Transfer Appliance in Google Cloud
A friendly, start-to-finish guide to moving mountains of data to the cloud in a locked, encrypted box, when the internet is simply too slow for the job.
Suppose your company has fifty years of video, scanned documents, research results and backups sitting in a room full of storage servers. The new plan is to put all of it in the cloud. Somebody opens a calculator, divides the size of the data by the speed of the office internet, and the answer comes out as “about four months, if nothing else uses the network.”
That answer ends many cloud plans before they start. It is not a lack of will. It is simple arithmetic: data has grown much faster than the pipes that carry it. Yet there is an old and wonderfully simple answer to this problem. If the pipe is too thin, put the data in a box and send the box.
Transfer Appliance is Google Cloud’s version of that idea, built for modern security and tracking. In this guide you will learn what it is, how the whole journey works, how to prepare, how to copy fast and safely, how to protect the data and the key, how to verify the result, and how teams combine the box with online tools. No earlier knowledge is needed, and every new word is explained the first time it appears.
1What Is Transfer Appliance?
Transfer Appliance is a rugged storage box that Google sends to your office or data center, so you can move huge amounts of data to Google Cloud by post and not through the internet.
Most data reaches the cloud through the internet. For a few photos or a small database, that is perfect. But when a company wants to move hundreds of terabytes, or even a petabyte, the internet becomes the slowest part of the plan. A terabyte is about a thousand gigabytes, roughly the size of two hundred thousand typical photos. A petabyte is a thousand terabytes.
Transfer Appliance solves this by turning the problem upside down. Instead of pushing data through a thin network pipe, you rent a physical device from Google. It arrives at your site, you copy your files onto it over your fast local network, and you ship it back. Google then loads the data into your Cloud Storage bucket from inside its own high-speed network. Ordering the device, copying the data, sending it back and finding your files in the cloud is the whole story.
Imagine you are moving house, and you have ten thousand boxes. You could carry them one at a time on a bicycle to the new home, which is the internet. Or you could hire a moving truck, load it at your old house, drive it over and unload at the new one. The truck trip looks slower on the road, yet it moves everything much sooner than a million bicycle rides. Transfer Appliance is the moving truck for data.
What it is good at
- Moving very large data sets when the network is too slow, too busy or too costly to use.
- Starting a cloud project, such as a data lake, with years of old data already in place.
- Moving data out of sites with poor internet, such as remote research stations or factories.
- Giving a security-minded company a controlled, encrypted, trackable way to move data.
What it is not
Transfer Appliance is not a database migration tool, a backup program or a live sync service. It copies files and objects in bulk, once, to Cloud Storage. Ongoing changes after the copy must be moved by other tools. Later chapters explain how teams combine the box with online transfer tools.
Models, capacities, prices, regions and screens for Transfer Appliance change over time. This guide teaches ideas that stay stable and points out where you should confirm current details in the official Google Cloud documentation before you order.
2The Problem: Moving Mountains of Data
Data grows faster than networks. The arithmetic of moving it is simple, and often shocking.
Moving data takes time equal to the amount of data divided by the speed of the connection. If the numbers are small, this is invisible. When the numbers are large, it dominates the whole project. The table below shows the best case, where the connection runs at full speed without any pause. Real networks are slower, because they are shared and have overhead.
| Data size | 100 Mbps link | 1 Gbps link | 10 Gbps link |
|---|---|---|---|
| 10 TB | about 9 days | about 22 hours | about 2 hours |
| 100 TB | about 93 days | about 9 days | about 22 hours |
| 500 TB | about 463 days | about 46 days | about 4.6 days |
| 1 PB | about 926 days | about 93 days | about 9 days |
Mbps means megabits per second, and Gbps means gigabits per second. A company with a one gigabit link that is shared by hundreds of employees may only be able to spare a small part of it for a transfer. Using the whole link for weeks may also slow down email, video calls and customer systems.
The hidden problems of a long online transfer
Months of waiting
A project that needs data in the cloud cannot start until the copy ends. Teams sit idle while bits crawl along.
Long-running failures
A transfer that lasts weeks will meet outages, restarts and expired passwords. Each one needs attention.
Bandwidth bills
Extra internet capacity or a dedicated link can cost more than the transfer itself, and it may be needed for only a short time.
Disturbing daily work
A heavy transfer can starve the network that normal business systems rely on.
Pouring a swimming pool of water through a garden hose will work, but it will take all summer and leave nobody with water for the garden. A tanker truck delivers the same water in a morning. When the volume is big and the hose is thin, a different vehicle is the answer.
Google’s guidance has been that offline transfer deserves a look when an online transfer would take about a week or more. Treat this as a starting point and do your own arithmetic using the real, shared speed you can use, not the headline speed of the link.
3Core Concepts From Zero
A short list of words is enough to understand the whole subject. Learn them here once.
Cloud Storage, bucket and object
Cloud Storage is Google Cloud’s service for storing files at huge scale. It keeps each file as an object, which is the file’s contents together with its name and some information about it. Objects live inside buckets, which are named containers you create. A bucket is similar to a top-level folder, although Cloud Storage does not have real folders inside it. The folder-like paths you see are only part of object names.
Project and organization
A project is the container in which your Google Cloud resources, permissions and bills live. Your Transfer Appliance order belongs to a project, and so does the bucket where the data will land.
Appliance
The appliance is the physical box. It holds a large amount of storage, has network ports, and acts like a big network drive on your local network while it is at your site.
NFS
NFS, short for Network File System, is a common way for computers to share folders over a network. Transfer Appliance offers its storage as an NFS share, so your servers can mount it and copy files to it with ordinary tools, much like using an external drive.
Finalization
Finalization is the step in which you tell the appliance that copying is finished. It then closes and locks the data, so nothing can be added or changed, and it gets ready for shipping.
Rehydration
Rehydration is Google’s name for the process that reads your data from the returned appliance and writes it into your Cloud Storage bucket. The name comes from the idea that the data, packed and encrypted on the box, is brought back to life in the cloud.
Checksum
A checksum is a short code calculated from the contents of a file. If even one bit of the file changes, the checksum changes too. Systems compare checksums before and after a copy to prove that nothing was damaged on the way.
Encryption and keys
Encryption scrambles data so that it is unreadable without a secret key. Transfer Appliance encrypts your data on the box, and you control the key that unlocks it.
| Term | Simple meaning | Everyday picture |
|---|---|---|
| Appliance | The shipped storage box | A moving crate with a lock |
| Bucket | Your named container in Cloud Storage | The new warehouse |
| Object | One stored file with its name | One labeled item on a shelf |
| NFS share | A folder shared over the network | A shared drive in the office |
| Finalization | Closing and locking the data | Sealing the crate with tape |
| Rehydration | Unpacking into Cloud Storage | Unloading the truck into the warehouse |
| Checksum | A fingerprint of a file | A seal that shows tampering |
| Key | The secret that unlocks encrypted data | The only key to the crate lock |
Think of sending the contents of an old library to a new building. The appliance is a locked shipping container. The NFS share is the loading ramp where your staff carries in the books. Finalization is the moment the container door is sealed. The key is held only by you. At the destination, rehydration is the crew that opens the container and shelves each book in the right bucket-shaped room.
4Online or Offline: Choosing the Right Road
Transfer Appliance is one of several ways to get data into Google Cloud. Choosing well saves weeks and money.
The online options
Storage Transfer Service is a managed service that copies data into Cloud Storage from other clouds, from web addresses, from other buckets and, with a small agent program, from file systems in your own data center. It runs in the cloud, handles retries, and can be scheduled. Command-line tools such as the gcloud storage commands are good for smaller jobs that you start yourself. Dedicated network links, such as Cloud Interconnect or a VPN, give you a faster or safer path for online transfers.
The offline option
Transfer Appliance moves data physically. Its strength is in volume, and its price is time spent waiting for shipping, plus some manual work at your site.
flowchart TD
S["Need to move data to Google Cloud"] --> Q1{"Would the online transfer take about a week or more?"}
Q1 -->|No| ON["Use online tools such as Storage Transfer Service or gcloud storage"]
Q1 -->|Yes| Q2{"Can you add bandwidth or a dedicated link affordably?"}
Q2 -->|Yes| ON2["Consider Interconnect or more bandwidth, then transfer online"]
Q2 -->|No| Q3{"Is an appliance available for your location?"}
Q3 -->|Yes| TA["Use Transfer Appliance"]
Q3 -->|No| ALT["Plan a staged online transfer or other options"]
| Option | Best for | Strength | Weakness |
|---|---|---|---|
| Transfer Appliance | Very large data, slow or busy networks | Speed for big volumes, no heavy network use | Shipping time, physical handling, one-time bulk only |
| Storage Transfer Service | Cloud-to-cloud and on-premises with agents, scheduled copies | Managed, repeatable, handles changes | Limited by your bandwidth |
| gcloud storage commands | Smaller, hands-on transfers | Simple and flexible | You manage retries and speed |
| Interconnect or VPN plus online tools | Ongoing large flows, steady hybrid setups | Reliable and fast links | Setup time and monthly cost |
To send a gift to a friend in another city, you might post a small parcel, ask a courier for a large box, or hire a freight company for furniture. Each costs different money and time. A good sender picks the method that matches the size of the gift, and does not mail furniture in an envelope.
