JP2016024537A - Redundant system, redundant apparatus, and switching method thereof - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a redundant system, a redundant apparatus, and its switching method that are capable of shortening a time to switch to an active system from detecting the state of the active system in a multi-redundant system comprising three or more redundant apparatuses.SOLUTION: A redundant system 1 includes: a synchronization signal generator 10 that outputs a synchronization signal indicating timing to perform communication of management data 50 including an alarm state; and a plurality of redundant apparatuses 21-2n that manage switching on the basis of the management data 50 mutually obtained in synchronization with the synchronization signal.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a redundant system, a redundant device, and a switching method thereof, and more particularly, to a redundant system, a redundant device, and a switching method thereof that switch a redundant device between an active system and a standby system.

In a redundant system, multiple redundant devices with the same function are provided, and when an abnormality is detected in the active system, the redundant device is switched to the standby system, and the redundant device selected from the standby systems Is switched to the active system. Specifically, for example, there is a system disclosed in JP-A-9-305558. That is, in a database system composed of an active server device and a standby server device, system monitoring processes of the active server device and the standby server device monitor each other server device by communicating with each other. When the system monitoring process of the standby server apparatus detects an abnormality in the active server apparatus, it switches its own system to the active system.
Further, for example, there is a duplex configuration information processing system having an active processor and a standby processor as disclosed in Japanese Patent Laid-Open No. 5-250195. That is, in order to investigate the operating state of the active processor by a standby processor, a system is known that monitors the operating status of the other processor through mutual data communication via a communication line.

Japanese Patent Laid-Open No. 9-305558 JP-A-5-250195

  In recent years, a system requiring high reliability has adopted a multi-redundant system in which three or more devices are made redundant. With the techniques described in the above-mentioned JP-A-9-305558 and JP-A-5-250195, the state of both devices can be detected simultaneously if communication is performed between two servers or processors. However, in a multi-redundant system that includes three or more redundant devices, it is difficult to grasp the status of three units at the same time. Compared with a duplex system from the detection of the status of the active system to the switching of the active system And it took time.

  The present invention provides a redundant system, a redundant device, and a switching method thereof capable of shortening the time for switching to the active system after detecting the status of the active system in a multiple redundant system including three or more redundant devices. With the goal.

  The redundant system according to the present invention includes a synchronization signal generator that outputs a synchronization signal indicating the timing of communication of management data including an alarm state, and switching based on the management data acquired mutually in synchronization with the synchronization signal. A plurality of redundant devices to be managed.

  In addition, the redundant device of the present invention receives a synchronization signal indicating a timing for performing communication of management data including an alarm state, and a communication unit that performs communication of management data with each other in synchronization with the synchronization signal, and a synchronization signal A switching management unit that manages switching based on management data acquired in synchronization with the management data.

  The redundant device switching method of the present invention includes a step of receiving a synchronization signal indicating a timing for performing communication of management data including an alarm state, and a step of performing communication of management data with each other in synchronization with the synchronization signal. And a step of managing switching based on management data acquired in synchronization with the synchronization signal.

  According to the present invention, in a multi-redundant system composed of three or more redundant devices, it is possible to shorten the time for switching to the active system after detecting the status of the active system.

FIG. 1 is a block diagram showing a configuration of an embodiment of a redundant system according to the present invention. FIG. 2 is a block diagram showing the configuration of the redundant device of FIG. FIG. 3 is a diagram illustrating a configuration of management data that the redundant device communicates with other redundant devices. FIG. 4 is a flowchart showing the data transmission operation of the redundant device. FIG. 5 is a flowchart showing the operation of the redundant device when the forced working flag is set in any of the redundant devices. FIG. 6 is a flowchart showing the operation of the redundant device when the alarm flag is set in the active system. FIG. 7 is a flowchart showing the operation of the redundant device when all the redundant devices operate as a standby system. FIG. 8 is a flowchart showing the operation of the redundant device when a plurality of active systems exist.

  Embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a diagram showing a configuration of an embodiment of a redundant system according to the present invention.

  The redundant system 1 includes a synchronization signal generator 10 that outputs a synchronization signal, redundant devices 21 to 2n that communicate with each other according to the synchronization signal, and synchronization signals from the synchronization signal generator 10 to the redundant devices 21 to 2n. Is provided with a synchronizing signal generator 10. The redundant system 1 further includes a synchronization signal network 30 that connects the redundant devices 21 to 2n, and a management data network 40 that connects the redundant devices 21 to 2n in order to bidirectionally communicate management data between the redundant devices. Yes.

