JP4792958B2 - Data control system, shared disk device, and disk access restriction switching method used therefor - Google Patents

Description

  The present invention relates to a data control system, a shared disk device, and a disk access restriction switching method used therefor, and more particularly to a disk access restriction switching method in a shared disk device.

  Conventionally, in a data control system using a shared disk device, when service servers are made redundant (see, for example, Patent Document 1), the disk in the shared disk device on the active service server side also on the standby service server side The device is accessible by mounting it in advance.

  In the above data control system, in order to prevent destruction of the file management system, the disk device in the shared disk device is unmounted on the standby service server side to make it inaccessible.

  The configuration of the above-described conventional data control system will be described with reference to FIG. In FIG. 1, this data control system is composed of a shared disk device 1 and redundant service servers 3-5.

  The management server 2 monitors the status of each device in the data control system using the device monitoring interface 101, and the active service server (# 1) 3, the active service server (# 2) 4, and the standby service server (# 3). ) Synchronize the file management system with 5.

  The active service server (# 1) 3 and the active service server (# 2) 4 perform services using data stored in the disk device (# 1) 12 and the disk device (# 2) 13 of the shared disk device 1. Process. The standby service server (# 3) 5 takes over the failed service server process when the active service server (# 1) 3 or the active service server (# 2) 4 fails to perform service processing. Continue service processing.

  The fiber channel switch 6 connects the active service server (# 1) 3, the active service server (# 2) 4, the standby service server (# 3) 5, and the shared disk device 1 through the fiber channel interfaces 102 and 103. Switch Fiber Channel data.

  The shared disk device 1 includes a shared disk controller 11, a disk device (# 1) 12, and a disk device (# 2) 13. The shared disk controller 11 includes a disk device (# 1) 12 and a disk device (# 2) 13, a fiber channel switch 6, an active service server (# 1) 3, an active service server (# 2) 4, and a standby service. It is connected to the server (# 3) 5 through the fiber channel interfaces 102, 103, and 104, and is shared when the shared disk device 1 is accessed from the active service server (# 1) 3 and the active service server (# 2) 4. The disk access in the disk device 1 is controlled.

Special table 2003-509773 gazette

  In the conventional data control system described above, when the service server is made redundant, the standby service server side can be made accessible by mounting in advance the disk device in the shared disk device on the active service server side. Due to application software failures or unexpected operation of the failed service server, access conflicts from the redundant active service server and standby service server to the same disk device in the shared disk device occur. The data stored in the disk device in the file management system and the shared disk device can be destroyed.

  Also, in the conventional data control system, if the disk device in the shared disk device is unmounted and inaccessible on the standby service server side to prevent the file management system from being destroyed, the active service server will fail. When this occurs, it is necessary to perform the unmount processing of the active service server and the mount processing of the standby service server when switching to the standby service server. Therefore, it takes time to take over the processing on the standby service server side. ing.

  Furthermore, in the conventional data control system, if it is not possible to unmount due to the failure of the failed service server, it is not possible to switch to the standby service server, or the failed service server is mounted and shared from the standby service server side. By mounting the disk device in the disk device, there is a possibility that data stored in the disk device in the file management system or the shared disk device may be destroyed due to access conflict with the disk device.

  In other words, in the conventional data control system, if the active service server and the standby service server are mounted in advance in order to shorten the switching time and are made accessible from both service servers, application software malfunctions and failure services There is a possibility that access conflict to the same disk in the shared disk device from both the active service server and the standby service server may occur due to server malfunction, etc., and the file management system may be destroyed, so the system reliability cannot be improved. There is a problem.

  Also, in the conventional data control system, when the standby service server is unmounted and the system is operated without the disk devices in the shared disk device being mounted from multiple service servers, when switching from the active system to the standby system In addition, there is a problem in that it is necessary to perform a mount process for the standby system after the unmount process for the active system that has failed, and switching takes time. In this case, depending on the failure contents of the active system, it may not be possible to unmount, and switching may not be possible.

