Abstract: A method includes determining to transfer a data object from a first container of a vault to a second container of the vault. The method further includes determining first and second storage parameters for the first and second containers, respectively. When the first storage parameters substantially match the second storage parameters, the method further includes retrieving metadata of the data object from a first container structure associated with the first container. The method further includes modifying the metadata regarding the transferring of the data object from the first container to the second container to produce modified metadata. The method further includes adding the modified metadata to a second container structure associated with the second container such that the data object is accessible via the second container.

Abstract: A method, system, and computer program product may enforce DNS compliant names for containers in an object storage system to perform automatic DNS updates. A container creation request may be received, and it may be determined whether the container name is DNS compliant. DNS entries may be created according to the DNS compliant container name, and the creation of the DNS entry may include identifying a vault container, identifying a set of DS processing units servicing the vault container, and creating DNS entries that point to the set of DS processing units.

Abstract: A method begins by a computing device of a dispersed storage network (DSN) maintaining a queue of pending requests to access the DSN while new requests are added to the queue and executed requests are deleted from the queue. The method continues by the computing device determining, for each pending request in the queue, a prioritization score to produce a plurality of prioritization scores. The prioritization score is determined by determining an identity of a requestor associated with a pending request, obtaining a trust score based on the requestor's identity, and obtaining a compliance score based on the requestor's identity. The trust score indicates the requestor's level of legitimate use of the DSN and the compliance score indicates the requestor's level of compliance with DSN system requests. The method continues by the computing device executing pending requests of the queue in accordance with the plurality of prioritization scores.

Abstract: A method includes determining to transfer a data object from a first container of a vault to a second container of the vault. The method further includes determining first and second storage parameters for the first and second containers, respectively. When the first storage parameters substantially match the second storage parameters, the method further includes retrieving metadata of the data object from a first container structure associated with the first container. The method further includes modifying the metadata regarding the transferring of the data object from the first container to the second container to produce modified metadata. The method further includes adding the modified metadata to a second container structure associated with the second container such that the data object is accessible via the second container.

Abstract: A method for execution by one or more processing modules of a dispersed storage network (DSN), the method begins when accessing a multi-site DSN, by determining, for each site, whether the site is able to favorably support slice access. Unfavorable conditions include any of: weather-related site availability information that is greater than a weather threshold level, seismic activity at the site is greater than a seismic threshold level, general environmental conditions at the site are unfavorable, building fire conditions, unauthorized site physical access conditions, power supply conditions, or network connectivity conditions. The method continues, for each site that is able to favorably support slice access, by selecting one or more storage units to support the accessing. The method continues by issuing access requests to the selected one or more storage units and receiving access responses from at least a threshold number of the selected one or more storage units.

Abstract: A method for execution by a container instance manager (CIM) includes determining to create a new instance of a first data container, where the first data container is stored in a first memory location. Creation of the new instance of the first data container for storage in a second memory location is facilitated in response to the determining to create the new instance. The method further includes determining to remove a duplicate instance of a second data container. Deletion of the duplicate instance of the second data container from memory is facilitated in response to the determining to remove the duplicate instance.

Abstract: A method for execution by a computing device within a dispersed storage network (DSN). The method beings when data accesses occur for a data object of a storage container within the DSN. The method continues by updating, for at least some of the data accesses, an object value for the data object to produce an updated object value. The method continues by updating an object retention cost for the data object to produce an updated object retention cost. The method continues by updating a data object retention policy for the data object based on the updated object value and the updated object retentions costs. When one of the data accesses is a deletion event, the method continues by utilizing a current updated data object retention policy to determine a deletion-retention option for the data object. The method continues by executing the deletion-retention option on the data object.

