US20160306708A1 - De-duplication systems and methods for application-specific data - Google Patents

Abstract

Content-aware systems and methods for improving de-duplication, or single instancing, in storage operations. In certain examples, backup agents on client devices parse application-specific data to identify data objects that are candidates for de-duplication. The backup agents can then insert markers or other indictors in the data that identify the location(s) of the particular data objects. Such markers can, in turn, assist a de-duplication manager to perform object-based de-duplication and increase the likelihood that like blocks within the data are identified and single instanced. In other examples, the agents can further determine if a data object of one file type can or should be single-instanced with a data object of a different file type. Such processing of data on the client side can provide for more efficient storage and back-end processing.

Description

RELATED APPLICATIONS
• Any and all applications for which a foreign or domestic priority claim is identified in the Application Data Sheet, or any correction thereto, are hereby incorporated by reference into this application under 37 CFR 1.57.
BACKGROUND
• 1. Field
• Embodiments of the invention relate to data management and, in particular, to systems and methods for reducing duplicate data in a computer system.
• 2. Description of the Related Art
• With the increased reliance on computer systems to store critical information, the importance of protecting information has grown. As a result, certain storage systems receive an identification of a file to protect and then create one or more secondary copies, such as backup files, containing the contents of the file. These secondary copies can then later be used to restore the original data should anything happen to the original data.
• In corporate environments, protecting information is generally part of a routine process that is performed for many computer systems within an organization. For example, a company might back up critical computing systems related to e-commerce such as databases, file servers, web servers, and so on as part of a daily, weekly, or monthly maintenance schedule. The company may also protect computing systems used by each of its employees, such as those used by an accounting department, marketing department, engineering department, and so forth.
• Although each computer system contains certain unique information, many systems may contain very similar information. For example, although a computing system used by a marketing employee and a computing system used by an engineering employee will generally contain unique information created by each employee in the course of their work, both computing systems will likely have the same operating system installed, with thousands of identical or similar files used by the operating system. Similarly, both computing systems will likely have at least some similar application programs installed, such as a word processor, spreadsheet, Internet browser, and so on. Both systems may also have similar corporate information. For example, each employee may have an electronic copy of an employee manual distributed by the company. Information other than files may also be identical or similar between systems. For example, user settings and preferences may have similar default values on each system and application programs may contain similar templates on each system that are stored as application-specific information. As another example, several employees may have received a copy of the same email, and the email may be stored in each employee's electronic mailbox.
• As a result of the amount of redundant information in an organization, secondary copies of an organization's information are often very large and can require the purchase of expensive storage devices and storage media. The restoration of data in the event of data loss is also slowed by the large size of the secondary copies. As the size of secondary copies increases, locating and restoring information requires more actions to be taken. For example, it may be necessary to search many tapes or other media to find the correct secondary copy. The great quantity of storage media, such as tapes, may mean that some secondary storage media has been moved offsite requiring that it first be retrieved before information can be recovered from it. Each of these factors increases the cost of protecting information and the time required to recover information in the event of data loss. Quick recovery of information is often critical to today's businesses, and any additional delay can affect business operations and customers' satisfaction with the business.
SUMMARY
• Single instancing in a data management system is the process of attempting to store only a single instance of a file or data object. Certain objects are often stored in large, monolithic files that are intended to be read only by the application that created them. For example, a MICROSOFT EXCHANGE email server stores email messages in one or more large data files that typically hold thousands of different users' mailboxes. As another example, a database server often stores tables, forms, reports, and other data objects in one or two large data files that provide persistence for the entire database.
• Thus, typical data management systems are only able to perform data management operations on the large data file, rather than the data objects themselves. In the case of the email server, a given electronic mail application may generate multiple email messages that all differ, but which all contain the same attachment. Prior systems may not be able to differentiate these messages, and thus each would be stored with the attachment. Further, if two files had different properties or metadata, such prior systems would store both files, even though the data they contain are identical and differ only by their metadata.
• In view of the foregoing, certain embodiments of the invention include a de-duplication system for managing application-generated data objects. The system comprises a first backup agent executing on a first client device and a de-duplication module executing on a computing device. The first backup agent is configured to, in response to a storage operation request: parse first application-specific data of the first client device that is the subject of the storage operation request, the first application-specific data comprising a plurality of first data objects having different sizes; identify, based at least on an application that generated the first application-specific data, one or more of the plurality of first data objects of the first application-specific data to be considered for de-duplication, wherein the one of more first data objects comprises less than the entire first application-specific data; and insert at least one indicator in the first application-specific data that identifies at least one location of the one or more first data objects within the first application-specific data. The de-duplication module is in communication with the first backup agent to receive the first application-specific data and is configured to: process each of the one or more data objects; and, based on said processing, determine if a duplicate copy of any of the one or more first data objects exists in a storage device.
• In certain embodiments, a method is disclosed for managing application-generated data objects. The method comprises receiving a first storage operation request for first data generated by a first application executing on a first client device, the first data comprising a plurality of first data objects having non-uniform sizes. The method further comprises parsing the first data to identify one or more of the plurality of first data objects to be considered for de-duplication. The method also includes inserting at least one indicator in the first data that identifies at least one location of the one or more first data objects within the first data and processing each of the one or more first data objects to determine if a duplicate copy of the one or more first data objects exists in at least one storage device. For each of the one or more first data objects, if a duplicate copy does not exist in the storage device, the method stores the first data object in the at least one storage device. Otherwise, a stub file and/or a pointer is stored in place of the first data object in the storage device.
• In certain embodiments, a method is disclosed for managing application-generated data objects. The method includes receiving a first storage operation request for first data generated by a first application executing on a first client device, the first data comprising a plurality of first data objects. The method also includes parsing the first data to identify one or more of the first data objects to be considered for de-duplication and receiving a second storage operation request for second data generated by a second application, the second data comprising a plurality of second data objects, and the second data having a different file format than the first data. The method further includes parsing the second data to identify one or more of the plurality of second data objects to be considered for de-duplication. In addition, the method includes inserting in the first data and/or the second data an indicator that denotes, based on the first and second file formats, that the one or more first data objects should not be single instanced with the one or more second data objects.
• In certain embodiments, a system is disclosed for managing application-generated data objects. The system includes means for receiving a first storage operation request for first data generated by a first application executing on a first client device, the first data comprising a plurality of first data objects having differing sizes. The system also includes means for parsing the first data to identify one or more of the first data objects to be considered for de-duplication, wherein the one of more first data objects comprises less than the entire first data; means for inserting at least one indicator in the first data that identifies at least one location of the one or more first data objects within the first data; and means for processing each of the one or more first data objects to determine if a duplicate copy of the first data object exists in at least one storage device. In addition, the system includes means for (i) storing each of the one or more first data objects in the storage device that does not have a duplicate copy and (ii) storing a stub and/or a pointer in place of each of the one or more first data objects that does have a duplicate copy in the at least one storage device.
• In certain embodiments, a method is disclosed for managing data in a computer system. The method comprises accessing first data, the first data comprising at least one first data object in a first file format, and accessing second data, the second data comprising at least one second data object in a second file format, the second file format being different than the first file format. The method further comprises inserting in at least one of a copy of the first data and a copy of the second data an indicator that denotes that, based on the first and second file formats, the at least one first data object cannot or should not be single instanced with the at least one second data object.
• In certain embodiments, the method is performed by one or more content-aware data agents residing on one or more client devices. Such agents can advantageously identify portions of data to be backed up, archived or otherwise stored to be considered for possible de-duplication.
• In certain embodiments, a de-duplication system is disclosed for managing application-generated data objects. The system comprises a first backup agent executing on a first client device, the first backup agent being configured to, in response to a storage operation request: (i) parse first application-specific data of the first client device that is the subject of the storage operation request,(ii) identify one or more first data objects of the first application-specific data to be considered for de-duplication, and (iii) insert an indicator in a copy of the application-specific data that identifies the one or more first data objects to be considered for de-duplication.
• For purposes of summarizing the disclosure, certain aspects, advantages and novel features of the inventions have been described herein. It is to be understood that not necessarily all such advantages may be achieved in accordance with any particular embodiment of the invention. Thus, the invention may be embodied or carried out in a manner that achieves or optimizes one advantage or group of advantages as taught herein without necessarily achieving other advantages as may be taught or suggested herein.
BRIEF DESCRIPTION OF THE DRAWINGS
• FIG. 1 is a block diagram that illustrates components of a single instancing system in accordance with one embodiment of the invention.
• FIG. 2 is a block diagram that illustrates an example data file containing data objects.
• FIG. 3A is a block diagram that illustrates the flow of data during a storage operation, in one embodiment.
• FIG. 3B is a block diagram that illustrates components of a content-aware de-duplication system in accordance with certain embodiments of the invention.
• FIG. 3C illustrates exemplary fields of a chunk file usable with the de-duplication system ofFIG. 3B in accordance with certain embodiments of the invention.
• FIG. 4 is a flow diagram that illustrates processing of a storage operation manager component of the single instancing system, in one embodiment.
• FIG. 5 is a flow diagram that illustrates processing of the single instancing system to determine whether a data object is unique, in one embodiment.
• FIG. 6 is a flow diagram that illustrates processing of the storage operation manager component to restore data, in one embodiment.
• FIG. 7 is a block diagram that illustrates an environment in which the single instancing system may be configured to operate.
• FIG. 8 is a flow diagram that illustrates copying a remote file or data object in the environment ofFIG. 7
