KR100385861B1 - Standby Loading Method for Duplex Architecture and a Computer-readable Medium having a Program for Performing the Method embedded thereon - Google Patents

Abstract

According to the present invention, when changing a software package of a redundant system operating in an active or standby mode, the system service is interrupted if it is determined that the changed package is normal after a change is made using a standby system in standby state without bringing down the entire system. There is provided a standby loading method for moving to a new package and continuing normal execution, and a computer-readable recording medium containing a program for realizing the method.

Description

Standby loading method for duplex architecture and a computer-readable medium having a program for performing the method embedded thereon

The present invention relates to a standby loading method for a redundant system.

A redundant system is a system in which two identical systems are provided to guarantee the continuity of system services, so that if a problem occurs while providing a service in one system, the service is continuously provided in another spare system that is ready. It is called. The two systems have an active mode and a standby mode. The two systems are tightly coupled to each other to monitor each other's status. The system that is currently operating is called the active system and the standby system is called the standby system. Non-disruptive systems that must be operational at all times to provide uninterrupted service will adopt this redundancy scheme to cope with system failures.

Conventional non-redundant systems have the disadvantage that if one system fails, system services are suspended until the system is restored.

In addition, the standby processor was used to prepare for a problem in the system of the conventional redundancy, but when a new package is to be loaded into the system, the problem of stopping the service of the currently active system is required. there was.

In order to solve the problems as described above, the present invention, in changing the software package of the redundant system operating in the active, standby mode, using the standby system in the standby state without changing the whole system The purpose of the present invention is to provide a standby loading method that allows the user to move to a new package without interruption of system service and continue normal operation if it is determined that the changed package is normal, and a computer-readable recording medium containing a program for realizing the method. have.

1A is a block diagram illustrating an example of a hardware system to which the present invention is applied.

1B is a block diagram illustrating a redundant operation mode according to the present invention.

2A is a technical diagram of user primitives in accordance with the present invention;

2b illustrates the structure and state values of NVRAM according to the present invention;

3A illustrates a communication signal between a user primitive input and an active standby according to the present invention.

3B is an explanatory diagram of signals between active and standby according to the present invention;

4 is an overall flow chart of the present invention.

5A is a flowchart of an active side of a start function unit according to the present invention;

5B is a standby side flowchart of a start function unit according to the present invention;

6A is a standby side flowchart of a cancel function unit according to the present invention;

6b is a flowchart of an active side of a cancellation function according to the present invention;

7A is a flowchart of an active side of a progress function unit according to the present invention;

7B is a standby side flowchart of a progress function unit according to the present invention;

8A is a standby side flowchart of a completion function unit according to the present invention;

8B is a flowchart of an active side of a completion function unit according to the present invention;

9A is a standby side flowchart of a recovery function unit according to the present invention;

9B is an active side flowchart of a recovery function unit according to the present invention;

* Explanation of symbols for the main parts of the drawings *

401: standby loading start function unit 402: standby loading cancel function unit

403: standby loading progress function unit 404: standby loading completion function unit

405: standby loading recovery function

In order to achieve the above object, the present invention provides a method for providing a standby loading function for a redundant system, and receiving a standby loading request from a user and restarting a system currently in standby mode through a standby loading start function. Stage 1; A second step of returning the system restarted in the standby loading mode to the normal standby mode through the standby loading cancel function if the standby loading cancellation request is input after the first step; A third step of stopping execution of all user processes of the current active system and executing all user processes of the system newly started by standby loading through a standby loading progress function unit when a standby loading progress request is input after the first step; A fourth step of activating a newly received standby loading system through a standby loading completion function unit and operating in a normal redundancy state when a standby loading completion request is input after the step 3; After the step 3, if the standby loading revocation request is input, the standby loading recovery function may include a fifth step of returning the standby loading state, which has been performed so far, to a normal redundant state.