Abstract: Systems and Methods for encrypting and decrypting data in a dispersed storage network are disclosed. A data object may be encrypted using a data object specific encryption key, a container specific encryption key, a tenant account specific encryption key, or a time based encryption key. This specific, or more generally, secondary encryption key can be derived from a master or primary encryption key. Encryption key metadata pertaining to the master encryption key and the specific encryption key is also created and stored in the DSN. When reading an encrypted data object, the master encryption key can be retrieved and, along with the encryption key metadata, used to derive the specific encryption key. The specific encryption key can then be used to decrypt the encrypted data object to recover the data object.

Abstract: Systems and methods for replicating containers in object storage using intents are disclosed. A DS processing unit, upon reception of a write request may determine the location of replicated instances for the container. DS processing unit can then generate an intent for each fork, to indicate a specific write request received. The DS processing unit may save or persist intent objects within one of the containers, or in a dispersed data structure. A DS unit or DS processing unit may then check for intents whose operation has not been completed, and when resources to perform the operation are available, perform the operation specified in the intent. DS processing unit can remove a pending intent once the job or operation is complete. A clean-up agent could run periodically to complete unfinished jobs that are pending within DS processing unit or DS unit due to containers not being available for whatever reason.

Abstract: Methods for use in a dispersed storage network (DSN) to enable rapid retrieval of data. A first set of storage units of the DSN is configured as a performance optimized internal vault that utilizes dispersed error encoding/decoding parameters which provide improved data access performance in relation to a second set of storage units. Upon receiving a data object for storage, a computing device of the DSN determines, based on at least one performance criterion, to store the data object in the performance optimized internal vault as opposed to the second set of storage units. The data object is then dispersed storage error encoded, in accordance with dispersal parameters associated with storage of data in the internal vault, to produce a plurality of sets of performance encoded data slices, wherein the data object is segmented and each resulting data segment is encoded into a respective set of performance encoded data slices.

Abstract: Methods for use in a dispersed storage network (DSN) to determine appropriate resources for storing data. In various examples, a network control unit obtains status information relating to the DSN. The status information, which may be updated periodically, may include information relating to storage unit utilization, network loading and performance levels, data size indicators, access profiles specifying differentiated service levels, etc. Based on the status information, the network control unit maps each of a plurality of data classes to a plurality of sets of storage units, and generates network control information based on the mapping. The network control information, which may include routing instructions and storage set utilization information, is issued to a network routing unit for use in facilitating storage (e.g., via IP address translation) of differing classes of data in the sets of storage units in accordance with the mapping.

Abstract: A method includes receiving a request to access a set of encoded data slices from a user computing device, where the set of encoded data slices is stored in a set of storage units of a dispersed storage network (DSN). A storage container includes the set of storage units and supports a plurality of logical storage vaults. The method further includes determining a quality of service (QoS) matrix regarding the request when QoS issues exists. The QoS matrix includes classes for user computing devices, logical storage vaults, and storage containers, and a plurality of performance properties for each class. The method further includes determining QoS levels attributable to the user computing device, a first logical storage vault, and the storage container. The method further includes determining processing priority of the request based on the QoS matrix and levels and executing the request in accordance with the processing priority.

Abstract: Methods for use in a dispersed storage network (DSN) to determine appropriate resources for storing data. In various examples, a network control unit obtains status information relating to the DSN. The status information, which may be updated periodically, may include information relating to storage unit utilization, network loading and performance levels, data size indicators, access profiles specifying differentiated service levels, etc. Based on the status information, the network control unit maps each of a plurality of data classes to a plurality of sets of storage units, and generates network control information based on the mapping. The network control information, which may include routing instructions and storage set utilization information, is issued to a network routing unit for use in facilitating storage (e.g., via IP address translation) of differing classes of data in the sets of storage units in accordance with the mapping.

Abstract: A method for use in a distributed storage network (DSN) including multiple storage units and a distributed storage (DS) processing unit includes determining, by the DS processing unit, that at least a first storage unit is associated with a status level that fails to satisfy a threshold value associated with a first access request of a set of access requests. The DS processing unit also determines that at least a second storage unit is associated with a status level that satisfies the threshold value. The DS processing unit transmits the first access request to a performance unit, the performance unit configured to facilitate execution of alternative processing of the first access request, but transmits the second access request from the DS processing unit to the at least a second storage unit for standard processing.