• FIG. 9 is a block diagram that illustrates another environment in which the single instancing system may be configured to operate.
• FIG. 10 is a flow diagram that illustrates copying a remote file or data object in the environment ofFIG. 9.
• FIG. 11 is a block diagram that illustrates another environment in which the single instancing system may be configured to operate.
• FIG. 12 is a flow diagram that illustrates copying a remote file or data object in the environment ofFIG. 11.
• In the drawings, the same reference numbers and acronyms identify elements or acts with the same or similar functionality for ease of understanding and convenience. To easily identify the discussion of any particular element or act, the most significant digit or digits in a reference number refer to the Figure number in which that element is first introduced (e.g., element604 is first introduced and discussed with respect toFIG. 6).
DETAILED DESCRIPTION OF CERTAIN EMBODIMENTS
• The headings provided herein are for convenience only and do not necessarily affect the scope or meaning of the claimed invention.
• Overview
• Described in detail herein are single instancing systems that more intelligently identify multiple copies of the same data object. For example, certain embodiments of the single instancing system recognize documents, files, or data objects produced by multiple different applications, and can parse through and identify those data objects common among data blocks within a file, and thereby only copy a single instance of those common data objects. Further embodiments parse the proprietary data formats of many applications and can identify data objects related to the application, even when those data objects are stored in large, monolithic data files. In addition, if two documents, files, or data objects are substantially similar, but have differing metadata, such as different user permissions, embodiments of the single instancing system can store a single instance of the data object, but retain all differing versions of the metadata (for example, such as by retaining the different user permissions). When a client requests the data object, the single instancing system returns appropriate metadata based on the identity of the client or other information.
• According to other embodiments of the single instancing system, if multiple clients and associated media agents are in remote locations, the single instancing system may perform backup of data to a local, single instance database or data store at each remote location. Then, the single instancing system may use continuous data replication (CDR) to copy the data contained in each local data store to a central location.
• In further embodiments, content-aware systems and methods are disclosed for improving de-duplication/single instancing in storage operations. In certain examples, backup agents on client devices parse application-specific data to identify data objects that are likely candidates for de-duplication. The backup agents can then insert markers or other indictors in the data that identify the location(s) of the particular data objects. Such markers can, in turn, assist a de-duplication manager to perform object-based de-duplication and increase the likelihood that like blocks are identified within the data. In other examples, the agents can further determine if a data object of one file type can, or should, be single-instanced with a data object of a different file type. Such processing of data on the client side can provide for more efficient storage and back-end processing in a data storage system.
• The invention will now be described with respect to various embodiments. The following description provides specific details for a thorough understanding of, and enabling description for, these embodiments of the invention. However, one skilled in the art will understand that the invention may be practiced without these details. In other instances, well-known structures and functions have not been shown or described in detail to avoid unnecessarily obscuring the description of the embodiments of the invention.
• The terminology used in the description presented below is intended to be interpreted in its broadest reasonable manner, even though it is being used in conjunction with a detailed description of certain specific embodiments of the invention. Certain terms may even be emphasized below; however, any terminology intended to be interpreted in any restricted manner will be overtly and specifically defined as such in this Detailed Description section.
• Unless described otherwise below, embodiments of the invention may be practiced with various data processing systems. Thus, the construction and operation of the various blocks shown inFIG. 1 need not be described in further detail herein to make and use the invention, because such blocks will be understood by those skilled in the relevant art. One skilled in the relevant art can readily make any modifications necessary to the blocks inFIG. 1 (or other embodiments or figures) based on the detailed description provided herein.
• FIG. 1 is a block diagram that illustrates components of asingle instancing system100, in one embodiment. Thesingle instancing system100 contains afile identification component110, anidentifier generation component120, anidentifier comparison component130, a singleinstance database component140, a restoredfile cache component150, a storageoperation manager component160, an applicationdata extraction component170, and aremote synchronization component180.
• Thefile identification component110 identifies files or data objects, such as in response to a storage operation. As used herein, the terms “file” or “data object” are broad terms and are used in their ordinary sense and include, without limitation, any collection or grouping of bytes of data that can be viewed as one or more logical units. For example, a file could be a computer file on a file system (for example, a word processing file, a spreadsheet file, a database file, etc.) As another example, a data object could be a file or within a file (e.g., an embedded object within a word processing file, a cell or a row in a spreadsheet file, a table or an entry in a table in a database file, a string, an array, or any other collection of electronic information). Moreover, data objects need not be limited to units of the same size but can comprise, in certain embodiments, multiple objects of differing sizes. Thefile identification component110 may retrieve additional information related to a file or data object, such as its size, that is used by thesingle instancing system100 to uniquely identify the data object.
• When thefile identification component110 identifies a file, the applicationdata extraction component170 determines whether the file contains additional data objects. For example, the file may be an application-specific container (for example, a database file), that stores data objects such as documents, email messages, and other collections of data. The applicationdata extraction component170 would determine that each of the data objects within the application-specific container should be identified.
• Theidentifier generation component120 generates a substantially unique identifier of a file or data object that is used to determine if another file or data object already stored by the single instancing system matches the file or data object used to generate the substantially unique identifier. Theidentifier comparison component130 performs comparisons of identifiers of various files or data objects to determine if the files or data objects contain similar data (for example, theidentifier comparison component130 can compare substantially unique identifiers of two or more files or data objects to determine if the files or data objects contain similar data).
• The singleinstance database component140 is a data store that contains entries identifying files or data objects managed by thesingle instancing system100, and may also contain supplemental information associated with files or data objects, such as a substantially unique identifier, a path, a location, a reference count, a file size or other information. The restoredfile cache component150 provides an intermediate location that may be used by thesingle instancing system100 during a restore operation to hold instances of files or data objects for which additional references may need to be restored.
• For example, during a restore operation, the single instancing system may restore files or data objects to the cache and then transfer the files or data objects to a target location of the restore operation. When thesingle instancing system100 encounters a reference to a single instance copy of a file or data object, thesingle instancing system100 may consult the restoredfile cache component150 or an index. Thesingle instancing system100 does so to determine if the file or data object is present in the cache before attempting to restore the file or data object from another location, such as from secondary storage (for example, a tape).
• The storageoperation manager component160 coordinates storage operations and invokes the other components of thesingle instancing system100 as needed to perform requested storage operations. For example, the storageoperation manager component160 may include an application used by an administrator to manage thesingle instancing system100. The storageoperation manager component160 may also maintain indexes of the data objects and each of the references to those data objects through thesingle instancing system100, as well as pending operations on the data objects that are part of a data management plan of an organization implementing thesingle instancing system100.
• Theremote synchronization component180 performs single instancing between a remote location and a central location, such as between an enterprise or organization having a headquarters or central office and one or more satellite offices or remote offices, or vice-versa. Theremote synchronization component180 uses the techniques described in further detail herein to determine whether a file or data object should be copied from the remote location to the central location.
• FIG. 1 and the discussion herein provide a brief, general description of a suitable computing environment in which the invention can be implemented. Although not required, embodiments of the invention are described in the general context of computer-executable instructions, such as routines executed by a general-purpose computer, e.g., a server computer, wireless device or personal computer. Those skilled in the relevant art will appreciate that the invention can be practiced with other communications, data processing, or computer system configurations, including: Internet appliances, hand-held devices (including personal digital assistants (PDAs)), wearable computers, all manner of cellular or mobile phones, multi-processor systems, microprocessor-based or programmable consumer electronics, set-top boxes, network PCs, mini-computers, mainframe computers, and the like. Indeed, the terms “computer,” “host,” and “host computer” are generally used interchangeably herein, and refer to any of the above devices and systems, as well as any data processor.
• Aspects of the invention can be embodied in a special purpose computer or data processor that is specifically programmed, configured, or constructed to perform one or more of the computer-executable instructions explained in detail herein. Embodiments of the invention can also be practiced in distributed computing environments where tasks or modules are performed by remote processing devices, which are linked through a communications network, such as a Local Area Network (LAN), Wide Area Network (WAN), or the Internet. In a distributed computing environment, program modules may be located in both local and remote memory storage devices.
• Embodiments of the invention may be stored or distributed on computer-readable media, including magnetically or optically readable computer discs, hard-wired or preprogrammed chips (e.g., EEPROM semiconductor chips), nanotechnology memory, biological memory, or other data storage media. Indeed, computer implemented instructions, data structures, screen displays, and other data under embodiments of the invention may be distributed over the Internet or over other networks (including wireless networks), on a propagated signal on a propagation medium (e.g., an electromagnetic wave(s), a sound wave, etc.) over a period of time, or they may be provided on any analog or digital network (packet switched, circuit switched, or other scheme). Those skilled in the relevant art will recognize that portions of the invention may reside on a server computer, while corresponding portions reside on a client computer such as a mobile or portable device, and thus, while certain hardware platforms are described herein, embodiments of the invention are equally applicable to nodes on a network.
• Single Instancing
• Reducing or eliminating redundant instances of data resulting from a storage operation is sometimes referred to here as de-duplication or “single instancing,” because what would traditionally be stored as many instances of the same data is reduced to as few as one. Redundant instances may be detected and reduced at several locations or times throughout the operation of the system that will now be described. These embodiments are provided only as examples, and are not intended to be an exhaustive list of the way in which the system can be implemented.
• In some embodiments, the single instancing system performs single instancing of data at a computing system that contains or originally generated the data, such as a client computing system. For example, a client computing system that is providing data that is the target of a storage operation may receive a request from the single instancing system to provide a substantially unique identifier (for example, a hash value, message digest, checksum, digital fingerprint, digital signature or other sequence of bytes that substantially uniquely identifies the file or data object) of each file or data object included in the storage operation.
