JP5581594B2 - Dual processing apparatus, dual processing system, method and program - Google Patents

Description

  The present invention relates to a processing system for processing a command from a host by a processing device having a dual processing unit, a processing device incorporated in the system, and a test method thereof.

In a processing system that requires high reliability, a processing device that processes a command from a host is equipped with a pair of processing units that are duplicated. The operation can be continued.
Here, as an operation method of the redundant processing unit, for example, there is the following method.

In the first method, during normal operation, only one processing unit is set in an operating state, and the other processing unit is set in a standby state. When a failure occurs in one processing unit, the operation is continued by the other processing unit. (For example, refer to Patent Document 1).
The second method is a method in which a set of processing units is operated in a normal state in a normal state, and when a failure occurs in one processing unit, the operation is continued only in the other processing unit (for example, Patent Documents). 2).

Then, the processing apparatus having a duplex structure as described above usually includes means for detecting the occurrence of a failure during operation in order to switch the operation state in response to the occurrence of the failure (for example, Patent Document 1, 2).
For example, in the duplexer disclosed in Patent Document 1, when a loopback diagnosis is performed and a counter that counts loopback time is up, it is determined that the communication control unit has failed, and the signal for duplex control is inverted. Like to do.
Further, in the duplexer shown in Patent Document 2, a set of processing units are operated synchronously with high accuracy, and when the processing times of the set of processing units do not match, it is determined that a failure has occurred. Yes.

Japanese Patent Application Laid-Open No. 06-019810 Japanese Patent Laid-Open No. 06-187185

By the way, in a processing apparatus having a dual structure as described above, when one processing unit fails, the failed processing unit is disconnected from the system operation, and is incorporated into the system operation again after the failure repair.
Generally, after the initial diagnosis of the processing unit itself, if a maintenance person determines that there is no problem with the communication path, it is incorporated into the operation of the system.
However, since the initial diagnosis by the test program is usually executed by the processing unit alone, even if the diagnosis result is normal, the problem may surface after incorporation into the system operation, and adversely affect the system operation. there were.

  The present invention has been considered in view of the above circumstances, and when incorporating a processing unit after restoration processing such as failure repair into the operation of the system, compared to a case where a newly incorporated processing unit alone performs initial diagnosis. It is an object of the present invention to provide a duplex processing apparatus, a duplex processing system, a method, and a program that can accurately determine whether or not it can be incorporated and prevent the incomplete processing unit from being incorporated.

  In order to achieve the above object, a duplex processing apparatus of the present invention is a processing apparatus that has a pair of duplexed processing units and continues operation by the other processing unit when there is a failure in one processing unit. Each processing unit includes a link establishment determination unit that determines link establishment with a processing unit that is newly incorporated by being detached from the processing device, and a built-in unit that tests whether or not the processing unit to be newly installed can be incorporated. And a pre-test means.

  In order to achieve the above object, the duplex processing system of the present invention is a duplex processing system that includes a pair of dual processing units and continues operation by the other processing unit when there is a failure in one processing unit. Each processing unit tests whether or not it can be incorporated into a link establishment judging means for judging link establishment with a newly incorporated processing unit separated from the processing system and a newly incorporated processing unit. And a pre-embedding test means.

  In addition, in order to achieve the above object, the duplexing processing method of the present invention is a duplexing processing method in which operation is continued by the other processing unit when there is a failure in one processing unit due to the paired processing units. In each processing unit, a step of determining link establishment with a processing unit newly detached and incorporated from the processing system, a step of testing whether or not the processing unit to be newly incorporated can be incorporated, and As a method having

  Furthermore, in order to achieve the above object, the duplexing processing program of the present invention includes a duplexing processing apparatus that includes a pair of duplexed processing units, and continues operation by the other processing unit when there is a failure in one processing unit. In each processing unit, a link establishment determination means for determining link establishment with a processing unit that is separated from the processing system and newly incorporated in each processing unit, and whether or not the processing unit to be newly incorporated can be incorporated. It is a program that functions as a pre-embedding test means for testing.

  According to the present invention, it is possible to accurately determine whether or not the processing unit after failure repair is independently diagnosed and to prevent the incomplete processing unit from being installed.

