Abstract: A method for managing write requests in a storage system, the method may include receiving, by a receiving control node out of a group of control nodes of the storage system, a write request for writing a data unit to the storage system; storing the data unit in a first layer storage that is shared among the control nodes of the group, by the receiving control node; retrieving the data unit from the first layer storage and destaging the data unit to a second layer storage by a destaging control node that belongs to the group and is responsible for destaging the data unit; wherein at a time of the destaging of the data unit to the second layer storage another control node of the group is responsible for destaging another data unit to the second layer storage; wherein the storing of the data unit in the first layer storage is faster than the destaging of the data unit to the second layer storage; and when the destaging control node differs from the receiving control node then each one of the receiving and the s

Abstract: A method for synchronizing between a primary control node of a storage system and a secondary control node of the storage system, the method may include performing a change in a key-value store that is stored in shared memory of the storage system and includes control metadata for controlling access to data stored in the storage system; the shared memory is accessible to the primary control node and to a secondary control node; generating a change indication that (i) is indicative of the change in the key-value store and (ii) requests the secondary control node to introduce changes in one or more additional data structures that are not stored in the shared memory; the change in the key-value store comprises replacing a previous given value with a current given value that is associated with a given key; sending the change indication to the secondary control node; receiving an acknowledgement from the secondary control node; wherein the acknowledgement indicates at least one of the following: (i) the secondary

Abstract: Managing a networked storage system having a host operable to connect through a network fabric to storage apparatus comprises: a configuration component for inputting a configuration change into the networked storage system responsive to change instructions; a monitoring component operable in communication with the host and the network fabric to monitor I/O activity associated with elements of the networked storage system; an activity data storage component responsive to the monitoring component for storing a record of a monitored I/O activity; an analysis component, responsive to the configuration component for inputting configuration changes, for analyzing the record of a monitored I/O activity for a recent activity; and an alert component, responsive to the analysis component detecting a recent activity, for alerting the configuration component.

Abstract: Managing a networked storage system having a host operable to connect through a network fabric to storage apparatus comprises: a configuration component for inputting a configuration change into the networked storage system responsive to change instructions; a monitoring component operable in communication with the host and the network fabric to monitor I/O activity associated with elements of the networked storage system; an activity data storage component responsive to the monitoring component for storing a record of a monitored I/O activity; an analysis component, responsive to the configuration component for inputting configuration changes, for analysing the record of a monitored I/O activity for a recent activity; and an alert component, responsive to the analysis component detecting a recent activity, for alerting the configuration component.

Abstract: Managing a networked storage system having a host operable to connect through a network fabric to storage apparatus comprises: a configuration component for inputting a configuration change into the networked storage system responsive to change instructions; a monitoring component operable in communication with the host and the network fabric to monitor I/O activity associated with elements of the networked storage system; an activity data storage component responsive to the monitoring component for storing a record of a monitored I/O activity; an analysis component, responsive to the configuration component for inputting configuration changes, for analysing the record of a monitored I/O activity for a recent activity; and an alert component, responsive to the analysis component detecting a recent activity, for alerting the configuration component.

Abstract: The presently disclosed subject matter includes, inter alia, a storage system and a method of managing allocation of data in case an enclosure in a storage system becomes unavailable. The storage system has a storage space configured as a plurality of RAID groups, each RAID group comprising N parity members. According to one aspect of the disclosed subject matter, responsive to a write request, at least one section allocated to a disk in an unavailable enclosure is identified; at least one temporary RAID group in a spare storage space of the storage system is allocated and data related to the write request is written to the alternative RAID group.

Abstract: According to the teaching disclosed herein there is provided at least a method, system and device for managing a cache memory of a storage system. The storage system is associated with at least one physical storage device and, responsive to a read request, comprising information indicative of a logical address of at least one requested data unit, to obtain a storage physical address associated with the logical address, search the cache memory for a data unit associated with the storage physical address and service the request from the cache in case the data unit is found in the cache memory.

Abstract: In accordance with one or more embodiments, an inode implemented file system may be utilized to support both offline and inline deduplication. When the first content is stored in the storage medium, one inode is used to associate a filename with the data blocks where the first content is stored. When a second content that is a duplicate of the first content is to be stored, then a parent inode is created to point to the data blocks in which a copy of the first content is stored. Further, two inodes are created, one representing the first content and the other representing the second content. Both inodes point to the same parent inode that points to the data blocks where the first content is stored.

Abstract: The presently disclosed subject matter includes, inter alia, a storage system and a method of managing allocation of data in case an enclosure in a storage system becomes unavailable. The storage system has a storage space configured as a plurality of RAID groups, each RAID group comprising N parity members. According to one aspect of the disclosed subject matter, responsive to a write request, at least one section allocated to a disk in an unavailable enclosure is identified; at least one temporary RAID group in a spare storage space of the storage system is allocated and data related to the write request is written to the alternative RAID group.

Abstract: According to the teaching disclosed herein there is provided at least a method, system and device for managing a cache memory of a storage system. The storage system is associated with at least one physical storage device and, responsive to a read request, comprising information indicative of a logical address of at least one requested data unit, to obtain a storage physical address associated with the logical address, search the cache memory for a data unit associated with the storage physical address and service the request from the cache in case the data unit to is found in the cache memory.

