JP2011159222A - Server system and control method thereof - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a server system and a control method thereof for continuing a service without increasing the number of servers even if a continuing failure occurs. <P>SOLUTION: The server system includes: a plurality of redundant constitutions 10 and 20, each provided with one active server and one backup server; and a management server 3 for managing the redundant constitutions 10 and 20. When at least one of the active servers fails, the management server 3 switches a backup server corresponding to the fault active server to an active server, and assigns one of the backup servers constituting the redundant constitutions as a backup server for the new active server. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a server system and a server system control method, and more particularly to a server system having a redundant configuration having an active server and a standby server and a server system control method.

  In a server system, since it is necessary to provide services continuously even if a failure occurs in a server, a redundant configuration including an active server and a standby server is generally used. In a server system having a redundant configuration, when a failure occurs in the active server, the service can be continuously provided by immediately switching to the standby server.

  Patent Documents 1 to 3 disclose a server system having a redundant configuration including such an active server and a standby server. A server system disclosed in Patent Document 1 is shown in FIG. A server system 110 illustrated in FIG. 7 has a redundant configuration including a server 121 and a server 122, and the server 121 and the server 122 are connected via a network 170. When the server 121 is operating and the server 122 is a standby system, when a failure occurs in the server 121, the file in the HDD (magnetic storage device) 141 is stored in the file replication control unit 161 of the server 121 and the file of the server 122 The data is transferred to the HDD 142 of the server 122 by the replication control unit 162.

  A server system disclosed in Patent Document 2 is shown in FIG. The server system shown in FIG. 8 includes an active server 210 and a standby server 211. The active server 210 includes a process 220, a shared memory 230, a CPU monitoring function unit 240, a replication function unit 250, and a management table 260. The process 220 is a program for performing data processing, and is a unit of processing executed by the CPU. The shared memory 230 writes and reads data. The CPU monitoring function unit 240 monitors the CPU usage rate. The replication function unit 250 performs replication (memory synchronization). The management table 260 stores management information of data that has not been replicated. The standby server 211 has the same configuration as that of the active server 210. When the service of the active server 210 is stopped due to a failure or the like, the active server 210 and the standby server 211 are switched, and the standby server 211 starts the service as the active system.

  FIG. 9 shows a redundant computer system disclosed in Patent Document 3. In a system composed of a plurality of computers having a plurality of operation modes according to Patent Document 3, the active computers 301 to 304, the primary spare computers 311 to 314 assigned to the active computers 301 to 304, the active and 1 Secondary spare computers 321 and 322 shared by the next spare computer are connected on the transmission line 330. Then, the centralized computer management device 340 switches the primary spare computer 311 to the active computer, for example, when an abnormality of the active computer 301 is detected, and transfers all retained information from the active computer 301 to the primary spare computer 311. The secondary spare computer 321 is assigned as a new primary spare computer.

JP 2007-328595 A JP 2007-286952 A JP-A-8-185330

  In the redundant server system according to Patent Document 1 and Patent Document 2, the system is configured by combining two servers, an active server and a standby server. In such a system configuration, when a failure occurs in the active server, if the standby server is switched to the active server, the server in which the failure occurred is disconnected, and the server that is newly switched to the active server can provide services. continue. Therefore, if a failure occurs again before the failed server is recovered, there is a problem that the system goes down.

  Further, in the redundant computer system according to Patent Document 3, it is necessary to newly provide a secondary spare computer that is shared by both the current and primary spare computers in a system in which two computers, the current computer and the primary spare computer, are combined. There was a problem that the number of computers used increased.

  Accordingly, an object of the present invention is to provide a server system capable of continuing service without increasing the number of servers in a server system having a redundant configuration including an active server and a standby server, even when consecutive failures occur, and It is to provide a method for controlling a server system.

  The server system according to the present invention includes a plurality of redundant configurations each including one active server and one standby server, and a management server that manages the redundant configuration, and the management server includes the active server. When a failure occurs in at least one of the servers, the standby server for the failed active server is switched to the active server, and the redundant configuration is used as a standby server for the active server after the switching. Any one of the standby servers to be configured is assigned.