Do not compare only the “days of transfer.” Add the time to order, to receive, to copy at your site, to ship back and to rehydrate. An appliance can take a few weeks from order to final data in the bucket, so it shines only when the online alternative is much longer.
5Architecture and Components
The system has a few simple parts. Seeing how they connect makes every later step easy to follow.
flowchart LR SRC["Your data on file servers and storage arrays"] --> NET["Your local high speed network"] NET --> TA["Transfer Appliance at your site"] TA --> SHIP["Shipping carrier"] SHIP --> UP["Google upload facility"] UP --> GCS["Cloud Storage bucket in your project"] GCS --> USE["BigQuery and other Google Cloud services"] CON["Google Cloud console order and tracking"] -.-> TA CON -.-> UP
Part 1: your source data and servers
This is the data you want to move, stored on file servers, network storage devices or ordinary computers. The machines that read this data are usually the true limit on copy speed, so they deserve attention.
Part 2: your local network
The appliance connects to your network with high-speed ports. Because the appliance is next to your servers, the transfer runs over your fast internal network and does not touch the internet. This is why a copy that would take months online can take days.
Part 3: the appliance
The box contains storage, a computer that serves the NFS share, encryption features and monitoring. It records what you copy and prepares the data for the return trip.
Part 4: the carrier and the upload facility
A shipping company carries the appliance both ways. At Google, trained staff receive it, connect it to a fast network and begin rehydration. The upload goes directly into the bucket that you named in your order.
Part 5: the console
You place the order, follow its status, and receive notifications in the Google Cloud console. It is also where you find instructions and, in some cases, tools for your copy.
| Component | Main job | Who owns it |
|---|---|---|
| Source storage and servers | Hold and serve the original files | Your infrastructure team |
| Local network | Carry the copy at high speed | Your network team |
| Appliance | Receive, encrypt and store the data | Google, on loan to you |
| Carrier | Move the box safely | Shipping company, arranged by Google |
| Upload facility | Verify and upload to your bucket | |
| Cloud Storage bucket | Final home of your data | Your cloud team |
It is like a library lending out a big book trolley. You wheel the trolley to your own shelves, load it with your books, lock it, and send it back. At the library, staff unload the trolley onto the shelves of your reserved room. The courier is the van between your door and the library door.
6Models and Capacity Planning
Choosing the right size of appliance is the first real decision. Too small, and you must order again. Too large, and you pay for space you do not use.
Google has offered Transfer Appliance in more than one size. Models have included smaller devices holding tens of terabytes, and larger ones holding hundreds of terabytes, with names such as TA40 and TA300 in more recent generations. Older generations used different names and capacities. Because the lineup has changed over time, check the current documentation for the models, the usable capacity, the physical size and the network speed of each.
Raw versus usable capacity
Raw capacity is the total size of the disks inside. Usable capacity is the space you can really fill with your files, which is smaller because some space is used for protection against disk failures and for the system. Always plan with usable capacity.
Do not count on compression
Some storage products advertise bigger numbers through compression and deduplication, which shrink data by removing repeats. Data such as videos, photos and already-compressed archives hardly shrinks at all. Plan as if your files will take their full size, and treat any saving as a bonus.
How to size your order
Measure the real data
Add up the size of the folders you will move, using the same tool that your copy will use. Count hidden folders and snapshots only if you really plan to copy them.
Add growth
Data keeps growing while you wait for the box. Add a safety margin for files created before the copy ends.
Compare with usable capacity
Check how many appliances of each model you need. Several smaller devices can be copied in parallel, which may reduce the total time.
Consider the copy speed
If your source servers are slow, extra appliances will sit waiting. Match the number of devices to what your servers can feed.
When you hire a moving van, the number on the advertisement may say “20 cubic meters,” but the useful space is lower after the wheel arches and the fixings. And furniture does not compress. A wise mover measures the real furniture, adds a little extra for the things bought last week, and chooses the van from the useful space.
If your data is only a little bigger than one appliance, consider cleaning out old, duplicate or useless files first. Moving data you do not need is the most expensive kind of waste.
7Before You Order: A Readiness Checklist
The cheapest problems are the ones you find before the box arrives. A short checklist avoids most surprises.
Data readiness
- Know what you are moving. Make a list of folders, sizes, file counts and owners. Decide what will not be moved.
- Check file names and sizes. Cloud Storage has limits on object names and sizes. Find problem files early. The chapter on files, names, sizes and metadata explains the main limits.
- Plan for changing data. Decide whether files will keep changing during the transfer, and how you will catch up afterwards.
- Clean first. Delete junk, temporary files and duplicates you no longer need.
Cloud readiness
- A project with billing. The order lives inside a Google Cloud project, and billing must be active.
- A destination bucket. Create the bucket, choose its location and storage class, and confirm the permissions needed for the upload service.
- The right people and permissions. Someone with the proper role must place the order, and others need view access to track it.
- A key plan. Decide how encryption keys will be created, stored and backed up, before the box arrives.
Site readiness
- Space and power. The appliance needs rack space or a safe table, suitable power and cooling. Check the technical sheet for exact needs.
- Network ports and cables. Make sure you have switch ports of the right speed, and cables or adapters that fit.
- Receiving the box. Decide who will accept the delivery, where it will be stored, and how access is controlled.
- Servers that can feed the box. Check that your source machines can read data quickly and have the NFS client software installed.
People readiness
Name a project lead, a person for the network, a person for the storage and servers, and a person who understands the cloud side. Agree who will watch the copy, who will verify the results, and who decides when source data may be deleted.
| Area | Question to answer | Owner |
|---|---|---|
| Data | How big is it, and which files are problematic? | Storage team |
| Cloud | Is the bucket ready and the permissions in place? | Cloud team |
| Network | Which switch ports and addresses will the box use? | Network team |
| Site | Where does the box live, and who may touch it? | Facilities and security |
| Security | Who holds the encryption key and its backup? | Security team |
| Project | Who is in charge, and what is the deadline? | Project lead |
Before the moving truck arrives, a sensible family labels the boxes, clears the hallway, checks parking, and tells the neighbors. If the truck arrives before the hallway is clear, the driver waits, and the clock keeps ticking. Readiness is that preparation.
8Placing an Order and the Journey of the Box
From the first click to the last email, a Transfer Appliance job follows a clear series of stages.
Request the appliance
In the Google Cloud console, you start an order. You give the project, the destination bucket, the model and quantity, the shipping address, and contact people. Some regions or countries may have limited availability, so confirm that yours is supported.
Review and approval
Google reviews the request, and may ask questions about your site or plan. Approval times vary, so build some slack into your schedule.
Shipping to you
The appliance is prepared and sent by a carrier. You receive tracking information. Customs rules can add time for cross-border shipments.
Delivery and inspection
Your receiving person checks the packaging for damage and records the condition. Report problems at once, before you connect anything.
Connect and copy
You place the box, connect power and network, set up access and begin copying. This is the stage you control, and the stage where careful planning pays off.
Finalize and ship back
You close the data, power down the appliance, and arrange the return using the supplied shipping details.
Receipt and rehydration
Google receives the box, inspects it and starts rehydration into your bucket.
Completion and erasure
You are notified that your data is in Cloud Storage. After the upload and checks, Google securely erases the appliance.
From request to complete data in the bucket, expect several weeks. Parts you control, such as the copy, can be shortened by good preparation. Parts you do not control, such as shipping and approval, need generous margins.
Renting a moving truck follows the same shape. You book it, wait for confirmation, pick it up, load it at your own pace, return it, and then the company unloads and cleans it. The loading is the part you control. The booking and the return queue are not yours, so you give them space in the plan.
9Identity, Permissions and Buckets
Cloud permissions decide who can order the box, who can watch it, and which service may write into your bucket.
Google Cloud uses IAM, short for Identity and Access Management, to give people and programs permission to act. For Transfer Appliance, a few kinds of permission matter. Exact role names and steps can change, so use the console instructions as your final guide.