Abstract: Systems and methods for optimizing deduplication in a data storage system are provided. The method comprises associating a first name with first data blocks including first content stored in a data storage system, wherein the first name is associated with the first data blocks by way of a reference to a first meta file that points to a data file which points to the first data blocks; storing a first signature derived from the first content in an indexing data structure, wherein the first signature is used to associate the first name with the first data blocks and as means to verify whether a second content is a duplicate of the first content, based on value of a second signature derived from the second content.

Abstract: In accordance with one or more embodiments, an inode implemented file system may be utilized to support both offline and inline deduplication. When the first content is stored in the storage medium, one inode is used to associate a filename with the data blocks where the first content is stored. When a second content that is a duplicate of the first content is to be stored, then a parent inode is created to point to the data blocks in which a copy of the first content is stored. Further, two inodes are created, one representing the first content and the other representing the second content. Both inodes point to the same parent inode that points to the data blocks where the first content is stored.

Abstract: A shared key and a private key unique to one or more resource sets are generated. Each of the resource sets identifies the resource. The shared key and the private key are transmitted to a security access point. The security access point controls access to the resource. A resource key is generated. The resource key is a result of a cryptographic function of the private key and a resource identifier. The resource key and the shared key are transmitted to one or more local security managers. Each of the local security managers is assigned to manage one of the resource sets. In accordance with one or more policies, the local security managers generate a credential using the resource key and the shared key. The credential is distributed to one or more authenticated clients. Further, the credential is used to grant the one or more authenticated clients access to the resource sets through the security access point.

Abstract: In an illustrative embodiment, a method, computer program product, and apparatus for managing encryption of data are provided. The method comprises determining whether the number of data units contains a known pattern responsive to receiving a number of data units to write to a storage device; storing the number of data units on the storage device in an unencrypted form responsive to a determination that the number of data units contains the known pattern; encrypting the number of data units to form encrypted data units responsive to an absence of a determination that the data contains the known pattern; and storing the encrypted data units on the storage device.

Abstract: Provided are a system and article of manufacture for copying storage. Copy operations are performed on source storage units to copy to target storage units, wherein the copy operations create a consistent copy of the source storage units in the target storage units. While performing a copy operation to copy from one source storage unit to one target storage unit, a write operation is restricted from being performed on the one source storage unit, until the copy operations have been performed on the source storage units.

Abstract: Techniques for controlling access to at least one resource are provided. At least one shared key and at least one private key unique to one or more resource sets are generated. Each of the one or more resource sets identify the at least one resource. The at least one shared key and the at least one private key are transmitted to a security access point. The security access point controls access to the at least one resource. At least one resource key is generated. The resource key is a cryptographic function of the at least one private key and at least one resource identifier. The at least one resource key and the at least one shared key are transmitted to one or more local security managers. Each of the one or more local security managers is assigned to manage one of the one or more resource sets. In accordance with one or more policies, the one or more local security managers generate at least one credential using the at least one resource key and the at least one shared key.

Abstract: A two-phase process FlashCopy operation is provided that can be used to aid in the formation of consistency groups across multiple storage control units. In the first phase, preparations to create a new consistency group are made “revertible” by write-inhibiting the source volumes through “Establish-FlashCopy-revertible” commands. If the preparation of any volume within the consistency group fails, a “Withdraw-FlashCopy-revert” command may be executed, thereby causing a retention of the prior FlashCopy point-in-time copy. In the second phase, executed if all preparations are successful, a “Withdraw-FlashCopy-commit” command may be executed to remove all write-inhibit indicators, complete the creation of the new FlashCopy point-in-time copy and secure the new consistency group. Write requests to the FlashCopy source volumes may then be received and processed without risking corruption of the new consistency group on the Flashcopy target volumes.

Abstract: Managing a networked storage system having a host operable to connect through a network fabric to storage apparatus comprises: a configuration component for inputting a configuration change into the networked storage system responsive to change instructions; a monitoring component operable in communication with the host and the network fabric to monitor I/O activity associated with elements of the networked storage system; an activity data storage component responsive to the monitoring component for storing a record of a monitored I/O activity; an analysis component, responsive to the configuration component for inputting configuration changes, for analysing the record of a monitored I/O activity for a recent activity; and an alert component, responsive to the analysis component detecting a recent activity, for alerting the configuration component.

Abstract: Provided are a system and article of manufacture for copying storage. Copy operations are performed on source storage units to copy to target storage units, wherein the copy operations create a consistent copy of the source storage units in the target storage units. While performing a copy operation to copy from one source storage unit to one target storage unit, a write operation is restricted from being performed on the one source storage unit, until the copy operations have been performed on the source storage units.

Abstract: A method for accessing a storage device, the method includes: receiving, by storage device, a block based storage access command and cryptographically secured access control information; wherein the block based storage access command and the cryptographically secured access control information are associated with at least one fixed size block of data and with a client; processing at least a portion of the cryptographically secured access control information by using a secret key accessible to the storage device and to a security entity; and selectively executing the block based storage access command in response to a result of the processing.