  According to the present invention, there is provided a server system control method comprising a plurality of redundant configurations each including one active server and one standby server, and a management server that manages the redundant configuration. When one failure occurs, the standby server for the failed active server is switched to the active server, and the redundant configuration is configured as a standby server for the active server after the switching. Any one of the standby servers is assigned.

  According to the present invention, in a server system having a redundant configuration including an active server and a standby server, a server system and a server system capable of continuing service without increasing the number of servers even when consecutive failures occur. A control method can be provided.

1 is a block diagram showing a server system according to a first exemplary embodiment; (A) is a block diagram showing a configuration of a normal server system, and (b) is a block diagram showing a configuration of a server system when a failure occurs in an active server. It is a figure which shows the operation | movement sequence when the server system concerning Embodiment 1 reconfigure | reconfigures a system (when a failure generate | occur | produces in an active system server). It is a figure which shows the operation | movement sequence in case the server system concerning Embodiment 1 reconfigure | reconfigures a system (when the failure of an active server is recovered). It is a block diagram which shows the server system concerning Embodiment 2. FIG. (A) is a block diagram showing a configuration of a normal server system, and (b) is a block diagram showing a configuration of a server system when a failure occurs in a standby server. It is a figure which shows the operation | movement sequence when the server system concerning Embodiment 2 reconfigure | reconfigures a system (when a failure generate | occur | produces in a standby system server). It is a figure which shows the operation | movement sequence in case the server system concerning Embodiment 2 reconfigure | reconfigures a system (when the failure of a standby system server is recovered). It is a block diagram for demonstrating the server system concerning patent document 1. FIG. It is a block diagram for demonstrating the server system concerning patent document 2. FIG. It is a block diagram for demonstrating the server system concerning patent document 3. FIG.

Embodiment 1
Embodiment 1 of the present invention will be described below with reference to the drawings. FIG. 1 is a block diagram showing a server system according to the present embodiment. FIG. 1A shows the configuration of the server system during normal operation, and FIG. 1B shows the configuration of the server system when a failure occurs in the active server. In FIG. 1A, the redundant configuration 10 includes an active server 1A and a standby server 1B. The redundant configuration 20 includes an active server 2A and a standby server 2B. The normal server system according to the present embodiment has a plurality of redundant configurations each including one active server and one standby server. Also, the operation of these redundant configurations is managed by the management server 3.

  The management server 3 has a function of managing the operating state (operating, standby, failure) of each server. Then, when a failure occurs in the active server, and the standby server for this active server is switched to the active server, if there is no standby server corresponding to the switched active server, The redundant configuration pair of the active server and the standby server is reconfigured from a 1: 1 configuration to an n: 1 configuration.

  For example, as shown in FIG. 1B, when a failure occurs in the active server 1A, the management server 3 turns the standby server 1B operating as the standby server corresponding to the active server 1A into the active server. Switch. At this time, the management server 3 assigns the standby server 2B as a standby server corresponding to the active server 1B newly switched to the active server. Here, the standby server 2B also functions as a standby server of the active server 2A.

  Conversely, when the management server 3 determines that the failure of the failed server has been recovered, the management server reconfigures the redundant configuration so as to return to the configuration (normal state) of two units. That is, the management server 3 can normally configure a server system with a 1: 1 redundant configuration, and can configure a server system with an n: 1 redundant configuration when a failure occurs in one or more servers.

  1A and 1B, the server system having two redundant configurations 10 and 20 has been described as an example. However, the server system according to the present embodiment is a server having three or more redundant configurations. The same applies to the system. That is, in the server system according to the present embodiment, the management server 3 can set the ratio of the active server and the standby server to n: 1 when a failure occurs in the server. The operation of the server system according to this embodiment will be specifically described below.

  FIG. 2 is a diagram for explaining an operation in which the management server 3 reconfigures the server system when a failure occurs in the active server 1A in the server system according to the present embodiment. Also in FIG. 2, in a normal state, the server 1 </ b> A operates as an active server and the server 1 </ b> B operates as a standby server, and these constitute a redundant configuration 10. Further, the server 2A operates as an active server, and the server 2B operates as a standby server, and these constitute a redundant configuration 20. The management server monitors the operational status of each server 1A, 1B, 2A, 2B. In addition, the active server 1A and the standby server 1B perform replication processing with each other. The active server 2A and the standby server 2B also perform replication processing with each other.

