Which type of backup backs up new or changed files since the last full backup?

We look at backup – on-prem and cloud – and the key variants available, from full backup to synthetic full, via incremental, differential, incremental forever and reverse incremental

  • Share this item with your network:

Which type of backup backs up new or changed files since the last full backup?

By
  • Antony Adshead, Storage Editor

Published: 30 Mar 2022

Backup is very much an evergreen fundamental of IT. Even if your organisation uses snapshots or replication to secondary storage or datacentres, backup is still vital.

That’s because backups provide a trusted copy of your data to which you can roll back, and are an IT fundamental that has seen renewed focus in the light of rising ransomware attacks.

Snapshots are not copies in the same way. Snapshots are built of numerous pointers to the state of data at a point in time, but which could be created from information assembled over a long period as parts of files, directories, etc changed. So backups are still needed.

Wherever you need backup – whether source and/or target are on-site or in the cloud – there are several types of backup you need to know about. These include full, differential, incremental, and hybrids of these, such as synthetic and incremental-forever. We will outline them here.

The emergence of the cloud as a site for compute and storage or as a target for backup retention doesn’t change much here, either. Operations that run purely in the cloud still often need actual backup, because default data protection may not fit many organisations’ requirements in terms of compliance or simple reliability.

The big cloud providers – AWS, Azure and Google Cloud – all offer backup services that are mostly a combination of full and incrementals, but we deal with that in other articles.

Where operations are hybrid cloud, the cloud often forms the target where backups are stored. But even here, it is likely – for reasons of access time to recently changed data – that backups are made available on local storage.

Full backup

A full backup is where all data in a specific dataset is copied. It is usually done at the outset of deploying a backup solution and possibly at regular intervals – although that depends on customer choices. Because it encompasses an entire dataset, it is the most time-consuming and takes up the most storage capacity. Advantages are that a full backup may occupy less space than a lengthy set of changed-data backups and can be easier to restore from.

Incremental backup

With a full backup already completed at deployment and then possibly repeated on a regular basis, incremental backups copy only data changed since the last backup. That makes incrementals the least time- and storage space-consuming method of backup. To restore data, you must rebuild it from the last full backup plus all subsequent incremental backups.

Differential backup

Differential backups make a copy of all data that has changed since the last full, so restores need the last full backup and just the latest differential. That makes restores potentially less complex than with a full-plus-incremental backup regime. The downside is that daily differential backups will take more time to carry out, and occupy more storage than incremental backups.

Synthetic full backup

A synthetic backup combines the last full backup with subsequent incrementals to provide a full that is always up to date. Synthetic full backups are easy to restore from, but also do not overly tax the network during the backup itself because only changes are transmitted. There is, however, a processing overhead at the backup server.

Incremental forever and reverse incremental

Variants built on fulls and incrementals include incremental forever and reverse incremental.

Incremental forever backups retain fulls and subsequent incrementals, so that restores can be to chosen points in time.

Meanwhile, reverse incremental backups are where a synthetic full backup is the default, but incrementals are retained to allow roll-back to a specified point.

The main difference between incremental and differential backups is how they save space and time by storing only changed files. However, the effectiveness of incremental backups is very different from differential backups.

Before we dive into the differences between Incremental and Differential backups let's review Full Backups. 

Are you still using Full Backups?

In its simplest form, a full backup is the starting point for both Incremental and Differential backup strategies. A full backup, of course, backs up all the data on a partition or disk by copying all disk sectors with data to the backup image file. 

A full backup is time-consuming and requires a lot of space, it’s usually used as part of a backup plan with long intervals, like once a week or a month. During this time, if anything goes wrong, a lot of data can be lost. That’s when these two backup strategies come in hand.

An average partition or disk only contains a small number of changes per day, or even per week. Therefore, it makes sense only to backup data that has changed on a daily basis. This is the basis of smart backup strategies.

Incremental vs Differential Backup - How do they compare?

Differential and incremental backups are different backup strategies with the same purpose: optimize backup time and space. Differential backups only back up the files that have changed since the previous full backup, while incremental backups do the same, they back up the files that have changed since the previous incremental or full backup.

Datto SIRIS ensures reliable backups with our Inverse Chain Technology™ with fundamentally changes the way backup and recovery is done allowing for every incremental snapshot to be a fully constructed recovery point.

Learn more about Datto SIRIS

What is Differential Backup?

Differential backup strategy backs up files and folders that have changed since the last full backup, on a daily basis. They are much quicker than full backups since less data is being backed up.

One of the benefits of this strategy over incremental backup is that you only need the last full backup and last differential backup to restore data, making the restoration process much faster. However, the amount of space consumed by backed up data will grow with each differential backup until the next full backup.

Even though differential backups are more flexible than full backups, they still present too many obstacles for routine use, particularly as the next full backup gets closer.

Which type of backup backs up new or changed files since the last full backup?
Diagram Showing How Differential Backups Work

What is Incremental Backup? 

Unlike differential backups, incremental backup copies changed files since the last backup of any type, which can be a full backup or an incremental backup. When incremental backups are performed, the shorter the time interval between backups, the less data needs to be backed up.

It’s the strategy with the most space efficiency between the three: full, differential, and incremental.

In spite of incremental backups giving greater flexibility and granularity (time between backups), they have a reputation for taking longer to restore since they must be constructed from the last full backup and all subsequent incremental backups.

Datto has developed Inverse Chain Technology™ that uses the best of all these backup strategies.

Smart backup with Inverse Chain Technology

Datto Inverse Chain Technology ensure that you can quickly and reliably backup and recover your data in moments. 

This is built off this traditional incremental backup, however, Datto uses ZFS to make each incremental point refer to every other point in the chain therefore only one full backup needs to be stored. 

This increases the backup chains redundancy and the flexibility in how each point is stored and used to virtualise a system in a disaster recovery scenario.   

Which backup type is used to back up new files and files modified since the last backup only?

Incremental Backup Only the recent changes (increments) are backed up, consuming less storage space and resulting in a speedy backup. However, the recovery time is longer since more backup files will need to be accessed.

What kind of backup plan backs up files that have been changed since the last full backup in other words cumulatively )?

A differential backup is a cumulative backup of all files changed since the last backup. In short, the difference between full, incremental, and differential backups relates to the volume of files and data assets backed up during the backup process.

Which backup does the backup of Delta changes from the last full or last incremental?

There are two options available when creating a delta backup: Differential Backup – stores all data changed since the last full backup. Incremental Backup – Stores the data changed since the last full or last delta backup. These backups are smaller than the differential backups.

Which of the backup types listed will copy only files that have changed since the last backup and that will reset the archive bit of each of those files?

Incremental backup Incremental backups copy all of the files that have changed since the last backup was made.