►
Description
Object WORM Feature in Ceph Rados Gateway - Zhang Shaowen China Mobile (Suzhou) Software Technology Co., Ltd
"Write Once Read Many"(WORM) model prevents users' data from being deleted or overwritten to meet regulatory requirements. This is very suitable for financial, insurance, online collaboration and other fields. Amazon, Google and Alibaba all support WORM feature in their object storage products which greatly expands the scope of use of object storage. This proposal introduces the WORM feature in Ceph radosgw gateway developed by China Mobile based on Amazon S3. It will introduce the design and usage for object WORM feature and is hoped to make some help for audience to understand why and how to use this new feature.
About Zhang Shaowen
Senior Engineer, China Mobile (Suzhou) software technology Co., Ltd
I've worked in China Mobile for 3 years and began to work on Ceph in 2016. Now my work is focused on object storage. I've got a little speaking experience, | but haven't got a chance to make a speech in a | big conference.
A
Here
is
what
I
assure
to
the
first
are
introduced,
what
he'll
worm
and
why
we
need
a
room
and
then
I
introduced
the
accessories
one
feature
which
is
also
called
insulin,
suite
objector,
lock
and
the
last
in
the
work
of
warm
incest.
So,
let's
begin,
what
is
warm.
Warm
is
short
for
red
horns
with
meaning
it
describes
a
data
storage
device.
English
information
was
written,
cannot
be
modified.
The
simple
explanation
is
that
it's
immutable
storage.
A
We
can
write
data
to
the
storage
device
media
graciously
on
one
time
after
that,
no
one
can
tell
me
change
the
data
in
any
way,
a
simple
version
of
warm
storage
in
the
CDR
discs.
We
can
record
her
to
the
practice
and
then
it
stacks
that
way
forever.
We
can
damage
or
destroy
the
latest
to
deny
someone
access
to
it,
but
we
can't
change
the
data.
That's
already
stored
on
CDs.
A
A
There
are
two
types
of
warm
the
first
one
in
the
physical
he
uses.
A
storage
media
which
is
physically
can
be
written
only
once
and
prevents
the
youth
there
from
extended
or
intentionally
hurting
or
raising
the
data
about
the
cost
already
media,
a
sexual
CD
and
DVD
good
example,
offering
fast
access
and
the
long-term
storage
capsule
captivity
physically
will
help
start
historically
being
used
or
achieving
data
that
requires
a
long-term
retention
period.
A
A
Now
we
have
known
what
really
warm,
but
why
we
need
it
with
the
advancement
of
Science
and
Technology
and
social
social
development.
Information
has
exploded
and
the
issue
of
a
secure
access
and
the
application
of
data
has
readily
received
attention,
for
example,
called
cases,
medical
cases,
financial
securities
and
so
the
important
data
as
specified
in
accordance
with
the
law.
So
you
can
only
be
read
and
not
overwritten
during
the
time
period.
Therefore,
such
data
needs
to
be
tempered
proof.
The
wrong
feature
provides
a
right
one,
so
much
for
reader
technology.
A
It
is
a
commonly
used,
the
method
to
protect
our
security
access
and
achieving
in
the
storage
industry.
It
is
designed
to
prevented
her
from
being
tampered
with
and
to
recover
the
energy
of
dead
time
so
s3
uses
of
ejector
Locker
to
implement
the
feature
it
can
hear
pillars
and
prevented
objects
from
being
deleted
or
overwritten
for
a
fixed
amount
of
time
or
independently.
Leaders
can
illustrate
a
believer
log,
2,
meter,
regular
rate
apartments
that
require
room,
storage
or
add
an
extra
layer
of
protection
against
our
jeopardy
change
and
deletion.
A
A
Now,
before
we
can
lock
in
a
project,
we
can
have
a
tool
configure
a
bucket
to
us
3,
our
chicken
look
to
do
this.
We
must
specify
when
we
created
the
bucket
that
we
want
to
enable
over
here
to
look
after
we
have
configurator
a
bucket
or
a
projector
lock.
We
can
lock
objects
in
data
packets,
using
retention
period,
legal
horse
or
person.
A
We
can
only
enable
a
projector
locker
for
new
bucket.
There
is
no
s3
API
if
we
want
to
turn
our
objective
lock
for
an
existing
bucket
when
we
create
a
package
with
a
projector
lock
in
a
border,
so
we
are
automatically
enable
versioning
for
the
package
and
after
we
enable
potato
lock,
we
count
disabled
and
all
suspended
versioning
for
the
packet
anymore.
A
Our
technolog
provides
two
types
of
protection
retention
and
the
legal
holder.
The
first
is
the
retention.
It
consists
of
a
period
and
target
and
murder
attention
period
protects
an
objective
version
for
a
fixed
amount
of
time.