  For example, when the management server 3 determines that a failure has occurred in the active server 1A (step S1 in FIG. 2), the management server 3 notifies the standby server 1B of a state change request so as to transition to the active system (step S2). . At this time, the management server 3 notifies the server 1B of information on the standby server 2B that becomes the standby server when the server 1B transitions to the active system.

  Further, the standby server 1B that has received an instruction to transition to the active system notifies the management server 3 that the transition from the standby server to the active server has been completed (step S3). Then, the server 2B is a standby server, and the server 1B starts a service as an active server. The management server 3 that has received the notification of completion of the state transition from the server 1B updates the operation state of the system (step S4), and starts operation with the system configuration after reconfiguration.

  In addition, the server 1B transitioned to the active system notifies the standby system server 2B notified from the management server 3 of an active system addition request so as to perform replication processing with the server 1B (step S5). Note that the order of the operations in steps S2 to S5 may be changed as long as consistency can be obtained. The standby server 2B also performs replication processing for the active server 1B in response to the active addition request received from the active server 1B. At this time, the standby server 2B continues to perform replication processing for the active server 2A. As described above, the management server 3 can normally configure a server system with a 1: 1 redundant configuration, and can configure a server system with a 2: 1 redundant configuration when a failure occurs in the server 1A.

  Next, the operation of the server system until the server is restored from the failure state to the normal state will be described with reference to FIG. In the initial state of FIG. 3, the server 1A is disconnected because a failure has occurred in the server 1A. Further, the server 1B and the server 2A operate as an active server, and the server 2B operates as a standby server, and these constitute a redundant configuration 30. In addition, the active server 1B and the standby server 2B perform replication processing with each other. The active server 2A and the standby server 2B also perform replication processing with each other.

  The management server 3 monitors the operational status of each server 1A, 1B, 2A, 2B. For example, when the management server 3 determines that the failure of the failed server 1A has been recovered (step S11 in FIG. 3), the management server 3 notifies the server 1A of a state change request so as to transition to the standby system (step 12). At this time, the management server 3 notifies the server 1A of information of the operational server 1B that becomes a pair when the server 1A transitions to the standby system.

  Further, the management server 3 notifies the active server 1B of a standby system change request so as to change the standby server from the server 2B to the server 1A (step S13). The active server 1B that has received the instruction to change the standby server performs replication processing for the new standby server 1A (step S14). Further, after completing the replication process with the standby server 1A, the active server 1B notifies the standby server 2B of an operation deletion request (step S15).

  Next, the active server 1B notifies the management server 3 that the change of the standby server has been completed from the server 2B to the server 1A (step S16). Further, after the replication processing with the active server 1B is completed, the standby server 1A notifies the management server 3 that the status change to the standby system is completed (step S17). Then, the server 1A transitions to the standby server and starts the operation of the active server 1B as the standby server.

  The standby server 2B that has received the active deletion request from the active server 1B ends the replication process with the active server 1B. Note that the order of the operations in steps S12 to S17 may be changed as long as consistency is obtained.

  After receiving the standby system change completion notification (step S16) from the active server 1B and the status change completion notification (step S17) from the standby server 1A, the management server 3 updates the system operating status (server information). (Step S18), and operation is started with the system configuration after reconfiguration. At this time, the active server 1B and the standby server 1A perform replication processing with each other. The active server 2A and the standby server 2B also perform replication processing with each other. In the server system according to the present embodiment, an application service is provided while the processes in FIGS. 2 and 3 described above are repeated according to the operation state of the server.

  As described above, in the invention according to this embodiment, in the server system operating in the 1: 1 redundant configuration, the standby server is switched to the active server due to a failure in the active server. Even in this case, it is possible to reconstruct the redundant configuration on another server in which no failure has occurred and to assign a standby server corresponding to the active server after switching. Therefore, according to the present invention, it is possible to provide a server system and a server system control method capable of continuing service without increasing the number of servers even when consecutive failures occur.

