Abstract: Archival task processing in a data storage system is described herein. A method as described herein can include designating, by a device operatively coupled to a processor, a file stored by a primary cluster of a data storage system for archival to a remote storage system; locating, by the device, a secondary cluster of the data storage system having stored thereon a copy of the file, the secondary cluster being distinct from the primary cluster; and, in response to determining that the file stored by the primary cluster matches the copy of the file stored by the secondary cluster, causing, by the device, the secondary cluster to archive the copy of the file to the remote storage system.

Abstract: Malware scan task processing in a data storage system is described herein. A method as described herein can include designating, by a device operatively coupled to a processor, a file stored by a primary cluster of a data storage system for a malware scan; locating, by the device, a secondary cluster of the data storage system having stored thereon a copy of the file, the secondary cluster being distinct from the primary cluster; and, in response to determining that the file stored by the primary cluster matches the copy of the file stored by the secondary cluster, causing, by the device, a second anti-malware server associated with the secondary cluster to perform the malware scan for the copy of the file instead of a first anti-malware server associated with the primary cluster.

Abstract: Techniques are provided for tracking a virus footprint in data copies. Data copies can be made in a variety of ways, like with snapshots, backups, replications, and simple copies. As copies of files that have not been scanned since they were last modified are made, these copies can be kept track of, and associated with the original file. When the original file is later scanned and found to be clean or infected, this information can be propagated through the copies.

Abstract: Techniques are provided for tracking a virus footprint in data copies. Data copies can be made in a variety of ways, like with snapshots, backups, replications, and simple copies. As copies of files that have not been scanned since they were last modified are made, these copies can be kept track of, and associated with the original file. When the original file is later scanned and found to be clean or infected, this information can be propagated through the copies.

Abstract: Files can be managed to mitigate undesirable reading of files from secondary storage component (SSC) associated with a storage system comprising primary storage component (PSC). File management component (FMC) can determine file identifiers for files stored in SSC and store them in reference files associated with such files. FMC can determine file identifiers for files stored in PSC and store them in a file entry data store. In response to a client request, FMC can determine whether a local file stored in PSC is a copy of an archived file stored in SSC based on whether the respective file identifiers of the archived file and local file or snapshot of the local file match. If there is a suitable match, FMC can read the snapshot of the local file and provide it to client device; if not, FMC can read the archived file and provide it to client device.

Abstract: Malware scan task processing in a data storage system is described herein. A method as described herein can include designating, by a device operatively coupled to a processor, a file stored by a primary cluster of a data storage system for a malware scan; locating, by the device, a secondary cluster of the data storage system having stored thereon a copy of the file, the secondary cluster being distinct from the primary cluster; and, in response to determining that the file stored by the primary cluster matches the copy of the file stored by the secondary cluster, causing, by the device, a second anti-malware server associated with the secondary cluster to perform the malware scan for the copy of the file instead of a first anti-malware server associated with the primary cluster.

Abstract: Filename-based malware pre-scanning is described herein. A method as described herein can include obtaining, by a device operatively coupled to a processor, a malware scan request for a first file in a directory of a file system, the first file having a first filename belonging to a filename sequence; appending, by the device, the first file to a first malware scan queue; and appending, by the device, respective second files in the directory to a second malware scan queue that is distinct from the first malware scan queue, wherein the respective second files are distinct from the first file and have respective second filenames belonging to the filename sequence.

Abstract: Malware scan task processing in a data storage system is described herein. A method as described herein can include designating, by a device operatively coupled to a processor, a file stored by a primary cluster of a data storage system for a malware scan; locating, by the device, a secondary cluster of the data storage system having stored thereon a copy of the file, the secondary cluster being distinct from the primary cluster; and, in response to determining that the file stored by the primary cluster matches the copy of the file stored by the secondary cluster, causing, by the device, a second anti-malware server associated with the secondary cluster to perform the malware scan for the copy of the file instead of a first anti-malware server associated with the primary cluster.

Abstract: Connection of clients to nodes associated with a storage system can be managed during non-disruptive upgrades (NDUs) of software or firmware of nodes. During NDU, connection manager component (CMC) manages connections of clients to nodes based on a node pool policy to determine nodes to consider for connection for a client request and a connection policy. CMC can determine whether to reduce a set of nodes to a subset of nodes having a particular upgrade status based on a threshold value associated with the particular upgrade status, which can be one of upgraded or non-upgraded. If threshold is satisfied for the set, CMC can reduce the set to the subset of nodes, and CMC can determine a node of the subset based on the connection policy. If threshold is not satisfied, the set is not reduced, and CMC determines a node from the set based on the connection policy.