• The word “substantially” is used to modify the term “unique identifier” because algorithms used to produce hash values may result in collisions, where two different files or data objects result in the same hash value. However, depending upon the algorithm or cryptographic hash function used, collisions should be suitably rare and thus the identifier generated for a file or data object should be unique throughout the single instancing system. As an alternative to the single instancing system generating the substantially unique identifier, the client computing system may itself generate substantially unique identifiers for each file or data object that is stored on the client computing system on an ongoing or other basis. When a storage operation is requested, the single instancing system determines if another file or data object exists with a substantially unique identifier matching that of the one provided by the client computing system. If the single instancing system is already aware of a similar file or data object, then the client computing system does not need to send the redundant file or data object to a secondary storage location or destination.
• Rather than operating only at the file level, in some embodiments, the single instancing system may also operate at a lower level of granularity by enumerating data objects within files of understood types. For example, the single instancing system may read and parse data files from email servers (for example, MICROSOFT EXCHANGE email servers, Sendmail email servers, etc.), database servers (for example, MICROSOFT SQL Server database servers, ORACLE database servers, etc.), web servers (for example, MICROSOFT IIS web servers, APACHE web servers, etc.), word processing applications (for example, MICROSOFT WORD, COREL WORDPERFECT, etc.), spreadsheet applications (for example, MICROSOFT EXCEL, APPLE NUMBERS, etc.), and many others and enumerate the data objects within these files.
• The single instancing system may then generate a substantially unique identifier for each data object within the file, rather than each file, and store this substantially unique identifier in the singleinstance database component140 or other index. The single instancing system may also store information about the associations between the data objects and their containing files. Therefore, the single instancing system enables data storage operations such as searching, backing up, restoring, replicating, copying and so forth to be performed at the data object level. Enabling data storage operations at the data object level enables the single instancing system to store data using much less space than traditional single instancing storage systems, because files containing data objects are likely to have redundant data objects, of which only one instance or copy need be stored.
• For example, the data of two email servers that each contain similar email messages in a large data file can be stored in much less space than if the entire data files of each email server were to be stored, because the data files are likely to contain redundant email messages, of which only one instance or copy need be stored. This is because traditional single instancing systems would determine that the two data files differed and would store both data files, thereby consuming more storage space.
• FIG. 2 illustrates an example data file produced by an email server. The data file210 holdscontainers220 of data related to each user that has a mailbox on the email server. Eachcontainer220 holdsemail messages230 for a specific user, and eachemail message230 may contain one ormore attachments240. Email messages are often forwarded to many users, and the users may be assigned to the same or different email servers. The single instancing system may know or understand the structure of the data file210 before performing any single instancing operations, as discussed in more detail with respect toFIGS. 3B and 3C.
• For example, the single instancing system may identify the type of the data file based on the data file's filename extension. The identified data file type may be used to identify a format or specification that describes the structure (e.g., at which bytes specific data is stored, its particular encoding, etc.) of the data file. This knowledge of the structure enables the applicationdata extraction component170 to parse the data file210, identifycontainers220, and extractemail messages230 orattachments240 from eachcontainer220. Alternatively, the data file210 may contain metadata, a header or other information that describes its data structure.
• The applicationdata extraction component170 can obtain this metadata or other information, which enables it to parse the data file210, identifycontainers220, and extractemail messages230 orattachments240 from eachcontainer220. The single instancing system can then store only a single instance or copy of the extractedemail messages230 orattachments240 that are similar. By operating on the data at the data object level, the single instancing system provides substantial benefit by identifying the redundancy of data objects stored within the data files and providing single instancing of the individual data objects.
• In some embodiments, the single instancing system or another system performs additional operations on the data after single instancing has occurred. For example, another system may encrypt backup data that is being stored offsite to prevent unauthorized parties from accessing the data. Another system may also compress the data to reduce its size. The single instancing system enables these additional operations to be performed more efficiently, because there is less data on which to perform these additional operations after redundant data has been reduced or eliminated.
• Single Instanced Archive and Backup Data Using Single Storage Policy
• One example of a single instancing system employs a single storage policy or data store. A storage policy is generally a virtual container with preferences that contains a set of rules for data retention of data objects associated with the storage policy. The single instancing system in this example stores single instance data in a single location and in a manner to ensure that any relevant, unique data is retained, but only a single instance of common data is copied to the data store. Notably, a single instancing agent creates, updates, or maintains a single instance database or index that represents or stores the substantially unique identifiers of each file or data object. The single instance database or index is associated with a single storage policy that is separate from one or more data stores that store the data copies. A single storage policy may represent a storage location that includes existing data, as well as new data that has been compared to the existing data and identified as being unique.
• FIG. 3A is a block diagram that illustrates the flow of data during a storage operation, in one embodiment. Data is initially stored on aserver310 or other source of data. Astorage policy320 or other configuration information specifies a storage operation to be performed on the data. For example, thestorage policy320 may specify that the data stored on theserver310 is to be backed up daily to tape. The application of thestorage policy320 causes the backup to occur, resulting in the creation of the data copy330. The data copy330 may contain many redundant files or other data objects.
• Amedia agent340 manages the data copy330, and creates asingle instance copy350. Thesingle instance copy350 is a copy in which at least some of the redundant files or data objects have been removed. Themedia agent340 uses the methods described herein to eliminate redundant instances of files or data objects contained in the data copy330, and to produce thesingle instance copy350. Thesingle instance copy350 may then be stored on tape or other media.
• The single instancing system may employ one or more specialized single instancing agents. For example, as described below, the single instancing system may employ application agents associated with types of applications, metadata agents for analyzing metadata, encryption/compression agents, and so forth. Alternatively, a single agent employing all of the functions described herein may be employed. These agents operate on all types of data, including documents, files, data objects, or any data blocks.
• An application agent associated with each type of application may analyze incoming or previously stored data to identify redundant data. For example, an email agent analyzes incoming or previously stored emails, including attachments to emails, to identify duplicate attachments. The email agent provides a first instance of an email with an attachment to the storage policy, but for subsequent emails having the same attachment, the email agent strips them of their attachments and stores them with a stub or pointer to the previously stored attachment.
• A metadata agent analyzes files or data objects for similarities in data, but differences in metadata that is associated with the files or data objects. For example, two files may have the same data, but separate permissions, properties, access control lists (ACLs), operating system metadata (e.g., UNIX and WINDOWS metadata), application-specific metadata, ownership metadata, anti-virus information, security metadata, other metadata, combinations of the same or the like. The metadata agent ascertains that the two files contain the same data but have differing metadata, and thus stores only one instance of the file, but two or more instances of the associated metadata, as well as information about the associations between the metadata, the providers of the files and the files. Such embodiments of the invention can advantageously allow for single instancing, or de-duplication, of files or data objects across different operating systems.
• When a client requests the file, the single instancing system provides the file to the client with the appropriate instance of the metadata based on the identity of the requestor. For example, a data file may be stored on a user computer with permissions restricting access to the data file to the user of that computer, and the same data file may be stored on a second computer with permissions restricting access to the data file to an administrator of the single instancing system. The user will still be able to access the data file from the single instance store even though the user is not an administrator of the single instancing system. This is because the single instancing system will use the metadata from the file from the user's computer to ascertain that the user has the permissions needed to access the file, and permit the requested access to the user.
• As another example, two files may have the same data, but different properties, such as the creation date or access date. The metadata agent ascertains that the two files contain the same content but have different properties. The metadata agent thus stores only one instance of the file, but two or more instances of the properties, as well as information about the associations between the metadata, the providers of the files and the files. Because an association between the provider of the file and the file is stored, when a client requests the file, the single instancing system can provide the file with the proper metadata to the client.
• In yet other embodiments, one or more agents on one or more client devices can perform one or more functions of the above-described metadata agent. Embodiments of agents usable with embodiments of the invention are described in more detail below, with particular reference toFIGS. 3B and 3C.
• The single instancing system can single instance both non-encrypted and encrypted data received from client computers. Each client computer may generate a substantially unique identifier for the file or data object before the file or data object is encrypted. The client computer does this before encryption because an encrypted file or data object would almost certainly result in a substantially unique identifier that is different from a substantially unique identifier generated from the file or data object before encryption. Alternatively, a client computer could generate a substantially unique identifier for a file or data object after the file or data object is encrypted. An encryption agent may compare the substantially unique identifiers to identify identical files or data objects, and thus only store one instance of them.
• In some embodiments, the single instancing system determines whether to store an instance of an encrypted or unencrypted file (or data object, but file is used in this and the following paragraphs discussing encryption for brevity) based on whether the files are encrypted using the same encryption scheme, whether the encrypted files can be decrypted by the single instancing system, and/or other factors.
• For example, consider the following three situations involving encrypted files: 1) where the single instancing system has previously stored an instance of a file that is encrypted and a request is made to store another instance of the file that is also encrypted; 2) where the single instancing system has previously stored an instance of a file that is unencrypted and a request is made to store another instance of the file that is encrypted; and 3) where the single instancing system has previously stored an instance of a file that is encrypted and a request is made to store another instance of the file that is unencrypted. Metadata associated with the file is typically not encrypted. Moreover, information about the encryption scheme (for example, what public key is used to encrypt the file) may be provided as metadata to the single instancing system.
• For the first situation, if the two file instances are encrypted using the same encryption scheme (for example, using the same public key), the single instancing system can avoid storing the second instance of the file. If the two files are encrypted using different encryption schemes, the single instancing system stores the second instance of the file. This is because the single instancing system has to be able to provide the second instance of the file to the requestor when requested.