Abstract: A method for execution by one or more processing modules of a dispersed storage network (DSN), the method begins when accessing a multi-site DSN, by determining, for each site, whether the site is able to favorably support slice access. Unfavorable conditions include any of: weather-related site availability information that is greater than a weather threshold level, seismic activity at the site is greater than a seismic threshold level, general environmental conditions at the site are unfavorable, building fire conditions, unauthorized site physical access conditions, power supply conditions, or network connectivity conditions. The method continues, for each site that is able to favorably support slice access, by selecting one or more storage units to support the accessing. The method continues by issuing access requests to the selected one or more storage units and receiving access responses from at least a threshold number of the selected one or more storage units.

Abstract: A method for a dispersed storage network (DSN) begins when storing data associated with a vault, by identifying a multicast IP address associated with the vault. The method continues by generating and sending a multicast IP message to a plurality of storage units of the DSN and extracting, by each storage unit receiving the multicast IP message, the multicast IP address. The method continues when the extracted IP address compares favorably to a subscribed IP address, by storing, by the storage unit, the one or more encoded data slices for storage and the corresponding slice name for each encoded data slice. The method continues by each storage unit issuing a status multicast IP message. The method continues when an extracted IP address of a plurality of received status multicast IP messages compares favorably to a subscribed IP address, by executing an associated task.

Abstract: A method for use in a distributed storage network (DSN) includes receiving, by a performance unit, access requests from a distributed storage (DS) processing unit. The access requests identify one or more storage units to which access is requested. The performance unit determines that at least a first storage unit is associated with a status level that fails to satisfy a threshold value associated with the access requests, and that at least a second storage unit is associated with a status level that does satisfy the threshold value. For the at least a first storage unit, the performance unit facilitates execution of an alternative approach to processing an access request corresponding to the first storage unit, and for the at least a second storage unit facilitates execution of a standard approach to processing an access request corresponding to the second storage unit.

Abstract: A method for execution by one or more processing modules of one or more computing devices of a dispersed storage network (DSN) begins, when processing a slice request of one or more encoded data slices associated with a vault within the DSN, by identifying a multicast IP address associated with the vault. The method continues by generating a multicast IP message. The method continues by sending the multicast IP message to a plurality of storage units of the DSN. The method continues by extracting, by each storage unit receiving the multicast IP message, the multicast IP address.

Abstract: Methods for use in a dispersed storage network (DSN) to determine appropriate resources for storing data such as large, multi-part data. In various examples, a network control unit obtains status information relating to the DSN. The status information, which may be updated periodically, may include information relating to storage unit utilization and performance levels, network loading and performance levels, data size indicators, etc. Based on the status information, the network control unit maps each of a plurality of sets of encoded data slices of data object to a set of storage units, and generates network control information based on the mapping. The network control information, which may include routing instructions and storage set utilization information, is issued to a network routing unit for use in facilitating storage (e.g., via IP address translation) of differing parts of the data object in the sets of storage units in accordance with the mapping.

Abstract: Methods for use in a dispersed storage network (DSN) to enable rapid retrieval of data. A first set of storage units of the DSN is configured as a performance optimized internal vault that utilizes dispersed error encoding/decoding parameters which provide improved data access performance in relation to a second set of storage units. Upon receiving a data object for storage, a computing device of the DSN determines, based on at least one performance criterion, to store the data object in the performance optimized internal vault as opposed to the second set of storage units. The data object is then dispersed storage error encoded, in accordance with dispersal parameters associated with storage of data in the internal vault, to produce a plurality of sets of performance encoded data slices, wherein the data object is segmented and each resulting data segment is encoded into a respective set of performance encoded data slices.