  The synchronization signal generator 10 is connected to the redundant devices 21 to 2n, generates a synchronization signal indicating the timing at which the redundant devices 21 to 2n transmit management data, and instructs the redundant devices 21 to 2n to communicate in synchronization with the synchronization signal. To do.

  The management data network 40 is a network in which the redundant devices 21 to 2n are connected so that management data can be communicated with all other redundant devices.

  FIG. 2 is a block diagram showing the configuration of the redundant device 21 of FIG. In the present embodiment, all of the redundant devices 21 to 2n have the configuration shown in FIG.

  As shown in FIG. 2, the redundant device 21 performs processing such as management of switching of its own device based on the communication unit 211 for carrying out communication of management data including the alarm state of its own device and the received management data. And a switching management unit 212 for performing the above. The switching management unit 212 includes, for example, a CPU 2121 and a memory 2122. An FPGA (Field Programmable Gate Array) may be used as the CPU 2121.

  When the communication unit 211 receives the synchronization signal from the synchronization signal generator 10, the communication unit 211 redundantly manages the management data 50 including the active device number 51, the alarm flag (ALM) 52, and the forced operation flag (SEL) 53 shown in FIG. 3. It is transmitted to the other redundant devices 22-2n in the system system 1. At the same time, the management data 50 transmitted from the other redundant devices 22-2n is received.

  The switching management unit 212 manages the working device number 51, the alarm flag (ALM) 52, and the forced working flag (SEL) 53 in the management data 50 transmitted by the communication unit 211. In addition, the switching management unit 212 holds information on device numbers uniquely assigned to the own device and other redundant devices.

  The active device number 51 is set to the device number of the own device in the active device and is reset (set to “0”) in the standby device.

  The alarm flag (ALM) 52 is set if the own device is in an alarm state (for example, “1” is set), and reset if the own device is not in an alarm state (for example, “0” is set). . The switching management unit 212 confirms the alarm state in the own device at least at a frequency equal to or higher than the timing of the synchronization signal, and the result is reflected in the alarm flag (ALM) 52.

  The forced working flag (SEL) 53 is used when forcibly switching another redundant device to the working system according to the alarm state of the own device, or conversely when forcibly switching the own device from another redundant device to the working system. (For example, “1” is set). Otherwise, it is reset (for example, “0” is set).

  In addition, the switching management unit 212 determines whether all the active device numbers 51 included in the management data 50 received in synchronization with the synchronization signal are in the reset state, and indicates how many times they have been in the reset state continuously. Holds information. It also holds the device number of the device that was active before all were reset.

  The redundant devices 21 to 2n share in advance a rule for determining a device number designated by the active device number when the self device is in an alarm state and is in the active system with other redundant devices. The rule is also shared in advance when there are two or more of the received management data in which the forced working flag (SEL) is set. In addition, if all of them operate as standby systems, the designated active system is not switched to the active system for some reason, or there are a plurality of active systems, the rules are shared in advance. .

  Next, the operation of the embodiment of the present invention will be described in detail with reference to the drawings. FIG. 4 is a flowchart showing an operation of transmission processing of the redundant device of FIG.

Referring to FIG. 4, first, the switching management unit 212 of the redundant device 21 receives a synchronization signal indicating a timing for transmitting management data generated by the synchronization signal generator 10. In synchronization with the synchronization signal, the data of the alarm flag (ALM) and the forced working flag (SEL) in the memory 2122 are reset (step S1), and the alarm state of the own device is confirmed (step S2).
If it is in the alarm state, the alarm flag data in the memory 2122 is set (step S3). If it is in the alarm state, it is determined whether the own device is an active system (step S4). If the own device is the active device, among the other devices performing communication, for example, the device number next to the own device is assigned to the active device number based on a predetermined rule shared in advance with other redundant devices. (Step S5). If the own device is not the active device, the active device number is not changed.

If the own device is not in the alarm state in step S2, it is determined whether to forcibly switch the own device to the active system (S6). For example, the management data includes information indicating a precursor to the alarm state, such as charging information, which is not an alarm state, such as charging information. In such a case or when forcibly switching the own device to the active system, such as forcibly switching for other reasons, the data of the forcible working flag (SEL) in the memory 2122 is set (step S7). The device number of the own device is set in the system device number (step S8).
If not switched, the forced working flag (SEL) and the working device number are not changed.

  When the above steps S1 to S8 are completed, the active device number, the alarm flag, and the forced working flag in the memory 2122 are acquired and management data is created. Then, the management data including the working device number, the alarm flag, and the forced working flag is transmitted to all other redundant devices (step S9).

