Introduction

NGBackup is a modern, Rust-native data-protection platform: enterprise backup, recovery and cyber-resilience for everything from databases and hypervisors to Microsoft 365, with global deduplication, immutability and active ransomware detection.

Under the hood, NGBackup is an all-new codebase written 100% in Rust, with zero lines of C. It is memory-safe by construction, so the entire class of memory-corruption vulnerabilities that legacy C backup engines keep publishing as CVEs cannot occur here. That foundation delivers significantly higher performance and a broad set of capabilities beyond legacy backup software: global deduplication, active ransomware detection, Instant Recovery, cross-hypervisor V2V, and real-time replication.

Key architectural differentiators:

Single control plane. Every daemon (Director, Storage, File) is remotely reconfigurable, reloadable and restartable from one place, with validation, atomic apply and rollback. No editing config files on each host.
Configuration as data. Director configuration lives in the database as immutable, versioned revisions. No configuration-file sprawl across daemons.
No clear-text passwords on disk. Client onboarding is token-based; secrets are sealed and never written in plaintext to a config file.
High availability. An active/standby Director pair with product-managed catalog and configuration replication, automatic failover with witness quorum and split-brain guard, and planned, unplanned, maintenance and test failover modes with reverse-sync failback.
Rust-native plugins. Every workload plugin is compiled Rust, not open-ended PowerShell, Python or shell scripts. Uniform tooling, higher performance, and no per-plugin interpreter surprises.

It ships as backup-dir, backup-sd, backup-fd and backup-console, plus a modern dark-mode Web Console.

Who this manual is for

Operators installing and running backups day to day.
Administrators designing policies, storage and retention.
Integrators building on the plugin ecosystem.

What’s inside

Part	You’ll learn to…
Get started	Understand the architecture, install the software, run your first backup.
Configure	Every resource and directive — the complete configuration reference.
Operate	Run jobs, restore (incl. Instant Recovery & cross-hypervisor V2V), manage volumes, auto-labeling.
Protect	Global deduplication, ransomware detection, replication, immutability and encryption.
Plugins	Back up and restore each workload (databases, hypervisors, Microsoft 365, files…).
Reference	CLI tools, disaster recovery, security and more.