You pull rather than push. The webserver has no credentials for accessing the backup server. Instead the backup server accesses the webserver. This strategy p

You pull rather than push. The webserver has no credentials for accessing the backup server. Instead the backup server accesses the webserver. This strategy places higher trust on the backup server, but the backup server is easier to defend -- it only needs connectivity to a small number of other IPs.