  FIGS. 5 to 8 are flowcharts showing operations after management data is transmitted from other redundant devices and each redundant device receives them. The management data transmitted from the own device is handled in the same manner as the management data received from other redundant devices, and the following processing is performed.

  First, with reference to FIG. 5, the operation of the redundant device when the forced working flag (SEL) is set in any of the redundant devices will be described.

  First, it is determined whether or not the received management data has a forced working flag (SEL) set (step S11), and if there is no set, it operates according to the flow of FIG. 6 described later.

  If there is one that has been set, it is determined whether only one of the received management data has the forced working flag (SEL) set (step S12). If there is one, it is determined whether it is management data of the own device (step S13), and if it is the own device, the device number of the own device is set to the active device number (step S14). If it is not the own device, the active device number is reset (step S15). If there are two or more of the received management data for which the forced working flag (SEL) is set, for example, the working device number is the first based on a predetermined rule shared in advance with other redundant devices. It is determined whether the smaller number is the device number of the own device (step S16). If it is the own device, the device number of the own device is set to the active device number (step S17). If it is not the device number of the own device, the active device number is reset (step S18).

  Next, the operation of the redundant device when the alarm flag (ALM) is set in the active system will be described with reference to FIG. If none of the management data received in step S11 in the flow of FIG. 5 has the forced working flag (SEL) set, the operation is performed according to the following flow.

  It is determined whether the alarm flag (ALM) of the active device is set (step S21). If the alarm flag (ALM) of the active device is set, the active device number specified in the active data is automatically set. It is determined whether the device number is the device number (S22). If it is the own device, the device number of the own device is set in the active device number (step S23), and if it is not the own device, the active device number is reset (step S24). If the alarm flag (ALM) of the active device is not set in step S21, the operation is performed according to the flow of the following FIG.

  Next, the operation of the redundant device when all the redundant devices operate as a standby system will be described with reference to FIG.

  For example, when the active system does not set the forced active flag (SEL) for some reason and the forced operation is stopped, all devices may operate as a standby system. When all of the synchronous signals are transmitted three times in succession and all operate as a standby system, based on a predetermined rule shared in advance with other redundant devices, for example, the redundant device that was the last active system The redundant device with the next device number operates as the active system. When power is turned on, based on a predetermined rule shared in advance with other redundant devices, for example, the redundant device with the smallest device number becomes the active system, so that the last redundant device that is the active system is first. It is necessary to set a number smaller than the smaller device number, for example, “0”.

  Further, for example, when the designated active system is not switched to the active system for some reason, all devices may remain in the standby system thereafter. In that case, based on a predetermined rule shared in advance with another redundant device, for example, when all operate as a standby system six times in a row, the smallest device number at that time is switched to operate as the active system To process.

  Referring to FIG. 7, it is first determined whether or not all the active device numbers included in the received data are in a reset state (0) (step S31). If they are all in the reset state, it is determined whether all the active device numbers are in the reset state for six consecutive times (step S32). Otherwise, it is determined whether the active device number of all data is in a reset state three times in succession (step S33).

  If the number of times is not three consecutive times, the active device number is reset (step S34).

  If all the active device numbers are in the reset state for three consecutive times, it is determined whether the device number of the own device is a device number determined based on a predetermined rule shared in advance with other redundant devices (step S35). . For example, it is determined whether the active device number of all data is the next higher number than the device number of the redundant device that was the last active device before the reset state. If the device number of the own device is the next higher number than the device number of the last redundant device, the device number of the own device is set to the active device number (step S36).

  In step S32, if the active device number is in the reset state for six consecutive times, for example, the smallest device number is determined based on a predetermined rule shared in advance with other redundant devices among the devices performing communication. It is determined whether it is the device number of the own device (step S37). If the smallest device number among the communicating devices is the device number of the own device, the device number of the own device is set to the active device number (step S38). If not, the active device number is set. Reset (step S39). If there is a device whose working system number is not in the reset state in step S31, it operates according to the flow of the following FIG.

  Finally, the operation of the redundant device when there are a plurality of active systems will be described with reference to FIG.

  If there is more than one applicable to the active system that has no alarm, the device that forcibly set the active device number to its own device at the time of the previous synchronization signal, or the device that has an alarm and the device number is set to the active device, management data There are a plurality of devices whose active device numbers are other than 0.

  If there are multiple devices with management device numbers other than 0 in the management data, a device number determined based on a predetermined rule shared in advance with other redundant devices, for example, the smallest device number among them The device operates as an active system.

