Don't take all of this long-winded typing as a slam
I don't at all - so no worries there. And please note, I did say, except for 24/7 servers.
Can you tell me how you would do that setup differently not using raid1 and have a redundant real time backup?
To me Raid1 isn't used for a speed increase and purely for backup.
The problem with RAID1 is it provides redundancy
ONLY in the event
one of the drives fails. And by the way, ideally you should have a 3rd,
identical drive on the shelf, ready to swap in. This is because not all RAID controllers are capable of establishing an array if the drives are not identical. Dedicated
RAID Controller Cards are better for that, but come with a price. Finding an identical drive years after the first two were purchased can be a real challenge.
RAID1 does NOTHING to protect you in the event your data is corrupted or accidently deleted. RAID1 provides no protection from malware, nor will it save you if a badguy breaks into the business and steals the computer, or the facility is wiped out by flood or fire, or the computer takes a direct lightning strike (I hope this server is run for a "good" UPS). Even a failure in the RAID controller can corrupt both drives.
I am admittedly probably a bit paranoid of losing data because in addition to the raid setup I also have a 6TB external usb 3.0 drive hooked to the server running a real time backup as well. I also have an offsite backup that I bring in monthly as well.
When it comes to data security, there's nothing wrong with a little bit of paranoia. I would say the external drive and the offsite backups are being prudent. The RAID is where a little bit of paranoia maybe coming in. I am NOT saying the RAID is going overboard because drives do fail. And certainly, if
any server downtime is too much and unacceptable, then a mirrored array is a good thing. But drives are pretty reliable these days, especially if these are "enterprise class" drives - designed and intended for servers and 24/7/365 operation. So RAID provides protection for only a limited circumstance.
If me, and if "current" data is "mission essential" I would increase the frequency of the off-site backups. And I would attempt to locate that external drive to a hidden location in a different room (and on a different power circuit) so [hopefully] badguys don't see it, or a localized "server room" fire does not take it out too. This likely will require changing to a
NAS instead of using direct connected USB. The NAS device can be physically located anywhere on your network (or even off-site). I say different power circuit because an extreme power surge (or catastrophic power supply failure) that takes out the server might also take out direct connected USB devices too. That may be extreme, but like I said, there's nothing wrong with a little bit of paranoia.
Can this business (and your reputation) afford to lose the last 30 days of data?