1 is a block diagram of a duplex processing system according to an embodiment of the present invention. It is a block diagram of the duplex processing apparatus which concerns on one Embodiment of this invention. It is a flowchart which shows the procedure of the pre-installation test in the duplex processing apparatus which concerns on one Embodiment of this invention. It is a functional block diagram of the exclusive control process part (process part) of the duplexer which concerns on one Embodiment of this invention. It is a table | surface figure which shows the memory content of the state memory | storage part of the duplexer which concerns on one Embodiment of this invention. It is a table | surface figure which shows the communication processed by the pair communication control part of the duplexer which concerns on one Embodiment of this invention. It is a table | surface figure which shows the process of the pair communication control part of the duplexer which concerns on one Embodiment of this invention. It is explanatory drawing which shows the preparatory operation for the test before a built-in in the duplication apparatus which concerns on one Embodiment of this invention. It is explanatory drawing which shows the preparatory operation for the test before a built-in in the duplication apparatus which concerns on one Embodiment of this invention. It is explanatory drawing which shows operation | movement of the pre-integration test in the duplication apparatus which concerns on one Embodiment of this invention. It is explanatory drawing which shows operation | movement of the pre-integration test in the duplication apparatus which concerns on one Embodiment of this invention. It is explanatory drawing which shows operation | movement of the pre-integration test in the duplication apparatus which concerns on one Embodiment of this invention. It is explanatory drawing which shows operation | movement of the pre-integration test in the duplication apparatus which concerns on one Embodiment of this invention. It is explanatory drawing which shows operation | movement of the pre-integration test in the duplication apparatus which concerns on one Embodiment of this invention. It is explanatory drawing which shows operation | movement of the pre-integration test in the duplication apparatus which concerns on one Embodiment of this invention. It is explanatory drawing which shows operation | movement of the pre-integration test in the duplication apparatus which concerns on one Embodiment of this invention. It is explanatory drawing which shows operation | movement of the pre-integration test in the duplication apparatus which concerns on one Embodiment of this invention. It is explanatory drawing which shows operation | movement of the pre-integration test in the duplication apparatus which concerns on one Embodiment of this invention. It is explanatory drawing which shows operation | movement of the pre-integration test in the duplication apparatus which concerns on one Embodiment of this invention. It is explanatory drawing which shows operation | movement of the pre-integration test in the duplication apparatus which concerns on one Embodiment of this invention. It is explanatory drawing which shows operation | movement when the duplexed apparatus which concerns on one Embodiment of this invention receives the command which self-shares in the state which both duplexed process parts are normal. It is explanatory drawing which shows operation | movement when the duplexed apparatus which concerns on one Embodiment of this invention receives the command which self-shares in the state which both duplexed process parts are normal. FIG. 11 is an explanatory diagram illustrating an operation when a command shared by a pair is received in a duplex state according to an embodiment of the present invention when both duplexed processing units are in a normal state. FIG. 11 is an explanatory diagram illustrating an operation when a command shared by a pair is received in a duplex state according to an embodiment of the present invention when both duplexed processing units are in a normal state. FIG. 11 is an explanatory diagram illustrating an operation when a command shared by a pair is received in a state where one of the duplexed processing units (a pair) is degenerated in the duplex device according to the embodiment of the present invention.

Hereinafter, embodiments of a duplexing processing apparatus, a duplexing processing system, a duplexing processing method, and a duplexing processing program according to the present invention will be described with reference to the drawings.
Here, the duplex processing apparatus and duplex processing system of the present invention described below are realized by processes, means, and functions executed by a computer in accordance with instructions of a program (software). The program sends a command to each component of the computer, and performs predetermined processing and functions as shown below, for example, link establishment determination for a newly incorporated processing unit, pre-installation test means for a newly incorporated processing unit, Reject the installation request of the processing unit whose result of the previous test cannot be installed.
Thus, each process and means in the present invention are realized by specific means in which the program and the computer cooperate.
Note that all or part of the program is provided by, for example, a magnetic disk, optical disk, semiconductor memory, or any other computer-readable recording medium, and the program read from the recording medium is installed in the computer and executed. The The program can also be loaded and executed directly on a computer through a communication line without using a recording medium.

[Overview of redundant processing equipment and redundant processing system]
FIG. 1 is a block diagram of a duplex processing system according to an embodiment of the present invention, and FIG. 2 is a block diagram of a duplex processing device.
As shown in FIG. 1, the processing system according to the present embodiment is connected to a plurality of host devices 1 to N (hereinafter simply referred to as “hosts”) and a plurality of hosts, and processes commands from the hosts. And a processing device 1 (1 to N) for returning a result.
The hosts 1 to N are host computers that can access the processing apparatuses 1 to N.

As shown in FIG. 2, the processing apparatus 1 includes a pair of processing units 2 and 3 that are duplicated, and the pair (one set) of processing units 2 and 3 are connected via a one-to-one pair communication path. Connected.
As described above, the processing device 1 includes the pair of processing units 2 and 3, so that even when a failure such as a failure occurs in one processing unit 2 or 3, the other processing unit 2 or 3 causes the device / System operation can be continued.

Specifically, the processing units 2 and 3 of the processing device 1 have the same configuration, and as shown in FIGS. 2A and 2B, link establishment determination processing units 2a and 3a, Pre-installation test means 2b, 3b and incorporation rejection means 2c, 3c are provided.
The link establishment determination means 2a and 3a determine link establishment with a newly incorporated processing unit when any of the processing units that have been disconnected from the processing apparatus 1 due to a failure such as a failure is newly incorporated.
The pre-embedding test means 2b and 3b test whether or not the processing unit to be newly incorporated is to be incorporated.

With such a configuration, for example, when the processing unit 3 after failure repair is incorporated into a system in which the processing unit 2 is in an operation state, the processing of the operation state is performed prior to incorporating the processing unit 3 after failure repair into the operation of the system. After establishing a link between the unit 2 and the processing unit 3 after failure repair, it is possible to test whether or not the processing unit 3 after failure repair can be incorporated.
As a result, it is possible to accurately determine whether or not the processing unit 3 after failure repair is alone diagnosed, and to prevent the incomplete processing unit from being installed.

Further, each of the processing units 2 and 3 of the processing apparatus 1 can include incorporation rejection means 2c and 3c as shown in FIG.
The incorporation rejection means 2c, 3c is a request for incorporating a processing unit in which the test result cannot be incorporated when the test result by the pre-installation test means of the processing unit 2 or 3 to be newly incorporated cannot be incorporated. Even if there is, it rejects the incorporation request.
Specifically, in the process of rejecting the installation request, when maintenance personnel instruct the installation from the console or the like, the installation availability information of a state storage unit (not shown) (see FIG. 4 to be described later) is checked. ", A message indicating that installation cannot be performed is displayed, and the maintenance staff is notified and notified that installation cannot be performed.
On the other hand, if the result of the check is “OK”, a predetermined incorporation process is performed (see FIGS. 21 to 24 described later).

