IBM Cloud Docs
About File Storage for VPC snapshots

About File Storage for VPC snapshots

File Storage snapshots are a zonal feature that is used to create a point-in-time copy of your File Storage for VPC share. The initial snapshot that you take is a full backup of the share. Subsequent snapshots of the same share are incremental, so they capture only the changes that occurred after the last snapshot was taken. You can use a snapshot to restore data to a new share in the console, from the CLI, with the API, or Terraform.

Snapshots concepts

Single share snapshots

A snapshot is a copy of your share that you take manually in the console, or from the CLI, or create programmatically with the API, or Terraform. You can take snapshots as often as you want. However, you can't take a snapshot of a share that's in a degraded state.

The first time that you take a snapshot of a share, all the share's contents are copied. The snapshot has the same encryption as the share (customer-managed or provider-managed). Snapshots are stored in the same location as the file share.

When you take a second snapshot, it captures only the changes that occurred since the last snapshot was taken. As such, the size of the snapshots can grow or shrink, depending on what changed in the meantime. The number of snapshots increases with each successive snapshot that you take. You can take up to 750 snapshots per share, and one snapshot per minute.

When a snapshot is deleted, only the data blocks that are no longer needed by other snapshots are freed on the share.

The lifecycle of snapshots is tied to the lifecycle of the shares that they belong to. When a file share is replicated, its snapshots are replicated as well. When the share is deleted, the snapshots are also deleted automatically.

The cost for snapshots is calculated based on GB capacity that is stored per month, unless the duration is less than one month. Because the snapshot is based on the capacity that was provisioned for the original share, the snapshot capacity does not vary.

Before you take a snapshot, make sure that all cached data is present on disk. For example, on Linux operating systems, run the sync command to force an immediate write of all cached data to disk.

You can restore files to your share from a snapshot. To perform a single-file restoration, you can use native OS functions of your virtual server instance. Browse to the share's NFS mount target to open the /.snapshot directory and see the data that is contained within each snapshot of your share.

You can use the snapshot to create a share as well. The share that you create by using a snapshot must have the same file share profile as the snapshot. However, you can increase the share's capacity beyond the size of the snapshot, and you can adjust the IOPS, too. For more information, see Restoring a share from a snapshot.

Do you want to automatically create snapshots of your File Storage for VPC shares? With Backup for VPC, you can create backup policies to schedule regular share backups. For more information, see About Backup for VPC.

Limitations

The following limitations apply to this release:

  • File share snapshots cannot be copied to another zone or region. They are stored in the same location as the file share. If you want the snapshots to survive the loss of the availability zone, you need to configure replication for the file share. When a replica share is created, all snapshots that are present on the source volume are also copied to the replica.
  • Snapshots are not supported on shares with Access control mode "VPC".
  • Taking snapshots are also not supported on replica shares or Accessor shares. However, the /.snapshot directory is accessible both on replica and Accessor shares.

Securing your data

IBM Cloud® offers security-specific tools and features to help you securely manage your data when you use IBM Cloud® Virtual Private Cloud. The following section provides information about access control, data encryption, configuration management, and auditing options that are available for your file share snapshots.

Managing security and compliance

Because snapshots are created from File Storage for VPC shares, they share the encryption key. When a share is created from a Snapshot, your SCC-registered preference of allowing only Customer-Managed encryption is applicable. For more information, see Getting started with Security and Compliance Center.

Activity tracking and auditing

When you initiate an activity on a snapshot, specific Activity tracking events are generated. These activities include creating, listing, modifying, and deleting snapshots. For more information, see File storage snapshots events.

Tags for File Storage for VPC snapshots

You can apply user tags to snapshots of your File Storage for VPC shares to better control and organize them across the VPC.

User tags are uniquely identified by a Cloud Resource Name (CRN) identifier. When you create a user tag, you provide a unique name within your billing account. You can define user tags in label or key-value format. You can create user tags or add existing tags to snapshots when you create the snapshots.

Observability

When snapshots are added or deleted, the change in the snapshot size is reported within 15 minutes. For more information, see Monitoring metrics for File Storage for VPC.

Next steps

You can create and manage your snapshots in the console, from the CLI, with the API, and Terraform.

For more information about creating and managing snapshots, and restoring a share from a snapshot, see the following topics.