Abstract: One example method includes receiving, at an IO journal, a new entry that identifies a respective disk location L, and data X written at that disk location L, and determining whether a location specified in an oldest entry of the IO journal is specified in any other entries in the IO journal. When the location specified in the oldest entry is not specified in any other entries in the IO journal, adding the new entry to the IO journal, and augmenting the new entry with undo data. Or, when the location specified in the oldest entry is specified in at least one other entry in the IO journal, setting data specified in the oldest entry as undo data for the next entry that identifies that location, and adding the new entry to the IO journal, and deleting the oldest entry from the IO journal.

Abstract: A system, method and computer readable medium for examining a specimen, the method comprising: obtaining defects of interest (DOIs) and false alarms (FAs) from a review subset selected from a group of potential defects received from an inspection tool, each potential defect is associated with attribute values defining a location of the potential defect in an attribute space; generating a representative subset of the group, comprising potential defects selected in accordance with a distribution of the potential defects within the attribute space, and indicating the potential defects in the representative subset as FA; and training a classifier using data informative of the attribute values of the DOIs, the potential defects of the representative subset, and respective indications thereof as DOIs or FAs, wherein the trained classifier is to be applied to at least some of the potential defects to obtain an estimation of a number of expected DOIs.

Abstract: Any point in time backups for distributed consistency is disclosed. IOs from a consistency group are received by multiple aggregators and stored in corresponding journals. In response to a bookmark, the multiple journals are synthesized to create a do stream or to add the multiple journals to the do stream. A full synchronization operation can be performed simultaneously with replication operations.

Abstract: One example method includes intercepting an IO issued by an application, writing the IO and IO metadata to a splitter journal in NVM, forwarding the IO to storage, and asynchronous with operations occurring along an IO path between the application and storage, evacuating the splitter journal by sending the IO and IO metadata from the splitter journal to a replication site. In this example, sending the IO and IO metadata from the journal to the replication site does not increase a latency associated with the operations on the IO path.

Abstract: One example method includes intercepting an IO issued by an application, writing the IO and IO metadata to a splitter journal in NVM, forwarding the IO to storage, and asynchronous with operations occurring along an IO path between the application and storage, evacuating the splitter journal by sending the IO and IO metadata from the splitter journal to a replication site. In this example, sending the IO and IO metadata from the journal to the replication site does not increase a latency associated with the operations on the IO path.

Abstract: A live image of a virtual machine is disclosed. When generating a live image, an image of a virtual machine is generated. A journal is also generated that starts before a start time of the image and ends after the start time of the image. A live image is then generated by synchronizing the start time of the image with the journal. This includes evaluating or analyzing the journal relative to the backup to determine or synchronize the start time relative to the entries in the journal.

Abstract: Disaster recovery operations are disclosed. A copy of data may include segments and delta journals or journals. RTO can be reduced by pre-processing the delta journals after the segments and delta journals are uploaded. The RTO is improved during recovery because the need to process the delta journals is eliminated. Applying the delta journals can be performed to both reduce cost and RTO using graphs.

Abstract: One example method includes intercepting an IO issued by an application of a VM, the IO including IO data and IO metadata, storing the IO data in an IO buffer, writing the IO metadata and a pointer, but not the IO data, to a splitter journal in memory, wherein the pointer points to the IO data in the IO buffer, forwarding the IO to storage, and asynchronous with operations occurring along an IO path between the application and storage, evacuating the splitter journal by sending the IO data and the IO metadata from the splitter journal to a replication site.

Abstract: Generating any point in time backups without native snapshot generation. Production data is split such that a journal stream is sent to a data protection system, which may be local or remote. The journal stream includes a data stream and a metadata stream. Backups are synthesized at the data protection system by rolling at least a portion of the journal. A backup for any point in time represented in the journal can be synthesized.