• Alternatively, if both encryption schemes are known to the single instancing system (for example, using two different public keys of the single instancing system), the single instancing system can avoid storing the file. This is because the single instancing system can decrypt the first instance of the file and re-encrypt it using the encryption scheme used to encrypt the second instance of the file. However, this decryption and re-encryption may be too computationally expensive, depending upon various factors (for example, the time needed to decrypt and re-encrypt the file, the algorithm, etc.), and so the single instancing system may simply store the second instance of the file.
• For the second situation, if the second instance of the file is encrypted using an encryption scheme that is known to the single instancing system (for example, using a public key of the single instancing system), the single instancing system can avoid storing the second instance of the file. This is because, when the provider of the second encrypted instance requests the file, the single instancing system can retrieve the first unencrypted instance, encrypt it using the known encryption scheme and provide it to the requestor. However, if such encryption is too computationally expensive, the single instancing system may simply store the second encrypted instance of the file. If the second instance of the file is encrypted using an encryption scheme that is not known to the single instancing system, the single instancing system stores the second instance of the file. This is because the single instancing system has to be able to provide the second encrypted instance of the file to the requestor when requested.
• For the third situation, if the first instance of the file is encrypted in such a way that it can be decrypted by the single instancing system, the single instancing system can avoid storing the second unencrypted instance of the file. This is because, when the provider of the second unencrypted instance requests the file, the single instancing system can retrieve the first encrypted instance, decrypt it, and provide it to the requestor. However, if such decryption is too computationally expensive, the single instancing system may simply store the second unencrypted instance of the file. If the first instance of the file is encrypted in such a way that it cannot be decrypted by the single instancing system, the single instancing system stores the second unencrypted instance of the file. This is because the single instancing system has to be able to provide the second unencrypted instance of the file to the requestor.
• The single instancing system may also handle compressed files. Each client computer may generate a substantially unique identifier for the file or data object before the file or data object is compressed. The client computer does this before compression because a compressed file or data object would almost certainly result in a substantially unique identifier that is different from a substantially unique identifier generated from the file or data object before compression. Alternatively, a client computer could generate a substantially unique identifier for a file or data object after the file or data object is compressed. A compression agent may compare the substantially unique identifiers to identify identical files or data objects, and thus only store one of them.
• In some embodiments, the single instancing system determines whether to store an instance of a compressed or uncompressed file (or data object, but file is used in this and the following paragraphs discussing compression for brevity) based on whether the files are compressed using the same compression scheme, whether the compressed files can be decompressed by the single instancing system, and/or other factors.
• For example, consider the following three situations involving compressed files: 1) where the single instancing system has previously stored an instance of a file that is compressed and a request is made to store another instance of the file that is also compressed; 2) where the single instancing system has previously stored an instance of a file that is uncompressed and a request is made to store another instance of the file that is compressed; and 3) where the single instancing system has previously stored an instance of a file that is compressed and a request is made to store another instance of the file that is uncompressed. Metadata associated with the file is typically not compressed. Moreover, information about the compression scheme (for example, what compression algorithm is used to compress the file) may be provided as metadata to the single instancing system.
• For the first situation, if the two file instances are compressed using the same compression scheme (for example, using the same compression algorithm), the single instancing system can avoid storing the second instance of the file. Otherwise, the single instancing system stores the second instance of the file. However, if the second instance of the file is compressed using a different compression scheme, the single instancing system may avoid storing the second instance of the file, if the single instancing system is able to decompress the first instance of the file and recompress the first instance of the file using the different compression scheme. If the single instancing system is not able to do so, the single instancing system stores the second instance of the file. However, this decompress and recompression may be too computationally expensive, depending upon various factors (for example, the time needed to decompress and recompress the file, the algorithm, etc.), and so the single instancing system may simply store the second instance of the file.
• For the second situation, if the second instance of the file is compressed using a compression scheme that is known to the single instancing system (for example, using a known compression algorithm), the single instancing system can avoid storing the second instance of the file. This is because, when the provider of the second compressed instance requests the file, the single instancing system can retrieve the first uncompressed instance, compress it using the known compression scheme and provide it to the requestor. However, if such compression is too computationally expensive, the single instancing system may simply store the second compressed instance of the file. If the second instance of the file is compressed using a compression scheme that is not known to the single instancing system, the single instancing system stores the second instance of the file. This is because the single instancing system has to be able to provide the second compressed instance of the file to the requestor when requested.
• For the third situation, if the first instance of the file is compressed in such a way that it can be decompressed by the single instancing system, the single instancing system can avoid storing the second uncompressed instance of the file. This is because, when the provider of the second uncompressed instance requests the file, the single instancing system can retrieve the first compressed instance, decompress it, and provide it to the requestor. However, if such decompression is too computationally expensive, the single instancing system may simply store the second uncompressed instance of the file. If the first instance of the file is compressed in such that it cannot be decompressed by the single instancing system, the single instancing system stores the second uncompressed instance of the file. This is because the single instancing system has to be able to provide the second uncompressed instance of the file to the requestor.
• The single instancing system may be configurable to reduce processing time, transmission bandwidth, and the like with small files. For example, an administrator-configurable value would allow the administrator to configure the single instancing system to ignore files or data objects below a given size. For example, any file or data object below a certain threshold (for example, one kilobyte) may simply be stored, and a substantially unique identifier would not determined for it. Any file or data object greater than the threshold (for example, one kilobyte) would then be single instanced. An administrator may adjust this threshold up or down. As another example, the single instancing system may allow the administrator to configure it to always single instance files or data objects of a certain type or category (for example, executable files or modules may always be single instanced if they rarely change).
• Alternatively, embodiments of the single instancing system may allow the administrator to never single instance files or data objects of a certain type or category (for example, log files may never be single instanced, because they typically change quite frequently) or compare data objects of certain different data formats.
• In yet other embodiments, the single instancing system can comprise multiple single instancing, or de-duplication, components (e.g., databases) for processing and/or storing single instance copies350 of data from different applications and/or file formats. For example, in certain embodiments, a file when processed (e.g., checked in) by a SHAREPOINT application can be fundamentally altered such that it differs from the same file when processed in an EXCHANGE server environment.
• In view of the foregoing, certain embodiments of the single instancing system can determine that files or data objects from these two applications should not be considered together for single instancing since the copies of the same file will contain different data. Rather, the single instancing system can comprise different components that are each dedicated to single instance processing of the data from the two applications. For example, in certain embodiments, a first single instance database can allocated for SHAREPOINT data, while a second single instance database can be allocated for EXCHANGE data.
• Moreover, the same single instancing system components can be dedicated for single instancing data of different applications that process data in a similar manner. For instance, in certain embodiments, the second single instance database described above could be allocated for both EXCHANGE and file system data, while the first single instance database is reserved for SHAREPOINT data.
• In such embodiments, storage space can be advantageously allocated on one or more storage devices based on the expected amount of single instanced, or de-duplicated, data from the different applications. For example, a main or primary de-duplication database (e.g., having media with a faster access time) can be set aside for de-duplication of files or data objects from one or more applications or application formats producing a relatively large amount of data within a system, while a secondary de-duplication database can be reserved for data of one or more applications or application formats producing a relatively small amount of data in the system.
• In certain embodiments, as discussed below with reference toFIGS. 3B and 3C, agents operating on one or more client devices can be used for identifying such application data that should or should not be considered together for possible de-duplication. Such identification could be performed, for example, when processing the client data to be sent to be backed up, archived or otherwise stored in secondary storage.
• The single instancing system may further associate timestamps with the files or data objects or with their generated substantially unique identifiers. A timestamp may indicate the time at which the file or data object was created, last accessed or modified, or the time at which the single instancing system generated the substantially unique identifier for it, or the time at which the file or data object was stored by the single instancing system. The single instancing system may do so to determine whether a file or data object is substantially newer than another file or data object already stored in the single instancing system.
• For example, two files or data objects may have the same substantially unique identifier, meaning that they contain the same data. The single instancing system may compare the timestamp of the first, previously stored, file or data object with that of the second file or data object. If the timestamp of the second file or data object is substantially newer than the timestamp of the first file or data object, the single instancing system may nonetheless store the second file or data object, even though it is duplicative of a file or data object that is already stored.
• In this context, substantially newer means that the age (as determined by its timestamp) of the second file or data object is less than the age of the first, previously stored, file or data object by a certain amount or more (configurable by an administrator). The single instancing system could then prune off older versions as the data ages and is migrated to other storage, such as longer-term storage. For example, a first file or data object could have a timestamp indicating that its age is ten months. A second file or data object could have a timestamp indicating that its age is three months. If the administrator has configured the amount to be six months, then the second file or data object is substantially newer than the first file or data object, because the age of the second file or data object is less than the age of the first file or data object by more than the configured amount. Therefore, the single instancing system would store the second file or data object, and the first file or data object could be migrated to longer-term storage, such as to tape.
• The single instancing system may be employed in any variety of architectures. For example, it may be employed with heterogeneous storage hardware, and thus is not reliant on a specific hardware platform to perform all of the single instancing functions. Instead, multiple, different data storage platforms may be employed for storing data under the storage policies. Further, the architecture may be tiered or federated wherein one server manages multiple cells (and each of those cells in turn may manage lower tier cells). In some embodiments, the cells may be arranged in hierarchies or organized in configurations such as those described in U.S. patent application Ser. No. 12/060,186, filed Mar. 31, 2008, published as U.S. Patent Application Publication No. 2008-0250204 A1, the entirety of which is hereby incorporated herein by reference.