Thereby, for example, when the result of the test by the pre-installation test means 2b, 3b cannot be incorporated, even if there is a predetermined incorporation request by the operation of the maintenance staff etc., the incorporation rejection means 2c, 3c The incorporation of the processing units 2 and 3 that cannot be incorporated is rejected.
As a result, even if a maintenance person who does not recognize the result of the pre-installation test attempts to install an incomplete processing unit, this can be effectively prevented.

Here, the pre-embedding test means 2b and 3b process the same command in each of the processing units 2 and 3, and based on the comparison of the processing result and processing time, It can be determined whether or not it is possible.
More specifically, when the same command is processed by each of the processing units 2 and 3, and the processing time exceeds a predetermined time, an incorporation request relating to a newly incorporated processing unit can be rejected.
In this way, the test can be performed with an operation close to the actual processing, so that it is not necessary to separately incorporate test logic or the like in each of the processing units 2 and 3, and it is possible to perform a pre-embedding test easily and at low cost. Become.

Further, the pre-installation test means 2b and 3b can perform the pre-installation test during system operation.
In this way, since the pre-installation test can be performed without stopping the system operation, it is possible to avoid a decrease in processing efficiency due to the system stop.

Further, the processing units 2 and 3 as described above are configured as exclusive control processing units 2 and 3 that exclusively process other commands at normal times, and when one of the exclusive control processing units 2 and 3 breaks down. The other exclusive control processing units 2 and 3 can process all commands (see FIG. 4 described later).
In this way, the exclusive control processing units 2 and 3 that exclusively process other commands inherently process the same command, and based on the comparison of the processing result and processing time, the exclusive control processing after failure repair It becomes possible to determine whether or not the units 2 and 3 can be incorporated.

In this case, the pre-embedding test means 2b, 3b receives a command from the hosts 1 to N when each processing unit 2, 3 assigned to the exclusive control processing unit 2 or 3, which is originally the test target, is to be in charge. Pre-installation tests can be performed.
In this way, it is possible to accurately determine whether or not the exclusive control processing units 2 and 3 to be tested can be incorporated based on the processing result and processing time of the command to be handled by each processing unit 2 and 3.

Next, an outline of the pre-installation test of the processing apparatus 1 according to this embodiment configured as described above will be described with reference to FIG.
FIG. 3 is a flowchart showing the processing operation in the pre-installation test of the processing apparatus 1 according to this embodiment.
In the following description, in order to facilitate understanding, the processing unit 2 that is operating the processing unit 2 and the processing unit 3 are once disconnected from the processing apparatus 1 due to a failure or the like and newly installed (after the failure repair) ) A processing unit.

As shown in FIG. 3, first, the processing unit 2 in operation determines link establishment with the processing unit 3 after failure repair (S1 in FIG. 3).
When this determination result is YES, the processing unit 2 in operation executes a predetermined pre-installation test.
Specifically, the processing unit 2 determines whether or not the command that should be handled by the processing unit 3 after failure repair is received from the host (S2 in FIG. 3), and the determination result is YES The processing unit 2 in operation transfers the command received from the host to the processing unit 3 after failure repair (S3 and S4 in FIG. 3), and processes the command itself (S5 in FIG. 3). Is notified (reported) to the host (S6 in FIG. 3).
Further, the processing unit 2 in operation sets a timer to start measuring a predetermined time when reporting to the host (S7 in FIG. 3), and transfers the processing result to the processing unit 3 after failure repair ( (S9, S10 in FIG. 3).

When the processing unit 3 newly incorporated after failure repair receives a command from the operating processing unit 2 (S4 in FIG. 3), the processing unit 3 processes the command (S8 in FIG. 3), and the result is processed in operation. Compared with the processing result of the unit 2 (S11 in FIG. 3).
When the processing results match (S12 in FIG. 3), the processing unit 3 transmits a timer stop request to the operating processing unit 2 (S13 in FIG. 3).
When the processing unit 2 in operation receives a timer stop request from the processing unit 3 after failure repair (S14 in FIG. 3), the processing unit 2 stops the timer and ends the time measurement (S15 in FIG. 3).

Then, the processing unit 2 in operation determines whether or not the timer has timed out (exceeded a predetermined time) (S16 in FIG. 3), and when the timer has timed out (exceeded the predetermined time), the processing unit 3 As a result of the determination, information “impossible of incorporation” is stored and set in a state storage unit (not shown) (see FIG. 4 described later) (S17 in FIG. 3).
If the time-out has not occurred (the predetermined time has not been exceeded), it is determined that the newly incorporated processing unit 3 is operating normally, and information on “installable” is stored in the state storage unit. Setting is made (S18 in FIG. 3).
Thereby, the pre-installation test for the processing unit 3 is completed.

Thereafter, the operating processing unit 2 determines whether there is an installation request by an operation of, for example, a maintenance staff (S19 in FIG. 3), and if there is a predetermined installation request (YES), the state storage unit With reference to the test result (S20 in FIG. 3), if the test result can be incorporated, a process for permitting a predetermined incorporation process is performed (S21, S22 in FIG. 3).
On the other hand, when the test result cannot be incorporated, the processing unit 2 performs processing for rejecting the incorporation of the processing unit 3.
In the above processing operation, step S1 shown in the flowchart of FIG. 3 is link establishment determination means 2a, 3a, steps S2 to S18 are pre-installation test means 2b, 3b, and steps S19, S20 are incorporation rejection means 2c, 3c. It becomes.

[Details of redundant processing equipment and redundant processing system]
Next, more specific embodiments of the duplexing processing apparatus and the duplexing processing system according to the above embodiment will be described with reference to FIGS.
FIG. 4 is a functional block diagram showing a specific configuration of the exclusive control processing units (processing units 2 and 3) according to the present embodiment, FIG. 5 is a table showing the storage contents of the state storage unit, and FIG. FIG. 7 is a table showing the processing of the pair communication control unit. FIG. 7 is a table showing the processing of the pair communication control unit.

