Abstract: A shippable data transfer device includes a data storage medium encased in a chamber surrounded by an anti-tamper casing. The anti-tamper casing includes an anti-tamper layer with identifying elements arranged in a unique or otherwise identifiable pattern. The anti-tamper layer is configured to actively re-arrange, alter, or obscure the identifying elements in response to a breach of the anti-tamper casing.

Abstract: A network-attachable rack-mountable computing device is housed within a shippable enclosure and is configured to mount in a rack. The device may be initialized (e.g., prepared to receive data, and an updateable electronic shipping display set to a shipping destination) by a service provider and shipped, in accordance with a displayed destination address, as a self-contained shipping unit. The device may be coupled with other devices via coupling mechanisms included in an enclosure of the device and may be mounted in a rack at a destination via mounting brackets included in the enclosure of the device. The device may be installed onto a network at the destination and loaded with data. When the device is received back at the service provider, the data is transferred from the device to a service provider storage facility, wiped of data, and prepared to be sent out again.

Abstract: A data storage system implements aggregation, bifurcation, and/or reduction techniques to improve the efficiency of processing data storage requests. Data storage requests and/or their associated payloads may be aggregated based on one or more parameters. Data to be the stored and the associated commands may be separated so as to optimize a system's throughput and latency for each. Furthermore, extraneous commands and requests may be reduced or eliminated based on heuristics associated with the requests and the data.

Abstract: A shippable data transfer device includes a data storage medium encased in a chamber surrounded by an anti-tamper casing. The anti-tamper casing includes an anti-tamper layer with identifying elements arranged in a unique or otherwise identifiable pattern. The anti-tamper layer is configured to actively re-arrange, alter, or obscure the identifying elements in response to a breach of the anti-tamper casing.

Abstract: A data storage system implements aggregation, bifurcation, and/or reduction techniques to improve the efficiency of processing data storage requests. Data storage requests and/or their associated payloads may be aggregated based on one or more parameters. Data to be the stored and the associated commands may be separated so as to optimize a system's throughput and latency for each. Furthermore, extraneous commands and requests may be reduced or eliminated based on heuristics associated with the requests and the data.

Abstract: Multiple shippable storage devices may be used for a bulk data transfer, local storage, and remote synchronization to a remote storage service. A storage service provider ships multiple shippable storage devices to a client, which are then attached to the client network. The client data on the client network is transferred to the shippable storage devices according to a redundancy encoding scheme. A subset of the shippable storage devices are then shipped back to the remote storage provider to store a copy of the client data at the remote storage service. The remainder of the shippable storage devices are sufficient in number to store the client data. When the client data is updated on the shippable storage devices, the shippable storage devices send an update via network transmission to the remote storage service. The remote storage service then updates the copy of the client data.

Abstract: A shippable data transfer device includes a data storage medium encased in a chamber surrounded by an anti-tamper casing. The anti-tamper casing includes an anti-tamper layer with identifying elements arranged in a unique or otherwise identifiable pattern. The anti-tamper layer is configured to actively re-arrange, alter, or obscure the identifying elements in response to a breach of the anti-tamper casing.

Abstract: A portable data center is configured to be transported with installed computing devices between a first location and a second location. A tethered networking device of the portable data center can be deployed to provide a consistent interface for connecting computing devices at a first location with computing devices of the portable data center. Large quantities of data stored in the computing devices at the first location can be transferred to computing devices of the portable data center and the portable data center storing the transferred data can be transported to a second location where the stored data is transferred from the portable data center to one or more computing devices at the second location.

Abstract: A device such as a network-attachable data transfer device may be configured to operate in a cluster to coordinate the storage of data. A cluster manifest may include data and/or metadata related to devices of the cluster. In some cases, a cluster manifest may include, for each of one or more devices of a cluster: an encrypted payload; an identifier associated with the particular device; and an encrypted data entry. The encrypted payload may encode a cryptographic payload key used in part to perform storage operations. The encrypted data entry may include one or more encrypted partitions that are each decryptable by a different security module of the device. The decrypted partitions may be assembled to form a cryptographic key that may decrypt the encrypted payload. The cluster manifest may be provided to a locked device of a cluster as part of a process for unlocking the locked device.

Abstract: The ability to submit and execute secured commands on a device is controlled using an interface authenticator. The interface authenticator includes a processor and physical memory that stores key material. When the interface authenticator is connected to the device the device communicates with the interface authenticator to cryptographically verify that the interface authenticator is valid. If the interface authenticator is valid, the device allows controlled commands to be received. In some examples, the controlled commands are obtained via a sideband data channel pass-through access and executed on a management controller within the device. In some examples, as a result of determining that the interface authenticator is valid, a sideband data channel pass-through access is enabled over which both privileged and uncontrolled commands may be received.

