshot.org
    official
  2. rsnapshot GitHub repositorygithub.com
    official
  3. rsnapshot Reviews — SourceForgesourceforge.net
    review
  4. rsnapshot backup — FreeBSD Forumsforums.freebsd.org
    review
  5. Straightforward Linux Backups with rsnapshot — Alan Popeblog.popey.com
    review
  6. Is rsnapshot too slow? — Reddit r/linuxquestionsreddit.com
    review
  7. Backup on Linux: rsnapshot vs. rdiff-backupsaltycrane.com
    review
  8. rsnapshot — ArchWikiwiki.archlinux.org
    official
  9. rsnapshot — Debian man pagemanpages.debian.org
    official
  10. VU#952657 — Rsync contains six vulnerabilitieskb.cert.org
    security
  11. Rsync vulnerability allows remote code executioncoalitioninc.com
    security
  12. CVE-2026-43618 Rsync information disclosuresentinelone.com
    security

Add this review to your site

This check for rsnapshot says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends rsnapshot Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.