As shown in FIG. 4, in the present embodiment, the processing units 2 and 3 described above constitute an exclusive control processing unit. That is, each of the exclusive control processing units 2 and 3 constitutes an exclusive control processing device that exclusively processes different commands, and has the same configuration.
Specifically, each of the exclusive control processing units 2 and 3 includes a host transmission / reception processing unit 10, a pre-embedding test control unit 20, a command distribution unit 30, an exclusive control unit 40, a pair communication control unit 50, and a pair communication transmission / reception processing unit 60. , Timer 70, configuration control unit 80, exclusive control table self 100, exclusive control table pair 101, status storage unit 200, device number 300, and result storage area 400.

In the normal operation state, the exclusive control processing units 2 and 3 are determined from the information stored in the device number 300 and the content of the command, and the exclusive control processing units 2 and 3 are determined. Process.
When one exclusive control processing unit 2 or 3 is degenerated, the other exclusive control processing unit 3 or 2 in the operating state processes all commands.
As a result, in response to a command processing request from the host, even if one of the processing units fails by the pair of duplicate exclusive control processing units 2 and 3, the operation / processing operation can be continued by the other processing unit. become.

The device number 300 is a storage unit that distinguishes the exclusive control processing units 2 and 3, and for example, 0 or 1 is stored therein. The method for storing the device number 300 may be input from a switch or an operation terminal, but is not directly related to the present invention, so there is no specific limitation or regulation.
The host transmission / reception processing unit 10 takes in communication data sent from the host, passes the command to the command sorting unit 30, and sends the command response passed from the command sorting unit 30 to the host.

The pair communication transmission / reception processing unit 60 indicates whether the pair exclusive control processing units 2 and 3 are operating or stopped depending on the link establishment state with the pair communication transmission / reception processing unit 60 of the paired exclusive control processing unit 2 or 3. Set in the storage unit 200.
Also, data is received from the pair communication transmission / reception processing unit 60 of the pair exclusive control processing units 2 and 3 and transferred to the pair communication control unit 50, and the data passed from the pair communication control unit 50 is also used as a pair exclusive control process. The data is transferred to the pair communication transmission / reception processing unit 60 of the units 2 and 3.
The state storage unit 200 is a storage unit that stores predetermined state information. Specifically, as shown in FIG. 5, the state of link establishment with the pair devices (pair exclusive control processing units 2 and 3), Stores information such as the status of the device (its own exclusive control processing units 2 and 3), the status of the pair device, and whether or not it can be incorporated.

As shown in FIG. 5, in the link establishment state, when the link with the pair exclusive control processing units 2 and 3 is established, information indicating “link” is set by the pair communication transmission / reception processing unit 60, and the pair exclusive control processing unit When the links 2 and 3 are disconnected, information indicating “unlink” is set.
As the status of the own device, information indicating “operation” is set if the own device is in an operating state, and information indicating “degeneration” is set if the own device is in a reduced state.
In the pair device status, information indicating “operation” is set when the pair device is in an operation state, and information indicating “degeneration” is set when the pair device is in a degeneration state.

In addition, when the status of the own device is in operation in the link state and the state of the pair device is degenerated, information indicating “available (can be installed)” is set, and the timer 70 described later detects a timeout. It is changed to information indicating “No (cannot be incorporated)”. Then, this incorporation permission information is referred to by the incorporation control unit 80, and is used to determine whether or not the incorporation can be performed.
The setting conditions and state transitions of the own device state and the pair device state are not directly related to the present invention, and thus detailed description thereof is omitted.

The timer 70 is a time measuring unit that measures and monitors the elapse of a predetermined time. In this embodiment, the timer is set / released under the control of the pair communication control unit 50, and a timeout occurs when the predetermined time elapses. Thus, the installability information in the state storage unit 200 is rewritten to “No” and updated.
The configuration control unit 80 refers to / confirms the incorporation permission information in the state storage unit 200 when the installation process of the exclusive control processing units 2 and 3 of the pair in a degenerated state is operated / instructed by, for example, a maintenance person, If the incorporation permission information is “permitted”, the exclusive control processing units 2 and 3 to be incorporated are incorporated, and if “no”, the incorporation is not performed.

Here, the execution or rejection of the incorporation of the exclusive control processing unit by the configuration control unit 80 is specifically performed as follows.
When maintenance personnel instruct installation from a console or the like, the configuration control unit 80 checks whether the state storage unit 200 can be installed.
If the result of the check is “No”, a message indicating that the installation cannot be performed is displayed or notified to the maintenance personnel that the installation is impossible.
On the other hand, if the result of the check is “OK”, the following processing is performed in order to enter an operation mode as shown in FIGS. Here, it is assumed that the processing unit currently in operation is A, and the processing unit that is being degenerated (incorporated) is B.
First, the command reception from the host is temporarily suspended, and the following processing is performed in the suspended state.
(1) Clear exclusive control table self 100 and exclusive control table pair 101 of processing unit B.
(2) Next, the exclusive control table pair 101 of the processing unit A is copied to the exclusive control table self 100 of the processing unit B.
(3) When copying is completed, the state of the own device and the state of the pair device in the state storage unit 200 of the processing unit A and processing unit B are set to operation.
When the above three points are completed, the command reception from the host is resumed. At this time, if the host recognizes that the path to the processing unit B has been restored (or the activation of the path by the operator), the command distribution to the processing unit B is also resumed, and the duplex operation is completely restored.
Note that the built-in operation is not directly related to the present invention, and a detailed description thereof will be omitted.