• The single instancing system may employ many other functions. For example, it may employ content indexing agents to index the content all data blocks. These content indexes may then be searched to permit users to readily locate desired data objects. Further details regarding content indexing may be found in U.S. patent application Ser. No. 11/694,869, filed Mar. 30, 2007, published as U.S. Patent Application Publication No. 2008-0091655 A1, the entirety of which is hereby incorporated herein by reference.
• FIG. 3B is a block diagram that illustrates components of a content-aware de-duplication, or single-instancing,system360, according to certain embodiments of the invention. In general, thede-duplication system360, in certain embodiments, advantageously utilizes knowledge of file content to improve the de-duplication process by identifying the location(s) of files or data objects, such as data blocks, that are eligible and/or should be considered together for de-duplication.
• In certain embodiments, thede-duplication system360 provides an end-to-end, block-based and/or file-based de-duplication system that can extend across multiple tiers of secondary storage (including disk and tape) and/or encompass reduction of stored data across multiple backups, archives, clients and/or platforms. Embodiments of thede-duplication system360 further employ application-aware or content-aware de-duplication processes to more accurately find and reduce common patterns in data across disparate applications, operating systems, file systems and/or data types.
• As illustrated, the content-aware de-duplication system360 comprises ade-duplication manager362 that performs de-duplication of data received from one ormore client devices364. In certain embodiments, thede-duplication manager362 can comprise thesingle instancing system100, or one or more components thereof. For example, thede-duplication manager362 can receive secondary copies (e.g., backup, migration and/or archive copies) of data from theclient devices364 and store at least portions of the secondary copies on thestorage device366.
• Ade-duplication database368 can utilize one or more tables or other data structures to store substantially unique identifiers of data objects (e.g., files, blocks) that have already been stored on thestorage device366. If a copy or instance of a data object received by thede-duplication manager362 has already been stored on thestorage device366, thede-duplication database368 can be used to avoid sending an additional copy of the same data to thestorage device366. Examples of similar single instancing configurations and methods usable with embodiments of the invention are further disclosed in U.S. Provisional Patent Application No. 61/100,686, filed Sep. 26, 2008, which is hereby incorporated herein by reference in its entirety.
• As further illustrated byFIG. 3B, each of theclients364 comprises one ormore agents370 operating thereon, or associated therewith, for performing data and/or storage tasks related to thecorresponding client364. In certain embodiments, theagents370 are data agents configured to generate secondary copies of data stored on, or accessible by, thecorresponding client364 for storage on thestorage device366. For instance, in certain embodiments, theagents370 can advantageously be configured to translate or convert data on theclient devices364 into a particular backup format for facilitating de-duplication by thede-duplication manager362.
• In certain further embodiments, theagents370 comprise application-specific, or content-aware, modules that are configured to access and process one or more particular data formats and/or data associated with a particular application. In certain embodiments, theagents370 are advantageously used to process data within a database file, blob data and/or data encapsulated in another data format. For instance, eachagent370 can be aware of the various files, folders, registry files and/or system resources that are impacted by a particular application. In certain embodiments, differentindividual agents370 may be designed to handle MICROSOFT EXCHANGE data, SQL SERVER data, LOTUS NOTES data, MICROSOFT WINDOWS 2000 file system data, SHAREPOINT data, and other types of data.
• In certain embodiments,multiple agents370 may be treated as separate agents even though they reside on thesame client364. In other embodiments, the separate agents may be combined to form a virtual agent for performing storage operations related to a specific application. Also, although theagents370 are illustrated as executing on theclient devices364, it will be understood that embodiments of theagents370 can also be configured to remotely access data stored on theclient devices364 through one or more application programming interfaces (APIs), remote procedure calls (RPCs) or the like.
• In certain embodiments, theagent370 is configured to perform data management or storage operations in accordance with one or more storage policies or other preferences. The storage polices and/or preferences may include, but are not limited to, information regarding storage locations, relationships between system components, network pathways, retention policies, data characteristics, compression or encryption requirements, preferred system components, combinations of the same or the like.
• In certain embodiments, eachagent370 can prepare the secondary copy of the data to facilitate subsequent de-duplication of data objects within the backup data. Such embodiments can advantageously improve the speed of de-duplication since the de-duplication preparation can be integrated with the normal backup process and since theagents370 can use knowledge of both specific file formats of the client data and the de-duplication process occurring on the back end of thede-duplication system360.
• In certain embodiments, theagent370 identifies the locations of data objects within a file that should be considered for de-duplication. For instance, theagent370 can indicate (e.g., via offsets) where thede-duplication manager362 should start and/or stop considering data for possible de-duplication.
• For instance, suppose theagent370 is instructed to process the data file210 (seeFIG. 2), which was generated by an email server, to be backed up. In certain embodiments, because theagent370 is familiar with the data format and structure of the data file210, which containsmultiple email messages230 andattachments240 inmultiple user mailboxes220, theagent370 can identify to thede-duplication manager362 where to begin within the data file210 the de-duplication evaluation process.
• For example, theagent370 may insert one or more markers within the data file210 that identify location(s) where a data object (e.g., the body of an email message, an attachment) begins and/or ends. In certain embodiments, such identification information can be advantageously used by thede-duplication manager362 to more quickly identify portions of one or more data files that may be more likely to contain duplicate data (e.g., attachments between multiple email messages). In certain embodiments, the marker can further identify the type of data associated with the data object.
• In embodiments of the invention that utilize block-level de-duplication, the information inserted by theagent370 can advantageously assist thede-duplication manager362 to know where to begin the de-duplication comparison of data such that a higher likelihood of detecting duplicate data is achieved. For instance, theagent370 can process metadata and/or other file information regarding a particular data file to detect where logical or natural divisions within the file should be identified (e.g., an offset of a mail data file at which an attachment begins). As a result, it is more likely that like blocks are detected since thede-duplication manager362 can proceed with its comparison and analysis of data blocks in corresponding locations of the data.
• For example, suppose two different email messages to be backed up contain the same data object as an attachment, but the bodies of the email messages differ in size. If a block-level de-duplication manager362 begins its comparison process at the beginning of each email message by comparing set de-duplication block sizes (e.g., 32 KB), thede-duplication manager362 may not detect a match of the attachments of the two email messages since the attachments may be located at different offsets within the respective email messages (e.g., 40 KB and 46 KB).
• However, using the identifying information generated by theagents370, thede-duplication manager362 can be instructed to begin the block-level comparison at the respective offsets within the two email messages whereat the particular attachments begin. As a result, such embodiments can advantageously increase the likelihood that duplicate data will be detected between data of like files (e.g., generated from the same application).
• Although theagent370 has been described as processing particular types of data (e.g., mail data), it will be understood that other embodiments of the invention can be used with a variety of different types of data and thatdifferent agents370 can be associated with the different types of data to identify possible common duplicate data therein. For instance, a first agent can be used to identify data objects within an EXCHANGE server data file, while a second agent can be used to identify data objects within file system data such that thede-duplication manager362 can more easily detect duplicate data objects between the two types of data.
• In yet other embodiments, theagent370 can generate substantially unique identifiers, as discussed above with respect toFIG. 1, for one or more files or data objects to be backed up.
• FIG. 3C illustrates exemplary fields of achunk file380 usable with the de-duplication/single instancing systems disclosed herein. In particular, thechunk file380 can be used for transmitting client data to be backed up or archived on one or more storage devices. Moreover, thechunk file380 can advantageously comprise one or more file markers or other information added by one or more content-aware agents370 that identify data to be considered for possible de-duplication. For exemplary purposes, thechunk file380 will be described with reference to the components of thede-duplication system360 ofFIG. 3B.
• Thechunk file380 includes achunk header382 comprising metadata regarding thechunk file380. Thechunk file380 further comprises a plurality oftag headers384 that are each associated with adata payload386 containing the actual data to be backed up. In certain embodiments, eachtag header384 comprises metadata (e.g., size, data type, or the like) regarding the data in thecorresponding payload section386.
• As shown, each of thetag headers384 comprises ade-duplication identifier388. In certain embodiments, theidentifier388 indicates whether or not one or more data objects within thecorresponding payload386 should be considered for de-duplication. For instance, in certain embodiments, theidentifier388 comprises a single bit that indicates whether or not thede-duplication manager362 should consider the data of thecorresponding payload386 for de-duplication.
• In yet other embodiments, theidentifier388 can comprise a file marker or other data structure that demarcates payload data for possible de-duplication. For instance, theidentifier388 may identify particular offsets within thepayload386 whereat thede-duplication manager362 should start and/or stop considering data objects for de-duplication. In certain embodiments, theidentifier388 can comprise a tag, a pointer, an index or table entry, a flag, a bit, a header, combinations of the same or the like.
• In yet other embodiments, theidentifier388 can identify data objects that can or cannot be single instanced with other data objects (e.g., based on file types). In such embodiments,identifiers388 may indicate that data of aparticular payload386 should be considered for de-duplication with reference to a first de-duplication database, while data of asecond payload386 should be considered for de-duplication with reference to a second de-duplication database.
• In certain embodiments, theagent370 inserts theidentifier388 in thechunk file380. In certain embodiments, one ormore agents370 can also separate data of different applications and/or formats that should not be considered together for single instancing into separate payloads (e.g., under different tag headers) or separate chunk files.
• AlthoughFIG. 3C and the accompanying disclosure refer to chunk files for transmitting data, other embodiments of the invention can utilize different means or methods for transmitting data in which data therein is selectively identified for possible de-duplication. For instance, theagents370 can be configured to insert similar file markers, bits and/or other data structures in a data stream being sent to thede-duplication manager362 or other de-duplication reader/listener for consideration for de-duplication. In yet other embodiments, the describedchunk file380 can be used in archiving, migration, and/or other data storage methods that generate secondary copies of data.
• Determining Data Obiect Similarity
• Various methods of determining if one file or data object is similar (e.g., two instances of the same data) to another file or data object will now be described. However, those of ordinary skill in the art will recognize that many other methods besides those described herein may be used to achieve similar results.
• In some embodiments, the single instancing system determines if two files or data objects are similar by performing a binary comparison. For example, a first file or data object can be compared byte by byte with a second file or data object, or portions of the first file or data object can be compared with portions of the second file or data object. If each byte of the compared data in each file or data object matches, then the two files or data objects are identical and therefore similar. Otherwise, the two files or data objects do not match and are not treated as similar.