  In the server system according to the present embodiment described above, there are two active servers and two standby servers in the normal state, and two active servers when a failure occurs in one server. And one standby server. However, the server system according to the present embodiment is not limited to such a combination. For example, the server system may be configured by three active servers and three standby servers. In this case, when a failure occurs in one server, it can be reconfigured as three active servers and two standby servers. When a failure occurs in two servers, it can be reconfigured as three active servers and one standby server.

  Further, for example, the server system may be configured by four active servers and four standby servers. In this case, when a failure occurs in one server, it can be reconfigured as four active servers and three standby servers. Further, when a failure occurs in two servers, it can be reconfigured as four active servers and two standby servers. Furthermore, when a failure occurs in three servers, it can be reconfigured as four active servers and one standby server. As described above, when the number of failed servers is less than N / 2 (N is the total number of servers), the management server is set appropriately considering that there is always one standby server for the active server. can do.

Embodiment 2
The second embodiment of the present invention will be described below with reference to the drawings. In the first embodiment, the case where a failure occurs in the active server constituting the server system has been described, but in this embodiment, the case where a failure occurs in the standby server will be described. FIG. 4 is a block diagram showing a server system according to the present embodiment. FIG. 4A shows the configuration of the server system in a normal state, which is the same configuration as FIG. FIG. 4B shows the configuration of the server system when a failure occurs in the standby server.

  The management server 3 has a function of managing the operating state (operating, standby, failure) of each server. If a failure occurs in at least one of the standby servers, one of the other standby servers is assigned as the standby server of the active server to the failed standby server, and the active server The redundant configuration set of the server and the standby server is reconfigured from a 1: 1 configuration to an n: 1 configuration.

  For example, as shown in FIG. 4B, when a failure occurs in the standby server 1B, the management server 3 assigns the standby server 2B as the standby server of the active server 1A corresponding to the standby server 1B. Here, the standby server 2B also functions as a standby server of the active server 2A.

  Conversely, when the management server 3 determines that the failure of the failed server has been recovered, the management server reconfigures the redundant configuration so as to return to the configuration (normal state) of two units. That is, the management server 3 can normally configure a server system with a 1: 1 redundant configuration, and can configure a server system with an n: 1 redundant configuration when a failure occurs in one or more servers.

  4A and 4B, the server system having two redundant configurations 10 and 20 has been described as an example. However, the server system according to the present embodiment is a server having three or more redundant configurations. The same applies to the system. That is, in the server system according to the present embodiment, the management server 3 can set the ratio of the active server and the standby server to n: 1 when a failure occurs in the server. The operation of the server system according to this embodiment will be specifically described below.

  FIG. 5 is a diagram for explaining an operation in which the management server 3 reconfigures the server system when a failure occurs in the standby server 1B in the server system according to the present embodiment. Also in FIG. 5, in a normal state, the server 1 </ b> A operates as an active server and the server 1 </ b> B operates as a standby server, and these constitute a redundant configuration 10. Further, the server 2A operates as an active server, and the server 2B operates as a standby server, and these constitute a redundant configuration 20. The management server 3 monitors the operational status of each server 1A, 1B, 2A, 2B. In addition, the active server 1A and the standby server 1B perform replication processing with each other. The active server 2A and the standby server 2B also perform replication processing with each other.

  For example, when the management server 3 determines that a failure has occurred in the standby server 1B (step S21 in FIG. 5), the management server 3 changes the standby server from the standby server 1B to the standby server 2B with respect to the active server 1A. Thus, a standby system change request is notified (step S22). Then, the active server 1A notifies the standby server 2B of an active system addition request to perform replication processing with the active server 1A (step S23).

  Thereafter, the active server 1A notifies the management server 3 of the completion of the standby system change (step S24). Then, the service is started with the standby server 2B as the standby server of the active server 1A. The management server 3 that has received the standby system change completion notification from the active server 1A updates the operating state of the system (step S25), and starts operation with the system configuration after reconfiguration.

  The standby server 2B also performs replication processing for the active server 1A in response to an active addition request (Step S23) received from the active server 1A. At this time, the standby server 2B continues to perform replication processing for the active server 2B. As described above, the management server 3 can normally configure a server system with a 1: 1 redundant configuration, and can configure a server system with a 2: 1 redundant configuration when a failure occurs in the server 1B.