Abstract: One example method includes intercepting an IO that is directed to a volume, writing the IO to a grid-CG that is one of a plurality of grid-CGs that collectively form a distributed CG, adding the IO to a stream journal associated with the grid-CG, receiving a bookmark request, in response to the bookmark request, inserting a bookmark in the stream journal, incrementing a splitter counter and broadcasting a splitter counter value to the grid-CGs in the distributed CG, and inserting the bookmark in respective stream journals of the grid-CGs in the distributed CG.

Abstract: One example method includes intercepting an IO issued by an application, writing the IO and IO metadata to a splitter journal in NVM, forwarding the IO to storage, and asynchronous with operations occurring along an IO path between the application and storage, evacuating the splitter journal by sending the IO and IO metadata from the splitter journal to a replication site. In this example, sending the IO and IO metadata from the journal to the replication site does not increase a latency associated with the operations on the IO path.

Abstract: One example method includes capturing IOs, adding the IOs to a journal, adding undo data to the journal for one or more locations, and using the IOs and the undo data to determine when, during a timespan defined by the journal, a backup could have been taken. This determination may involve the use of undo data which indicates what the content of a particular location was prior to the first IO directed to that location during the timespan defined by the journal.

Abstract: One example method includes intercepting an IO issued by an application, writing the IO and IO metadata to a splitter journal in NVM, forwarding the IO to storage, and asynchronous with operations occurring along an IO path between the application and storage, evacuating the splitter journal by sending the IO and IO metadata from the splitter journal to a replication site.

Abstract: One example method includes intercepting an IO issued by an application, writing the IO and IO metadata to a splitter journal in NVM, forwarding the IO to storage, and asynchronous with operations occurring along an IO path between the application and storage, evacuating the splitter journal by sending the IO and IO metadata from the splitter journal to a replication site.

Abstract: Generating any point in time backups from secondary storage without native snapshot generation and providing failover capabilities from a primary storage. Data or IOs from a source are distributed to both the primary storage and the secondary storage. When a disaster occurs with one of these storages, recovery of one of the storages can be achieved using a delta marker and data from the other of the storages.

Abstract: Retroactive backup compliance. A data stream from a production site is stored in secondary storage associated with a data protection system. In response to an event such as a regulation change or a service level agreement change, backups are generated retroactively from the stored data stream. Backups are generated to correspond to times in the past. Backups can also be replaced, deleted, or generated ad-hoc. Further, the retroactively generated backups are generated to be consistent.

Abstract: Prioritization and quality of service control operations for any PiT replication operations. When replicating data from a production site to a replica site, the transmission of data is prioritized based on the perspective of a splitter and based on the perspective of an appliance, which may coordinate with multiple splitters. Quality is controlled by prioritizing which data is sent. The transmission may also perform compression when transmitting the data and may handle situations where available resources are scarce or unavailable.

Abstract: Systems and methods for replicating data from storage. Snapshots are taken on a consistency group of volumes and are stored in snapshot volumes. Changes to the data stored in the volumes are identified from the snapshots and the changes are written to a journal. The journal allows the changes to be replicated to a virtual replication system and a physical replication system. The journal can be replicated to different systems, including physical and virtual systems, by exposing the same journal in different manners.

Abstract: One example method includes exposing a block storage which is distributed across a group of multiple sites, receiving a primary write request that identifies data to be stored, separating data identified in the primary write request into multiple data pieces, encoding the data pieces by creating multiple new blocks of data based on the multiple data pieces, where the data pieces are encoded in such a way that when a sufficient number, but fewer than all, of the multiple new blocks of data are retrieved, the data identified in the write request is recoverable by decoding, and writing the new blocks of data to different respective sites of the group, where writing of the new blocks of data is performed in conjunction with a plurality of secondary write requests, each of which corresponds to one of the new blocks of data.

Abstract: A data protection system configured to replicate data may generate rescue packages that allow the system to recover when communication between a splitter or source of the production data being replicated and an appliance that stores the replicated data is disrupted. The rescue package is stored on a datastore and is then retrieved by the data protection system or another splitter. After processing the rescue package, which may contain IOs that the data protection is unaware of due to the communication disruption, replication may resume normally.