• In some embodiments, the single instancing system determines if two files or data objects are similar by creating a digest or fingerprint of the data contained in each file or data object. For example, as storage operations are performed, the single instancing system may perform a cryptographic hash on each file or data object to create a digest of the file or data object. The single instancing system compares the digest of the file or data object with stored digests created for other files or data objects. If the digests of two files or data objects match, then the single instancing system may consider the files or data objects to be identical. The single instancing system can use any suitable hashing algorithm, such as SHA512. For applications that create data files having embedded data objects, the single instancing system identifies the embedded data objects, and determines the similarity of each data object with other data objects found either within the same data file or in other data files or stores managed by the single instancing system.
• FIGS. 4-6 are representative flow diagrams that depict processes used in some embodiments. These flow diagrams do not show all functions or exchanges of data, but instead they provide an understanding of commands and data exchanged under the single instancing system. Those skilled in the relevant art will recognize that some functions or exchange of commands and data may be repeated, varied, omitted, or supplemented, and other (less important) aspects not shown may be readily implemented.
• FIG. 4 is a flow diagram that illustrates the processing of the storageoperation manager component160 of the single instancing system in one embodiment. The storageoperation manager component160 is invoked when a storage operation that creates a copy of a file is requested (e.g., when backing up the application file (block400)). Inblock410, the storageoperation manager component160 identifies data objects within the file to be copied, such as by using information about the application that created the file and the format used by the application to store data objects.
• For example, the application may provide an object model that the storageoperation manager component160 can invoke to enumerate objects within the file, or the storageoperation manager component160 may understand the format used by the application for storing objects in the file. An application author, manufacturer or third party may also provide a module for parsing the application file that the storageoperation manager component160 can invoke. In this way, the application author, manufacturer or third party can provide access to the data objects within the file without exposing the actual format used to third parties.
• In certain embodiments, the storageoperation manager component160 further identifies files or data objects from different applications that should be considered separately for de-duplication. For instance, the storageoperation manager component160 can identify one or more files or data objects from a first application or data format to be associated with a first de-duplication database, while identifying one or more files or data objects from a second application or data format to be associated with a second de-duplication database. In yet other embodiments, one ormore agents370 can perform one or more of the functions described above with respect toblocks400 and/or410.
• Inblock415, the storageoperation manager component160 selects the first identified data object. Inblock420, the storageoperation manager component160 determines whether the data object is unique, or if the storage manager component has previously copied the data object. For example, the storageoperation manager component160 may compute a digest in the manner described herein, and compare the digest to the digests of previously copied data objects to determine if the data object is an instance of a previously copied data object. Indecision block430, if the data object is unique, then the storageoperation manager component160 continues atblock450, else the storageoperation manager component160 continues atblock440. Inblock440, the storageoperation manager component160 adds a reference (e.g., to an index of data managed by the single instancing system, such as by incrementing a reference count in the index) to the already backed up instance of the data object, and then continues to block460. Inblock450, the component stores the unique data object. Indecision block460, if the storageoperation manager component160 identified more data objects within the file, then the storageoperation manager component160 loops to block415 to select the next data object, else the storageoperation manager component160 completes.
• FIG. 5 is a flow diagram that illustrates the processing of the single instancing system to determine whether a file or data object is unique, in one embodiment. These blocks may be invoked by thestorage operation component160, such as when performing a storage operation as described inFIG. 4 or at other times. Inblock510, theidentifier generation component120 generates a substantially unique identifier of the file or data object that is the target of the storage operation. Inblock520, thefile identification component110 gathers (for example, by querying the file system of a client) additional information about the file or data object, such as the file or data object's size, security information, or other attributes. Inblock530, theidentifier comparison component130 determines if the substantially unique identifier of the file or data object and any supplemental information matches that of any existing file or data object tracked by the singleinstance database component140.
• Indecision block540, if the data objects match, then the single instancing system continues atblock550, otherwise the single instancing system continues atblock570. Inblock550, the single instancing system reports to the entity that invoked the storageoperation manager component160 that the file or data object is not unique. Inblock560, the single instancing system updates the substantially unique identifier reference count tracked by the singleinstance database component140 and then concludes. Inblock570, the single instancing system reports to the entity that invoked the storageoperation manager component160 that the file or data object is unique. Inblock580, the single instancing system adds the file or data object's substantially unique identifier and other information to the list of files and data objects tracked by the singleinstance database component140. The process then concludes.
• FIG. 6 is a flow diagram that illustrates the processing of the storageoperation manager component160 to restore data, in one embodiment. The single instancing system invokes the storageoperation manager component160 when it receives a request, for example, to restore data. Inblock610, the storageoperation manager component160 receives a request to restore data. Inblock620, the storageoperation manager component160 selects the next file or data object referred to by the request. For example, the request may identify ten files or data objects, and the storageoperation manager component160 selects the first file or data object on which to perform the following blocks.
• Indecision block630, if the selected file or data object is a reference to an instance of a file or data object stored somewhere else, then the storageoperation manager component160 continues atblock640, else the storageoperation manager component160 continues atblock650. Inblock640, the storageoperation manager component160 locates the referenced instance of the file or data object and continues to block655. In block655, the storageoperation manager component160 restores the file or data object from the referenced instance of the file or data object. Inblock650, the storageoperation manager component160 restores the file or data object directly from the file or data object. Indecision block660, if there are more files or data objects referred to by the received request, then the storageoperation manager component160 loops to block620 to select the next file or data object on which to perform these blocks, else the storageoperation manager component160 completes.
• Single Instance Continuous Data Replication
• Where multiple computing systems containing data that is to be single instanced are located remotely from a single instancing database, various system configurations may be employed to avoid transferring data that is common to the remote multiple computing systems to the single instancing database. Three example configurations are described herein. Under a first configuration, a single instancing database is maintained at a first location and at each remote location (e.g., a second location, a third location, etc.). De-duplicated information in the single instancing database at each remote location is transferred to the single instancing database at the first location.
• Under a second configuration, a single instancing database is maintained at a first location, and a computing system at each remote location (e.g., a second location, a third location, etc.) sends queries to the single instancing database at the first location to identify what data to transfer to the single instancing database. Under a third configuration, each computing system at each remote location (e.g., a second location, a third location, etc.) queries a single instancing database at a first location before transferring any data to the single instancing database. Each of these configurations is discussed separately below. In the discussed configurations, the example of a central or home office with one or more remote or satellite offices is used, where each remote office includes one or more computing systems. Although the terminology used to discuss these configurations implies a certain geographical positioning of computing systems, the single instancing system described herein may be used in a wide variety of configurations and is not limited to a specific geographical positioning.
• Furthermore, the single instancing system described herein is not limited to the hub-and-spoke model implied by the terminology used to discuss these configurations. For example, a multi-tier hierarchical configuration could be employed, in which computing systems at the leaf nodes transfer data to computing systems at their respective parent nodes, which transfer data to computing systems at their parent nodes, and so on, up to the computing system at the top-most node of the hierarchy. As another example, a mesh configuration could be employed, in which a first computing system in the mesh configuration transfers data to a second computing system, the data to be ultimately transferred to a third computing system.
• CDR, also called continuous data protection or continuous backup, refers to copying computer data by automatically saving a copy of every change made to that data, essentially capturing every version of the data that the user saves. It allows an administrator (or other user) to restore data to previous point(s) in time. There are multiple methods known in the art for capturing the continuous changes involving different technologies that serve different needs. CDR-based solutions can provide fine granularities of restorable objects ranging from disk images to logical data objects such as files, email data files, email messages, and database files and logs.
• CDR differs from traditional backup or copy operation in that an administrator (or other user) does not have to specify the point in time to which the administrator would like to recover until the administrator is ready to perform a restore. Traditional backups or copy operations can only restore data to the point at which the backup or copy was made. With CDR, there are typically no backup or copy schedules. When data is written to disk, it can also be synchronously or asynchronously written to a second location, usually another computer over the network. In some situations, CDR will require less space on secondary storage media (usually disk) than traditional backup or copy operations. Most CDR solutions save byte- or block-level differences rather than file-level differences. This means that if one byte of a 100 GB file is changed, only the changed byte or block is backed up or copied. In contrast, traditional incremental and differential backups and copy operations generally make copies of entire files when those files change.
• FIG. 7 illustrates an environment according to the first example configuration. In the environment ofFIG. 7, tworemote offices710aand710bare connected to ahome office730. AlthoughFIG. 7 depicts two remote offices710, only a single remote office, or more than two remote offices, may be connected to thehome office730. Each remote office includes its own single instance database740. For example,remote office710aincludessingle instance database740aand remote office720 includessingle instance database740b.Multipleclient computing systems760aand760bat each remote office710 provide data to the single instance database740 at their respective locations.
• Clients760aare part ofremote office710a, and store data insingle instance database740a.Clients760bare part ofremote office710b,and store data insingle instance database740b.The clients760 may be connected to their respective remote office710 by way of a local area network (wired or wireless), with the remote offices710 being connected to thehome office730 by a wide area network, or other network such as a public computer network (e.g., the Internet). By employing known CDR techniques, data from each remote single instance database740 is sent to thehome office730 to be stored in a central data store (not shown inFIG. 7) at thehome office730. Accordingly, data is copied from clients760 to a local single instance database740, and then data blocks unique to that remote office710 are provided using CDR to create a copy at thehome office730.
• Each remote office710 tracks incremental changes for its clients760, and then employs CDR to transmit those incremental changes to thehome office730. Thehome office730 may then in turn employ its ownsingle instance database790 to avoid any duplication between the remote offices710. For example, clients760 that run MICROSOFT WINDOWS typically will each have a similar C:\Windows directory containing operating system files. Multiple client computing systems760 will have stored a single copy of the C:\Windows directory at the remote single instance database740, which will then be replicated to the central data store at thehome office730. Thehome office730 will in turn store a single copy of the C:\Windows directory in thesingle instance database790.
