shouldiuse.io

New check

Categories

VERDICT

Should I use Rsync?

Open-source file synchronization and transfer tool - rsync.samba.org

Depends. Use it if you run servers, live in a terminal, and patch promptly — it's free and battle-tested. Skip it if you want a GUI, cloud-native sync, or hands-off backups that survive version upgrades untouched.

Confidence

Medium. Based on ~40 public sources; many snippets truncated. rsync (free tool) kept distinct from rsync.net (paid storage service).

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

$0

Open source

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes

Best for

  • Sysadmins scripting server backups
  • Homelab and NAS replication
  • Large one-off data migrations
  • Low-bandwidth incremental syncs

Not for

  • Non-technical users wanting point-and-click sync
  • Anyone running the daemon on the public internet
  • Teams needing real-time two-way sync
  • Backup pipelines that can't tolerate breaking changes between releases

Gotchas - check before you buy

high

Never expose the rsync daemon to the internet — Rapid7 found oceans of exposed data

high

Jan 2025 RCE chain (CVE-2024-12084 et al.) hit unpatched servers

medium

Version upgrades can silently break backup scripts — 3.4.3 changed incremental behavior

low

Easily confused with, a separate paid storage service (~$0.01/GB/month)

Pros and cons

Pros

  • Free and open source with no license costs
  • Delta-transfer algorithm minimizes bandwidth on repeated syncs
  • De facto standard for Unix backups with vast community knowledge
  • Transfers securely over SSH across untrusted networks
  • Runs on Linux, BSD, and NAS devices; widely integrated

Cons

  • Recent releases broke incremental backups for some users
  • 2026 release controversy: AI-generated commits shipped and broke things
  • CLI-only; steep learning curve for newcomers
  • Benchmarked 4x slower than rclone for network file sync
  • Daemon mode repeatedly exposed open data when misconfigured

Sources & method

Analyzed 9/26/2026 - 10 sources - Actively targeted: Jan 2025 six-vulnerability RCE chain, 33 CVEs fixed in 3.5.0 (Aug 2026), new CVEs disclosed May 2026.

official x3review x1security x3news x3
  • Six vulnerabilities including remote code execution, CVE-2024-12084 and related bugs chainable for RCE on exposed daemons, January 2025
  • rsync 3.5.0 fixed 33 CVEs, Includes critical symlink race conditions; released August 2026
  • CVE-2026-45232 buffer overflow, Disclosed May 2026
  • CVE-2026-43618 information disclosure, Disclosed May 2026 alongside CVE-2026-43620

Key stats

  • Value for money: 5/5

    Rating

  • $0

    Starting price

  • 10

    Sources

  • Analyzed

  • Value for money: 5/5. Free, no licensing or subscription costs
  • Ease of use: 2/5. CLI-only, cryptic flags, daemon misconfiguration risks
  • Feature depth: 4/5. Delta transfer, SSH, xattrs, hardlinks; enormous flag set
  • Support quality: 2/5. Community-only; 2026 funding and maintainer controversy
  • Security posture: 2/5. 33 CVEs fixed in one release; exposed daemons leak data
  • $0 Price Free, GPL open source
  • 33 CVEs fixed in 3.5.0 Aug 2026 security release
  • 6 Vulns in Jan 2025 advisory CERT/CC VU#952657
  • 4x faster rclone speed advantage Jeff Geerling benchmark, 2025

Pricing

Open source

$0

  • GPL-licensed command-line tool
  • No paid plans or enterprise tier
  • Support via community docs only

Security

Actively targeted: Jan 2025 six-vulnerability RCE chain, 33 CVEs fixed in 3.5.0 (Aug 2026), new CVEs disclosed May 2026.

  • Six vulnerabilities including remote code executionCVE-2024-12084 and related bugs chainable for RCE on exposed daemons, January 2025⁴
  • rsync 3.5.0 fixed 33 CVEsIncludes critical symlink race conditions; released August 2026²
  • CVE-2026-45232 buffer overflowDisclosed May 2026
  • CVE-2026-43618 information disclosureDisclosed May 2026 alongside CVE-2026-43620

What users say

Users treat rsync as the default server sync tool for decades, but complain about slowness versus rclone and fragile version upgrades.

“Rsync is great for copyi…”
Reddit, r/DataHoarder
“Rsync 3.4.3 might break incremental backups for you.”
Reddit, r/sysadmin
“Rsync is notoriously slo…”
Resilio blog (competitor)

Companies that use it

  • Johns Hopkins University (JHPCE cluster)
  • Akamai (NetStorage rsync support)
  • (storage service built on rsync)
Full analysis

Based on ~40 public sources; many snippets truncated. rsync (free tool) kept distinct from rsync.net (paid storage service).

Free, battle-tested CLI sync; essential for sysadmins, hostile to beginners. Patch religiously — 33 CVEs fixed in one release.

Methodology

Based on ~40 public sources; many snippets truncated. rsync (free tool) kept distinct from rsync.net (paid storage service).

Sources

  1. How Rsync Works — A Practical Overviewsamba.org
    official
  2. Rsync Security Advisoriessamba.org
    official
  3. VU#952657 — Rsync contains six vulnerabilitieskb.cert.org
    security
  4. Detecting and mitigating CVE-2024-12084 rsync RCEsysdig.com
    security
  5. An Ocean of Data Exposed Through rsyncrapid7.com
    security
  6. 4x faster network file sync with rclone (vs rsync)jeffgeerling.com
    news
  7. tar: a slop-free alternative to rsyncdrewdevault.com
    news
  8. The rsync maintainer used Claude for hundreds of commitsdev.to
    news
  9. Rsync 3.4.3 might break incremental backupsreddit.com
    review
  10. Rsync — Wikipediaen.wikipedia.org
    official

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.