Abstract: An electronic device includes persistent storage enclosed within a housing. The housing is configured to protect the persistent storage during shipment of the electronic device by a common carrier. The electronic device may include at least one security door, which when in an open-state, may provide access to at least one of a data port, an aperture, a portion of a display, and/or the persistent storage. When the security door is in a closed-state and possibly locked, the persistent storage may be protected from environmental factors, such as dirt, weather, and tampering. In some embodiments, the aperture may enable airflow though the housing and may be fitted with a filter to remove debris from air that circulates into the housing.

Abstract: A portable data center is configured to be transported with installed computing devices between a first location and a second location. A tethered networking device of the portable data center can be deployed to provide a consistent interface for connecting computing devices at a first location with computing devices of the portable data center. Large quantities of data stored in the computing devices at the first location can be transferred to computing devices of the portable data center and the portable data center storing the transferred data can be transported to a second location where the stored data is transferred from the portable data center to one or more computing devices at the second location.

Abstract: A data storage system implements aggregation, bifurcation, and/or reduction techniques to improve the efficiency of processing data storage requests. Data storage requests and/or their associated payloads may be aggregated based on one or more parameters. Data to be stored and the associated commands may be separated so as to optimize a system's throughput and latency for each. Furthermore, extraneous commands and requests may be reduced or eliminated based on heuristics associated with the requests and the data.

Abstract: A data storage system implements aggregation, bifurcation, and/or reduction techniques to improve the efficiency of processing data storage requests. Data storage requests and/or their associated payloads may be aggregated based on one or more parameters. Data to be the stored and the associated commands may be separated so as to optimize a system's throughput and latency for each. Furthermore, extraneous commands and requests may be reduced or eliminated based on heuristics associated with the requests and the data.

Abstract: A switching device is implemented in a network-attachable data transfer device to provide data storage access to other such devices. In some embodiments, network-attachable data transfer devices are arranged in a clustered configuration to provide various computational and storage services. When one or more devices of the cluster fails, various implementations associated with the switching device, via an external data interface, provide operational mitigation, optimized data recovery, and efficient reinstatement of normal operation of the cluster.

Abstract: A shippable storage device may be used to execute one or more applications, such as an encryption application, and to securely store client data on a storage node of the shippable storage device. After connecting the shippable storage device to a client network, a stateless compute node of the shippable storage device downloads operating code. After validating the operating code, the stateless compute node executes the operating code. The operating code may include an application, such as an encryption application that receives, encrypts, and stores client data. The application does not access writeable persistent storage other than through an internal network interface to the storage node, according to a networking protocol. The volatile memory of the stateless compute node is cleared upon removal of power to the shippable storage device so that unencrypted data and one or more encryption keys are not persisted within the shippable storage device.

Abstract: A network-attachable rack-mountable computing device is housed within a shippable enclosure and is configured to mount in a rack. The device may be initialized (e.g., prepared to receive data, and an updateable electronic shipping display set to a shipping destination) by a service provider and shipped, in accordance with a displayed destination address, as a self-contained shipping unit. The device may be coupled with other devices via coupling mechanisms included in an enclosure of the device and may be mounted in a rack at a destination via mounting brackets included in the enclosure of the device. The device may be installed onto a network at the destination and loaded with data. When the device is received back at the service provider, the data is transferred from the device to a service provider storage facility, wiped of data, and prepared to be sent out again.

Abstract: A data storage system implements aggregation, bifurcation, and/or reduction techniques to improve the efficiency of processing data storage requests. Data storage requests and/or their associated payloads may be aggregated based on one or more parameters. Data to be the stored and the associated commands may be separated so as to optimize a system's throughput and latency for each. Furthermore, extraneous commands and requests may be reduced or eliminated based on heuristics associated with the requests and the data.

Abstract: A brace can be installed over a juncture between releasably joined case pieces. The brace includes a first tab and a second tab interconnected by a transition portion. The tabs are arranged to deform or break apart from one another along the transition portion in response to relative rotation between the case pieces. The deformation or breakage along the transition portion provides a tamper-evident indication of the case having been opened by rotation for access to the interior of the case since the brace was installed on the case.

Abstract: A data storage system implements aggregation, bifurcation, and/or reduction techniques to improve the efficiency of processing data storage requests. Data storage requests and/or their associated payloads may be aggregated based on one or more parameters. Data to be the stored and the associated commands may be separated so as to optimize a system's throughput and latency for each. Furthermore, extraneous commands and requests may be reduced or eliminated based on heuristics associated with the requests and the data.