• FIG. 8 is a flow diagram that illustrates copying a remote file or data object in the environment ofFIG. 7. Inblock810, the single instancing system receives a request to perform a storage operation. For example, the request may be a routinely scheduled request to backup or copy the contents of a client computing system760. For each file or data object involved in the request, the single instancing system performs the following blocks. Inblock820, the single instancing system copies the file or data object from the client computing system760 to a single instance database740 located at the remote office710. The single instance database740 ensures that only one copy of each file or data object is stored.
• For example, the single instance database740 may create or have created a substantially unique identifier for each stored file or data object and create or have created a substantially unique identifier for each new file or data object to be stored. The single instance database740 may then compare the substantially unique identifier of the new file or data object with that of each previously stored file or data object to determine whether the new file or data object is already stored. In some embodiments, the single instance database740 may store metadata that is specific to some clients while only storing one instance of the file or data object itself.
• Accordingly, the client760 copies data to a computing system that is geographically close, and then later the data from each client760 can be copied to thehome office730 by copying the single instance or unique data from the single instance database740 at the remote office710. In this context, computing systems that are geographically close refers to computing systems that may be in the same room, in the same building or on the same campus. Computing systems that are geographically remote refers to computing systems that are not geographically close. Inblock830, the single instancing system replicates the contents of the remote single instance database740 to thehome office730. This block can be performed using CDR or other traditional methods of copying data. Afterblock830, these blocks conclude. Using this method, each remote single instance database740 may send identical files or data objects to the home office single instance database790 (i.e., data that is unique as to each individual remote office710, but duplicative as to both remote offices710). However, only one instance of each file or data object at the remote office710 is stored by the home officesingle instance database790.
• FIG. 9 illustrates an environment according to the second example configuration. In the environment ofFIG. 9, tworemote offices910aand910bare connected to asingle home office930. AlthoughFIG. 9 depicts two remote offices910, only a single remote office, or more than two remote offices, may be connected to thehome office930. Remote office910 includes multipleclient computing systems960aand adata store940a.Remote office910bincludes multipleclient computing systems960band adata store940b.Thehome office930 maintains asingle instance database990. The remote office910 generates a substantially unique identifier for each file or data object that is to be potentially stored.
• For example, the remote office910 may include a computing system (not shown inFIG. 9) that generates the substantially unique identifier for each file or data object that is to be potentially stored on behalf of clients960. The remote office910 then transmits the substantially unique identifier to thehome office930. Thehome office930 checks thesingle instancing database990 to determine whether the transmitted substantially unique identifier matches any existing substantially unique identifier in thesingle instance database990 in order to determine whether the file or data object that is to be potentially stored is redundant. Thehome office930 then sends a response back to the remote office910 that indicates whether the file or data object that is to be potentially stored is unique. The remote office910 stores the unique files or data objects locally in a data store940. The remote office910 then employs CDR to incrementally transfer new changes or updates to thehome office930.
• The single instancing system may employ various optimization techniques. For example, the remote office910 may cache substantially unique identifiers and only transmit one instance of a substantially unique identifier to thehome office930 if it detects more than one instance of the same substantially unique identifier. After the single instancing system has made a request to thesingle instance database990 to determine if a particular file or data object is unique, the remote office910 may cache the response so that subsequent identical files or data objects do not generate a new request to thesingle instance database990. Rather, the single instancing system consults the cache first to determine if a previous request determined whether the file or data object is unique. If the cache responds that the file or data object is not unique, then the remote office910 does not need to query thesingle instance database990 to determine if the file or data object is unique.
• FIG. 10 is a flow diagram that illustrates copying a remote file or data object in the environment ofFIG. 9. Inblock1010, the single instancing system receives a request to perform a storage operation. For each file or other data object involved in the request, the single instancing system performs the following blocks. Inblock1020, the single instancing system copies the file or data object to a data management server (not shown inFIG. 9) that caches files or data objects at the remote office910. Thus, the client copies data to a computing system that is geographically close. The data management server in this method may contain duplicate files or data objects from many clients960. According to this method the data management server does not do single instancing of its own.
• Inblock1030, the single instancing system queries thesingle instance database990 at thehome office930 to determine whether thesingle instance database990 already has a copy of the file or data object. Indecision block1040, if the file or data object is new to thesingle instance database990, then the single instancing system continues atblock1050, else these blocks conclude. Inblock1050, the single instancing system copies the new file or data object to thesingle instance database990. If there are duplicates of the file or data object, then later when thesingle instance database990 is queried for the duplicate files or data objects, thesingle instance database990 will indicate that the file or data object is not new and need not be copied. In this way, duplicate data is not sent to thehome office930. Afterblock1050, these blocks conclude. This method differs from the method ofFIG. 8 in that duplicate data may be stored at the remote office910, but duplicate data is not sent to thehome office930. In general, in comparison with the method ofFIG. 8, the method ofFIG. 10 will send more queries to thehome office930, but less data.
• FIG. 11 illustrates an environment according to the third example configuration. In the environment ofFIG. 11, each remote client1160 (as opposed to each remote office1110) transmits a query with a substantially unique identifier to thehome office1130. Eachclient1160 may have generated the substantially unique identifier itself, or another computing system may generate them on behalf of theclients1160. Thesingle instance database1190 determines whether the substantially unique identifier is already stored (i.e., indicating that the corresponding file or data object has previously been stored) and transmits a response to theclient1160. If the response indicates that the file or data object is new, then theclient1160 sends that file or data object to thehome office1130. The single instancing system typically does not employ CDR, and eachremote office1110 typically does not include a local data store used by itsclients1160. The single instancing system may employ caching for optimization at eachclient1160. Thehome office1130 also uses asingle instance database1190 to store only a single instance of each file or data object.
• FIG. 12 is a flow diagram that illustrates copying a remote file or data object in the environment ofFIG. 11. Inblock1210, the single instancing system receives a request to perform a storage operation. For each file or other data object involved in the request, the single instancing system performs the following blocks. Inblock1220, the single instancing system queries thesingle instance database1190 at thehome office1130 to determine whether thesingle instance database1190 already has a copy of the file or data object. Indecision block1230, if the file or data object is new to thesingle instance database1190, then the single instancing system continues atblock1240, else these blocks conclude. Inblock1240, the single instancing system copies the new file or data object directly from theclient1160 to thesingle instance database1190. In this way, duplicate data is not sent to thehome office1130. Afterblock1240, these blocks conclude. This method differs from the method ofFIG. 10 in that theremote office110 does not employ a remote file cache. Therefore, the method ofFIG. 12 results in the sending of additional queries from theclients1160 to thehome office1130 because eachclient1160 will query thesingle instance database1190.
• As shown inFIGS. 7-12, the single instancing system does not always maintain a single instance database in the same location. Various benefits are derived by maintaining a single instance database in various locations. For example, a single instance database may be maintained in a production environment (for example, geographically close to production servers) so as to reduce the amount of time needed to single instance data or to reduce the amount of data to be transmitted between computing systems. The data stored in the single instance database may then be replicated to another single instance database or secondary storage.
• Conclusion
• From the foregoing, it will be appreciated that specific embodiments of the storage system have been described herein for purposes of illustration, but that various modifications may be made without deviating from the spirit and scope of the invention. For example, although backup operations have been described, the single instancing system may be used to reduce many types of redundant storage operations. As one example, the storage system may be employed by an Internet proxy server to reduce downloading of redundant files over the Internet by tracking a digest of each downloaded file and the location of a downloaded instance of the file behind the proxy server such that subsequent requests for the file can be serviced from the previously downloaded instance without accessing the file over the Internet. Similarly, the storage system could be used by a file system to reduce storage space by storing a single copy of data placed in multiple locations throughout the file system.
• Unless the context clearly requires otherwise, throughout the description and the claims, the words “comprise,” “comprising,” and the like are to be construed in an inclusive sense, as opposed to an exclusive or exhaustive sense; that is to say, in the sense of “including, but not limited to.” The word “coupled”, as generally used herein, refers to two or more elements that may be either directly connected, or connected by way of one or more intermediate elements. Additionally, the words “herein,” “above,” “below,” and words of similar import, when used in this application, shall refer to this application as a whole and not to any particular portions of this application. Where the context permits, words in the above Detailed Description using the singular or plural number may also include the plural or singular number respectively. The word “or” in reference to a list of two or more items, that word covers all of the following interpretations of the word: any of the items in the list, all of the items in the list, and any combination of the items in the list.
• The above detailed description of embodiments of the invention is not intended to be exhaustive or to limit the invention to the precise form disclosed above. While specific embodiments of, and examples for, the invention are described above for illustrative purposes, various equivalent modifications are possible within the scope of the invention, as those skilled in the relevant art will recognize. For example, while processes or blocks are presented in a given order, alternative embodiments may perform routines having steps, or employ systems having blocks, in a different order, and some processes or blocks may be deleted, moved, added, subdivided, combined, and/or modified. Each of these processes or blocks may be implemented in a variety of different ways. Also, while processes or blocks are at times shown as being performed in series, these processes or blocks may instead be performed in parallel, or may be performed at different times.
• The teachings of the invention provided herein can be applied to other systems, not necessarily the system described above. The elements and acts of the various embodiments described above can be combined to provide further embodiments.
• While certain embodiments of the inventions have been described, these embodiments have been presented by way of example only, and are not intended to limit the scope of the disclosure. Indeed, the novel methods and systems described herein may be embodied in a variety of other forms; furthermore, various omissions, substitutions and changes in the form of the methods and systems described herein may be made without departing from the spirit of the disclosure. The accompanying claims and their equivalents are intended to cover such forms or modifications as would fall within the scope and spirit of the disclosure.