  SUMMARY OF THE INVENTION Therefore, an object of the present invention is to solve the above problems, improve the reliability of the system, and shorten the time for switching to the standby system, the shared disk device, and the disk used for them. It is to provide a method of switching access restrictions.

A data control system according to the present invention is a data control system comprising a shared disk device including a plurality of disk devices, and a plurality of service servers that are redundant and perform services with reference to the disk devices,
The shared disk device comprises control means for controlling access from the plurality of service servers to the plurality of disk devices,
In the initial stage, all the access to the plurality of disk devices from the plurality of service servers is enabled,
The control means controls permission / non-permission of access to the plurality of disk devices according to at least whether the device state of the service server is an active system or a standby system ;
The control means is a service that is the active system based on a memory table that associates and stores the service server and its WWN (World Wide Name) that is the Fiber Channel interface identification number, the state of the service server, and the target disk. Controlling access to the disk device from a server and the service server as the standby system,
When the service server as the active system fails, the control means switches the reference address on the memory table, regulates access to the disk device from the service server as the active system, and is the standby system The service server can access the disk device .

Shared disk device according to the present invention is a shared disk device includes a plurality of disk devices, constituting the data control system together with a plurality of service servers to perform redundant and services by referring to the disk device,
Control means for controlling access from the plurality of service servers to the plurality of disk devices;
In the initial stage, all the access to the plurality of disk devices from the plurality of service servers is enabled,
The control means controls permission / non-permission of access to the plurality of disk devices according to at least whether the service server device status is active or standby ;
The service which is the active system based on a memory table in which the control means associates and stores the service server and its Fiber Channel interface identification number WWN (World Wide Name), the state of the service server and the target disk. Controlling access to the disk device from a server and the service server as the standby system,
When the service server as the active system fails, the control means switches the reference address on the memory table, regulates access to the disk device from the service server as the active system, and is the standby system The service server can access the disk device .

The disk access restriction switching method according to the present invention is a disk access used in a data control system comprising a shared disk device including a plurality of disk devices and a plurality of service servers which are made redundant and perform services with reference to the disk devices. A method of switching regulations,
The shared disk device executes control processing for controlling access from the plurality of service servers to the plurality of disk devices;
In the initial stage, all the access to the plurality of disk devices from the plurality of service servers is enabled,
In the control process, controlling permission / non-permission of access to the plurality of disk devices according to at least whether the device status of the service server is an active system or a standby system ,
In the control process, the service which is the active system based on the service server and a WWN (World Wide Name) which is the Fiber Channel interface identification number, a memory table which stores the state of the service server and the target disk in association with each other. Controlling access to the disk device from a server and the service server as the standby system,
In the control process, when the service server that is the active system fails, the reference address on the memory table is switched, access from the service server that is the active system to the disk device is restricted, and the standby system The service server can access the disk device .

  That is, in the data control system of the present invention, in a system composed of redundant service servers and external shared disk devices, when a failure occurs in the first active service server, the standby service server becomes the first active service server. By taking over the shared disk data used by the system service server at high speed, the service recovery time is shortened, the service can be continued, and the influence of the failed device on the system is completely eliminated. It is characterized by improving the reliability of the system.

  More specifically, in the data control system of the present invention, the access control circuit in the shared disk controller includes the first to third service servers, the WWN (World Wide Name) that is the Fiber Channel interface identification number, and the server. In this state, the access to the disk device is controlled from the first and second service servers as the active system and the third service server as the standby system based on the memory table relating the target disk.

  The access control circuit identifies the first service server as the active system by “WWN = AAAA” sent from the first service server as the active system, and refers to the first memory server by referring to the memory table. Since the status of the service server is determined to be active, access to the first disk device to be accessed in the memory table is permitted.

  Similarly, the access control circuit identifies the second service server as the active system from “WWN = BBBB” sent from the second service server as the active system, and refers to the memory table. Since it is determined that the state of the second service server is the active system, access to the second disk device to be accessed in the memory table is permitted.

