Multi-Tier Data Replication with Air-Gap Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data protection systems face challenges in effectively protecting data from corruption, loss, and cyber threats like ransomware, especially in complex computing environments with multiple tiers of data storage, including local and cloud-based systems, where existing solutions often struggle with efficiency and security.
Innovation Solution
The implementation of a data protection system that uses replication operations, including snapshot-based data copying and retention locks, to securely replicate data across multiple tiers, minimizing exposure to cyber threats by isolating the vault with an air gap and applying retention locks to prevent data modification or deletion, thereby ensuring data integrity and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is replicated across multiple tiers including cloud storage, then data availability and protection against local failures are improved, but data exposure to cyber threats and complexity of protection operations increase
Solution Approach 1:
The system segments data storage into multiple independent tiers (local storage and cloud storage) with distinct protection strategies. Each tier can be independently managed and protected, allowing the local tier to be air-gapped for security while the cloud tier provides availability, thus resolving the contradiction between reliability and security exposure
Solution Approach 2:
An intermediary air gap is introduced between the replication source and target systems. This physical or logical separation prevents direct network communication, blocking cyber threats like ransomware from propagating across tiers while still enabling data replication and availability through controlled data transfer mechanisms
2Productivity
If traditional replication methods are used without air gap isolation, then data recovery capability is improved, but vulnerability to ransomware and cyber threats increases
Solution Approach 1:
The air gap acts as an intermediary barrier that enables data recovery operations while preventing cyber threat propagation. Data can be restored from isolated backup copies through controlled data transfer, maintaining productivity for recovery operations while the intermediary gap blocks ransomware and other cyber threats from reaching protected data
3Loss of information
If cloud tier data is continuously synchronized, then data freshness and accessibility are improved, but replication time and network dependency increase
Solution Approach 1:
The system implements periodic or event-driven replication instead of continuous synchronization. Data is replicated at scheduled intervals or when specific change thresholds are met, reducing unnecessary network traffic and replication time while maintaining acceptable data freshness for recovery operations
Solution Approach 2:
The system creates discrete data copies at specific points in time rather than maintaining continuous synchronization. These snapshot copies preserve historical data states and can be restored independently, reducing ongoing replication time and network dependency while maintaining data accessibility for recovery scenarios
Data Source
AI summary
Replication of a filesystem or a mount point or share may replicate all data that it consists of irrespective of where the data is stored. Replication protects data irrespective of location. One method is to replicate the filesystem namespace as is while skipping the data outside of the appliance/machine so that replication cost and time are reasonable. The data outside of the machine, like cloud/tape data is protected differently. One example method includes a data protection operation configured to replication a namespace associated with multiple data tiers. During replication, data from one of the tiers is skipped while all of the namespace metadata is replicated. The recovery restores the namespace metadata and the data that was replicated from the other tier. This may be performed in connection with cyber security, for example when replicating multi-tier data to a vault.