People who order and manage
A person who places and manages orders needs a Transfer Appliance administrator role in the project. Other team members can be given viewer roles, so they can follow progress without being able to change or cancel the order. Grant these roles to groups where possible, so that access can be reviewed easily.
The destination bucket
The upload service must be allowed to write objects into your bucket. The console usually guides you in granting the right permission to a Google-managed service identity. Grant only what is needed, on that one bucket, and not across the whole project.
Bucket choices
- Location. Choose a region or multi-region close to your future users and compliant with your data rules. Changing the location later means copying again.
- Storage class. Choose Standard for data in frequent use, and colder classes for data that will rarely be read. The chapter on storage classes and bucket design explains the choice.
- Access control. Prefer uniform bucket-level access, so permissions are simple and consistent.
- Protection. Consider object versioning or retention settings if the data must not be deleted or overwritten for some time.
| Who | Needs to | Suitable access |
|---|---|---|
| Order owner | Place, change and cancel orders | Transfer Appliance administrator role in the project |
| Project team | Watch the order status | Viewer role |
| Upload service identity | Write objects to the bucket | Only the needed permission on the one destination bucket |
| Data consumers | Read the data after upload | Read-only roles on the bucket, granted after verification |
| Security and audit | Review who did what | Access to audit logs |
A large one-time transfer is a tempting moment to grant broad roles “just to make it work.” Resist this. Broad permissions usually stay long after the project ends. Grant narrow roles, and remove them when the job is finished.
Think of a warehouse with a delivery door. The manager can order deliveries, the staff can watch the schedule, and the delivery driver is allowed to enter only the one door where goods are unloaded. Nobody hands the driver the keys to the whole building.
10Preparing Your Site
The box will sit in your own building for days or weeks. A little attention to space, power, cooling and network avoids frustrating delays.
Physical space
Depending on the model, the appliance may be designed to fit in a standard server rack, or may need a stable surface in a secure room. Check the dimensions and weight in the documentation, and make sure the delivery route, doors and lifts can handle the shipping case. Keep the original packaging, since you will use it to ship the device back.
Power and cooling
The device draws electrical power and gives off heat. Use the type of power connection that is specified, and place it in a room with enough ventilation. Do not block the air vents, and avoid damp or dusty places.
Network
Connect the appliance to a switch that runs at the speed the appliance supports. Using slower ports wastes the box’s capability. Decide how the box will get its network address, either automatically or with a fixed address that you assign. Make sure firewalls between your servers and the box allow the NFS traffic and any management access that you need.
Physical security
The appliance holds your data. Keep it in a locked room with controlled access and, if your policy requires it, camera coverage. Keep a log of who enters and who handles the box, from arrival to departure.
Where it sits
Rack or stable table, near your servers, with a safe route from the loading door.
Clean power
The right connection, preferably protected from sudden outages.
Fast, close ports
Ports at the right speed on a switch near the source servers.
Locked and logged
Restricted access with a written record of who touched the box.
Installing a new industrial coffee machine in an office needs a sturdy counter, a power outlet that can handle it, a water connection and someone to lock the door at night. The machine is easy once those basics are in place. The appliance is the same: the preparation matters more than the plug-in.
11Network Basics for a Fast Copy
The copy happens on your own network, so a little network knowledge turns a slow week into a fast weekend.
Speeds in plain words
Network speeds are measured in bits per second. A gigabit link carries one billion bits each second, which is roughly 125 megabytes per second at best, once you convert bits to bytes. A 10 gigabit link carries ten times more. Many offices still use one gigabit connections on desk machines and servers. If your servers connect at one gigabit, then even a very fast appliance will wait for them.
| Link speed | Best-case rate | Time for 10 TB | Time for 100 TB |
|---|---|---|---|
| 1 Gbps | about 125 MB per second | about 22 hours | about 9 days |
| 10 Gbps | about 1.25 GB per second | about 2 hours | about 22 hours |
| 25 Gbps | about 3.1 GB per second | under 1 hour | about 9 hours |
| 40 Gbps | about 5 GB per second | about 33 minutes | about 5.5 hours |
These are ideal numbers. In real life, expect lower speeds because of protocol overhead, small files, shared switches and slow disks.
Where the bottleneck hides
- Server network cards. A server with a one gigabit card cannot send faster than that, no matter how big the appliance link is. Use faster cards, or use many servers.
- Switches and uplinks. A fast switch connected to the rest of the network by a slow cable becomes a narrow road for all traffic.
- Cables and optics. Damaged or wrong cables cause errors and retransmissions, which slow everything.
- Disks and storage arrays. The source storage must read fast enough. Older arrays under heavy business load may be the true limit.
- The file system and mount settings. Poorly tuned mount options and tiny transfer sizes can waste a fast link.
Measure before you start
Before the big copy, run a test that moves a large file from a source server to a test target on the same switch, and measure the rate. Then run the same test from several servers at the same time. This tells you the total capacity of your path, and it shows whether adding more servers will really help.
Server speed
Confirm the network card speed on each source server.
Switch path
Make sure the route from servers to the appliance does not squeeze through a slow link.
Disk reads
Test how fast the source storage can read under normal load.
Parallel test
Measure total throughput with several servers running together.
Water flowing from a reservoir to a garden passes through pipes of many sizes. The flow is set by the narrowest pipe, even if the reservoir is huge and the garden hose is wide. A network path is the same: find the narrowest pipe first, and widen only that one.
12Receiving and Connecting the Appliance
The day the box arrives is the day the clock starts. A calm, ordered setup avoids early mistakes.
Inspect the packaging
Look for damage, open seals or signs of tampering. Photograph anything unusual, and contact Google before you proceed if the box looks wrong.
Record the arrival
Note the date, time, the person who accepted it and the serial number. This starts the chain of custody.
Place and power on
Mount or place the appliance in the prepared location, connect power and the network cables, and switch it on.
Set up network access
Follow the instructions to give the device an address and make its management screen reachable by your administrators.
Configure encryption
Follow the steps to provide or create the key material that will protect the data. Back up this key safely before copying anything.
Mount the share and test
From one source server, mount the NFS share, copy a small test folder, and check that the files are readable and complete.
Copy a small, varied set of files first, including large files, tiny files and files with unusual names. Look for errors now, while fixing them is cheap, and not after you have spent three days copying.
When a new washing machine is delivered, you check for dents, read the numbers on the label, connect the hoses, and run a short test cycle with a few old towels before you fill it with the family’s laundry. The test copy plays the role of the test cycle.
13Copying Data Fast and Safely
Copy speed depends less on the appliance and more on how well your servers feed it. Parallel work is the secret.
The appliance exposes your storage as an NFS share. Your servers mount the share and copy data into it with the usual tools for copying files, such as the standard copy and synchronization utilities of your operating system. For huge data sets, one copy command running on one server will not fill a fast connection. You need many copies running at the same time.
The three limits to watch
- The network. A 10 gigabit link can carry roughly one gigabyte per second at best. Slower ports, shared links and poor cables lower this.
- The source storage. Old disks or busy servers may read slowly. If your source system is the limit, adding appliances will not help, but spreading reads across more servers may.
- The file pattern. Millions of tiny files copy much more slowly than a few large files, because each file has overhead. Handling many small files in parallel reduces this cost.
flowchart TD
A["Copy is slow"] --> B{"Is the network link the limit?"}
B -->|Yes| B1["Use faster ports and good cables, avoid shared links"]
B -->|No| C{"Is the source storage slow?"}
C -->|Yes| C1["Spread reads over more servers or disks"]
C -->|No| D{"Too many tiny files or too few parallel streams?"}
D -->|Yes| D1["Run several copy streams in parallel and group the work by folder"]
D -->|No| E["Check CPU, mount settings and the appliance health indicators"]
Good copying habits
- Split the work by folder. Give each server or copy process its own set of folders, so streams do not collide.
- Use several servers. Many modest servers copying in parallel often beat one powerful server.
- Keep a log. Save the output of each copy job, so errors can be traced and re-run.
- Do not change files in place. If a file changes during the copy, you may capture a half-old, half-new file. Copy from a snapshot or a quiet moment where possible.
- Track progress. Compare the amount copied with the total, and estimate the finish time, so you can warn people about delays.
Loading a truck with one worker carrying one box at a time takes all day. Ten workers on ten doors fill it in an hour, as long as the truck’s ramp is wide enough and the warehouse shelves are close. Parallel copying is hiring more workers, and the network is the width of the ramp.
