Abstract: The disclosed computer-implemented method for performing secure backup operations may include (i) identifying a backup server that has been designated to perform a backup task for a backup client, (ii) prior to facilitating the backup task on the backup client (a) identifying both a trust level of the designated backup server and a sensitivity level of the backup task and (b) determining whether the trust level of the designated backup server is appropriate for the sensitivity level of the backup task, and (iii) facilitating the backup task on the backup client based on the determination of whether the trust level of the designated backup server is appropriate for the sensitivity level of the backup task. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Disclosed herein are methods, systems, and processes to provide flexible associativity for multitenant applications operating in clustered computing environments. A configuration file is updated by generating new relationship information based on association(s) between a parent object, that represents a dependent application, and child object(s), that represent dependee application(s). Updating the configuration file produces an updated configuration file. The new relationship information is stored in a metadata object, and the parent object is started based on the updated configuration file.

Abstract: The disclosed computer-implemented method for performing secure backup operations may include (i) identifying a group of backup servers with heterogeneous computing environments that provide backup services for a backup client, (ii) determining, for each backup server within the group, a trust level of the backup server by identifying at least one security characteristic of the backup server, (iii) deploying, on each of the backup servers, a signed certificate that enables the backup server to transfer backup data with a security level that corresponds to the trust level of the backup server, and (iv) performing secure backup operations for the backup client by (a) identifying a sensitivity level of a backup task initiated by the backup client and (b) assigning the backup task to a backup server within the group of backup servers that has a signed certificate with a security level appropriate for the sensitivity level of the backup task.

Abstract: Various systems and methods for performing dynamic storage tiering in a virtual environment. For example, one method can involve identifying a location of a storage object within a virtual machine file, where the virtual machine file includes multiple storage objects. The method then involves detecting whether the storage object meets a criterion of a tiering policy. If the storage object meets the criterion, the storage object is moved from one tier of a multi-tier storage system to another tier of the multi-tier storage system.

Abstract: The disclosed computer-implemented method for improving the efficiency of point-in-time representations of databases may include (1) identifying a database that includes (A) one or more utilized storage locations that store substantive data and (B) one or more empty storage locations that are not currently storing any substantive data, (2) creating a point-in-time representation of the database by (A) identifying the empty storage locations and (B) flagging the empty storage locations in connection with the point-in-time representation of the database, (3) detecting a request to write certain substantive data to at least one of the empty storage locations, and then in response to detecting the request, (4) satisfying the request while refraining from performing a copy-on-write operation on the empty storage location due at least in part to the empty storage location not currently storing any substantive data. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Various systems, methods, and processes to protect virtual machine data in cloud computing environments are disclosed. A request for application data is received. The application data is encrypted, the request is received at an encryption virtual machine, and the encryption virtual machine is configured to receive the request from application virtual machines via loaders. A map file is accessed to identify an application virtual machine for which the application data is requested and the application data is accessed in a storage volume. The storage volume is communicatively coupled to the encryption virtual machine, and the encryption virtual machine is coupled between the application virtual machines and the storage volume. The application data is received from the storage volume and decrypted at the encryption virtual machine. The decrypted application data is sent to the loaders.

Abstract: A system and method for defining retention and lifecycle policies for data backups. A media server supports a recovery-chain-based retention policy for data lifecycle management (DLM) on a first tier of a multi-tier storage system. A recovery chain includes full backup data and at least one partial backup data. The recovery chain is maintained on the first tier until it is expired due to a new full backup operation being performed and corresponding full backup data being stored on the first tier. Based on another retention policy, the media server identifies given backup data corresponding to a recovery chain that qualifies for migration from the first tier. However, the media server determines the recovery chain includes the given backup data and other backup data that does not yet qualify for migration. In response, the media server maintains a copy of the given backup data on the first tier.

Abstract: Disclosed herein are systems, methods, and processes to improve throughput in OpenFabrics and Remote Direct Memory Access (RDMA) computing environments. Data and a header is received. Buffers in which the data and the header are to be written are identified. Placement information for the data and the header is determined based on a size of each buffer, a page-boundary-alignment of the data, and a header alignment of the header. The data and the header are written to the buffer(s) using the placement information. In such computing environments, throughout can be improved by writing data on page boundaries and the header on a header boundary in a second to last buffer.

Abstract: A computer-implemented method for repairing corrupted data segments in deduplicated data systems may include (1) identifying a corrupted data segment within a deduplicated data system, (2) locating backed up versions of a first file and backed up versions of a second file, (3) analyzing a first pattern with which the backed up versions of the first file reference the corrupted data segment and a second pattern with which the backed up versions of the second file reference the corrupted data segment, (4) determining that a first location within an instance of the first file is more likely to include a non-corrupt instance of the corrupted data segment than is a second location within an instance of the second file, (6) retrieving the non-corrupt instance of the corrupted data segment from the first location, and (7) repairing the corrupted data segment. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: A method for providing resource throttling management. The method includes accessing a distributed computer system having a plurality of nodes, initiating a new object policy object backup protection for a new object, and implementing a discovery process to determine computer environment components subject to stress. The method further includes generating a physical resource throttling protocol in accordance with the components subject to stress, and processing the new object in accordance with the object management policy and in accordance with the throttling protocol.