  The access control circuit identifies the third service server as the standby system from “WWN = CCCC” sent from the third service server as the standby system, and refers to the memory table to Since the service server state is determined to be the standby system, access to the first and second disk devices to be accessed on the memory table is not permitted.

  When the first service server that is the active system fails, the access control circuit changes the state of the first service server that is the active system in the memory table to the standby system, and at the same time, the third service server that is the standby system. Is changed to the active system, access from the first service server that is the active system to the first disk device is disabled, and access from the third service server that is the standby system to the first disk device In the permitted state, the database in the shared disk that has been processed by the first service server that is the former active system can be transferred to the third service server that is the standby system at high speed.

  In addition, the first and third service servers on the shared disk device side are mounted on the same disk device in advance by the first service server that is the active system and the third service server that is the standby system in the accessible state. Since it is possible to prevent access contention from the side to the first disk device, system reliability is improved when switching from the first service server that is the active system to the third service server that is the standby system In addition, the switching speed can be increased by omitting the unmounting and mounting processes while improving the reliability at the time of switching.

  As described above, in the data control system of the present invention, in the system configured with the shared disk device and the redundant service server, the active service server side and the standby service server side are the same in the shared disk device. Even when the disk unit is mounted, the access control circuit in the shared disk unit can eliminate the possibility of access conflicts from both service servers due to malfunction when the active service server or standby service server fails. It becomes possible to improve the reliability of the system when a failure occurs.

  In the data control system of the present invention, the active service server cannot be unmounted due to a failure of the active service server, and both the active service server and the standby service server are mounted. Since access control is possible on the shared disk device side, the possibility of access contention can be eliminated in the same manner as described above.

  Furthermore, in the data control system of the present invention, it becomes possible to mount the same disk device in the shared disk device from the active service server and the standby service server while ensuring the reliability of the above system, and the active system When a service server fails, processing can be taken over by the standby service server only by changing the reference destination in the memory table in the shared disk device. It becomes possible to shorten than before.

  By adopting the configuration and operation as described above, the present invention can improve the reliability of the system and can shorten the switching time to the standby system.

  Next, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing a configuration of a data control system according to an embodiment of the present invention. FIG. 1 shows a configuration of a redundant service server in a system using a shared disk device according to an embodiment of the present invention.

  A data control system according to an embodiment of the present invention includes a shared disk device 1, a management server 2, redundant service servers (# 1 to # 3) 3 to 5, and a fiber channel switch 6. Yes. The shared disk device 1 includes a shared disk controller 11 and disk devices (# 1, # 2) 12, 13.

  The management server 2 monitors the status of all the devices in the data control system, and the active service server (# 1) 3 and service server (# 2) 4 and the standby service server (# 3). The file management system is synchronized with the system 5.

  The active service server (# 1) 3 performs service processing using a database stored in the disk device (# 1) 12. The active service server (# 2) 4 performs service processing using a database stored in the disk device (# 2) 13. The service server (# 3) 5 serving as the standby system is configured such that when the service server (# 1) 3 serving as the active system or the service server (# 2) 4 serving as the active system fails, the disk server (# 1) 12 or The disk device (# 2) 13 is used to take over service processing.

  The fiber channel switch 6 connects the service servers (# 1, # 2) 3 and 4 which are active systems, the service server (# 3) 5 which is a standby system, and the shared disk device 1 through fiber channel interfaces 102 and 103, Each service server (# 1 to # 3) 3 to 5 can access the disk device (# 1) 12. The disk device (# 1) 12 includes a shared disk controller 11, a disk device (# 1) 12, and a disk device (# 2) 13, and provides an external disk function.

  FIG. 2 is a block diagram showing the configuration of the shared disk controller 11 of FIG. 2, the shared disk controller 11 includes a disk control circuit 111 and an access control circuit 112, and includes a memory table [see FIGS. 2A and 2B] referred to by the access control circuit 112. Access to the disk devices (# 1, # 2) 12, 13 from the service servers (# 1- # 3) 3-5 is controlled.