14Files, Names, Sizes and Metadata
A file system and Cloud Storage are different worlds. Knowing the differences prevents surprises after the upload.
Names
Cloud Storage stores each file as an object whose name can be up to 1,024 bytes long. File systems often allow different lengths and different characters. Names with unusual characters, such as control characters or certain symbols, can cause trouble. Very long folder paths can also exceed the limit once the path becomes part of the object name. Scan your source for such names before you copy.
Sizes
A single Cloud Storage object can be as large as 5 tebibytes. Files bigger than this cannot be stored as one object, and must be split before transfer. Most organizations have few such files, but video archives and database dumps sometimes do.
Folders
Cloud Storage has a flat structure. The slashes in object names create the illusion of folders. Empty folders usually do not carry over as objects, so if an empty folder matters to your applications, plan to recreate it or note it separately.
Permissions and metadata
File systems keep owners, groups, permissions and special attributes, which are not stored in the same way in Cloud Storage. Access in Cloud Storage is controlled through IAM and bucket settings. If your applications depend on file permissions, plan how to express the same rules in the cloud. Also, special items such as symbolic links, which are pointers to other files, may not be preserved as such. Check the current documentation for what is kept, and what is not.
Timestamps
Modification times may be kept as metadata in some workflows and not in others. If a timestamp matters to your business, test it with a sample and confirm that it arrives as you expect.
| Item | File system | Cloud Storage | What to do |
|---|---|---|---|
| Folders | Real directories, empty ones allowed | Name prefixes only | Do not rely on empty folders |
| Permissions | Owner, group and mode bits | IAM and bucket policies | Redesign access rules for the cloud |
| Names | Depends on the system | Up to 1,024 bytes, some characters problematic | Scan and rename difficult names first |
| Large files | Often unlimited | 5 TiB per object | Split files above the limit |
| Links | Symbolic and hard links | No equivalent | Replace links with real files or documented mappings |
Moving from a house with many rooms, cupboards and locked doors to a giant open warehouse with numbered shelves changes how things are found. Every item gets a long label saying which shelf it is on. The empty cupboards do not come with you, and the old door locks are replaced by a security system at the warehouse entrance.
Run a scan of names, sizes and special files weeks before the box arrives. Fixing ten thousand odd names on the source system is far easier than discovering them as upload errors after you shipped the device.
15Special Kinds of Data: Databases, Disks, Backups and Tapes
Not all data is a folder of ordinary files. Some kinds need special care before they go in the box.
Live databases
Copying the files of a running database is dangerous. The files change constantly, and a copy taken at the wrong moment may be unusable. Instead, use the database’s own tools to create a consistent backup or export, and copy that file. Remember that the appliance puts files in Cloud Storage, which is not a place to run a live database. The data must later be loaded into a database service.
Virtual machine disks
Large disk images of virtual machines can be copied as files, but they must be consistent. Shut down the machine or use a snapshot, and then copy the image. Images may be larger than the limit of a single object, in which case they must be split. After the upload, special import tools can turn images into machines in the cloud.
Backup archives
Backup software often writes data in its own special format. Moving those files to the cloud keeps them safe, but reading them later may need the same backup software, or a cloud-based version of it. Check that your backup product can restore from a copy stored in Cloud Storage before you rely on it.
Tape libraries
Data on tape is not on a file system. To use an appliance, the tapes must first be read and restored to disk, which can take a long time. Count that time in the plan. Large tape archives are a common reason for starting early and working in waves.
Many small files
Millions of tiny files copy slowly because of the overhead per file. If you control the data, consider packing small files into larger archives before copying, then unpacking in the cloud when needed. If you must keep each file separate, use many parallel streams.
| Data type | Risk | Better approach |
|---|---|---|
| Live database files | Inconsistent, unusable copy | Use the database’s export or backup tool |
| Virtual machine disks | Copy taken while running | Use snapshots or stop the machine first |
| Backup archives | Format needs the original software | Test a restore from the cloud copy |
| Tapes | Slow restore to disk before copying | Start early, work in waves |
| Millions of tiny files | Slow copy and high overhead | Pack into archives or use more parallel streams |
Moving a working aquarium needs a special plan with buckets, bags and a heater, not a regular moving box. Ordinary books can go straight into cartons. Each kind of belonging needs the right packing method, and fish in a cardboard box do not arrive well.
16Data Integrity: Proving Nothing Was Damaged
When data travels on a physical box, you must be able to prove that what arrives is exactly what left.
Data can be damaged in many small ways: a bad cable, a failing disk, a copy that stops early, or a file that changed during the copy. Most of the time nothing goes wrong, but when it does, the damage may stay hidden for months. The cure is to check the data with checksums at several stages.
Where checks happen
On your side, during the copy
The copy tools verify that each file was written to the appliance, and the appliance keeps records of what it received. Review your copy logs for any errors or skipped files.
At finalization
When you close the data, the appliance records a manifest of its contents, with sizes and checks. Keep a copy of this record.
During rehydration
Google reads the data from the box and compares it against the recorded checks while writing to Cloud Storage. Any mismatch is reported.
After the upload
You compare the objects in the bucket with your own source lists, by counts, sizes and, for important data, checksums.
What to compare after the upload
- The number of files. The count in the bucket should match the count at the source, apart from files you intentionally skipped.
- The total size. A difference may point to a missing folder or a failed upload.
- Checksums for key data. Cloud Storage stores checksums for each object. Compare them with checksums calculated at the source for important files.
- The error and skip logs. Read every line. Files that failed must be re-sent by another method.
The most expensive mistake in any transfer is to delete the original data before the copy has been verified. Keep the source until your checks are finished, signed off and recorded. For critical data, keep it for an additional safety period.
When a museum lends a painting for an exhibition, a conservator photographs it and writes a condition report before it leaves, and checks it against the report when it arrives. Checksums and manifests are the condition report for your data. Without them, a scratch discovered later cannot be blamed on anyone.
17Encryption and Keys
Your data should be unreadable to anyone who finds or steals the box. Encryption makes that true, and you hold the key.
Transfer Appliance encrypts the data that you copy onto it. Without the correct key, the contents look like random noise. The key is not stored on the box in a form that anyone can use, and you control it, either by providing a passphrase or by using a key held in a key management service. Options and steps can change, so follow the current instructions.
flowchart TD F["Files copied to the appliance"] --> E["Encrypted on the appliance with your key"] E --> L["Locked after finalization"] L --> R["Shipped back sealed"] R --> D["Decrypted only during upload, using your key access"] D --> B["Stored in your Cloud Storage bucket"]
Why key care matters
Because you hold the key, you also hold the risk. If the key is lost, nobody can decrypt the data on the appliance, and the transfer cannot be completed. If the key is leaked, someone who also gets the box could read it. Treat the key as one of the most valuable items in the project.
Key handling rules
- Create and store it securely. Use your normal secret storage or key management system, with access limited to a few people.
- Keep a backup. Store a second copy in a different protected place, such as a safe, with a documented procedure for retrieving it.
- Separate the key from the box. Never ship the key with the appliance, and never write it on the packaging.
- Record who has access. Keep a list, and review it when the project ends.
- Plan the end of the key’s life. After rehydration is complete and verified, follow your policy for retiring the key used for the transfer.
Sending a locked suitcase by courier is safe only if the key does not travel with it. If you lose the only key, the suitcase becomes a heavy brick. If you hand the key to the courier, the lock is pointless. The same simple rules apply to the encryption key for your data.
Before the box arrives, test that you can retrieve the backup key and that another trusted person can follow the written steps. A backup that nobody can use is not a backup.
18Finalizing, Shipping Back and Chain of Custody
The return trip needs as much care as the arrival. A clear process protects both the data and the schedule.
Finalization
When all data is copied and your copy logs are clean, you finalize the appliance. Finalization closes the data so that nothing new can be added, flushes any data still in memory to the disks, creates the record of what is stored, and prepares the box for transport. Once finalized, you cannot add files. If you find a missing folder afterwards, you must send it by another method, or ask support whether the appliance can be reopened.
Preparing for return
- Power the appliance down properly, and disconnect cables in the order that the instructions give.
- Pack it in its original case or packaging, using the supplied seals.
- Attach the return shipping label, and record the tracking number.
- Take photographs of the packed box and of the seal numbers.
- Hand it to the carrier, or schedule a pickup, and keep a receipt.