The above objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1A is a block diagram illustrating an example of a hardware system to which the present invention is applied. As shown in FIG. 1, the redundancy system 100 has the same system, namely the active system 101 and the standby system 102, which are each connected to the network 103. Here, the active state is connected to the network and can communicate, and the standby state is connected to the network but the actual communication is not possible. Each system includes a CPU 104 and 105 and a memory 106 and 107. I / O control devices 108 and 109 for controlling various input / output devices, network matching devices 110 and 111, serial devices 112 and 113, and NVRAM 114 and 115 are provided. The serial devices 112 and 113 may exchange signals between active and standby. In addition, the redundancy state management requires the use of nonvolatile memory that retains its contents even when the system is powered off. NVRAM (114, 115) is used for this purpose. In addition, in a redundant operation, since the standby system must have the contents of the active system as it is, the memory contents of the active system side are transferred to the standby system side through the high speed memory synchronization devices 116 and 117.

FIG. 1B is a block diagram illustrating a redundant operation mode according to the present invention. The duplex operation mode is classified into two types, that is, a connection mode 150 and a disconnection mode 151. The connection mode refers to an operation state in which the memory contents of the active system 101 are written to the memory contents of the standby system 102 in the normal operation of the active system 101 and the standby system 102. The disconnection mode is a standby loading mode, in which the memory contents of the active system 101 are operated so that the contents of the standby system 102 are not written to the standby system 102.

As a preferred embodiment of the present invention, in order to provide a standby loading method in the redundancy system 100, the serial devices 112 and 113 are driven in the redundancy system 100 to transmit a state and a signal between active and standby, and NVRAM ( 114, 115, the main status information is recorded, and in a redundant operation, the switch mode 150 and the disconnect mode 151 are appropriately switched to load and execute a new package in the standby system 102, and the new package is loaded. To make the new active system manage to provide standby loading without interruption to system services.

2A is a technical diagram of a user primitive according to the present invention.

The present invention provides primitives that allow the user to control each stage of standby loading, which is used as a primitive with one argument (201).

There are five types of arguments: START (202), CANCEL (203), PROCEDE (204), CONFIRM (205), and UNDO (206). START means start of standby loading and must be requested from the currently active system. The system that is currently active is referred to as OLD (207) because it will be standby later. CANCEL is a standby loading cancellation request and is made on the current standby and newly active system. PROCEDE means to continue standby loading after START. CONFIRM means standby loading complete and is done in NEW 208. NEW refers to a system that is currently standby but newly active. UNDO is used when you want to restore the progress that has been made so far and is done in NEW.

2B is a technical diagram of the data structure and state values of the NVRAM according to the present invention.

Redundant operation is performed by rebooting the system, so the previous status value should be known even if the system is powered off and on. Therefore, it uses non-volatile memory, which includes SELF_STATE (250) for its own state, OTHER_STATE (251) for storing the opponent's state, SELF_ACTION (252) for knowing its own behavior, and OTHER_ACTION (for knowing its behavior). 253), there is SBYLD_FLAG 254 for determining whether or not it is in standby loading, and SBYLD_SITE 255 for determining whether it is NEW or OLD when it is in standby loading. SELF_STATE (250) and OTHER_STATE (251) to know the status are ACTIVE, STANDBY, DISCON, STAND LOADING, SLOADING_NEW, STAND LOADING old site SLOADING_OLD ) Has a status value. SELF_ACTION 252 and OTHER_ACTION 253 for knowing the operation have a single operation, SINGLE_RUNNING and a redundant operation, DUAL_RUNNING. The standby loading flag (SBYLD_FLAG) 254 indicates whether the standby loading flag (SBYLOADING), the standby loading is not (NOSBYLD) status value whether the current standby loading. The standby loading site SBYLD_SITE 255 has an old site OLD_SITE and a new site NEW_SITE.

3A is a diagram illustrating a communication signal between a user primitive input according to the present invention and an active and standby mode according to the present invention.

First, when START (301) is input from the OLD site, a STARTUP (302) signal is sent to the NEW site. Next, when CANCEL (303) is input from the NEW site, an OLD_TO_ACTIVE (304) signal is sent to the OLD site. When PROCEDE (305) is input, it sends RUNNING_PROCESS (306) signal to NEW site. When CONFIRM (307) is input from NEW site, DUALCOPYSTART (308) is sent to OLD site, and when UNDO (309) is input from NEW, it sends REACT (310) signal to OLD site.