  Here, FIG. 2A shows the memory table before the failure, and FIG. 2B shows the memory table after the failure. In these memory tables, the service server (# 1 to # 3) and its Fiber Channel interface identification number WWN (World Wide Name), server status, and information on each target disk are stored in association with each other. .

  The disk control circuit 111 controls access to the disk device (# 1) 12 and the disk device (# 2) 13 based on an instruction from the access control circuit 112. Based on the information in the memory table, the access control circuit 112 sends a disk from the service server (# 1) 3 that is the active system, the service server (# 2) 4 that is the active system, and the service server (# 3) 5 that is the standby system. The disk control circuit 111 is instructed to control access to the device (# 1) 12 and the disk device (# 2) 13.

  The operation of the data control system according to the embodiment of the present invention will be described with reference to FIGS.

  The management server 2 monitors the status of each device in the data control system using the device monitoring interface 101, and the active service servers (# 1, # 2) 3 and 4 and the standby service server (# 3). 5 is synchronized with the file management system.

  The active service servers (# 1, # 2) 3 and 4 perform service processing using data stored in the disk devices (# 1, # 2) 12 and 13 of the shared disk device 1. When the service server (# 3) 5 which is the active system fails or the service server (# 2) 4 which is the active system fails, the service server (# 3) 5 which is the standby system cannot perform service processing. Then, take over the processing of the failed service server and continue the service processing.

  The fiber channel switch 6 connects the service servers (# 1, # 2) 3 and 4 which are active systems, the service server (# 3) 5 which is a standby system, and the shared disk device 1 through fiber channel interfaces 102 and 103, and fiber Switch channel data.

  The shared disk controller 11 includes disk devices (# 1, # 2) 12, 13, a fiber channel switch 6, service servers (# 1, # 2) 3, 4 as active systems, and service server (# 3) as a standby system 5 and fiber channel interfaces 102 to 104, and when the shared disk device 1 is accessed from the service servers (# 1, # 2) 3 and 4 which are active systems, the disk access in the shared disk device 1 is controlled. To do.

  The disk control circuit 111 receives an instruction from the access control circuit 112 when the service server (# 1, # 2) 3, 4 serving as the active system accesses the shared disk device 1, and receives the instruction from the access control circuit 112. 1, # 2) Access control of 12 and 13 is performed. The access control circuit 112 follows the information in the memory table such as the WWN, status, and disk device that are the Fiber Channel interface identification numbers of the service servers (# 1, # 2) 3, 4 that are the active systems registered in advance. Access to the disk devices (# 1, # 2) 12, 13 from the service servers (# 1- # 3) 3-5 is controlled.

  When the access control circuit 112 refers to the address on the memory table in which the access from the service server (# 1) 3 which is the active system to the disk device (# 1) 12 is the active system, the service server (# which is the active system) 1) The disk device (# 1) 12 can be accessed from 3. However, since access to the disk device (# 2) 13 is restricted by the access control circuit 112, the service server (# 1) 3 which is the active system can access the disk device (# 2) 13. Can not.

  When the access control circuit 112 refers to the address on the memory table where the access from the service server (# 2) 4 that is the active system to the disk device (# 2) 13 is the active system, the service server (# that is the active system) 2) Access to the disk device (# 2) 13 from 4 can be performed. However, since access to the disk device (# 1) 12 is restricted by the access control circuit 112, the service server (# 2) 4 which is the active system can access the disk device (# 1) 12. Can not.

  When the access control circuit 112 refers to an address on a memory table in which the access from the service server (# 3) 5 which is a standby system to the disk devices (# 1, # 2) 12 and 13 is a standby system, The service server (# 3) 5 can recognize the devices of the disk devices (# 1, # 2) 12 and 13, but access to them is restricted by the access control circuit 112 and is a standby service server. (# 3) 5 cannot access the disk devices (# 1, # 2) 12, 13.

  When the service server (# 1) 3 that is the active system fails, the access control circuit 112 switches the reference address on the memory table, and the service server (# 1) 3 that is the active system switches to the disk device (# 1) 12. Access to the disk device (# 1) 12 from the standby service server (# 3) 5 is made possible.