Chain of custody
Chain of custody means a written record of every person who has handled the box and every place where it has been, from the moment it left Google until it comes back. It helps if the box is lost, delayed or damaged, and it supports audits for regulated data. Keep a simple log with names, dates, times and actions.
| Event | Who | What to record |
|---|---|---|
| Delivery accepted | Receiving person | Date, time, condition, serial number, seal numbers |
| Moved to the data room | Facilities | Time, route, who carried it |
| Copy started and finished | Storage team | Dates, copy logs, any errors |
| Finalization | Project lead | Time, manifest copy, confirmation message |
| Packed and handed over | Receiving person | Seal numbers, tracking number, pickup receipt |
When a sealed evidence bag is passed between police officers, each person signs and dates a form. If the bag ever looks tampered with, the form shows exactly who held it and when. A chain of custody log gives your data box the same kind of trail.
19Rehydration: Inside the Upload at Google
Once the box reaches Google, a careful, mostly automatic process turns its sealed contents into objects in your bucket.
Step by step
Receive and inspect
Google staff check the seals and the condition of the appliance and match it to your order. The status in the console changes to show that it has arrived.
Connect to a fast network
The appliance is connected inside a Google facility that has high-speed links to Cloud Storage. This is why the final upload is quick.
Unlock with your key access
Rehydration needs access to the key that you control. You grant it in the way that the instructions describe, and the data is decrypted only for the upload.
Read, check and write
Files are read from the appliance, compared with the recorded checks and written as objects into your bucket in parallel streams.
Create logs and a report
A record of the upload, including any problems, is produced. You use it to verify the result.
Erase the appliance
When the upload is finished and the results are complete, Google securely erases the appliance following recognised media sanitization practice, so the device can be reused.
What can slow or stop rehydration
- Missing or wrongly set key access, so the data cannot be unlocked.
- Wrong permissions on the destination bucket, so writes are refused.
- Object names or sizes that Cloud Storage cannot accept, which appear as individual failures.
- Quotas or organization policies in your project that conflict with the upload.
- Problems with the appliance itself, which Google handles with the support process.
Rehydration may need a quick action from you, such as granting key access or fixing a bucket permission. Keep the right people available during the weeks after you send the box, so that small questions do not turn into long delays.
When a shipping container reaches port, the port crew inspect the seals, unlock it with the customs paperwork, move each item to the right warehouse shelf, check items against the manifest, and write up a report on anything damaged. The empty container is then cleaned for the next customer.
20Data Flow and Lifecycle of a Transfer
Seeing all the actors in one picture makes the full journey easy to remember.
sequenceDiagram participant You as Your team participant G as Google Cloud participant C as Carrier You->>G: Request an appliance in the console G->>C: Ship the appliance C->>You: Deliver to your site You->>You: Connect the box and copy data You->>You: Finalize and lock the appliance You->>C: Hand over for return shipping C->>G: Deliver to the upload facility G->>G: Verify and upload data to Cloud Storage G->>You: Notify that data is available G->>G: Securely erase the appliance
Where time is spent
Different stages take different amounts of time. Shipping may take days in each direction, depending on distance and customs. The copy at your site may take days or weeks, depending on how well you prepare. Rehydration often takes days, because it moves large volumes, though it runs on fast links. Waiting and approvals add further time.
| Stage | Typical control | How to shorten it |
|---|---|---|
| Ordering and approval | Mostly Google | Prepare a complete, accurate request |
| Shipping to you | Carrier | Choose an address that can receive quickly, and handle customs paperwork early |
| Copy at your site | You | Parallel copying, fast ports, good preparation |
| Return shipping | Carrier | Have the return label and a pickup ready on the day you finalize |
| Rehydration | Google, with your key access | Have permissions and keys ready in advance |
| Verification | You | Prepare scripts and lists in advance |
The life of a parcel sent across the world has booking, collection, travel, customs, delivery and a signature. Each step has a different owner and speed. A good sender plans the whole chain, and tries to make their own steps quick and clean, because those are the steps they can improve.
21Storage Classes and Bucket Design
Where your data lands, and in which class, decides what it costs for years. Decide before the box is sent, not after.
Storage classes
Cloud Storage offers classes that trade price against how often you read the data. Standard suits data used often, with the highest storage price and no extra charge for reading. Nearline suits data read about once a month. Coldline suits data read about once a quarter. Archive suits data read less than once a year, with the lowest storage price but charges for reading and minimum storage periods. Prices and minimum durations change, so check the current pricing page.
| Class | Typical use | Storage price | Reading cost |
|---|---|---|---|
| Standard | Active data, analytics, websites | Highest | Lowest |
| Nearline | Monthly access, backups | Lower | Higher |
| Coldline | Quarterly access, disaster recovery copies | Lower still | Higher still |
| Archive | Long-term records, legal retention | Lowest | Highest |
Location
A bucket can live in one region, in a pair of regions, or across a large multi-region area. Single regions are cheaper and close to compute in that region. Multi-regions offer more resilience. Choose according to where your users and applications are and any legal rules about where data may be stored.
Lifecycle rules
Lifecycle rules move objects to colder classes or delete them automatically as they age. A common idea is to land data in a class that fits its first months, and let rules move it to colder storage later. Test rules on a small set of objects first.
Bucket layout
- Use meaningful, stable prefixes in object names, so that data is easy to find and secure by area.
- Avoid putting unrelated data in one huge bucket if different teams need different permissions.
- Consider separate buckets for raw imported data and for cleaned data that others will use.
A home has a kitchen cupboard for things used every day, a garage shelf for things used a few times a year, and an attic for family keepsakes. Rent is highest for the kitchen and lowest for the attic, but fetching things from the attic is a bigger job. Storage classes are those three places for your data.
Colder classes have minimum storage periods, so deleting or moving data early can still be billed for the full period. Choose a cold class only when you are confident the data will stay put for long enough.
22Cloud Storage Features You Will Use Afterwards
Once your data is in a bucket, a set of features helps you protect it, organize it and keep its cost under control.
Object versioning
With versioning turned on, Cloud Storage keeps older versions of an object when it is overwritten or deleted. This protects against mistakes, at the cost of extra storage. Combine it with lifecycle rules that delete old versions after a time.
Retention policies and holds
A retention policy says that objects cannot be deleted or replaced for a set period. A hold pauses deletion for specific objects, for example during a legal investigation. These tools support rules that require records to be kept.
Lifecycle management
Lifecycle rules move objects to colder classes or delete them based on age and other conditions. They save money without anyone needing to remember to do it.
Autoclass
Autoclass is a feature that moves objects between storage classes automatically according to how often they are accessed. It is helpful when access patterns are hard to predict. Check the current documentation to see how it works and how it is priced.
Access control and sharing
Use uniform bucket-level access and IAM roles to give people and programs the access they need. For short-term sharing, signed links can give temporary access to a single object without creating accounts.
Inventory and insights
Reports that list the objects in a bucket, with sizes, classes and checksums, are very useful after a large transfer. They allow you to compare the cloud copy with your source lists, and to see how your storage grows over time.
Versioning and retention
Guard against accidental deletion and meet record-keeping rules.
Lifecycle and Autoclass
Move data to cheaper classes as it ages or cools down.
IAM and signed links
Grant narrow access to people and programs, and short-lived access to outsiders.
Inventory reports
List what is stored, so you can verify the transfer and watch growth.
A new warehouse needs shelf labels, a fire system, a security guard, a records book and a plan for moving old stock to the cheaper basement. Cloud Storage features are those fixtures. Setting them up soon after the move keeps the new warehouse safe, tidy and affordable.
Switch on protection features, such as versioning or retention, thoughtfully and after the transfer is verified. During the upload and catch-up stages, extra versions of overwritten files can add storage costs you did not expect.
23After the Upload: Verification and Next Steps
When the email says “complete,” the work is not finished. It is the start of a careful final check.
Read the upload report
Review the summary of files uploaded, files that failed and the reasons. Save the report with your project records.
Compare counts and sizes
Use your source lists and the bucket’s own listing or reports to compare numbers by top-level folder.
Sample and verify content
Check checksums on a meaningful sample, or all files for critical data. Open some files with the real applications that will use them.
Handle the exceptions
Fix names, split large files, or re-send missing files using online tools, such as Storage Transfer Service or gcloud storage commands.
Catch up on changes
Copy any files that changed or were created at the source since the copy began, with an online tool that compares and copies only differences.
Open access and switch over
Grant read access to the people and systems that need it. Move applications to the cloud copy, in a planned cutover.
Sign off and retire the source
When owners confirm that everything is correct, record the decision. Only then follow your plan for the old data and the temporary permissions and keys.
Write the verification scripts and reports before the box leaves. That way, the checks start the day the upload finishes, and you are not designing them under pressure.
