Applicable Products
QuTS hero, QES
Background
WORM (write once read many) technology ensures that once data is written, its state remains unchanged. The data cannot be deleted or modified, effectively locking the data state. WORM is primarily used for long-term data preservation or compliance applications, as well as for cybersecurity protection against ransomware encryption.
One of the WORM settings you can configure is the WORM retention period. This period determines how long WORM applies to the files and folders in a WORM shared folder.
Details
A WORM retention period is not based on system time, but instead based on the uptime of the storage pool that contains the WORM shared folder.
Each storage pool has its own WORM clock that determines when a WORM retention period ends. The following situations may pause the WORM clock:
- Shutting down the system
- Restarting the system
- Detaching the storage pool
- Detaching a disk in the storage pool
- Detaching the enclosure that contains the storage pool
- Locking the storage pool if the pool is an SED secure storage pool
- Updating the NAS firmware
- When the number of abnormal disks in the storage pool's RAID group exceeds the RAID group's disk failure tolerance
When any of the above events occurs, the WORM clock automatically pauses. The WORM clock only resumes when the interrupting event ends or returns to a normal state. However, due to the pause, the WORM retention period would end up finishing later than the specified duration.
Note
The system time does not affect the WORM clock. Changing the system time will not lengthen or shorten the retention period.
Example
- A WORM shared folder is created with the retention period set to 3 days (72 hours).
- A file is added to the WORM shared folder on Monday 18:00.
- If there are no events that cause the WORM clock to pause, the WORM retention period for the file would be expected to end after 72 hours on Thursday 18:00.
- The NAS shuts down on Tuesday 01:00.
- The NAS starts up on Tuesday 06:00.
- The WORM clock resumes.
- The last 5 hours are not counted as part of the WORM retention period for the file.
- No further events cause the WORM clock to pause.
- The WORM retention period for the file ends on Thursday 23:00.
- The file can now be modified or deleted.
- The end time is 77 hours after Monday 18:00 when the file was added to the WORM shared folder.
- The 77 hours include:
- 72 hours that the WORM clock counted when the NAS was running
- 5 hours that the WORM clock paused when the NAS was shut down
WORM Limitations
- WORM can only be enabled during shared folder creation.
- WORM cannot be enabled or disabled after shared folder creation.
- WORM settings cannot be modified after shared folder creation, except for the following:
- The WORM retention period can only be modified after shared folder creation if the WORM type is set to "Enterprise".
- When cloning from a snapshot of a WORM shared folder, WORM will be disabled in the new shared folder.
The WORM settings of the original shared folder are not cloned to the new shared folder.
Further Reading
适用产品
QuTS hero , QES
背景
WORM(一次写入,多次读取)技术确保数据一旦写入,其状态保持不变。数据不能被删除或修改,有效地锁定数据状态。WORM主要用于长期数据保存或合规应用,以及防止勒索软件加密的网络安全保护。
您可以配置的WORM设置之一是WORM保留期。此期间决定了WORM在WORM共享文件夹中的文件和文件夹上应用的时间长度。
详情
WORM保留期不是基于系统时间,而是基于包含WORM共享文件夹的存储池的运行时间。
每个存储池都有自己的WORM时钟,决定WORM保留期何时结束。以下情况可能会暂停WORM时钟:
- 关闭系统
- 重启系统
- 分离存储池
- 分离存储池中的磁盘
- 分离包含存储池的机箱
- 如果池是SED安全存储池,则锁定存储池
- 更新NAS固件
- 存储池的RAID组中异常磁盘的数量超过RAID组的磁盘故障容限时
当发生上述任何事件时,WORM时钟会自动暂停。WORM时钟仅在中断事件结束或恢复正常状态时恢复。然而,由于暂停,WORM保留期将比指定的持续时间结束得更晚。
注意
系统时间不会影响WORM时钟。更改系统时间不会延长或缩短保留期。
示例
- 创建一个WORM共享文件夹,保留期设置为3天(72小时)。
- 在星期一18:00将文件添加到WORM共享文件夹中。
- 如果没有导致WORM时钟暂停的事件发生,该文件的WORM保留期预计将在72小时后的星期四18:00结束。
- NAS在星期二01:00关闭。
- NAS在星期二06:00启动。
- WORM时钟恢复。
- 最后5小时不计入文件的WORM保留期。
- 没有进一步的事件导致WORM时钟暂停。
- 文件的WORM保留期在星期四23:00结束。
- 现在可以修改或删除文件。
- 结束时间是文件添加到WORM共享文件夹后的星期一18:00的77小时。
- 这77小时包括:
- NAS运行时WORM时钟计时的72小时
- NAS关闭时WORM时钟暂停的5小时
WORM限制
- WORM只能在创建共享文件夹时启用。
- 共享文件夹创建后不能启用或禁用WORM。
- 共享文件夹创建后不能修改WORM设置,除非以下情况:
- 如果WORM类型设置为“企业”,则可以在共享文件夹创建后修改WORM保留期。
- 从WORM共享文件夹的快照克隆时,新共享文件夹中将禁用WORM。
原始共享文件夹的WORM设置不会克隆到新共享文件夹。
进一步阅读