  In this case, the reference addresses on the memory table referred to by the access control circuit 112 are “1”, “3”, “6”, “8” before the failure [see FIG. 2A], but after the failure. It is switched to “2”, “3”, “5”, “8” [see FIG. 2B].

  Thus, in this embodiment, the access control circuit 112 on the shared disk device 1 side restricts access from the service servers (# 1 to # 3) 3 to 5 to the disk devices (# 1 and # 2) 12 and 13. Therefore, the disk servers (# 1, # 2) 12, which are used in the service servers (# 1, # 2) 3, 4 in the active system even in the service server (# 3) 5, which is the standby system, 13 is mounted in advance, and the service servers (# 1 to # 3) can be accessed even when the disk servers (# 1, # 2) 12 and 13 are accessible from the service server (# 3) 5 which is a standby system. ) Since the exclusive control to the disk devices (# 1, # 2) 12, 13 can be realized within the shared disk device 1 regardless of the operations on the 3-5 side, the service servers (# 1- # 3) 3-5 competitive access It is possible to prevent the destruction of the file management system according to, it is possible to improve the reliability of the system.

  Further, in this embodiment, there is no need to perform unmounting and mounting control when switching from the service servers (# 1, # 2) 3 and 4 as the active system to the service server (# 3) 5 as the standby system occurs. Since the access path can be switched simply by changing the reference destination of the memory table of the access control circuit 112 in the shared disk device 1, the time required for switching when a failure occurs can be shortened. Service interruption time can be shortened.

  Next, the access state from the service servers (# 1, # 2) 3, 4 as the active system in FIGS. 1 and 2 to the disk devices (# 1, # 2) 12, 13 is the service server as the active system. (# 1) When the failure of 3 occurs, the service server (# 2) 4 as the active system and the service server (# 3) 5 as the standby system can access the disk devices (# 1, # 2) 12 and 13 The switching operation will be described.

  The access control circuit 112 is registered in advance with reference to addresses “1”, “3”, “6”, and “8” of the memory table as an initial state. The service server (# 1) 3 which is the active system has the disk device (# 1) 12 mounted, and the service server (# 1) 3 which is the active system is in an accessible state. The service server (# 2) 4 which is the active system has the disk device (# 2) 13 mounted, and the service server (# 2) 4 which is the active system is made accessible. The service server (# 3) 5 as the standby system has the disk device (# 1) 12 and the disk device (# 2) 13 mounted thereon, and the service server (# 3) 5 as the standby system is in an accessible state. To do.

  File management of the service server (# 1) 3 which is the active system, the service server (# 3) 5 which is the standby system, and the service server (# 2) 4 which is the active system and the service server (# 3) 5 which is the standby system The system is synchronized by the management server 2.

  When “WWN = AAAAA” is sent to the access control circuit 112 during access from the active service server (# 1) 3, the access control circuit 112 refers to the memory table, and “WWN = AAAA” is the active system. The service server (# 1) 3 is identified. At the same time, the access control circuit 112 recognizes that the status is the active system and the disk device to be accessed is the disk device (# 1) 12, and receives the disk device (# 1) from the service server (# 1) 3 that is the active system. ) The disk control circuit 111 is instructed to permit access to 12, and the disk control circuit 111 enables access.

  When “WWN = BBBB” is sent from the service server (# 2) 4 which is the active system to the access control circuit 112, the access control circuit 112 refers to the memory table, and “WWN = BBBB” is the service which is the active system. The server (# 2) 4 is identified. At the same time, the access control circuit 112 recognizes that the status is the active system and the access target disk device is the disk device (# 2) 13, and from the service server (# 2) 4 that is the active system to the disk device (# 2). 13 is instructed to the disk control circuit 111 to allow access to the disk control circuit 111.

