Abstract: A method, apparatus, and system determines an optimal storage configuration of storing backup data. The method may include receiving a request from a client device for determining an optimal storage configuration for storing backup data of a client. The method may include determining a cloud utilization pattern of the backup data based on prior access activities and determining a first suitability score for the first storage class based on the cloud utilization pattern. The method may include, for each of the storage classes of the first storage provider, determining a suitability score for the corresponding storage class if the backup data were stored in the corresponding storage class. The method may include transmitting to the client device a recommendation of a second storage class of the first storage provider having a suitability score higher than the first suitability score based on the suitability score to reduce cloud resources usage.

Abstract: Embodiments for retention locking a deduplicated file stored in cloud storage by defining object metadata for each object of the file, and comprising a lock count and a retention time based on an expiry date of the lock, with each object having segments, the object metadata further having a respective expiry date and lock count for each segment, where at least some segments are shared among two or more files. Also updating the lock count and retention time for all segments of the file being locked; and if the object is not already locked, locking the object using a retention lock defining a retention time and updating the object metadata with a new lock count and the retention time, otherwise incrementing the lock count and updating the retention time for the expiry date if expiry date of a previous lock is older than a current expiry date.

Abstract: One example method includes scanning, at a cloud storage site, metadata associated with an object stored at the cloud storage site, fetching, from the metadata, an object creation time for the object, and determining whether the object is out of a minimum storage duration. When the object is out of the minimum storage duration, it is copy-forwarded and then marked for deletion, and when the object is not out of the minimum storage duration, the object is deselected from a list of objects to be copied forward.

Abstract: One example method includes, at a replication data source, initiating a replication process that includes transmitting a replication stream to a replication destination vault, and data in the replication stream is transmitted by way of a closed airgap between the replication data source and the replication destination vault, switching, by the replication data source, from a transmit mode to a receive mode, receiving, at the replication data source, a first checksum of a file, and the first checksum and file were created at the replication destination vault, receiving, at the replication data source, the file, calculating, at the replication data source, a second checksum of the file, and when the second checksum matches the first checksum, ending the replication process.

Abstract: One example method includes a data protection operation such as an attack prevention or remediation operation. Policies, such as user policies, role policies, and/or container policies, are created. Prior to attaching to a user or a container, checksums are generated. After the policies are attached to the user or container in the cloud, changes to the policies can be detected using the previously generated checksums and comparing to checksums generated from the cloud policies. Corrective actions are taken when the comparison fails.

Abstract: A snapshot is taken of at least a portion of a file system having a set of files to retain over a retention duration. The snapshot is taken at a level of the file system or a directory of the file system. A retention lock is applied to the snapshot to block, over the retention duration, operations involving deletion of the snapshot. The retention lock is not applied to the set of files.

Abstract: A first flag is set on a backup file to which data to be backed up is written. The first flag indicates that the backup file should be automatically retention locked after a cooling off period is over. Before the cooling off period is over, a request is received to open the backup file for writes. The request is allowed and upon allowing the request, the first flag is cleared and a second flag is set on the backup file indicating that writes are in progress. The clearing of the first flag excludes the backup file from being automatically retention locked after the cooling off period is over.

Abstract: A method, apparatus, and system for determining a consistency marker object representing the latest consistent recovery point for a disaster recovery (DR) process is disclosed. A request to move data from a local storage to a cloud storage for the DR process at a target point in time is received. Then, a replication completion status of a replication process indicating whether the replication is complete or not is determined. Next, the replication completion status indicating the replication process is complete is detected. Thereafter, in response to detecting the replication completion status, the consistency marker object having the latest consistent point is written in a preconfigured directory in a bucket to determine the consistent recovery point for a future DR process without having to perform lengthy validations for the data and meta.

Abstract: Data protection operations including verification operations are disclosed. Objects written to a cloud tier are verified without reading the objects out of the cloud. A translation map is used that allows a cloud verifier engine to compare a checksum of an object generated at an local tier with a checksum of the object as stored in the cloud tier. Mismatches are identified and corrective actions can be taken by reconstructing and rewriting the object to the cloud tier. Garbage collection may be prevented from reclaiming data associated with objects that have not been verified.

Abstract: A storage capacity of a cloud storage system is determined. A recipe contains instructions for reclaiming storage of the cloud storage system. The storage capacity is insufficient to perform the entire recipe. In response, one or more data objects are deleted. A portion of the recipe is executed after the deletion. In some cases, local storage can be used for garbage collection when cloud storage is insufficient to perform even the portion of the recipe. Other embodiments are described and claimed.

Abstract: A lock is applied automatically without any user involvement, to each of one or more data objects stored by the data processing system. Each of the one or more locks prevent deletion, by any user, of the one or more data objects within a predetermined time frame. A cloud garbage collector marks the one or more data objects for a) deletion, or b) for lock extension, the garbage collector scheduled to run periodically at a period that is less than the predetermined time frame. The deletion or the lock extension is executed for the one or more data objects, based on marks by the garbage collector. Other embodiments are described and claimed.