The exclusive control table self 100 and the exclusive control table pair 101 are storage means for storing the result of processing a command from the host (see FIG. 1) and the current management state.
In the normal state (operating state for both self and pair), the exclusive control processing units 2 and 3 that share commands store and manage data such as processing information and management state information in their own exclusive control table self 100, and the pair device If it is degenerated, the information for the portion of the exclusive control processing units 2 and 3 of the pair is stored and managed by its own exclusive control table pair 101.

Further, in the normal state (both the self and the pair are in the operating state), the data registered in the exclusive control table self 100 sequentially passes through the pair communication control unit 50 and the pair communication transmission / reception processing unit 60, and the pair exclusive control processing unit 2, 3 to the exclusive control table pair 101 in FIG. This is for the case where the pair exclusive control processing units 2 and 3 are stopped due to a failure.
Note that the data transmission / copy processing of the exclusive control table self 100 and the exclusive control table pair 101 between the exclusive control processing units 2 and 3 of the pair is not directly related to the present invention, and thus detailed description thereof is omitted.

In the present embodiment, when the exclusive control processing units 2 and 3 that have been disconnected from the processing apparatus due to a failure such as a failure are newly installed after the repair or the like is completed, the exclusive control processing units 2 and 3 in the operating state. All the data in the exclusive control table pair 101 are copied to the exclusive control tables 100 of the exclusive control processing units 2 and 3 that have been in a degenerated state.
The exclusive control processing units 2 and 3 in the degenerated state process the commands transferred from the exclusive control processing units 2 and 3 in the operation state, and store and manage the result in the exclusive control table self 100, and the pair (operation state) The processing results of the exclusive control processing units 2 and 3 are copied to the exclusive control table pair 101.

The exclusive control unit 40 processes a command request from the host notified via the command distribution unit 30 or the pair communication control unit 50.
Specifically, the exclusive control unit 40 updates the data of the exclusive control table self 100 and the exclusive control table pair 101 according to the contents of the command, and the update content of the exclusive control table self 100 is updated by the pair communication control unit 50 or the like. To the exclusive control table pair 101 of the sequential exclusive control units 2 and 3.
Further, upon receiving a copy data response from the pair communication control unit 50, the exclusive control unit 40 generates processing result information and notifies / reports it to the request source.
Note that the details of the exclusive control method by the exclusive control unit 40 are omitted.

The command distribution unit 30 identifies and determines the exclusive control processing units 2 and 3 to which the command is assigned from the content of information stored in the device number 300 and the content of the command.
Specifically, the command distribution unit 30 determines that if the command from the host transferred from the host transmission / reception processing unit 10 or the pre-embedding test control unit 20 is a command to be shared by its own exclusive control processing units 2 and 3. In the case where the command is to be shared by the pair (partner side) exclusive control processing units 2 and 3, the distribution process is performed so that the command is passed to the pair communication control unit 50. Execute.
When the command distribution unit 30 receives a command result from the exclusive control unit 40 or the pair communication control unit 50, the command distribution unit 30 transfers the command result to the host transmission / reception processing unit 10 that requested the command or to its own pre-embedding test control unit 20.

The pair communication control unit 50 relays each communication performed by its own exclusive control processing units 2 and 3 to each processing unit based on the contents of the communication and information stored in the state storage unit 200.
Details of the relay processing of each communication by the pair communication control unit 50 will be described later (see FIGS. 6 and 7).

The pair communication control unit 50 generates predetermined copy data response communication information when the exclusive control processing units 2 and 3 that are paired at the time of requesting the copy data are stopped (unlinked). The exclusive control unit 40 is notified.
Further, when the command result is transferred from the exclusive control unit 40 to the command distribution unit 30, the pair communication control unit 50 controls the timer 70 to set the timer and starts measuring a predetermined time.

In addition, the pair communication control unit 50 refers to the storage information in the state storage unit 200, and when the state of the pair device described above is a link establishment and its own device state is in operation, its own exclusive control table pair 101 Is transferred to the pair communication transmission / reception processing unit 60 (table transfer notification).
Thus, the decrementing exclusive control processing units 2 and 3 can write the received data in their own exclusive control table self 100 by receiving a table transfer notification from the pair communication transmission / reception processing unit 60.

Upon receiving a command request (transfer command reception) from the pair communication control unit 50, the pre-embedding test control unit 20 requests the command distribution unit 30 to perform processing.
When a command response or transfer command response is received from the command distribution unit 30 or the pair communication control unit 50, the pre-embedding test control unit 20 stores and stores the received data in the result storage area 400.

Further, the pre-embedding test control unit 20 has the same response content and exclusive control with its own exclusive control table self 100 when the command response or transfer command response from the command distribution unit 30 and the pair communication control unit 50 is prepared. It is determined / confirmed whether or not the data in the table pair 101 matches.
If this confirmation is made, a timer stop request is notified to the pair communication control units 50 of the currently operating exclusive control processing units 2 and 3 via the pair communication transmission / reception processing unit 60.
On the other hand, if the data do not match, the pre-embedding test control unit 20 does nothing.
The result storage area 400 is a storage means serving as a temporary storage area for comparing the command processing results of the self device and the pair device.

Next, specific operations of the exclusive control processing units 2 and 3 configured as described above will be described with reference to FIGS.
In the following description of FIGS. 8 to 20, in order to facilitate understanding, the exclusive control processing unit 2 that is operating the exclusive control processing unit 2, and the exclusive control processing unit 3 is newly added after failure repair or the like. The exclusive control processing unit to be incorporated.

