Maintaining encryption during storage system replication
Creating a replica of a storage system, including: receiving, by a first storage system from a computing device, data to be stored on the first storage system; reducing, by the first storage system, the data using one or more data reduction techniques; sending, from the first storage system to the second storage system, the reduced data, wherein the reduced data is encrypted; and sending, from the second storage system to a third storage system, the reduced data, wherein the reduced data is encrypted.
1 . A method implemented by a computing device comprising a processor and a memory device, the method comprising:
identifying a second storage system that contains data that was stored on a first storage system that has become unavailable; and
retrieving, by a replacement storage system that replaces the first storage system, the data from the second storage system, wherein the data retrieved by the replacement storage system is encrypted.
2 . The method of claim 1 , wherein identifying a replacement storage system further comprises creating the replacement storage system.
3 . The method of claim 1 , wherein identifying a replacement storage system further comprises identifying the replacement storage system from amongst a plurality of storage systems.
4 . The method of claim 3 , wherein identifying the replacement storage system from amongst a plurality of storage systems uses one or more selection criterion.
5 . The method of claim 1 , wherein detecting that the first storage system has become unavailable comprises failing to receive a heartbeat response from the first storage system.
6 . The method of claim 1 , wherein detecting that the first storage system has become unavailable comprises receiving an error message from the first storage system.
7 . The method of claim 1 , wherein a path between the second storage system and the replacement storage system is an encrypted and authenticated link.
8 . The method of claim 1 , wherein the data that is sent to the replacement storage system is encrypted using an encryption key known by the first storage system.
9 . The method of claim 1 , wherein the second storage system decrypts the data that is received from the first storage system and re-encrypt the data prior to storing the data within the second storage system.
10 . The method of claim 1 , wherein the first storage system, the second storage system, and the replacement storage system are within a cloud-based storage system.
11 . A cloud-based storage system having a computer processor and memory device, the memory device storing instructions to cause the computer processor to perform steps to:
identify a second storage system that contains data that was stored on a first storage system that has become unavailable; and
retrieve, by a replacement storage system that replaces the first storage system, the data from the second storage system, wherein the data retrieved by the replacement storage system is encrypted.
12 . The cloud-based storage system of claim 11 , wherein identifying a replacement storage system further comprises creating the replacement storage system.
13 . The cloud-based storage system of claim 11 , wherein identifying a replacement storage system further comprises identifying the replacement storage system from amongst a plurality of storage systems.
14 . The cloud-based storage system of claim 13 , wherein identifying the replacement storage system from amongst a plurality of storage systems uses one or more selection criterion.
15 . The cloud-based storage system of claim 11 , wherein detecting that the first storage system has become unavailable comprises failing to receive a heartbeat response from the first storage system.
16 . The cloud-based storage system of claim 11 , wherein detecting that the first storage system has become unavailable comprises receiving an error message from the first storage system.
17 . The cloud-based storage system of claim 11 , wherein a path between the second storage system and the replacement storage system is an encrypted and authenticated link.
18 . The cloud-based storage system of claim 11 , wherein the data that is sent to the replacement storage system is encrypted using an encryption key known by the first storage system.
19 . The cloud-based storage system of claim 11 , wherein the second storage system decrypts the data that is received from the first storage system and re-encrypt the data prior to storing the data within the second storage system.
20 . The cloud-based storage system of claim 11 , wherein the first storage system, the second storage system, and the replacement storage system are within a cloud-based storage system.