Abstract: A command requesting creation of a backup file and issued by a client-side deduplication library is received. Upon creating the file, a first flag is set on the file indicating that the file should be automatically retention locked after a cooling off period has elapsed. During the cooling off period, a command requesting that the file be opened for writes is received. The first flag is cleared to exclude the file from being automatically retention locked after the cooling off period has elapsed. A second flag is set on the file indicating that writes to the file are in progress. A command requesting that the file be closed, the writes to the backup file thereby being complete, is received. The second flag is cleared. The first flag is reset to allow the file to be automatically retention locked after the cooling off period has elapsed.

Abstract: The disclosure provides a system, computer readable medium, and computer-implemented method for managing data access. The method includes obtaining a data access request from a requestor for client data redundantly stored in at least two storage providers that are unknown to the requestor; identifying a service level objective for servicing the data access request; ranking the at least two storage providers based on the service level objective to identify one of the at least two storage providers to service the data access request; and providing the requestor with access to a copy of the client data using the one of the at least two storage providers.

Abstract: A method, apparatus, and system determines an optimal storage configuration of storing backup data. The method may include receiving a request from a client device for determining an optimal storage configuration for storing backup data of a client. The method may include determining a cloud utilization pattern of the backup data based on prior access activities and determining a first suitability score for the first storage class based on the cloud utilization pattern. The method may include, for each of the storage classes of the first storage provider, determining a suitability score for the corresponding storage class if the backup data were stored in the corresponding storage class. The method may include transmitting to the client device a recommendation of a second storage class of the first storage provider having a suitability score higher than the first suitability score based on the suitability score to reduce cloud resources usage.

Abstract: A method, apparatus, and system for managing backup resource on a cloud for a plurality of backup servers is disclosed. A resource configuration for each cloud storage is received. The resource configuration includes allocated cloud resource amount and duration. Cloud operation utilization is calculated for each cloud storage. The cloud operation utilization is compared with the resource configuration to determine a total cloud operation utilization for each cloud storage. A plurality of rules is applied in view of the total cloud operation utilization to determine a plurality of cloud storage operational states. The cloud storage is configured to be in one of the plurality of cloud storage operational states based on the plurality of rules to limit an amount of data to be transmitted to and stored in the cloud storage within a predetermined period of time.

Abstract: Data protection operations including verification operations are disclosed. Objects written to a cloud tier are verified without reading the objects out of the cloud. A translation map is used that allows a cloud verifier engine to compare a checksum of an object generated at an local tier with a checksum of the object as stored in the cloud tier. Mismatches are identified and corrective actions can be taken by reconstructing and rewriting the object to the cloud tier. Garbage collection may be prevented from reclaiming data associated with objects that have not been verified.

Abstract: A method, apparatus, and system for determining a consistency marker object representing the latest consistent recovery point for a disaster recovery (DR) process is disclosed. A request to move data from a local storage to a cloud storage for the DR process at a target point in time is received. Then, a replication completion status of a replication process indicating whether the replication is complete or not is determined. Next, the replication completion status indicating the replication process is complete is detected. Thereafter, in response to detecting the replication completion status, the consistency marker object having the latest consistent point is written in a preconfigured directory in a bucket to determine the consistent recovery point for a future DR process without having to perform lengthy validations for the data and meta.

Abstract: One example method includes receiving at a dedupe system, from a client, a request that comprises a set of fingerprints, where each fingerprint in the set corresponds to a particular data segment, filtering, at the dedupe system, the set of fingerprints into a set of unique fingerprints and a set of non-unique fingerprints, reading, at the dedupe system, from a container where copies of the non-unique fingerprints are stored, an additional set of non-unique fingerprints, sending, from the dedupe system to the client, a single response that comprises both the set of unique fingerprints and the additional set of non-unique fingerprints, and receiving from the client, at the dedupe system, data segments that respectively correspond to the unique fingerprints in the set of unique fingerprints, but no data segments corresponding to the non-unique fingerprints in the set of non-unique fingerprints are received by the dedupe system from the client.

Abstract: A method, system and computer-readable storage medium for transferring data segments from one computer system to a second computing system. Prior to transfer of the data segments, the first system calculates compressibility ratio of each segment and compares the compressibility ratio to a preset threshold. Based on the comparison, the first system assigns a compressibility hint to each segment. The first system transfers the segments to the second system, together with the corresponding compressibility hint. The second system stores each segment in a compressible region or in a non-compressible region based on the hint. Then the second system compresses the compressible region and stores the compressed region in a container, and stores the non-compressible region uncompressed in the container.

Abstract: A method, system and computer-readable storage medium for data backup by a backup server having local storage. In normal mode of operation the backup server stores any ingest data in the local storage. A redirect monitor continuously monitors the capacity utilization of the local storage. When the capacity utilization surpasses a preset threshold, the backup server is switched to operate in redirect mode, where newly received ingest data is redirected to alternate storage. The alternate storage may be, e.g., cloud storage or storage as a service facility. Thereafter the redirect monitor checks the utilization of the local storage and if that drops below a preset safety margin, the backup server reverts to normal operating mode. The backup server may or may not copy all redirected data from the alternate storage to the local storage, depending on the setup.