FIG. 8 and FIG. 9 are explanatory diagrams showing the preparatory test preparation operation in the present embodiment.
10 to 20 are explanatory diagrams showing specific operations of the pre-embedding test in the present embodiment.
FIG. 21 and FIG. 22 are explanatory diagrams showing an operation when a command shared by each processing unit is received in a state where both exclusive control processing units in a pair are normal.
FIG. 23 and FIG. 24 are explanatory diagrams showing the operation when both of the exclusive control processing units that are paired are in a normal state and a command shared by the paired counterpart is received by each processing unit.
FIG. 25 is an explanatory diagram showing an operation when a command shared by the paired processing units is received in a state where the paired exclusive control processing units are degenerated.

[Preparation operation for pre-embedding test]
First, the preparatory test preparatory operation in this embodiment will be described.
As shown in FIG. 8 and FIG. 9, when the repair or the like of the failure is completed and newly incorporated, when the connected exclusive control processing unit 3 is activated, the pair communication transmission / reception processing unit 60 of the exclusive control processing unit 2 is activated. Link establishment information with the exclusive control processing unit 3 as a pair is detected, and the link state information in the state storage unit 200 is changed from “unlink” to “link” ((1) in FIG. 8, (1) in FIG. 9). ).

The pair communication control unit 50 of the exclusive control processing unit 2 in operation reads the data of the exclusive control table pair 101 when the state storage unit 200 enters the link state ((2) in FIG. 8), and the pair communication transmission / reception processing unit 60 A transmission request is made ((3) to (5) in FIG. 8).
The pair communication transmission / reception processing unit 60 transfers the table data to the pair communication transmission / reception processing unit 60 of the exclusive control processing unit 3 to be newly incorporated ((6) in FIG. 8).
Upon receiving the table transfer notification, the pair communication control unit 50 of the exclusive control processing unit 3 copies the received table data to its own exclusive control table self 100 and exclusive control table pair 101 ((7) to (11 in FIG. 9). )).

[Pre-embedding test]
Next, a specific operation when the pre-embedding test is performed will be described.
First, an operation when the exclusive control processing unit 2 receives a command to be shared by the exclusive control processing unit 3 when the exclusive control processing unit 2 is in an operating state and the exclusive control processing unit 3 is in a degenerated state will be described.
In this case, as shown in FIG. 10, the exclusive control processing unit 2 receives the command received from the host (see FIG. 1) by the host transmission / reception processing unit 10 and passes it to the command distribution unit 30 ((1) to (1) in FIG. 10). (2)).
The command distribution unit 30 determines from the data stored in the device number 300 and the content of the command whether the command should be processed by itself or a pair. In this case, the exclusive control processing unit 3 of the pair The command is determined to be processed, and the command is passed to the pair communication control unit 50 ((3) in FIG. 10).

The pair communication control unit 50 passes the command to its own exclusive control unit 40 ((4) -1 in FIG. 10) and sets the command to the pair because the exclusive control processing unit 3 that is the pair is degenerate. In order to transfer, it is transferred as a transfer command to the pair communication transmission / reception processing unit 60 ((4) -2 in FIG. 10).
As shown in FIG. 11, when receiving a command from the pair communication control unit 50, the exclusive control unit 40 processes the command and updates the data of the exclusive control table pair 101 ((5) in FIG. 11). The contents are notified to the pair communication control unit 50 as a copy data request ((6) in FIG. 11).

The pair communication control unit 50 refers to the data in the state storage unit 200 and transfers the copy data request to the pair communication transmission / reception processing unit 60 because the current link / pair state is degenerated ((7) in FIG. 11). .
Then, the pair communication transmission / reception processing unit 60 transmits the copy data request from the pair communication control unit 50 to the exclusive control processing unit 3 ((8) in FIG. 11).

In the exclusive control processing unit 3, as shown in FIG. 12, the pair communication transmission / reception processing unit 60 receives the copy data request transmitted from the exclusive control processing unit 2 (receives copy data), and the exclusive control table pair 101 according to the data. Is updated ((10) to (12) in FIG. 12).
Then, the exclusive control processing unit 3 creates a copy data response in order to notify the exclusive control processing unit 2 that the update of the table has been completed, sends a transmission request to the pair communication transmission / reception processing unit 60, and the exclusive control processing unit 2 is caused to transmit a copy data response ((13) to (14) in FIG. 12).

In the exclusive control processing unit 2, as shown in FIG. 13, the pair communication transmission / reception processing unit 60 passes the communication received from the exclusive control processing unit 3 to the pair communication control unit 50 ((15) to (16) in FIG. 13). ).
The pair communication control unit 50 transfers the received copy data response to the exclusive control unit 40 ((17) in FIG. 13).
The exclusive control unit 40 creates a command response based on the processing result of the command and transmits it to the pair communication control unit 50 ((18) in FIG. 13).

  When the pair communication control unit 50 receives the command response from the exclusive control unit 40, the pair communication control unit 50 sets a timer in the timer 70 to start measuring a predetermined time ((19) in FIG. 13), and the received command response is sent to the command distribution unit. 30 is sent as a command response ((20) -1 in FIG. 13), and the pair communication transmission / reception processing unit 60 is requested to transfer as a transfer command response, and the exclusive control processing unit 3 is caused to transmit the transfer command response (FIG. 13). (20) -2).

In the exclusive control processing unit 3, as shown in FIG. 18, the pair communication transmission / reception processing unit 60 passes the transfer command response received from the exclusive control processing unit 2 to the pair communication control unit 50 ((22) to ( twenty three)).
The pair communication control unit 50 passes the transfer command response data to the pre-embedding test control unit 20 ((24) in FIG. 18).
The pre-embedding test control unit 20 determines the processing result if the processing result of the corresponding command in the exclusive control processing unit 3 is already stored in the result storage area 400, but the processing result of the command is stored. If not, the transfer command response is stored / saved in the result saving area 400 ((25) in FIG. 18).
Thus, the operation of the original process performed by the operation apparatus side (see (4) -1 in FIG. 10) is completed.