Claims (20)

What is claimed is:

1. A system for creating a backup copy of data, the system comprising:

computer readable memory comprising at least a first de-duplication database associated with data generated by at least first and second clients;

a de-duplication module executing on one or more computer processors comprising computer hardware, the de-duplication module receives the data and performs de-duplication as part of a backup of the data, the de-duplication module further configured to:

determine if a duplicate copy of a first portion of the data from the first client exists in the first de-duplication database; and

if a duplicate copy does not exist in the first de-duplication database, storing first metadata that identifies the first client in association with the duplicate copy;

determine if a duplicate copy of a second portion of the data from the second client exists in the first de-duplication database;

if a duplicate copy of the second portion of the data exists in the first de-duplication database, removing the duplicate data in the second portion of the data;

determining whether second metadata in the second portion of the data identifies whether the second client is unique; and

if the second metadata is unique, storing the second metadata in association with the duplicate copy in the first de-duplication database, store the first and second metadata associated with the duplicate copy wherein the first metadata that identifies the first client and the second metadata that identifies the second client are stored in association with the duplicate copy.

2. The system ofclaim 1 wherein the first and second metadata identify differing operating systems.

3. The system ofclaim 1 wherein the first and second metadata identify differing permissions.

4. The system ofclaim 1 wherein the data comprises first application-specific data associated with a first application and second application-specific data associated with a second application.

5. The system ofclaim 4, further comprising a third module executing on one or more computer processors configured to:

parse the second application-specific data that is different in format than the first application-specific data, the second application-specific data comprising a second plurality of data objects;

identify portions within the second plurality of data objects to be considered for de-duplication; and

insert at least one de-duplication indicator in the second application-specific data that identifies at least one location of the identified portions in the second plurality of data objects to be considered for de-duplication.

6. The system ofclaim 4 wherein the de-duplication module is further configured to determine whether a duplicate copy of the second portion of the data exists in a second de-duplication database.

7. The system ofclaim 4 wherein the inserted at least one de-duplication indicator in the second application-specific data further identifies that the second de-duplication database is to be used in de-duplicating the application-specific data.

8. The system ofclaim 4 wherein:

the first de-duplication database is configured to store unique blocks of the first portion of the data associated with the first application-specific data; and

the second de-duplication database is configured to store unique blocks of the second portion of the data associated with the second application-specific data, wherein the first de-duplication database is separate and different from the second de-duplication database.

9. The system ofclaim 4 wherein the inserted at least one de-duplication indicator indicates at least one of the first de-duplication database and the second de-duplication database.

10. The system ofclaim 4 wherein the first application-specific data is associated with an electronic mail server application.

11. A method for creating a backup copy of data, the method comprising:

storing a first de-duplication database associated with data generated by at least first and second clients;

performing de-duplication of the data as part of a backup of the data;

determining if a duplicate copy of a first portion of the data from the first client exists in the first de-duplication database;

if a duplicate copy of the first portion of the data does not exist in the first de-duplication database, storing first metadata that identifies the first client in association with the duplicate copy;

determining if a duplicate copy of a second portion of the data from the second client exists in the first de-duplication database;

if a duplicate copy associated with the second portion of the data exists in the first de-duplication database, removing the duplicate data in the second portion of the data;

determining whether second metadata in the second portion of the data identifies whether the second client is unique; and

if the second metadata is unique, storing the second metadata in association with the duplicate copy in the first de-duplication database, wherein the backup copy stores the first and second metadata associated with the duplicate copy wherein the first metadata that identifies the first client and the second metadata that identifies the second client are stored in association with the duplicate copy.

12. The method ofclaim 11 wherein the first and second metadata identify differing operating systems.

13. The method ofclaim 11 wherein the first and second metadata identify differing permissions.

14. The method ofclaim 11 wherein the data comprises first application-specific data associated with a first application and second application-specific data associated with a second application.

15. The method ofclaim 14 further comprising:

parsing the second application-specific data that is in a different format than the first application-specific data, the second application-specific data comprising a second plurality of second data objects;

identifying portions within the second plurality of second data objects to be considered for de-duplication; and

inserting at least one de-duplication indicator in the second application-specific data that identifies at least one location of the identified portions in the second plurality of data objects to be considered for de-duplication.

16. The method ofclaim 14 further comprising determining whether the duplicate copy of the second portion of the data exists in a second de-duplication database.

17. The method ofclaim 14 wherein the inserted de-duplication indicators in the second application-specific data further identify that the second de-duplication database is to be used in de-duplicating the application-specific data.

18. The method ofclaim 14 wherein:

the first de-duplication database is configured to store unique blocks of the first portion of the data associated with the first application-specific data; and

the second de-duplication database is configured to store unique blocks of the second portion of the data associated with the second application-specific data, wherein the first de-duplication database is separate and different from the second de-duplication database.

19. The method ofclaim 14 wherein the inserted at least one de-duplication indicators indicate at least one of the first de-duplication database and the second de-duplication database.

20. The method ofclaim 14 wherein the first application-specific data is associated with an electronic mail server application.

Images