After a house move, the work continues once the boxes arrive: you check for breakages, find the missing lamp, notice the sofa that was left behind, and only then cancel the lease on the old home. Declaring the move complete when the truck is empty is how families lose their favorite chair.
24Security Considerations
A box full of valuable data traveling by road deserves a clear security plan with several layers.
Layer 1: encryption you control
Data on the appliance is encrypted, and you control the key. Even if the box is lost or stolen in transit, its contents should remain unreadable. This is the most important layer, and it relies on good key handling.
Layer 2: physical protection
The appliance is built to be rugged and to show signs of tampering. At your site, keep it in a locked room with restricted access and a visitor log. During shipping, use the supplied seals and tracked service, and check the seals on arrival and on return.
Layer 3: narrow permissions
Limit who may order, who may see the order, and what the upload service may do in your bucket. Review the roles at the start and end of the project, and remove them when the work is done.
Layer 4: network safety
Place the appliance on a network segment that only the source servers and administrators can reach. Do not connect the appliance to the open internet unless the instructions require it. Use firewall rules to allow only the traffic that is needed.
Layer 5: audit and records
Keep the chain of custody, the copy logs and the audit logs of order actions in the cloud. These records support investigations and compliance checks, and they help you prove that you handled the data properly.
Layer 6: secure erasure
After the upload, Google securely erases the appliance before it is reused. You can ask for confirmation of the process, and your own compliance team may want it in writing.
| Risk | Example | Defense |
|---|---|---|
| Box lost or stolen in transit | A courier error or a theft | Encryption with your key, seals, tracked shipping |
| Key leaked or lost | A passphrase written on a sticky note | Secure storage, backups, restricted access |
| Unauthorized person at your site | A visitor copies data from the box | Locked room, access logs, supervised access |
| Over-broad cloud permissions | Many staff can change the order or the bucket | Least privilege, review at the end |
| Sensitive data copied without need | Old personal records moved to the cloud | Data review and cleaning before the copy |
A bank transports cash in a locked van with sealed bags, a guard, a tracked route and a signed delivery sheet. If one measure fails, the others still protect the money. Your data box deserves the same layered thinking, even though its contents are bits and not banknotes.
25Monitoring Orders, Status and Progress
A good project keeps eyes on three things: where the box is, how the copy is going, and what the cloud side reports.
Order status in the console
The Google Cloud console shows the state of each order, such as requested, approved, shipped, delivered, returned, being uploaded and complete. Notifications are sent to the contacts you named when you placed the order. Make sure those contacts are real, monitored mailboxes, preferably shared team addresses and not a single person’s inbox that may be unattended during holidays.
Copy progress at your site
Track how much data is copied each day. A simple table with the planned and actual volume gives early warning when the copy is slower than expected. Watch the health indicators of the appliance, such as disk status, temperature and network errors, using the management screen or the monitoring features that the instructions describe.
Audit logs in the cloud
Actions such as creating, changing or canceling orders are recorded in Cloud Audit Logs, which answer the question “who did what and when.” Review them if something unexpected happens, and give your security team access to them.
Alerts worth setting up
- A reminder when the appliance has been at your site for most of the free holding period, so you do not pay late fees unknowingly.
- An alert if the copy rate drops below the plan for more than a day.
- A notice when the order status has not changed for longer than expected, so someone can ask support.
- A reminder to revoke temporary permissions and retire keys after completion.
Tracking a big furniture delivery involves a tracking number for the truck, a checklist at the house as each piece is unwrapped, and a list of damage claims at the end. You watch all three. Looking only at the truck’s position does not tell you whether the sofa arrived in one piece.
26Measuring Success of the Project
A few simple numbers tell you whether the transfer was a good project, and what to do better next time.
When the work is done, it is tempting to celebrate and move on. A short review with real numbers is worth the effort. It proves the value of the project to the people who paid for it, and it gives your team a head start on the next one.
Measures worth recording
Questions for the review meeting
- Did the actual timeline match the plan, and where did we lose or gain time?
- Which preparation step saved the most trouble?
- Which problem should we have found before the box arrived?
- Was the appliance the right choice compared with the online option?
- What will we change in the checklist for the next project?
| Measure | Plan | Actual | Lesson |
|---|---|---|---|
| Days from order to delivery | To be filled in | To be filled in | Record reasons for delay |
| Days of copying | To be filled in | To be filled in | Record the bottleneck found |
| Days for rehydration and checks | To be filled in | To be filled in | Record what was slow or fast |
| Files re-sent online | To be filled in | To be filled in | Record root causes |
After a big family move, a wise parent writes down which boxes were hardest, which friends helped most, and what was forgotten. The next move, perhaps years later, starts with that list. A short project review is the same kind of list for your team.
27Cost and Time Planning
Honest numbers early make the difference between a pleasant project and an angry finance meeting.
What you pay for
Pricing details change, so read the current pricing page. In general, the cost has several parts. There is a fee for each appliance order, which covers the device and its handling. There may be a daily charge for the time the appliance stays at your site beyond an included period. Shipping may be included or charged separately depending on the region. Once the data lands in Cloud Storage, you pay normal storage charges for the chosen class. Uploading data into Cloud Storage does not carry the usual charge for data leaving the cloud, because the data is entering, though your own electricity, staff time and network costs are separate.
Comparing against the online alternative
An honest comparison includes more than the appliance fee. For the online route, count extra bandwidth that you must buy, the staff time to babysit a long transfer, the cost of disturbing business traffic, and the cost of waiting. For the appliance route, count the order fee, late fees if any, staff time for the copy, shipping time and the risk of delays.
| Cost item | Online transfer | Transfer Appliance |
|---|---|---|
| Service or device fee | Little or none, tools are free to use | Per-appliance fee |
| Bandwidth | May need a larger or dedicated link | Uses only your local network |
| Time before data is usable | Weeks or months for very large data | Several weeks including shipping |
| Staff effort | Monitoring, retries, restarts | Setup, parallel copying, packing |
| Risk | Interruptions and slow progress | Shipping delays and handling |
| Cloud storage cost afterwards | Same | Same |
Controlling the cost
- Return the appliance within the included period, by preparing the copy well in advance.
- Order the right size, since extra devices cost more, but too few devices cause a second round.
- Clean data before the copy so you transfer and store less.
- Choose the right storage class and lifecycle rules, to avoid paying for expensive storage you do not need.
Renting a truck by the day makes sense when you load quickly and return on time. If the truck sits in the driveway for a week while you pack, the daily rate adds up. The wise renter packs most boxes before the truck arrives, so the truck is used for the loading, not for waiting.
Build a one-page comparison with the real numbers for both routes, signed by the budget owner. It prevents later arguments about why the box was chosen, and it makes the next project easier to plan.
28Several Appliances and Large Programs
Very large projects use many appliances, sometimes at several sites. Organizing them is a project in itself.
Parallel appliances
If your data exceeds the capacity of a single device, or you want to finish sooner, you can order several appliances and fill them at the same time. This works well when different servers hold different parts of the data. Divide the data into logical parts, such as by department, by date or by folder, and assign each part to a device.
Waves
Another approach is to work in waves: order one appliance, complete the whole cycle, learn from it, and then order the next ones. This is slower but safer for the first time. A pilot wave reveals problems with names, permissions, speed and your own process, before you commit to a large order.
Multiple sites
If data is spread across several offices or data centers, each site needs its own appliance, local preparation and trained staff. Keep a central coordinator who tracks every device, key and schedule, and who makes sure that naming, bucket layout and verification rules are the same everywhere.
Many boxes at once
Split the data cleanly, and fill all devices together to finish sooner.
Pilot first
Run a small first round to find problems before the big order.
One coordinator
A central owner keeps schedules, keys and rules consistent across locations.
A single register
A shared sheet with each device, its data part, its status, its key owner and its due date.
| Device | Data part | Site | Key owner | Status |
|---|---|---|---|---|
| Appliance A | Finance archives | Head office | Security lead | Copying |
| Appliance B | Engineering projects | Head office | Security lead | Delivered |
| Appliance C | Regional media library | Second site | Regional lead | Ordered |
An army of removal vans moving a whole company needs a dispatcher who knows which van holds which department, which driver has the keys, and when each is due at the new building. Without the dispatcher, trucks arrive in the wrong order, and nobody can find the accounts office.
29Hybrid: Offline Bulk Plus Online Catch-Up
The best projects use both worlds. The box moves the mountain, and online tools move the small changes since the copy began.
Large data sets rarely stand still. While your box travels for weeks, new files appear and old files change at the source. If you simply switch over after the box arrives, you will lose those changes. The usual solution is a two-step approach.