3B is an explanatory diagram of signals between active and standby according to the present invention.

The STARTUP 350 signal means to restart the standby site in disconnection mode. The OLD_TO_ACTIVE (351) signal means to restore the OLD site back to active. When the RUNNING_PROCESS (352) signal is received, the OLD site will execute the new package. Since the DUALCOPYSTART (353) signal is in the standby loading completion phase, the OLD site is restarted in standby mode and copied to the contents of the new active site. The REACT 354 signal is a restore request and therefore restores the OLD site to active again.

4 is an overall flow chart of the present invention.

When the standby loading request is input from the user (401), the system, which is currently in the standby mode, is restarted in the standby loading mode through the standby loading start function to load a new package (402). Then, if a problem with the new package is found and a standby loading cancel request is input (403), the standby loading cancel function is performed to return the system restarted to the standby loading mode to the normal standby mode (404). If a request is entered to continue standby loading rather than a cancel request (405), the standby loading progress function 406 stops execution of all user processes of the currently active system and executes all user processes of the newly started system with standby loading. Let's do it. Then, when a request for completing the standby loading is input (407), the new standby loading system is activated through the standby loading completion function to operate in a normal redundancy state (408). When a request for withdrawing the standby loading function is input (409), the standby loading state, which has been advanced so far, is returned to the first state through the standby loading recovery function (410).

A detailed management method for the standby loading method in the redundant system as described above is as follows.

5A is a flowchart of the active side of the start function unit.

First of all, it is necessary to judge the state of the system to determine if it is a condition that can start standby loading. ) And whether the other party's operation (OTHER_ACTION) is in the connection (DUAL_RUNNING) operation (501). All of these conditions must be satisfied to start standby loading. If not, the operation ends with an error return (502). If the state is satisfied, a STARTUPBOOT signal is sent to the other party's standby (503). Next, the state is changed to disconnect mode DISCONN, the standby loading site SL_SITE is changed to OLD_SITE, and the operation is changed to SINGLE_RUNNING, which is a single operation (504).

5B is a standby side flowchart of the start function.

First, the function is started by receiving a STARTUPBOOT signal (505). Change SBYLD_FLAG to SBYLOADING (506) and restart the system (507). Since it is started by referring to the SBYLD_FLAG of NVRAM, it is initialized to the standby loading mode, not the normal standby, to survive, and the user package is loaded by executing the disconnect mode (508). At this time, if you prepare a new package, you can achieve the intended purpose of changing the package. Of course, you can use this standby loading function to test other sites with the same package.

6A is a standby side flowchart of a cancellation function unit according to the present invention. The cancel command is issued from the standby side, that is, the NEW site and the NEW site. First, the state is determined (601) and if its own state is a standby loading state and the partner state is not a disconnected state, it ends with an error return (602). If the status is correct, the cancel function is performed. First, the standby loading flag is deleted as NOSBYLD, and the standby loading site information is also deleted as NOSBYLD (603). Next, a signal of OLD_TO_ACTIVE is sent to the OLD side so that the OLD site is returned to active state (604). When its state is changed to standby (605) and the system is restarted (606), it is started by seeing the state value of the NVRAM and is restored to the normal standby state (607).

6B is a flowchart of an active side of a cancellation function unit according to the present invention.

The function is started by receiving the OLD_TO_ACTIVE signal (608). At this time, the start function does not restart the system, but only changes the state. In this case, the state can be restored simply by restoring the state again, thereby maintaining the continuity of the system service. That is, the standby loading flag is changed to not being standby loaded to NOSBYLD and the standby loading site is also changed to NOSBYLD (609). Next, it changes its state to active (610).

7A is a flowchart of an active side of a progress function unit according to the present invention.