  Next, the operation of the server system until the standby server 1B recovers from the failure state to the normal state will be described with reference to FIG. In the initial state of FIG. 6, the server 1B is disconnected because a failure has occurred in the server 1B. Further, the server 1A and the server 2A operate as an active server, and the server 2B operates as a standby server, and these constitute a redundant configuration 30. Also, the active server 1A and the standby server 2B perform replication processing with each other. The active server 2A and the standby server 2B also perform replication processing with each other.

  The management server 3 monitors the operational status of each server 1A, 1B, 2A, 2B. For example, when the management server 3 determines that the failure of the failure server 1B has been recovered (step S31 in FIG. 6), the management server 3 changes the standby server from the standby server 2B to the standby server 1B for the active server 1A. Thus, a standby system change request is notified (step S32). Then, the active server 1A notifies the standby server 1B of an active system addition request to perform replication processing with the active server 1A (step S33).

  The active server 1A performs replication processing for the new standby server 1B. In addition, after completing the replication process with the standby server 1B, the active server 1A notifies the standby server 2B of an active deletion request (step S34).

  Thereafter, the active server 1A notifies the management server 3 of the completion of the standby system change (step S35). Then, the service is started with the standby server 1B as the standby server of the active server 1A. The management server 3 that has received the standby system change completion notification from the active server 1A updates the operating state of the system (step S36), and starts operation with the system configuration after reconfiguration.

  At this time, the standby server 2B that has received the active deletion request from the active server 1A ends the replication process with the server 1A. In addition, the active server 1A and the standby server 1B perform replication processing with each other. The active server 2A and the standby server 2B also perform replication processing with each other. In the server system according to the present embodiment, the application service is provided while repeating the processes of FIGS. 5 and 6 described above according to the operation state of the server.

  As described above, in the invention according to the present embodiment, in the server system operating in the 1: 1 redundant configuration, even if a failure occurs in the standby server, other servers in which no failure has occurred Redundant configuration can be reconstructed with Therefore, according to the present invention, it is possible to provide a server system and a server system control method capable of continuing service without increasing the number of servers even when consecutive failures occur.

  Note that in the server system and the server system control method according to the present invention, the processing described in the first and second embodiments, that is, the processing shown in FIGS. Application services can be provided while repeating according to the state.

  Although the present invention has been described with reference to the above-described embodiment, the present invention is not limited to the configuration of the above-described embodiment, and those skilled in the art within the scope of the invention of the claims of the present application claims. Of course, various modifications, corrections, and combinations that can be made are included.

  A part or all of the above embodiments can be described as in the following supplementary notes, but is not limited thereto.

(Appendix 1) A plurality of redundant configurations each including one active server and one standby server;
A management server for managing the redundant configuration,
When a failure occurs in at least one of the active servers, the management server switches the standby server for the active server in which the failure has occurred to an active server, and the active server after the switch Assigning any of the standby servers constituting the redundant configuration as a standby server for
Server system.

  (Supplementary note 2) When a failure occurs in at least one of the standby servers, the management server is a standby system in which the failure occurs as a standby server of an active server for the standby server in which the failure has occurred. The server system according to appendix 1, wherein a standby server other than a server is assigned.

  (Supplementary note 3) When the active server in which the failure has occurred is recovered, the management server uses the restored active server as a standby server of the active server after the switching. The server system described in 1.

  (Supplementary note 4) The server system according to supplementary note 2 or supplementary note 3, wherein the management server uses the restored standby server as a standby server when the failed standby server is restored.

(Supplementary Note 5) The management server monitors the status of the active server, and when a failure occurs in the active server, the management server starts from the standby server with respect to the standby server for the failed active server. Notify the status change request to change the status to the active system,
The standby server to which the state change request is notified switches to the active server and notifies the active server addition request to any one of the standby servers configuring the redundant configuration. The server system according to any one of the above.

(Appendix 6) The management server monitors the status of the standby server, and if a failure occurs in the standby server, the standby server changes to the active server for the standby server in which the failure has occurred Notify the request,
The active server to which the standby system change request is notified notifies the standby system server other than the standby server in which the failure has occurred, with an active system addition request, according to any one of appendices 2 to 5. Server system.