Bulk copy with the appliance
Copy the main body of data, which may be hundreds of terabytes, at the start of the project.
Keep working at the source
Business continues on the original system while the box travels and uploads.
Delta sync online
After the upload, use an online tool that compares source and bucket and copies only new or changed files. The amount is small, so the network handles it.
Freeze and final sync
At cutover time, pause writes to the source, run a last quick sync, and verify the result.
Switch applications
Point applications at the cloud copy, and keep the source read-only for a safety period.
Storage Transfer Service is well suited to the delta stage, because it can compare and copy only differences, and it can be scheduled to repeat. Its agent program can read from file systems in your own data center. The small final copy happens in hours, not weeks.
When moving house, the truck carries all the big furniture on moving day, and for the next week you make small trips by car to fetch the things you forgot and the mail that arrived late. The truck is the appliance, and the car trips are the online catch-up.
Decide in advance how long the final freeze may last, who announces it, and how you will roll back if verification fails. A cutover without a rollback plan is a gamble.
30Advantages, Disadvantages and Trade-offs
Every route has a price. Look at both sides of Transfer Appliance honestly.
Advantages
- Moves very large data sets far faster than a thin network link
- Does not load your internet connection or disturb daily business traffic
- Data is encrypted with a key that you control
- Predictable process with clear stages and tracking
- Upload happens on Google’s fast network and into your chosen bucket
- Useful for sites with poor or expensive connectivity
- Simple copy method that uses standard network file sharing
Disadvantages
- Shipping and handling add weeks to the schedule
- Physical logistics: space, power, network, security and packing
- One-time bulk transfer, so changes need a separate online catch-up
- Availability depends on your location and Google’s capacity
- Late fees may apply if you hold the device too long
- Key loss means the data cannot be recovered
- Poor value for small or medium data sets
Compared with other approaches
| Approach | Strength | Weakness | Good fit |
|---|---|---|---|
| Transfer Appliance | Large volumes, offline, secure | Weeks of logistics, one-time | Hundreds of terabytes and up, slow links |
| Storage Transfer Service | Managed, scheduled, incremental | Bound by bandwidth | Cloud-to-cloud and moderate on-premises data |
| Faster network or Interconnect | Reusable for future needs | Setup time and monthly cost | Ongoing large flows |
| Similar devices from other clouds | Offer the same idea for their own clouds | Send data to their cloud, not to Google Cloud | Teams moving to those other clouds |
| Shipping your own disks | Familiar and cheap-looking | No managed process, encryption and chain of custody are your job | Rarely recommended for important data |
Trade-offs to think about
Time versus effort. The box shortens the data transfer but adds logistics work. If the team has no one to handle the physical part, the plan may stall.
Control versus convenience. Holding the key gives you control and responsibility. If your team cannot manage keys well, build that skill before the box arrives.
One big move versus steady flow. The appliance is for the big move. If your need is a steady flow, a dedicated link and online tools may be a better long-term investment.
31Design Patterns and Anti-patterns
Patterns are lessons that other teams paid for. Anti-patterns are the traps they fell into.
Six helpful patterns
Pilot before scale
Run a small first transfer with a representative sample, to find problems with names, speed and permissions.
Inventory first
Create a complete list of data, sizes and special files before ordering anything.
Bulk then delta
Use the appliance for the mountain, and an online sync for the changes since.
Parallel by folder
Assign folders to servers, and run many copy streams to fill the fast network.
Verify before delete
Write down the checks that prove success, and keep the source until they pass.
Key escrow and rehearsal
Store a backup key safely and practice recovering it before the box arrives.
Three costly anti-patterns
What it looks like
The team orders the appliance first and prepares later. When the box arrives, they discover the network ports do not match, the permissions are missing, and many files have problem names.
Why it hurts
The device sits idle, daily charges may apply, and the schedule slips by weeks. Pressure leads to rushed shortcuts.
Do this instead
Complete the readiness checklist, run a test with a sample, and order only when site, data, permissions and keys are ready.
What it looks like
One person holds the only copy of the encryption key, written in a personal notebook. That person later leaves the company or goes on long leave.
Why it hurts
If the key cannot be found, the data on the appliance cannot be unlocked. The entire transfer is wasted, and the original data may already have been removed.
Do this instead
Store the key in a managed secret system with two or more authorized people, document the recovery steps, and rehearse them.
What it looks like
The moment the upload email arrives, the team deletes the original data to free space, assuming the cloud copy is perfect.
Why it hurts
If some files failed to upload, or were damaged, or never copied, the only copies are gone. Problems found later cannot be repaired.
Do this instead
Verify counts, sizes and checksums, catch up on changes, get written sign-off from data owners, and keep the source for a safety period.
32Best Practices and Common Mistakes
The habits below are simple. Most of them come from teams who learned the hard way.
Best practices
- Do the arithmetic honestly. Use the real, shared bandwidth you can use, and compare with the full appliance timeline.
- Clean before copying. Delete what you do not need, and avoid moving junk to the cloud.
- Test with a sample. Include odd names, big files and tiny files, and examine how they arrive.
- Prepare the cloud side early. Create the bucket, grant narrow permissions, and decide the key plan before ordering.
- Use many copy streams. Spread the work across servers and folders, and monitor the throughput.
- Keep records. Save the chain of custody, copy logs, manifests and upload reports.
- Keep contacts alive. Use shared mailboxes for notifications, and make sure someone is available to answer quickly.
- Verify, then delete. Never remove the source before sign-off.
- Close the project. Remove temporary permissions, retire the key and write a short lessons-learned note.
Common mistakes and quick fixes
| Mistake | What happens | Better habit |
|---|---|---|
| Ordering before the site is ready | The box idles and fees grow | Complete the checklist, then order |
| Counting on compression | The data does not fit | Plan with usable capacity and full file sizes |
| Single slow copy stream | Weeks wasted | Many parallel streams on several servers |
| Ignoring odd file names | Upload failures after shipping | Scan and fix names before copying |
| Changing files during the copy | Half-old, half-new files | Copy from snapshots or quiet periods |
| Losing the key | Data cannot be unlocked | Backups, escrow and rehearsal |
| Forgetting the catch-up sync | Recent changes missing in the cloud | Plan the online delta and final freeze |
| Deleting the source early | Permanent data loss | Verify and sign off first |
| Leaving permissions behind | Unneeded access remains for years | Remove temporary roles at project close |
33Failure Scenarios and Recovery
Things sometimes go wrong. A prepared team recovers quickly, and an unprepared team loses weeks.
| Scenario | Likely cause | Recovery move |
|---|---|---|
| Box arrives damaged | Rough handling in transit | Photograph it, do not connect it, and contact Google support for a replacement |
| Cannot reach the appliance on the network | Wrong address, port speed or firewall rule | Check cables, switch settings and firewall; confirm the address method with the instructions |
| Copy is far slower than planned | Slow source, few streams, many tiny files | Follow the slow-copy decision path, add parallel streams and servers |
| Appliance fills up before data ends | Under-sized order or underestimated growth | Finalize this device, and order another for the remainder, or move the rest online |
| Some files fail in the upload report | Problem names, sizes or permissions | Fix the cause and re-send those files with an online tool |
| Shipping delay or customs hold | Paperwork or carrier problems | Contact the carrier and Google, supply documents quickly, extend internal timelines |
| Key unavailable at upload time | Lost or inaccessible key | Use the documented key backup; contact support early if recovery is needed |
| Appliance lost in transit | Carrier error or theft | Report immediately, rely on encryption, restart the process from your retained source data |
Principles for recovery
- Keep the source until the end. Every recovery path relies on the original data still existing.
- Contact support early. A short message on day one saves long waits later.
- Do not improvise with the hardware. Follow the official steps for opening, resetting or repacking the device.
- Write everything down. Times, names and messages help every later conversation.
- Learn and adapt. After any incident, update your checklist for the next appliance.
Airlines expect that some bags will be delayed, so they have a standard process: report at the desk, get a reference number, and receive the bag later. Travelers with a spare change of clothes in their hand luggage barely notice. The retained source data is your spare change of clothes.
34Compliance, Data Location and Cross-Border Shipping
When data crosses a street, nobody minds. When it crosses a border, laws and contracts may have something to say.
Many organizations are bound by rules about where data may be stored, who may handle it, and how its movement must be recorded. These rules may come from laws, from industry standards or from customer contracts. Moving data physically makes some of these rules more visible, because the box itself crosses places on a map.
Questions to ask before ordering
- Where may this data live? Choose a bucket location that satisfies your rules, and check that the upload facility and route are acceptable.
