Abstract: A method includes monitoring a sequence of transactions in one or more volumes. The transactions are transferred to a primary storage (112) in a given order, and are replicated to a secondary storage (114). The volumes belong to a volume group (204) for which the transactions are guaranteed to be replicated while retaining the given order. Artificial write transactions (228) are periodically issued to a protection application field, which is predefined in a given volume (212) belonging to the volume group. Records indicative of the transactions, including the artificial transactions, are stored in a disaster-proof storage unit (144). Upon verifying that a given artificial transaction has been successfully replicated in the secondary storage, the records corresponding to the given artificial write transaction and the transactions that precede it in the sequence are deleted from the disaster-proof storage unit.

Abstract: Methods, storage facilities and computer software products implement embodiments of the present invention that include partitioning a software stack (140) into a first software component (141), a second software component (142) and a third software component (143) managed respectively by a primary host (26) at a primary site (22), by a secure storage unit (30) at or adjacent to the primary site, the secure storage unit including a protection storage unit (92) and a disaster-proof storage unit (94), and by a recovery system (34) at a secondary site (24). One or more files (90) are stored in the disaster-proof unit using the first and the second software components, and following a disaster occurring at the primary site, the files are recovered using the secure storage unit and the recovery system.

Abstract: A method, including receiving, by a secure processor housed in a disaster-proof casing located at a local site, recurring wireless signals from an application server and from a storage system that are collocated with the processor at the local site, the application server configured to store data to the primary storage system, and to mirror the data to a remote site, each of the wireless signals indicating a status of the application server or the storage system at a given time. A status log including the respective statuses of the application server and the storage system at the received times is stored to a memory in the casing, and subsequent to failures of the application server, the storage system and the mirroring, the status log analyzed to compute a data loss at the local site resulting from the failures of the application server, the storage system, and the mirroring.

Abstract: Methods, storage facilities and computer software products implement embodiments of the present invention that include mapping, by a storage system including one or more storage devices, a set of storage blocks on a given storage device to a redo log file configured to store transactions performed by a transaction processing system. An archiving condition is specified, and upon the transaction processing system completing a given transaction a copy of the given transaction is stored to the redo log file. Upon the archiving condition being met, the storage system can remap the set of storage blocks to an archive log file.

Abstract: A recovery unit for recovering data includes an antenna and a first wireless transceiver. The first wireless transceiver is configured to communicate via the antenna only with a second wireless transceiver of a storage unit that holds records associated with the data. When an event damaging at least some of the data occurs and the recovery unit is brought into proximity with the storage unit, the recovery unit receives the records from the storage unit for recovery of the data.

Abstract: A network appliance (40) includes a processor (48) and a Host Bus Adapter (HBA-44). The processor is configured to execute storage commands in one or more storage devices (28A, 28B). The HBA is coupled to a network (32) so as to receive communication frames sent over the network to the network appliance, and is configured to filter the received communication frames so as to pass through to the processor only a subset of the received communication frames, which correspond to the storage commands that have been sent by one or more applications for processing by the network appliance.

Abstract: A method for data protection includes accepting data for storage from one or more data sources (24). The data is sent for storage in a primary storage device (28) and in a secondary storage device (32). While awaiting an indication of successful storage of the data in the secondary storage device, a record associated with the data is temporarily stored in a disaster-proof storage unit (48) adjacent to the primary storage device. When an event damaging at least some of the data in the primary storage device occurs, the data is reconstructed using the record stored in the disaster-proof storage unit and at least part of the data stored in the secondary storage device.

Abstract: A recovery unit for recovering data includes an antenna and a first wireless transceiver. The first wireless transceiver is configured to communicate via the antenna only with a second wireless transceiver of a storage unit that holds records associated with the data. When an event damaging at least some of the data occurs and the recovery unit is brought into proximity with the storage unit, the recovery unit receives the records from the storage unit for recovery of the data.

Abstract: A network appliance (40) includes a processor (48) and a Host Bus Adapter (HBA-44). The processor is configured to execute storage commands in one or more storage devices (28A, 28B). The HBA is coupled to a network (32) so as to receive communication frames sent over the network to the network appliance, and is configured to filter the received communication frames so as to pass through to the processor only a subset of the received communication frames, which correspond to the storage commands that have been sent by one or more applications for processing by the network appliance.

Abstract: A storage device includes a memory and a wireless transmitter, both contained in a disaster-proof enclosure. The memory is configured to receive and store data, and the wireless transmitter is coupled to read and transmit the data from the memory. The disaster-proof enclosure is surrounded by a thermally-insulating layer, and is configured to protect the memory and the transmitter from environmental conditions caused by a disaster event, such that the memory and the wireless transmitter remain functional during and after the disaster event and the transmitter is able to transmit at least a portion of the data to a receiver from within the disaster-proof enclosure after the disaster event.