First, since the start function is performed, it is determined whether the state of the system is the disconnected state and the counterpart state is the standby loading state (701). If it is not in this state, an error is returned and execution ends (702). If the state is correct, execution of all currently running processes ends (703). Next, the NEW site is turned active and the user will be put into standby so that communication with the external network does not occur (704). The standby loading flag is cleared to NOSBYSYS (705). Next, it changes its state to SBYLD_OLD and the counterpart to SBYLD_NEW, and sends a RUNNING_PROCESS signal to the counterpart (707).

7B is a standby side flowchart of a progress function unit according to the present invention.

The function begins by receiving the RUNNING_PROCESS signal (708), clears the standby loading flag, sets its state to SLOAING_NEW, and sets the state side to SLOAING_OLD (709), and now it becomes active and performs normal operation. Therefore, the mode is changed so that communication with the network is normally performed (710). Run all newly loaded user processes (711).

8A is a standby side flowchart of a completion function unit according to the present invention.

The newly loaded package is being executed on the standby side by the execution of the advance function unit. At this point, the operator can issue a completion command if it is determined that the new package is reliable. Upon receiving the completion command, first, it is determined whether its own state is SLOADING_NEW and its counterpart is SLOADING_OLD (801). If this is not the case, an error is returned and execution ends (802). If the command was entered in the correct state, it now sets its state to ACTIVE, notifies the standby loading site data structure that it is no longer in the standby loading state (803) and sends a DUALCOPYSTART signal to the opponent (804).

8B is a flowchart of an active side of a completion function unit according to the present invention.

Upon receiving the DUALCOPYSTART signal (805), the standby loading flag is recorded as no longer in the standby loading state (806) and the system restarted (807). The system then comes back to normal standby state with reference to the state value recorded in NVRAM at restart (808).

9A is a standby side flowchart of a recovery function unit according to the present invention.

This function is executed when the new package is loaded and executed on the standby side and the operator decides to go back to the previous package. First, it is determined whether its own state is SLOADING_NEW and the counterpart state is SLOADING_OLD (901). If this is not the case, an error is returned and execution is terminated (902). If the states match, a REACT signal is sent (903). Next, since the user must change back to standby, the network matching device is disabled (904) and the standby loading flag and site information are cleared (905). Next, a restart is performed (906). At this time, it is started with reference to the state value of NVRAM, so it is saved as a standby, and thus the package that has been newly loaded on the standby side is not used (907).

9B is a flowchart of an active side of a recovery function unit according to the present invention.

First, the function starts by receiving a REACT signal from the other party (908). Since the user process that was previously executed is stopped, the proper state change and execution is stopped to return to the normal redundancy state of the previous package. Just run these processes again. That is, the execution is terminated by setting its state to active (909), activating the network matching device which has been deactivated (910), clearing the standby loading flag and site (911), and executing all user processes (912).

As described above, the present invention can be performed in a redundant system by using a standby system, which was simply in standby state, to execute an existing package in a new system and to change to a new package without interruption of system services. It is effective to increase the reliability.

Claims (7)