- May the box cross borders? If your site is in one country and the upload facility is in another, shipping may involve customs, export rules and extra paperwork. Check with your legal team and Google about the route that applies to your location.
- Is the data classified? Highly sensitive data may need approval, extra encryption, special handling or a decision that the appliance route is not suitable.
- What evidence will auditors want? Prepare chain-of-custody logs, key management records, access lists and the upload report in a form that can be shown later.
- Does personal data need special care? Review privacy rules before copying records that identify people, and remove data that you have no right or need to keep.
Documents to keep
| Document | What it proves | Who keeps it |
|---|---|---|
| Data inventory and classification | What was moved and why | Data owner |
| Chain-of-custody log | Who handled the box and when | Project lead |
| Key management record | Who held the key and how it was protected | Security team |
| Copy and upload reports | What was copied and what failed | Storage team |
| Erasure confirmation | That the device was cleaned after use | Compliance team |
| Permission change records | That temporary access was removed | Cloud team |
Sending valuable artwork abroad for an exhibition needs permits, insurance, a documented route and a condition report. The artwork may be exactly the same as before, but the paperwork turns a risky trip into an accepted one. Moving regulated data physically deserves the same documented care.
Legal and compliance questions can take longer to answer than any technical step. Raise them at the start of the project, not when the box is already in the loading dock.
35Real-World Usage Patterns
Different organizations use Transfer Appliance for different reasons. Find the story that looks like yours.
A media company moving a video archive
A broadcaster holds decades of video footage on tape libraries and storage arrays, far too large for its office internet. It orders several appliances, copies each department’s archive in parallel, and sends them back. The footage lands in a cold storage class, where it costs little to keep and can be brought into editing projects when needed.
A research lab with genome and imaging data
A research group produces large files from sequencing machines and microscopes, in a building with limited connectivity. Each year, they fill an appliance with the latest results and send it to the cloud, where analysis tools can use the data at scale. The yearly rhythm becomes a reliable habit.
An enterprise building a data lake
A large company wants to put years of history from many systems in one cloud data lake for analytics. The bulk of the history travels by appliance, and daily changes follow through online pipelines. Analysts can start working on history within weeks, rather than waiting for a very long network copy.
A manufacturer with remote sites
A manufacturer collects sensor and quality-inspection data at plants with weak connections. Instead of paying for expensive links to every plant, it ships a device to each site periodically, and consolidates the data in the cloud.
A backup and disaster-recovery project
A company decides to keep a second copy of its backups in Google Cloud. The first full copy, which is huge, goes by appliance. After that, only the small nightly changes travel online, so the ongoing load on the network stays low.
The wider picture
Offline data transfer is an old idea in a new form. Before the internet, people mailed tapes. Cloud providers now offer managed, encrypted and tracked versions of the same approach, and other major cloud providers offer similar devices for their own platforms. The lesson is simple: bandwidth is not growing as fast as data, so physical movement remains a smart tool for the very largest jobs. We describe the examples above as general patterns, and we do not claim that any named company uses the service in a specific way.
36A Worked Walkthrough in Words
Let us follow a made-up infrastructure engineer named Leena as she moves a large archive to Google Cloud.
Leena works for a company that publishes educational videos. Over twelve years, the company has collected about 300 terabytes of raw and finished footage on network storage in its office. The company wants to move this archive to Google Cloud, so that new editing and search tools can use it. The office has a one gigabit internet link, shared by two hundred people.
Leena does the arithmetic. At full speed the link could move 300 terabytes in about 28 days, but the office can spare only a quarter of the link. That means more than three months, with constant risk of failures and complaints about slow video calls. She decides to look at Transfer Appliance.
First she cleans up. With the editors, she removes duplicate exports and abandoned projects, reducing the plan to 240 terabytes. She scans file names and finds a few thousand files with odd characters and some very long folder paths. She fixes them on the source. She creates a project, a bucket in a nearby region with the Archive class for the oldest footage and Standard for recent work, and narrow permissions for herself and two colleagues.
She orders appliances after reading the current model information, and chooses a quantity that holds the data with a safety margin. She prepares a quiet room with a lock, switch ports at the right speed, and a plan to run copy jobs from six file servers at once. The security team creates the key and a backup in their secret system, and rehearses the recovery.
The box arrives. Leena photographs the packaging, logs the serial number, and connects it. A test copy of a mixed sample works well. She then starts parallel copy jobs, each assigned to a different set of folders, and watches the daily progress. After eleven days, the copy completes. She reads the logs, finalizes the appliance, packs it with the supplied seals, and hands it to the carrier.
Google receives the box and begins rehydration. Leena grants the key access when asked. The upload finishes a few days later, with a small list of failed files caused by names she missed. She re-sends them with an online tool, and runs a delta sync for the footage added in the past weeks. She compares counts, sizes and checksums by folder, and the data owners sign off. Only then does the company plan the retirement of the old storage, and she removes the temporary permissions and retires the key.
Leena spent more time on preparation and verification than on the box itself. She used the appliance for the mountain, and online tools for the small leftovers. The technology was simple. The discipline was the real work.
37Team Workflow and Governance
A transfer project touches storage, network, security, cloud and legal teams. Clear roles prevent dropped balls.
Roles
Name a project lead who owns the schedule and decisions. Name a storage owner who understands the source data and runs the copy. Name a network owner who prepares ports and monitors throughput. Name a security owner who manages keys, access and physical protection. Name a cloud owner who prepares the project, bucket and permissions. Name a data owner from the business who decides what moves and signs off the result.
Rhythm
Hold a short planning meeting before ordering, a daily short check-in during the copy, and a review meeting after verification. Keep a shared document with the schedule, risks and decisions. A single place for information prevents confusion when many people are involved.
Decision points
- Go or no-go for ordering, after the readiness checklist.
- Go or no-go for finalization, after the copy logs are clean.
- Go or no-go for deleting the source, after verification and sign-off.
- Close-out of permissions, keys and the project, after final acceptance.
| Decision | Who decides | Evidence needed |
|---|---|---|
| Order the appliance | Project lead with data owner | Completed readiness checklist, approved budget |
| Finalize the device | Storage owner and project lead | Clean copy logs, complete manifest |
| Accept the cloud copy | Data owner | Count, size and checksum comparison, sample checks |
| Delete the source | Data owner and security owner | Written sign-off, waiting period passed |
| Close the project | Project lead | Permissions removed, keys retired, lessons recorded |
A building project has an architect, a site manager, an electrician and an inspector, each with their own responsibility and sign-off moments. Without defined roles, the electrician and the plumber each assume the other has ordered the pipes. A transfer project works better when each decision has an owner.
38A Learning Path You Can Follow
You do not need to master everything at once. Move from simple and safe to detailed and powerful.
Week one: the basics
Learn what Cloud Storage, buckets, objects and projects are. Create a free practice bucket and upload a few files by hand.
Week two: transfer math
Practice the bandwidth arithmetic for your own data. Measure the real speed you can use, and compute online transfer times for several data sizes.
Week three: online tools
Try gcloud storage commands and Storage Transfer Service on a small data set, so you understand the online alternative well.
Week four: the appliance process
Read the current documentation for Transfer Appliance from start to finish. Draw the lifecycle on one page, and list the points where your organization needs decisions.
Week five: readiness
Run the data scan, plan the site, design the key handling, and write the verification scripts, using your own environment.
Week six: governance
Define roles, decision points and records. Present the plan and the cost comparison to the stakeholders.
Keep a notebook of every question that came up and how you answered it. After a first project, that notebook becomes your own handbook, and the second project will feel far calmer than the first.
39Frequently Asked Questions
Short, honest answers to the questions beginners ask most often.
40Summary and Key Takeaways
If you remember only a few ideas from this long guide, make them these.
Key Takeaways
- Transfer Appliance is a moving truck for data. Google lends you an encrypted storage box, you copy files onto it over your local network, ship it back, and Google uploads the data to your Cloud Storage bucket.
- Do the arithmetic before you decide. Compare the online transfer time at the real, shared speed with the full appliance timeline. Offline wins when the volume is huge and the link is thin.
- Preparation decides the outcome. Clean the data, scan names and sizes, ready the site, the bucket, the permissions and the key, and test with a sample before ordering.
- Copy in parallel, and keep records. Many streams from several servers fill a fast network. Chain-of-custody logs, manifests and upload reports support security and audits.
- Guard the key and verify before deleting. A lost key makes the box useless. Compare counts, sizes and checksums, run an online catch-up, and get sign-off before the source is retired.
- Combine offline and online. Use the appliance for the mountain, and online tools for the changes, then close the project by removing temporary permissions and writing down the lessons.