Abstract: System and method for protecting data systems such as file systems, volume managers, databases, and backup systems. In embodiments, rather than encrypting the data of a data system, one or more elements or levels of metadata may be encrypted. Some embodiments may encrypt metadata that is not accessed frequently to minimize the cost of encryption and decryption. Alternatively, instead of encrypting an entire metadata, only a portion, such as a header block, of the metadata may be encrypted. The encrypted metadata may be stored in the data system. At startup of the data system, the encrypted metadata may be decrypted and an unencrypted copy of the metadata may be cached in memory for use by the data system software. If the decrypted metadata is modified, then the encrypted metadata may be replaced with an encrypted version of the modified metadata. Format(s) of the metadata that is encrypted may be copyrighted.

Abstract: Replication of application files in a clustered environment may be automated based on the state and/or configuration of the application in the cluster. A clustering engine executing on one or more clustered computing nodes may notify one or more replication agents regarding changes in a clustered application's state and/or configuration. An application's status may include information indicating one or more cluster nodes on which the application is currently executing and also may include information indicating one or more cluster nodes on which the application is configured to execute. Replication agents executing on cluster nodes may, either individually or through collective coordination, modify a replication policy for replicating one or more application files based on the received status information. Subsequently, the replication agents may replicate the application files from one of the clustered computing nodes to one or more other nodes, according to the modified replication policy.

Abstract: A virtual copy of data stored in a first memory is created in a second memory. Creating the virtual copy includes, in one embodiment, creating first and second tables in memory each one of which comprises a plurality of multibit entries. Each entry of the first table corresponds to a respective memory region of the first memory. Each entry of the second table corresponds to a respective memory region of the second memory. The first bit of the first and second tables indicates whether the corresponding memory region of the first and second memories, respectively, contains valid data. The second bit of the first and second tables indicates whether data in the corresponding memory region of the first and second memories, respectively, has been modified since the creation of the first and second tables, respectively.

Abstract: A method for determining changed code in a second program binary relative to a first or baseline program binary, where the second program is a different version of the first program, includes translating, responsive to symbol tables and/or control flow representations, machine addresses of both program binaries to symbols. The first and second program binaries are disassembled using the translated symbols. Differences between the two resulting disassemblies are determined, and a list of the differences is created. Differences between the program binaries can be determined by textually comparing the disassemblies, or alternatively, by determining the differences between the control flow representations of the programs. The list of differences can be presented to a user, or alternatively, can be passed to another process for further processing, such as test coverage analysis, code change analysis, or failure analysis, among other analyses.

Abstract: Various embodiments of systems and methods for performing volume-based incremental backups are disclosed. A method may involve generating a snappoint of a volume. The snappoint indicates which portions (e.g., blocks or extents) of the volume have been modified between a time at which the snappoint was generated and a time at which a subsequent snappoint was generated. The method may also involve accessing information mapping the file to the volume and, if the snappoint identifies as having been modified any blocks of the volume to which the file maps, copying those blocks from the subsequent snappoint to the backup device. Portions not identified as having been modified by the snappoint are not copied. Program instructions implementing such a method may be stored on a computer accessible medium.

Abstract: A method is provided for maintaining a connection between a local application and a remote application while the local application is unavailable or inactive. The method includes pausing the local application and sending data over the connection to maintain the connection. A connection filter on the same computing node as the local application sends data to maintain the connection by responding to acknowledgements and heartbeats from the remote application. The connection filter is configured to initiate the restoration of the local application in response to data that it is not configured to handle.

Abstract: Various embodiments of volume replication are disclosed. A request may be received to replicate a storage layout of a first storage system to a second storage system. A storage layout (e.g., configuration) of the first storage system may be determined, and one or more storage options of the second storage system may be determined. The storage options of the second storage system may include one or more storage devices available to the second storage system. A storage layout for the second storage system may be determined based on the storage options of the second storage system and the storage layout of the first storage system. Determining the storage layout of the second storage system may be based on the user input. The determined storage layout for the second storage system may be implemented, and data from the first storage system may be replicated onto the second storage system.

Abstract: Embodiments of a system and method for rule-based proactive storage path optimization for SANs. Embodiments may evaluate paths between an application and its storage on a SAN based on current and/or historical path quality of service. Performance of alternative paths may be monitored to determine if a better path than a path currently in use is available. If a better path is determined, then the path may be switched to the better path. In one embodiment, one or more zones may be reconfigured to migrate to a different path. Path migration may be performed automatically without user intervention. Alternatively, a user may be given the option to manually migrate to a new path. Embodiments may proactively change paths between an application and its storage before path performance becomes a problem. Embodiments may be integrated with a SAN management system or, alternatively, may be standalone mechanisms.

Abstract: Systems, methods, apparatus and software can make use of persistent reservation commands to establish the port of a shared device that is to be used as an active port by one or more host computer systems coupled to the shared device. Information about one or more paths used to transmit data between a host computer system and the shared device can be used by other host computer systems.