In the standby loading function providing method used in a redundant system, Upon inputting a standby loading request from a user, restarting a system currently in standby mode to a standby loading mode through a standby loading start function; A second step of returning the system restarted in the standby loading mode to the normal standby mode through the standby loading cancel function if the standby loading cancellation request is input after the first step; A third step of stopping execution of all user processes of the current active system and executing all user processes of the system newly started by standby loading through a standby loading progress function unit when a standby loading progress request is input after the first step; A fourth step of activating a newly received standby loading system through a standby loading completion function unit and operating in a normal redundancy state when a standby loading completion request is input after the step 3; And And a fifth step of returning the standby loading state, which has been performed so far, to a normal redundancy state through the standby loading recovery function unit when the standby loading function withdrawal request is input after the third step. . The method of claim 1, The first step is First, a first step of judging the state of the system on the active side to determine whether its own state is active, the state of the state side is standby, and both its operation and the other side's operation are in connection operation; A second step of ending execution with an error return if the state condition is not satisfied; A third step of sending a STARTUPBOOT signal to a standby of a counterpart if the state condition is satisfied; Changing the state of the user to the disconnected mode and the standby loading site to the OLD_SITE and changing the operation to the single operation mode; Next, when the standby side receives the STARTUPBOOT signal, a fifth step of displaying the standby loading flag of the NVRAM as standby loading and restarting the system; And And a sixth step of starting by referring to the flag to initialize the standby loading mode instead of the normal standby, to survive the loading of the user package by executing the disconnection mode. The method of claim 1, The second step, First, a first step of determining whether the state of the standby state is the standby loading state and the opponent state is disconnected; A second step of ending with an error return if the states do not match; Canceling the standby loading flag and the standby loading site information if the status is correct; Next, a fourth step of sending an OLD_TO_ACTIVE signal to the active side; A fifth step of changing its state to standby and restarting the system; A sixth step of starting to view a state value of the NVRAM and living in a normal standby state; Next, in response to receiving the OLD_TO_ACTIVE signal, the active side changes the standby loading flag and the standby loading site data value to not being in standby loading; And A standby loading method for a redundant system, comprising the eighth step of changing its state to active. The method of claim 1, The third step, First, a first step of determining whether the active side is in a disconnected state and the opposite state is in a standby loading state; If not in this state, returning an error to terminate execution; Terminating the execution of all currently running processes if the state is correct; Next, a fourth step of preventing communication with the external network occurs; A fifth step of deleting the standby loading flag as NOSBYSYS and changing its state to an old site (SBYLD_OLD) and a counterpart state to a new site (SBYLD_NEW); Transmitting a RUNNING_PROCESS signal to the counterpart; Next, when the standby side receives the RUNNING_PROCESS signal, the standby loading flag is cleared and its state is set to SLOAING_NEW and the state is set to SLOAING_OLD; An eighth step of changing the mode so that communication with the network is normally performed; And A standby loading method for a redundant system, comprising an eighth step of executing all newly loaded user processes. The method of claim 1, The fourth step, First, the first step of determining whether the state of the standby side is SLOADING_NEW and the state of the opponent side is SLOADING_OLD; If not in this state, returning an error to terminate execution; A third step of, if the command is entered in the correct state, now sets its state to ACTIVE and records in the standby loading site data structure that it is no longer in the standby loading state; Next, a fourth step of sending a DUALCOPYSTART signal to the counterpart; A fifth step of, on the active side, upon receiving the DUALCOPYSTART signal, recording the standby loading flag as not being in the standby loading state and restarting the system; And And a sixth step of resuming a normal standby state by referring to a state value recorded in NVRAM at system restart. The method of claim 1, The fifth step, First, the first step of determining whether the standby state is SLOADING_NEW and the opponent state is SLOADING_OLD; If not in this state, returning an error to terminate execution; A third step of sending a REACT signal to the counterpart when the states match; Next, the fourth step of deactivating the network matching device and clearing the standby loading flag and site information of the NVRAM and restarting; A fifth step of starting by referring to the state value of the NVRAM and not using the newly loaded package up to the standby side; Next, when the active side receives the REACT signal, the sixth step of activating the network matching device which has set its state as active and deactivated, and clears the standby loading flag and the site; And A standby loading method for a redundant system, comprising a seventh step of terminating execution by executing all user processes. A first function of receiving a standby loading request from a user and restarting a system currently in standby mode in a standby loading mode through a standby loading start function; A second function of returning the system restarted in the standby loading mode to the normal standby mode through the standby loading cancellation function if a standby loading cancellation request is input after the first function; A third function of stopping execution of all user processes of the current active system and executing all user processes of the system newly started by standby loading through a standby loading progress function, when a standby loading progress request is input after the first function; A fourth function of activating a newly received standby loading system through a standby loading completion function unit and operating in a normal redundancy state when a standby loading completion request is input after the three functions; And A computer-readable recording medium containing a program for realizing a fifth function for reverting the standby loading state progressed to the first to a normal redundancy state through the standby loading recovery function unit when a standby loading function revocation request is input after the above three functions. .