Abstract: Malware scan task processing in a data storage system is described herein. A method as described herein can include designating, by a device operatively coupled to a processor, a file stored by a primary cluster of a data storage system for a malware scan; locating, by the device, a secondary cluster of the data storage system having stored thereon a copy of the file, the secondary cluster being distinct from the primary cluster; and, in response to determining that the file stored by the primary cluster matches the copy of the file stored by the secondary cluster, causing, by the device, a second anti-malware server associated with the secondary cluster to perform the malware scan for the copy of the file instead of a first anti-malware server associated with the primary cluster.

Abstract: Archival task processing in a data storage system is described herein. A method as described herein can include designating, by a device operatively coupled to a processor, a file stored by a primary cluster of a data storage system for archival to a remote storage system; locating, by the device, a secondary cluster of the data storage system having stored thereon a copy of the file, the secondary cluster being distinct from the primary cluster; and, in response to determining that the file stored by the primary cluster matches the copy of the file stored by the secondary cluster, causing, by the device, the secondary cluster to archive the copy of the file to the remote storage system.

Abstract: Filename-based malware pre-scanning is described herein. A method as described herein can include establishing sequential malware scanning for respective files in a first directory of a file system according to filenames of the respective files; comparing an elapsed time since a previous malware scan for a first file of the respective files in the first directory having a first filename in a filename sequence to a scan age threshold associated with a scheduled malware scan task for the first directory; and, in response to the elapsed time since the previous malware scan for the first file being determined to be less than the scan age threshold, removing the scheduled malware scan task with respect to the first file and at least one second file of the respective files in the first directory having respective second filenames in the filename sequence.

Abstract: Files can be managed to mitigate undesirable reading of files from secondary storage component (SSC) associated with a storage system comprising primary storage component (PSC). File management component (FMC) can determine file identifiers for files stored in SSC and store them in reference files associated with such files. FMC can determine file identifiers for files stored in PSC and store them in a file entry data store. In response to a client request, FMC can determine whether a local file stored in PSC is a copy of an archived file stored in SSC based on whether the respective file identifiers of the archived file and local file or snapshot of the local file match. If there is a suitable match, FMC can read the snapshot of the local file and provide it to client device; if not, FMC can read the archived file and provide it to client device.

Abstract: Connection of clients to nodes associated with a storage system can be managed during non-disruptive upgrades (NDUs) of software or firmware of nodes. During NDU, connection manager component (CMC) manages connections of clients to nodes based on a node pool policy to determine nodes to consider for connection for a client request and a connection policy. CMC can determine whether to reduce a set of nodes to a subset of nodes having a particular upgrade status based on a threshold value associated with the particular upgrade status, which can be one of upgraded or non-upgraded. If threshold is satisfied for the set, CMC can reduce the set to the subset of nodes, and CMC can determine a node of the subset based on the connection policy. If threshold is not satisfied, the set is not reduced, and CMC determines a node from the set based on the connection policy.

Abstract: Filename-based malware pre-scanning is described herein. A method as described herein can include establishing sequential malware scanning for respective files in a first directory of a file system according to filenames of the respective files; comparing an elapsed time since a previous malware scan for a first file of the respective files in the first directory having a first filename in a filename sequence to a scan age threshold associated with a scheduled malware scan task for the first directory; and, in response to the elapsed time since the previous malware scan for the first file being determined to be less than the scan age threshold, removing the scheduled malware scan task with respect to the first file and at least one second file of the respective files in the first directory having respective second filenames in the filename sequence.

Abstract: Filename-based malware pre-scanning is described herein. A method as described herein can include obtaining, by a device operatively coupled to a processor, a malware scan request for a first file in a directory of a file system, the first file having a first filename belonging to a filename sequence; appending, by the device, the first file to a first malware scan queue; and appending, by the device, respective second files in the directory to a second malware scan queue that is distinct from the first malware scan queue, wherein the respective second files are distinct from the first file and have respective second filenames belonging to the filename sequence.