QNAP Data Recovery Case Study: RAID-6 Failure

A RAID (redundant array of independent disks) is a way to string individual hard drives together so that they behave like a single giant hard drive. These drives are usually linked together in a network-attached storage device or storage area network. The drives comprising a RAID can be linked together in many different ways. Each level has its own strengths and weaknesses.

People tend to rely on RAID arrays to both expand their data storage capacity and provide a cushion of support in case of drive failure. Some RAID levels, such as RAID-3 and RAID-4, have one drive act as a container for all of the special “parity” data which the RAID controller can use to reconstruct any missing data. Other levels, such as RAID-5 and RAID-6, distribute this parity information across all hard drives in the array.

Different RAID levels have different tolerances for drive failure—for example, RAID-0 will fail if one drive fails, RAID-1 and RAID-5 will fail if two or more drives fail, and RAID-6 will fail if three or more drives fail. As soon as a single drive in a RAID-5 or 6 array fails, it is prudent to replace it before any subsequent failure puts the safety of the data in jeopardy. The RAID controller will use its parity data to integrate the new drive into the array and continue to function normally. This is called “rebuilding” the RAID.

Picture source

RAID-6: A Brief Overview

At Gillware, many of the RAID arrays we receive for data recovery are RAID level 5 arrays. RAID-5 arrays can handle losing a single drive by using “exclusive OR” logic. Using XOR logic, if you have a set of values and one goes missing, the missing value can be reconstructed using the rest of the set.

If a single drive in a RAID-5 array fails, the controller uses the XOR function to take the parity data on the other drives and recreate the data on the missing drive. The RAID controller has to keep looking back at the parity data to access what had been on the failed drive. The array will keep chugging along, but its performance will be decreased. XOR on its own, however, only provides a single layer of insulation against data loss. This is why a RAID-5 array fails if more than one hard drive in it fails.

RAID-6 arrays are very similar to the RAID-5 arrays our RAID data recovery engineers are used to seeing. But RAID-6 arrays can lose two drives and still function. RAID-6 does this with an extra layer of parity data.

This extra layer of redundancy is referred to as “double parity”. In order to provide double parity, RAID-6 relies on XOR coding for one layer of parity, like RAID-5. The second layer of parity is provided by Reed-Solomon encoding.

Reed-Solomon encoding is typically used as error-correction in data storage and data transmission technologies. RS encoding is one of the reasons a scanner can read a bar code or QR code even if part of the code is damaged. Because of this second layer of parity data, even if a second hard drive fails, the RAID controller can still pick up the slack and reconstruct the missing pieces from the remaining drives.

Recovery Case Overview:

In this QNAP data recovery case, our client had eight three-terabyte hard drives arranged in a RAID-6 configuration using a NAS device and formatted with the Linux Ext3 filesystem. Several of the hard drives in this RAID array had failed, rendering all of the client’s data inaccessible.

In this case, the file recovery procedure for this failed RAID-6 array went fairly smoothly. Cody was able to piece the failed array back together and recover around 17 terabytes’ worth of the client’s critical data. Since a RAID-6 array with eight three-terabyte drives has about 18 terabytes of space, this particular array was full to bursting! Not all of the hard drives in the array had been 100% imaged, so as a result there was a small amount of data loss. The vast majority of the recovered data, however, appeared to be fully functional. We rated this QNAP data recovery case a 9 on our ten-point scale.