Next, a test operation (see (4) -2 in FIG. 10) performed by the degeneration device side that is executed in parallel with the above-described process will be described.
First, as illustrated in FIG. 14, the exclusive control processing unit 2 sends the command request to the pair communication control unit 50 in order to transfer the received command request to the pair communication control unit 50 of the exclusive control processing unit 3. The data is transferred to the communication transmission / reception processing unit 60 and transmitted to the exclusive control processing unit 3 ((4) -2 to (5) in FIG. 14).

In the exclusive control processing unit 3, as shown in FIG. 15, the pair communication transmission / reception processing unit 60 passes the command request received from the exclusive control processing unit 2 to the pair communication control unit 50 as a transfer command request ((6 in FIG. 15). ) To (7)).
The pair communication control unit 50 passes the received transfer command request to the pre-embedding test control unit 20 ((8) in FIG. 15), and the pre-embedding test control unit 20 passes the command request to the command distribution unit 30 as a command request (FIG. 15). (9)).
The command distribution unit 30 determines that the command to be processed by the exclusive control processing unit 3 from the content of the device number 300 and the content of the command, and passes the command request to the exclusive control unit 40 ((10) in FIG. 15).
The exclusive control unit 40 processes the command transmitted from the exclusive control unit 40 to update the exclusive control table self 100 ((11) in FIG. 15), and notifies the pair communication control unit 50 of the updated contents as a copy data request. ((12) in FIG. 15).

The pair communication control unit 50 creates a copy data response and sends it to the exclusive control unit 40 as shown in FIG. 16 because the contents of the state storage unit 200 are “link” for the link state and “degenerate” for the own device. Return ((13) in FIG. 16).
The exclusive control unit 40 compiles the command processing results, creates a command response, and transmits it to the command distribution unit 30 ((14) in FIG. 16).
The command distribution unit 30 passes the command response to the pre-embedding test control unit 20 that is the request source ((15) in FIG. 16).
The pre-embedding test control unit 20 determines the processing result if the processing result of the same command of the exclusive control processing unit 2 is already stored in the result storage area 400, but if not yet stored, the test control unit 20 returns a command response. The processing result based on this is stored in the result storage area 400 ((16) in FIG. 16).

Next, the determination operation of the pre-embedding test control unit 20 when the command processing results of the exclusive control processing unit 2 and the exclusive control processing unit 3 are prepared will be described with reference to FIGS.
The pre-embedding test control unit 20 of the exclusive control processing unit 3 judges both of the processing results stored in the result storage area 400 of the exclusive control processing unit 3 to match each other, and excludes the exclusive control processing unit 3 from exclusion. When the match between the control table self 100 and the exclusive control table pair 101 is determined, and both the determinations match, a timer stop request is created and a transfer is requested to the pair communication transmission / reception processing unit 60, and the exclusive control processing unit 2 ((26) to (27) in FIG. 18).

In the exclusive control processing unit 2, as shown in FIG. 19, the pair communication transmission / reception processing unit 60 passes the timer stop request from the exclusive control processing unit 3 to the pair communication control unit 50 ((28) to (29 in FIG. 19). )).
When the pair communication control unit 50 receives the timer stop request, the pair communication control unit 50 stops the timer 70 and finishes measuring the predetermined time ((30) in FIG. 19).
When the timer stop request is not issued, the timer of the timer 70 times out when a certain time elapses, and as shown in FIG. 20, the timer 70 sets information indicating “NO” to whether or not the state storage unit 200 can be incorporated. ((1) in FIG. 20).

As a result, when an installation operation is performed by a maintenance person or the like in this state, the configuration control unit 80 refers to the information in the state storage unit 200, and “No” is set as information indicating whether or not the installation is possible. The operation is not performed ((2) in FIG. 20).
As a result, the exclusive control processing unit 3 is not incorporated according to the result of the pre-installation test.

[Operation in normal state]
Hereinafter, for reference, operations of the exclusive control processing units 2 and 3 in a normal (not degenerated) state will be described with reference to FIGS.
First, as shown in FIG. 21, it is assumed that a command to be shared by the exclusive control processing unit 2 is issued from the host, and this command is received by the host transmission / reception processing unit 10 of the exclusive control processing unit 2 ((1) in FIG. 21). ).
The host transmission / reception processing unit 10 delivers the command request to the command distribution unit 30 ((2) in FIG. 21), and the command distribution unit 30 that has received the command request itself (exclusive control processing) from the device number 300 and the content of the command request. The part 2) determines that the command should be shared, and passes it to the pair exclusive control unit 40 ((3) in FIG. 21).
The exclusive control unit 40 processes the command to update the exclusive control table self 100 ((4) in FIG. 21), and passes the update information to the pair communication control unit 50 as copy data ((5) in FIG. 21).

The pair communication control unit 50 passes the copy data to the pair communication control unit 50 of the exclusive control processing unit 3 via the pair communication transmission / reception processing unit 60 ((6) to (7) in FIG. 21, (8) to (8) in FIG. (9)), the exclusive control processing unit 3 updates the exclusive control table pair 101 as shown in FIG. 22 ((11) in FIG. 22).
When the update is completed, the pair communication control unit 50 creates a copy data response and sends it to the pair communication control unit 50 of the exclusive control processing unit 2 via the pair communication transmission / reception processing unit 60 ((11) to (13) in FIG. 22). (14) to (15) in FIG.
When the exclusive control processing unit 2 receives a copy data response from the exclusive control processing unit 3 as shown in FIG. 21, the pair communication control unit 50 passes the response to the exclusive control unit 40 ((16) in FIG. 21).
The exclusive control unit 40 creates a command response by putting together the command processing results, passes them to the host transmission / reception processing unit 10 via the command distribution unit 30, and notifies / reports the results to the host ((17) to ( 18)).