Abstract: A method includes monitoring a sequence of transactions in one or more volumes. The transactions are transferred to a primary storage (112) in a given order, and are replicated to a secondary storage (114). The volumes belong to a volume group (204) for which the transactions are guaranteed to be replicated while retaining the given order. Artificial write transactions (228) are periodically issued to a protection application field, which is redefined in a given volume (212) belonging to the volume group. Records indicative of the transactions, including the artificial transactions, are stored in a disaster-proof storage unit (144). Upon verifying that a given artificial transaction has been successfully replicated in the secondary storage, the records, corresponding to the given artificial write transaction and the transactions that precede it in the sequence are deleted from the disaster-proof storage unit.

Abstract: A recovery unit (90) for recovering data, including an antenna (102) and a first wireless transceiver (100). The first wireless transceiver is configured to communicate via the antenna only with a second wireless transceiver (76) of a storage unit (48) that holds records associated with the data. When an event damaging at least some of the data occurs and the recovery unit is brought into proximity with the storage unit, the recovery unit receives the records from the storage unit for recovery of the data.

Abstract: A method for data protection includes accepting data for storage from one or more data sources (24). The data is sent for storage in a primary storage device (28) and in a secondary storage device (32). While awaiting an indication of successful storage of the data in the secondary storage device, a record associated with the data is temporarily stored in a disaster-proof storage unit (48) adjacent to the primary storage device. When an event damaging at least some of the data in the primary storage device occurs, the data is reconstructed using the record stored in the disaster-proof storage unit and at least part of the data stored in the secondary storage device.

Abstract: A method for data protection includes, in a first operational mode, sending data items for storage in a primary storage device and in a secondary storage device, while temporarily caching the data items in a disaster-proof storage unit and subsequently deleting the data items from the disaster-proof storage unit, wherein each data item is deleted from the disaster-proof storage unit upon successful storage of the data item in the secondary storage device. An indication of a fault related to storage of the data in the secondary storage device is received. Responsively to the indication, operation is switched to a second operational mode in which the data items are sent for storage at least in the primary storage device and are cached and retained in the disaster-proof storage unit irrespective of the successful storage of the data items in the secondary storage device.

Abstract: A method for data protection includes accepting data for storage from one or more data sources (24). The data is sent for storage in a primary storage device (28) and in a secondary storage device (32). While awaiting an indication of successful storage of the data in the secondary storage device, a record associated with the data is temporarily stored in a disaster-proof storage unit (48) adjacent to the primary storage device. When an event damaging at least some of the data in the primary storage device occurs, the data is reconstructed using the record stored in the disaster-proof storage unit and at least part of the data stored in the secondary storage device.

Abstract: A data processing method includes receiving data objects for storage by a primary storage device. A first instance of each of at least some of the received data objects is cached in a disaster-proof storage unit. A second instance of each received data object is sent for storage in a secondary storage device. A list of identifiers of the data objects that are cached in the disaster-proof storage unit at a given point in time is sent from the disaster-proof storage unit to the secondary storage device. Following an event that renders at least some of the data objects on the primary storage device inaccessible, a request sent to the secondary storage device to access a given data object is received. A selection is made, responsively to the list, to serve the cached first instance or the stored second instance of the given data object in response to the request.

Abstract: A storage device includes a memory and a wireless transmitter, both contained in a disaster-proof enclosure. The memory is configured to receive and store data, and the wireless transmitter is coupled to read and transmit the data from the memory. The disaster-proof enclosure is surrounded by a thermally-insulating layer, and is configured to protect the memory and the transmitter from environmental conditions caused by a disaster event, such that the memory and the wireless transmitter remain functional during and after the disaster event and the transmitter is able to transmit at least a portion of the data to a receiver from within the disaster-proof enclosure after the disaster event.

Abstract: A method for data protection includes accepting data for storage from one or more data sources (24). The data is sent for storage in a primary storage device (28) and in a secondary storage device (32). While awaiting an indication of successful storage of the data in the secondary storage device, a record associated with the data is temporarily stored in a disaster-proof storage unit (48) adjacent to the primary storage device. When an event damaging at least some of the data in the primary storage device occurs, the data is reconstructed using the record stored in the disaster-proof storage unit and at least part of the data stored in the secondary storage device.

Abstract: A method for data protection includes accepting data for storage from one or more data sources (24). The data is sent for storage in a primary storage device (28) and in a secondary storage device (32). While awaiting an indication of successful storage of the data in the secondary storage device, a record associated with the data is temporarily stored in a disaster-proof storage unit (48) adjacent to the primary storage device. When an event damaging at least some of the data in the primary storage device occurs, the data is reconstructed using the record stored in the disaster-proof storage unit and at least part of the data stored in the secondary storage device.

Abstract: A method for data protection includes, in a first operational mode, sending data items for storage in a primary storage device and in a secondary storage device, while temporarily caching the data items in a disaster-proof storage unit and subsequently deleting the data items from the disaster-proof storage unit, wherein each data item is deleted from the disaster-proof storage unit upon successful storage of the data item in the secondary storage device. An indication of a fault related to storage of the data in the secondary storage device is received. Responsively to the indication, operation is switched to a second operational mode in which the data items are sent for storage at least in the primary storage device and are cached and retained in the disaster-proof storage unit irrespective of the successful storage of the data items in the secondary storage device.