Afi Kubernetes Backup vs Stash

Afi Kubernetes Backup automates backup and recovery for distributed Kubernetes applications. It can protect etcd, namespace metadata and dependencies, infrastructure configurations, persistent volumes, and databases. Backups are scheduled and application-consistent, and full-text search can locate recovery points or individual items. Users can restore or replicate a whole cluster or selected components to the same or a different target environment. Afi automatically discovers Kubernetes resources and adjusts protection as infrastructure changes. Deployment choices include a cloud-hosted dashboard and on-premises-only or hybrid arrangements for air-gapped environments. Customers can use their own storage or Afi storage with selectable regions and residency policies. Named integrations and identity options include Terraform, CircleCI, Jenkins, OpenID, Azure AD, GCP, AWS, and Okta. Pricing is $140 a month, billed at $140 per protected node per month; backup storage is $60 per one terabyte per month. There is no storage charge when using your own storage. Free licenses at free are available by request for environments protecting less than 10 nodes.

Stash is a cloud-native backup and recovery solution for Kubernetes workloads. It runs as a Kubernetes operator using restic or Kubernetes CSI Driver VolumeSnapshotter functionality, while Custom Resource Definitions specify backup targets and backup or restore behavior. It can protect volumes in common Kubernetes workload types, OpenShift DeploymentConfigs and stand-alone PVCs with ReadWriteMany access. Supported databases include MariaDB, Redis, PostgreSQL, MySQL, MongoDB, Elasticsearch, Percona XtraDB and Etcd. Stash also protects virtual machines running on Kubernetes with scheduled backups, snapshot verification and on-demand restores. Storage backends range from AWS S3 and Google Cloud Storage to Azure Blob Storage, OpenStack Swift, DigitalOcean Spaces, Backblaze B2, Minio, Rook, REST Server and Kubernetes persistent volumes. Content Defined Chunking uploads differences since the previous backup, and backed-up data is encrypted with AES-256. Prometheus monitoring, Grafana dashboards and security controls are included.