Abstract: The present invention discloses a user interface for creating a dynamic computing environment using allocateable resources. The interface enables the fast, efficient selection and configuration of resources for the computing environment. The resources are fully selectable and allocable by a system architect. In a first embodiment, the ability is provided that allows a customer or system architect to design a system by allocating resources and specifying how the resources are to be used. The system architect may create a computing environment from a remotely accessible user interface such as a web page on the Internet. Thus, the system architect can create, modify and operate the environment from anywhere in the world.

Abstract: Methods and systems to backup data are provided. A first computing device identifies data to backup and stabilizes a frozen image of that data. Next, the frozen image is decomposed into physical storage addresses housing the data. The decomposed storage addresses are sent to a second computing device. The second computing device uses the storage addresses along with existing operating system I/O operations to backup the data to computer readable media.

Abstract: A storage management system may provide virtual storage devices for use by an operating system. The storage management system may map files representing the virtual storage devices to a plurality of volumes to be stored on physical storage devices. In various embodiments, the storage management system may include storage management components which manage the files representing the virtual storage devices. In one implementation, the storage management system may support a set of storage commands for the virtual storage devices, including standard commands used by the operating system to communicate with storage devices, and additional commands for communicating with the storage management components.

Abstract: A system for loosely coupled temporal storage management includes a logical storage aggregation including a plurality of data blocks, a data producer, one or more data consumers, and a temporal storage manager. The temporal storage manager may be configured to maintain a producer shadow store including entries stored in a log-structured logical volume, where each entry is indicative of one or more data blocks of the logical storage aggregation that have been modified by the data producer. The temporal storage manager may also be configured to maintain a repository containing a baseline version of the logical storage aggregation, and to provide the data consumers with read-only access to the producer shadow store and the repository.

Abstract: A log-structured temporal shadow store may comprise a logical storage aggregation including a plurality of blocks, a log-structured storage device, and shadow management software. The log-structured storage device may include a plurality of log entries, where each log entry includes one or more modified blocks of the logical storage aggregation and an index to the modified blocks. In response to a new batch of changes to the logical storage aggregation, the shadow management software may be configured to append a new log entry to the log-structured storage device, including newly modified blocks and an index to the newly modified blocks. The index may be organized as a modified B+ tree, and the log-structured storage device may be a logical volume, such as a mirrored logical volume.

Abstract: In one embodiment, a computer accessible medium comprises instructions which, when executed, check a first storage from which a computer system is configured to boot for a block identified in a read request. The block is included within an image of a set of software resources to be provisioned on the computer system. If the block is stored in the first storage, the instructions supply the block from the first storage in response to the read request. Otherwise, the instructions: fetch the block from an image repository system that stores the image; store the block in the first storage; and supply the block in response to the read request. In another embodiment, the instructions store a block identified in a write request to the first storage. The instructions record that the block is modified in the first storage with respect to the image stored in an image repository system.

Abstract: A method for performing file lookups based on tags indicative of file characteristics may involve: a file system storing an association between a tag and a file, where the tag is indicative of a characteristic of the file; the file system storing an additional association between the tag and an additional file that also has the characteristic; the file system searching for files having the tag; and in response to searching, the file system returning identifiers of both files associated with the tag. The returned identifiers may include the files' pathnames or inode identifiers of the files' inodes.

Abstract: A system allowing a target machine to be booted up from a disk image stored in memory. Instead of reading the boot-up information from a disk drive or other physical device the data is read from memory. No modification is necessary to native operating system, input/output subsystem, bootstrap code, etc., since the invention modifies characteristics, such as vectors used by the operating system, to make the disk image in memory appear to be the same as a standard external device.

Abstract: A method and system of providing a write-accessible storage checkpoint is disclosed. According to one embodiment of the present invention, a first writable storage checkpoint is associated with a first storage checkpoint of a storage checkpoint chain where the storage checkpoint chain is independent of the first writable storage checkpoint and a write operation is then performed utilizing the first writable storage checkpoint.

Abstract: A method, system and computer program product for creating a virtual network identity, by using a virtual IP address and hostname, in a software application for the express purpose of making the application node-independent (where node is defined as a particular machine running a given operating system at a specific moment in time) is disclosed. By virtualizing the IP address and hostname, a running software application can be moved from one node to another within a computer network, allowing for process migration and the reallocation of system resources.

Abstract: A cluster comprises a plurality of computer systems, wherein each of the plurality of computer systems is configured to execute one or more virtual machines. Each of the plurality of computer systems comprises hardware and a plurality of instructions. The plurality of instructions, when executed on the hardware, migrates at least a first virtual machine executing on a first computer system of the plurality of computer systems to a second computer system of the plurality of computer systems. The plurality of instructions migrates the first virtual machine responsive to a first load of the first computer system prior to the migration exceeding a second load of the second computer system prior to the migration.