  When “WWN = CCCC” is sent from the service server (# 3) 5 which is a standby system to the access control circuit 112, the access control circuit 112 refers to the memory table, and “WWN = CCCC” is a service which is the standby system. The server (# 3) 5 is identified. At the same time, the access control circuit 112 determines that the status is standby and the disk device to be accessed is the disk device (# 1) 12 and the disk device (# 2) 13. Recognizing and instructing the disk control circuit 111 that the access to the disk device (# 1) 12 and the disk device (# 2) 13 from the service server (# 3) 5 as the standby system is impossible, and the disk control circuit 111 accesses Is prohibited.

  When the active service server (# 1) 3 fails, the management server 2 detects the failure, and the device monitoring interface 101 is used to connect the active service server (# 1) 3 to the shared disk controller 11. Notify that a failure has occurred. After this notification is received by the access control circuit 112 of the shared disk controller 11, the access control circuit 112 switches the address to be referenced in the memory table from “1” to “2”, and the disk control circuit 111 is switched to the active service server. (# 1) 3 is instructed to disable access to the disk device (# 1) 12. The disk control circuit 111 disables access to the disk device (# 1) 12 from the service server (# 1) 3 which is the active system.

  At the same time, the access control circuit 112 switches the address to be referenced in the memory table from “6” to “5”, and the disk control circuit 111 is switched from the service server (# 3) 5 which is a standby system to the disk device (# 1) 12. Instruct to allow access to. The disk control circuit 111 enables access to the disk device (# 1) 12 from the service server (# 3) 5 as a standby system.

  When the service server (# 3) 5 as the standby system becomes accessible to the disk device (# 1) 12, the access control circuit 112 notifies the management server 2 of the accessible state. Upon receiving the notification, the management server 2 notifies the service server (# 3) 5 which is a standby system that the state has changed to the operation state, and continues the service processing using the disk device (# 1) 12.

  As described above, in the present embodiment, in the data control system including the shared disk device 1 and the redundant service servers (# 1 to # 3) 3 to 5, the service servers (# 1 and # 1) which are active systems are used. 2) Even when the same disk device in the shared disk device 1 is mounted on the side of the service server (# 3) 5 as the standby system on the side of 3 and 4, the active control is performed by the access control circuit 112 in the shared disk device 1. To eliminate the possibility of conflicting access from both service servers due to malfunctions at the time of failure of the service servers (# 1, # 2) 3 and 4 as the system or the service server (# 3) 5 as the standby system It is possible to improve the reliability of the system when a failure occurs.

  Due to the failure of the service server (# 1) 3 which is the active system, the service server (# 1, # 2) 3, 4 which is the active system cannot be unmounted from the service server (# 1) 3 which is the active system. Even when the service server (# 3) 5 which is the standby system is both mounted, access control can be performed on the shared disk device 1 side, so the possibility of access contention is similarly eliminated. be able to.

  Further, in this embodiment, the service server (# 1, # 2) 3, 4 which is the active system and the service server (# 3) 5, which is the standby system, share the reliability while ensuring the above effect. The same disk device in the disk device 1 can be mounted, and when the service server (# 1) 3 which is the active system becomes a failure, the process takeover by the service server (# 3) 5 which is the standby system is taken over Since it can be performed only by changing the reference destination of the memory table in the shared disk device 1, the switching time when a failure occurs in the active service servers (# 1, # 2) can be shortened compared to the conventional case. it can.

It is a block diagram which shows the structure of the data control system by one Example of this invention. FIG. 2 is a block diagram showing a configuration of a shared disk controller in FIG. 1.

Explanation of symbols

1 Shared disk device
2 management server
3-5 service servers (# 1 to # 3)
6 Fiber Channel switch
11 Shared disk controller 12, 13 Disk device (# 1, # 2)
101 Device monitoring interface 102-104 Fiber channel interface
111 Disk control circuit
112 Access control circuit

Claims (9)