When
we
started
our
buckets,
we
can
use
this
or
years
so
we
can't
use
person
and
when
we
place
a
retention
period,
an
objective
version
s3
stores
that
timestamp
in
the
objective
version
the
metadata
to
indicate
when
the
retention
period
expires.
A
After
that,
the
object
aversion
can
be
overwritten
or
diluted
in
the
retention
period
can
be
extended,
a
potato
a
little
set
in
a
EULA
Allah,
at
least
they
have.
The
appropriate
permissions
can
extend
the
retention
period.
The
no
I
cannot
shorten
the
period
because
the
tentacles
set
where
an
object
is
uploaded.
A
A
There
are
two
types
of
a
retention:
word:
user
retention
worth
applied,
different
levers
of
a
protection
to
object.
We
can
apply
either
retention
mérida
to
any
object
aversions
as
protected
by
object.
Look
the
first
one
is
government
governs
in
government's
murder,
Either
account
over
it
or
delete
an
objective
version
of
eret
or
is
local
settings,
and
this
is
they
have
special
share
permissions
with
the
government
murder.
We
protect
the
objects
against
being
deleted
by
Mercy
users
at
the
weekends,
their
grant
some
users
permissions
to
enter
the
retention
settings
or
deleted
object.
A
A
And
it's
and
the
external
today
include
the
header
in
your
request,
which
I
wanted
to
override
that
mass
murder
in
compromise
murder,
a
protracted
battle
version
can
be
over
written
or
deleted
by
in
the
user,
including
the
route,
a
user
in
the
AWS
account
when
object
is
locally
in
accompaniment
Meredith.
It's
a
retention,
mérida
can't
be
changed
and
it's
a
retention
period
economy
shortened.
How
many
shmurda
interests
that
objector.
A
A
Leopolda
has
an
attention
period
once
that
it
Hermia's
in
effect
and
carrots
removed
it
the
footer
object
earlier
her.
The
permission
is
required
when
the
user
says
I'll.
Remove
the
liver
hurts
new
occurred,
is
intervention
with
the
retention
period
after
the
containers
of
rejected
or
is
in
a
border
the
user
can
set
or
remove
legal
person,
regardless
of
whether
the
object
is
protected
by
the
retention
period
for
an
objective.
A
Based
on
objective
lock,
overstreet
s3,
we
applied
the
objective
lock
feature
in
South
Florida's
getaway.
There
are
six
new
AP
is
added
to
self
foot
and
get
back
to
the
objective.
Lock
are
used
to
set
a
key
to
the
default
retention
period
on
the
packet
we
can
start
with
days
or
years,
but
an
odd
person
under
put
indicator.
A
projector
retention
are
used
to
set
okay
to
the
retention,
take
on
the
specified
object
under
the
last
quarter
and
the
Kitab
rejected
parts
are
used
to
set
and
Aikido
gigahertz
on
the
specified
level
yoga.
A
Apart
from
these
six
new
api's,
we
also
monitor
some
other
actions
like
create
team
package.
Github
ejectment
data
to
make
an
object,
a
local
feature,
work
as
a
writer
is
examples
of
operator.
Lok
Satta
configurations.
So
first
is
the
sample
of
objected,
Lok
Satta
unpackage.
It
has
the
state
Hearst
Merida,
and
this
or
yes-
and
the
second
is
the
projectile
retention
data
sample
on
the
object.
A
A
So
how
can
we
indicated
the
projector
lock
in
a
border
package
in
a
curler?
We
use
the
blacks
in
actually
W
a
pocket
infrastructure
to
enjoy
the
weather.
The
packet
has
enabled
the
projector
lock
it
is
set
during
the
pocket
or
creation
when
creating
impact.
We
specify
the
parameter
of
operator
lock,
the
flag
will
be
set
and
the
object
a
lock
and
the
versioning
will
first
be
enabled
to
store
the
attention
configurations.
We
also
added
the
objective
lock
configuration
to
the
active
W
black,
the
infrastructure,
so
we
can
access
it
easily
and
quickly.
A
We
set
a
project,
a
lock
configuration
on
the
package,
so
our
project,
upload
in
the
to
the
marketer,
will
have
the
retention
period
automatically.
Besides,
you
can
also
a
center
returned
here,
theater
on
the
specified
objective
version,
no
matter
which
way
we
choose
a
projector.
We
are
finally
have
an
attribute
which
indicates
the
data
of
the
protection
expires,
so
we
use
the
structure
RG,
w
projector
retention,
toast
other
information,
and
it's
kept
as
an
objective
attribute
in
the
user
at
the
end,
actually
W
dot,
objective
retention
and
the
depot
parris
information
is
sim.