Abstract: The disclosed computer-implemented method for completing sets of computing tasks may include (i) defining a set of computing tasks to be performed in a specified order, (ii) configuring a set of containers such that each container within the set of containers is configured to perform a task within the set of computing tasks, where each container isolates user space of a deployment system from other software on the deployment system while sharing kernel space with the other software, (iii) receiving a request to initiate the set of computing tasks, and (iv) completing, in response to the request, the set of computing tasks by launching the set of containers in the specified order. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Various systems and methods for configuring and performing DR rehearsal operations. One method involves initiating a disaster recovery rehearsal for an application. The method involves generating a snapshot of a first storage element used by the application. The method also involves configuring a second storage element and starting an instance of the application. Starting the instance of the application utilizes the snapshot and the second storage element. Generating the snapshot, configuring the second storage element, and starting the instance of the application are performed in response to initiating the DR rehearsal.

Abstract: A computer-implemented method for applying storage lifecycle policies to backups may include 1) identifying a backup of a storage container that includes data for a virtual machine, 2) identifying at least one application that executes within the virtual machine in response to identifying the backup of the storage container, 3) identifying a storage lifecycle policy configured to apply to the application based on identifying the application within the virtual machine, and 4) applying the storage lifecycle policy to the backup of the storage container based on identifying the application within the virtual machine. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: The disclosed computer-implemented method for efficient placement of virtual machines may include (1) allocating space in a cache shared by a group of virtual machines to add a new virtual machine, (2) receiving data requests from the new virtual machine for the cache, (3) recording each of the data requests as a cache hit or a cache miss in a list based on availability of the data in the cache, (4) determining a ratio of cache hits to cache misses for the new virtual machine based on the recorded data requests, and (5) placing the new virtual machine in the group of virtual machines when the ratio of cache hits to cache misses exceeds a threshold, such that the data backup device efficiently utilizes the cache for servicing the data requests from the new virtual machine. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: VMs are booted in a big data framework within the context of a cluster of computing and storage devices. The big data framework comprises a distributed, location aware file system and a cluster resource manager that assigns computing resources. VM images are stored as data in the distributed file system. Computing resources and hosts are allocated to specific VMs. The allocated hosts are within given levels of proximity to target data. VMs are booted and run on the hosts, and applications are run on the VMs, processing target data in the distributed file system. Prior to booting a given VM, a stored image can be converted between formats. This enables dynamically determining the VM format at boot time, based on what is supported by the hypervisor available on the target host.

Abstract: Various systems, methods, and processes to optimize partition arbitration are disclosed. In response to a cluster being partitioned into multiple network partitions, a determination is made, using a first node in a first network partition, whether the first node wins one or more coordination points. The determination of the first node is then transmitted to a second node in the first network partition. Further, another determination is made using the second node whether the second node wins one or more other coordination points other than the one or more coordination points won by the first node.

Abstract: Disclosed herein are methods, systems, and processes to improve application performance in replication environments. A read command configured to cause a read operation to be performed on a unit of storage in a data volume is received. A state of a lock is determined. The state of the lock indicates whether a write operation is ongoing, and the write operation results in data being written to a storage replication log and to the data volume. The write operation is ongoing because writing the data to the storage replication log and to the data volume has not completed. In response to a determination that the write operation is not ongoing, the read operation is allowed to be performed on the unit of storage.

Abstract: Various systems and methods for performing a restore operation. For example, one method involves receiving information identifying a set of data objects to restore. The method also involves dividing the set of data objects into first and second subsets of data objects. After the first one of the subsets of data objects is restored from a backup computing system to a source computing system, the method involves determining whether a deduplication operation is performed on the source computing system. The method also involves delaying restoring the second subset until after the deduplication operation is performed on the source computing device.

Abstract: Quality of service is provided to prioritized VMs and applications, based on the varied quality of different shared computing resources. Each VM or application has an associated priority. A quality rating is dynamically assigned to each shared computing resource. Requests for shared computing resources made by specific VMs or applications are received. For each specific received request, the current priority of the requesting VM or application is identified. In response to each received request, a specific shared computing resource is assigned to the specific requesting VM or application. This assignment is made based on the current priority of the requesting VM or application and the current quality rating of the shared computing resource, thereby providing quality of service to the requesting VM or application corresponding to its current priority.

Abstract: Disclosed herein are various systems, methods, and processes for sharing a storage device with multiple virtual machines. A pseudo-identity is created for a storage device. Information in a hypervisor is configured to modify a response to a command issued to the storage device by a virtual machine. Physical characteristics of the storage device are determined and it is also determined whether the physical characteristics are acceptable. If the physical characteristics are acceptable, a virtual disk associated with the virtual machine is used. If the physical characteristics are unacceptable, a mapping of the virtual machine is migrated to another storage device.