A data control system comprising a shared disk device including a plurality of disk devices and a plurality of service servers that are redundant and perform services with reference to the disk devices,
The shared disk device has control means for controlling access from the plurality of service servers to the plurality of disk devices,
In the initial stage, all the access to the plurality of disk devices from the plurality of service servers is enabled,
The control means controls permission / non-permission of access to the plurality of disk devices according to at least whether the device state of the service server is an active system or a standby system;
The control means is a service that is the active system based on a memory table that associates and stores the service server and its WWN (World Wide Name) that is the Fiber Channel interface identification number, the state of the service server, and the target disk. Controlling access to the disk device from a server and the service server as the standby system,
When the service server as the active system fails, the control means switches the reference address on the memory table, regulates access to the disk device from the service server as the active system, and is the standby system A data control system that enables access to the disk device from a service server . In the initial stage, the control means makes it possible to access any one of the plurality of disk devices to the service server whose device status is the active system, and to the service server whose device status is the standby system. On the other hand, all of the plurality of disk devices are made accessible, and when the service is provided by the service server, all of the plurality of disk devices are made inaccessible to a service server whose device state is a standby system. The data control system according to claim 1. When the service is provided by the service server, if a failure occurs in the service server whose device status is the active system, the control means determines whether the failure occurs for the service server whose device status is the standby system. 3. The data control system according to claim 2, wherein the disk device used in the past can be accessed. A shared disk device that includes a plurality of disk devices, configures a data control system together with a plurality of service servers that are made redundant and perform services with reference to the disk devices ,
Control means for controlling access from the plurality of service servers to the plurality of disk devices;
In the initial stage, all the access to the plurality of disk devices from the plurality of service servers is enabled,
The control means controls permission / non-permission of access to the plurality of disk devices according to at least whether the service server device status is active or standby;
The service which is the active system based on a memory table in which the control means associates and stores the service server and its Fiber Channel interface identification number WWN (World Wide Name), the state of the service server and the target disk. Controlling access to the disk device from a server and the service server as the standby system,
When the service server as the active system fails, the control means switches the reference address on the memory table, regulates access to the disk device from the service server as the active system, and is the standby system A shared disk device, wherein a service server can access the disk device. In the initial stage, the control means makes it possible to access any one of the plurality of disk devices to the service server whose device status is the active system, and to the service server whose device status is the standby system. On the other hand, all of the plurality of disk devices are made accessible, and when the service is provided by the service server, all of the plurality of disk devices are made inaccessible to a service server whose device state is a standby system. The shared disk device according to claim 4. When a failure occurs in the service server whose device state is the active system when the control means provides the service by the service server, the control unit determines that the service server in which the failure has occurred with respect to the service server whose device state is the standby system 6. The shared disk device according to claim 5, wherein the disk device that has been used can be accessed. A disk access restriction switching method used for a data control system including a shared disk device including a plurality of disk devices and a plurality of service servers that are redundant and perform services with reference to the disk devices,
The shared disk device executes control processing for controlling access from the plurality of service servers to the plurality of disk devices;
In the initial stage, all the access to the plurality of disk devices from the plurality of service servers is enabled,
In the control process, controlling permission / non-permission of access to the plurality of disk devices according to at least whether the device status of the service server is an active system or a standby system,
In the control process, the service which is the active system based on the service server and the WWN (World Wide Name) which is the Fiber Channel interface identification number, and the memory table which stores the state of the service server and the target disk in association with each other. Controlling access to the disk device from a server and the service server as the standby system,
In the control process, when the service server that is the active system fails, the reference address on the memory table is switched, access from the service server that is the active system to the disk device is restricted, and the standby system A disk access restriction switching method, characterized in that a service server can access the disk device. In the control process, at the initial stage, any one of the plurality of disk devices can be accessed to a service server whose device status is the active system, and the service server whose device status is the standby system. On the other hand, all of the plurality of disk devices are made accessible, and when the service is provided by the service server, all of the plurality of disk devices are made inaccessible to a service server whose device state is a standby system. The method for switching disk access regulation according to claim 7. In the control process, when a failure occurs in the service server whose device status is the active system when the service server provides a service, the service server in which the failure occurs with respect to the service server whose device status is the standby system 9. The disk access restriction switching method according to claim 8, wherein the disk device that has been used can be accessed.

Images