  Referring to FIG. 8, first, it is determined whether there are a plurality of management device numbers other than 0 in the received management data (step S41). When there are a plurality of devices, based on a predetermined rule shared with other redundant devices in advance, for example, it is determined whether the smallest device number is the device number of the own device (step S42). For example, the device number of the own device is set as the active device number (step S43). If it is not the device number of the own device, the active device number is reset (step S44).

If there are not a plurality of devices whose active device number is other than 0 in step S41, it is determined whether the active device number is the device number of the own device (step S45). Device number is set (step S46), and the working system is set as the device having the working system number (step S48). If it is not the own device, the active device number is reset (step S47).
In other words, if the device number of the own device is set in the active device number, if the own device has been active until then, the operation as the active device is continued, and if the own device has been standby until then, Starts switching to the active system. If the device number of the own device is not set in the active device number, if the own device has been in the standby system, the operation as the standby system is continued. The switching process is started.

  As described above, according to the present embodiment, the synchronization signal indicating the timing for transmitting the management data generated by the synchronization signal generator 10 is received. In synchronization with the synchronization signal, each redundant device transmits management data in which the alarm status of the own device, the forced working flag for which forced switching is desired, and the working device number for specifying the switching destination are set. The active device number is set with reference to the management data received from other redundant devices, and the active standby system switching process is performed. With this configuration, in a multi-redundant system composed of three or more redundant devices, it is possible to shorten the time for switching to the active system after detecting the status of the active system.

  In addition, this invention is not limited only to the structure of the above-mentioned embodiment, A various change is possible.

  For example, in the above-described embodiment, the synchronization signal generator 10 generates a synchronization signal, inputs the synchronization signal to the plurality of redundant devices 21 to 2n, transmits management data using the synchronization signal, and subsequently receives management data and Switching processing is performed. Unlike this, management data transmission may be performed for one synchronization signal, and management data reception and switching processing may be performed in synchronization with the next synchronization signal.

  As a result, the processing of all redundant devices can be reliably synchronized with respect to the reception and switching processing of the management data.

  In parallel with the synchronization signal generator 10, a synchronization signal instructing transmission of management data and a synchronization signal instructing reception and switching processing of management data may be output separately.

  Thereby, management data reception and switching processing timing can be managed independently from management data transmission timing.

  Moreover, in said embodiment, the management data network 40 is provided separately from the synchronizing signal network 30 which inputs a synchronizing signal from the synchronizing signal generator 10 into several redundant apparatus 21-2n. Unlike this, only the synchronization signal network 30 may be used, and management data may be communicated between the plurality of redundant devices 21 to 2n.

  This eliminates the need for a management data network and allows a simple configuration.

DESCRIPTION OF SYMBOLS 1 Redundant system 10 Sync signal generator 21-2n Redundant apparatus 30 Sync signal network 40 Management data network 211 Communication part 212 Switching management part 2121 CPU
2122 Memory 50 Management data 51 Active device number 52 Alarm flag (ALM)
53 Forced working flag (SEL)

Claims (7)

A synchronization signal generator that outputs a synchronization signal indicating the timing of performing communication of management data including an alarm state, and a plurality of redundant devices that manage switching based on the management data acquired mutually in synchronization with the synchronization signal A redundant system characterized by comprising: A communication unit that receives a synchronization signal indicating a timing for performing communication of management data including an alarm state, and a communication unit that performs communication of the management data with each other in synchronization with the synchronization signal, and management acquired in synchronization with the synchronization signal A redundant device having a switching management unit that manages switching based on data. The management data includes an active device number that designates a device number of a redundant device to be switched to the active system, and the switching management unit is configured to store the redundant device to be switched to the active system if the own device is in an alarm state and the active system. The redundant device according to claim 2, wherein management data in which the device number is designated by an active device number is transmitted. The management data includes a forcible working flag for forcibly switching the active system from another redundant device to the own device, and the switching management unit is for when the own device is a standby system and forcibly switches the active system to the own device. 4. The redundant device according to claim 2, wherein the forcible working flag is set and management data in which the device number of the own device is designated by the working device number is transmitted. 5. The switching management unit according to claim 2, wherein, when there is only one management data in which the active device number is set among the received management data, the switching management unit starts the switching process to the active system. Redundant equipment as described in any of the above. The management data received in synchronization with the synchronization signal by receiving a synchronization signal indicating the timing for performing communication of management data including an alarm state, performing communication of the management data with each other in synchronization with the synchronization signal A switching method for redundant equipment comprising managing switching based on Obtained in synchronism with the synchronization signal, processing for receiving a synchronization signal indicating the timing of performing communication of management data including an alarm state, processing for mutually communicating the management data in synchronization with the synchronization signal A program for causing a CPU of a redundant device to execute processing for managing switching based on the management data.

Images