(Supplementary note 7) The management server monitors the status of the active server in which the failure has occurred, and when the active server in which the failure has occurred is recovered, the management server is a standby server for the recovered active server Notify the status change request to work as
Additional notes 1 to 6, wherein a standby system change request is notified to a server operating as an active server instead of the failed active server so that the standby system becomes the restored active server. The server system according to any one of the above.

  (Appendix 8) The management server monitors the status of the standby server in which the failure has occurred, and when the standby server in which the failure has occurred is recovered, the management server corresponds to the standby server in which the failure has occurred. The server according to any one of appendices 2 to 7, wherein a standby system change request is notified to an active server that has been operating as a secondary server so that the standby server is changed to the restored standby server. system.

(Supplementary note 9) A plurality of redundant configurations each including one active server and one standby server,
A control method of a server system comprising a management server for managing the redundant configuration,
When a failure occurs in at least one of the active servers, the standby server for the failed active server is switched to the active server, and as a standby server for the active server after the switch Assigning any one of the standby servers constituting the redundant configuration;
Server system control method.

  (Supplementary Note 10) When a failure occurs in at least one of the standby servers, a standby system other than the failed standby server as the standby server of the active server with respect to the failed standby server The server system control method according to appendix 9, wherein a server is allocated.

  (Supplementary note 11) The server system control method according to supplementary note 9 or 10, wherein when the failed active server is recovered, the recovered active server is used as a standby server.

  (Supplementary note 12) The server system according to Supplementary note 10 or Supplementary note 11, wherein when the standby server in which the failure has occurred is restored, the restored standby server is used as a standby server of the active server after the switching. Control method.

1A, 1B, 2A, 2B server 3 Management server 10, 20, 30 Redundant configuration

Claims (10)

A plurality of redundant configurations each including one active server and one standby server;
A management server for managing the redundant configuration,
When a failure occurs in at least one of the active servers, the management server switches the standby server for the active server in which the failure has occurred to an active server, and the active server after the switch Assigning any of the standby servers constituting the redundant configuration as a standby server for
Server system.   When a failure occurs in at least one of the standby servers, the management server is a standby server other than the standby server in which the failure has occurred as a standby server of an active server for the standby server in which the failure has occurred. The server system according to claim 1, wherein a system server is assigned.   The server according to claim 1 or 2, wherein, when the failed active server is recovered, the management server uses the recovered active server as a standby server of the active server after the switch. system.   The server system according to claim 2 or 3, wherein, when the standby server in which the failure has occurred is recovered, the management server uses the recovered standby server as a standby server. The management server monitors the status of the active server, and if a failure occurs in the active server, the status of the standby server for the active server in which the failure has occurred is changed from the standby system to the active system. A status change request to change
The standby server notified of the state change request switches to an active server and notifies an active system addition request to one of the standby servers configuring the redundant configuration. The server system according to any one of the above. The management server monitors the status of the standby server, and when a failure occurs in the standby server, notifies the standby server change request to the active server for the standby server in which the failure has occurred. ,
The active server notified of the standby system change request notifies an active system addition request to a standby server other than the standby server in which the failure has occurred. Server system. The management server monitors the status of the failed active server, and when the failed active server recovers, it operates as a standby server for the recovered active server. Notifying the status change request to
7. A standby system change request is notified to a server operating as an active server instead of the failed active server so that the standby system becomes the restored active server. The server system according to any one of the above.   The management server monitors the state of the failed standby server and operates as an active server corresponding to the failed standby server when the failed standby server is restored. The server system according to any one of claims 2 to 7, wherein a standby system change request is notified to the active server that has been changed so that the standby server is changed to the restored standby server. A plurality of redundant configurations each including one active server and one standby server;
A control method of a server system comprising a management server for managing the redundant configuration,
When a failure occurs in at least one of the active servers, the standby server for the failed active server is switched to the active server, and as a standby server for the active server after the switch Assigning any one of the standby servers constituting the redundant configuration;
Server system control method.   When a failure occurs in at least one of the standby servers, a standby server other than the failed standby server is assigned as a standby server of the active server to the standby server in which the failure has occurred. The method for controlling a server system according to claim 9.

Images