News
4/6/2010
12:15 PM
George Crump
George Crump
Commentary
Connect Directly
RSS
E-Mail
50%
50%

What Is Zero Detect?

There is a term you are going to start hearing more of in storage circles; Zero Detect. Some storage systems that offer thin provisioning are adding the ability to detect areas of a volume that have been zeroed out so they can reclaim that space and use it elsewhere. Zero detect becomes a critical component as we advance the capabilities of thin provisioning.

There is a term you are going to start hearing more of in storage circles; Zero Detect. Some storage systems that offer thin provisioning are adding the ability to detect areas of a volume that have been zeroed out so they can reclaim that space and use it elsewhere. Zero detect becomes a critical component as we advance the capabilities of thin provisioning.Most file systems when they are told to delete a file, simply mark the area as available to be overwritten, they don't actually remove anything. This creates a challenge for storage systems that offer thin provisioning. If you delete a large amount of data to free up capacity, the thin provisioning system will not be able to understand what happened and reclaim that capacity. The result is that overtime thin provisioned systems used to "gain weight" as files were deleted from the file system. In other words the thinly provisioned volumes most efficient day was its first.

Despite this shortcoming, thin provisioning has caught on, almost becoming a required feature. The ability to only allocate capacity as it was needed, even if you could not later reclaim that capacity, still saves many organizations lots of wasted capacity. The ideal situation is to be able to reclaim the deleted space as well and the next era of thin provisioning will be defined by vendors that can advance the state of the art to address this challenge.

Which brings us to zero detect. As I said earlier a file system does not automatically zero out deleted blocks. It just marks them available to be overwritten. A separate utility will have to be run that will scan the file system for deleted files and then zero them out. Once thats done the zero detect aware thin provisioning system can scan the volume and identify the blocks that have been zero'ed out and reclaim those areas. While this adds a few extra tasks to the storage administrator's todo list, imagine being able to reclaim TB's of capacity. This will likely become a housekeeping chore that is run once a week or month but the return could be well worth the investment in time.

Zero detect does let a few worms sneak out of the can though. There will be issues with how many consecutive blocks of deletion are available before the space can be reclaimed and all of this scanning is going to take processing power on both the attached server and especially on the storage system. Storage system suppliers will have to come up with ways to address at least the later.

The ideal solution may be to have a file system that is thin aware and communicates directly with the storage systems. This would allow the storage systems to reclaim the space as soon as it becomes available. The communication would eliminate the need for a separate maintenance process as well as reduce the impact on server and storage processors.

There is an effort within the Technical Committee T11, which is the committee within INCITS to produce a standard interface between file systems and thin provisioned storage systems. Until this standard becomes ratified and established it is going to be on the file system vendors and storage hardware vendors to work together. Until that time though the zero detect method may be the only way to enable thin reclamation.

Track us on Twitter: http://twitter.com/storageswiss

Subscribe to our RSS feed.

George Crump is lead analyst of Storage Switzerland, an IT analyst firm focused on the storage and virtualization segments. Find Storage Switzerland's disclosure statement here.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Cartoon
Threat Intel Today
Threat Intel Today
The 397 respondents to our new survey buy into using intel to stay ahead of attackers: 85% say threat intelligence plays some role in their IT security strategies, and many of them subscribe to two or more third-party feeds; 10% leverage five or more.
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-6335
Published: 2014-08-26
The Backup-Archive client in IBM Tivoli Storage Manager (TSM) for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x before 6.4.2, and 7.1.x before 7.1.0.3 on Linux and AIX, and 5.x and 6.x before 6.1.5.6 on Solaris and HP-UX, does not preserve file permissions across backup and ...

CVE-2014-0480
Published: 2014-08-26
The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL ...

CVE-2014-0481
Published: 2014-08-26
The default configuration for the file upload handling system in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 uses a sequential file name generation process when a file with a conflicting name is uploaded, which allows remote attackers to cause a d...

CVE-2014-0482
Published: 2014-08-26
The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors relate...

CVE-2014-0483
Published: 2014-08-26
The administrative interface (contrib.admin) in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not check if a field represents a relationship between models, which allows remote authenticated users to obtain sensitive information via a to_field ...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
This episode of Dark Reading Radio looks at infosec security from the big enterprise POV with interviews featuring Ron Plesco, Cyber Investigations, Intelligence & Analytics at KPMG; and Chris Inglis & Chris Bell of Securonix.