Next, as shown in FIG. 23, it is assumed that a command to be shared by the exclusive control unit 3 is issued from the host, and this command is received by the host transmission / reception processing unit 10 of the exclusive control processing unit 2 ((1) in FIG. 23). ).
In this case, the host transmission / reception processing unit 10 of the exclusive control processing unit 2 delivers the command request to the command distribution unit 30 ((2) in FIG. 23), and the command distribution unit 30 receives the device number 300 and the contents of the command request. The pair (exclusive control processing unit 3) determines that the command should be shared, and hands it over to the pair communication control unit 50 ((3) in FIG. 23).
The pair communication control unit 50 refers to the state storage unit 200 to confirm the pair status, and if the exclusive control processing unit 3 is in operation, requests the pair communication transmission / reception processing unit 60 to transfer a command (FIG. 23). (4)), the pair communication transmission / reception processing unit 60 transmits the command to the exclusive control processing unit 3 ((5) in FIG. 23).

In the exclusive control processing unit 3, as shown in FIG. 24, when the pair communication transmission / reception processing unit 60 receives a communication (command) from the exclusive control processing unit 2 ((6) in FIG. 24), the command is transmitted to the pair communication. It is handed over to the control unit 50 ((7) in FIG. 24).
The pair communication control unit 50 passes the command to the exclusive control unit 40 ((8) in FIG. 24), and the exclusive control unit 40 processes the command and updates the exclusive control table self 100 ((9) in FIG. 24). Then, the update information is transferred as copy data to the pair communication control unit 50 ((10) in FIG. 24).
The pair communication control unit 50 passes the copy data to the pair communication control unit 50 via the pair communication transmission / reception processing unit 60, and updates the exclusive control table pair 101 of the exclusive control processing unit 2 ((11) to (12 in FIG. 24). ), (14) to (16) of FIG.
When the update is completed, the pair communication control unit 50 creates a copy data response and sends it to the pair communication control unit 50 of the exclusive control processing unit 3 via the pair communication transmission / reception processing unit 60 ((17) to FIG. 23). (18), (19) to (20) in FIG.

The pair communication control unit 50 of the exclusive control processing unit 3 that has received the copy data response passes it to the exclusive control unit 40 ((21) in FIG. 24).
The exclusive control unit 40 creates a command response by collecting the processing results of the commands, and passes them to the pair communication control unit 50 ((22) in FIG. 24).
The pair communication control unit 50 passes the command response to the pair communication control unit 50 of the exclusive control processing unit 2 via the pair communication transmission / reception processing unit 60 ((23) to (24) in FIG. 24, (25) to FIG. 23). (26)).
The pair communication control unit 50 of the exclusive control processing unit 2 passes the command response to the host transmission / reception processing unit 10 via the command distribution unit 30, and notifies and reports the result to the host ((27) to (28) in FIG. 23). .
As described above, the processing in a state where the exclusive control processing units 2 and 3 are normal (not degenerated) is completed.

[Operation in a degenerated state]
Next, operation / processing operations in a state where the exclusive control processing unit 3 is degenerated due to a failure or the like will be described with reference to FIG.
First, as shown in FIG. 25, a command to be shared by the exclusive control processing unit 3 is issued from the host, and this command is received by the host transmission / reception processing unit 10 of the exclusive control processing unit 2 ((1) in FIG. 25). ).
The host transmission / reception processing unit 10 of the exclusive control processing unit 2 delivers the command request to the command distribution unit 30 ((2) in FIG. 25), and the command distribution unit 30 determines the pair (exclusive control) from the device number 300 and the contents of the command request. The processing unit 3) determines that the command should be shared, and hands it over to the pair communication control unit 50 ((3) in FIG. 25).

The pair communication control unit 50 refers to the state storage unit 200, confirms the state of the pair (exclusive control processing unit 3), and passes the command request to the exclusive control unit 40 because the exclusive control processing unit 3 is in a degenerate state ( (4) in FIG.
The exclusive control unit 40 processes the command to update the exclusive control table pair 101 ((5) in FIG. 25), and passes the update information to the pair communication control unit 50 as copy data ((6) in FIG. 25).
The pair communication control unit 50 confirms the state of the pair (exclusive control processing unit 3) in the state storage unit 200, discards the copy data because the exclusive control processing unit 3 is degenerate, creates a copy response, and creates the exclusive control unit. Return to 40 ((7) in FIG. 25).

Upon receiving the copy data response, the exclusive control unit 40 of the exclusive control processing unit 2 collects the command processing results, creates a command response, and passes it to the pair communication control unit 50 ((8) in FIG. 25).
The pair communication control unit 50 passes the command response to the host transmission / reception processing unit 10 via the command distribution unit 30, and reports the result to the host ((9) to (10) in FIG. 25).
A case where a command to be shared by the exclusive control processing unit 2 is issued from the host while the exclusive control processing unit 3 is degenerated due to a failure, and this command is received by the host transmission / reception processing unit 10 of the exclusive control processing unit 2 Will not be described.

As described above, according to the duplexing processing apparatus, duplexing processing system, and duplexing processing method of this embodiment, a pair of processing units are provided in response to a command processing request from the host, and one processing unit is When the operation is continued by the other processing unit even if a failure occurs, the processing unit 3 to be incorporated when the processing unit 3 that has been subjected to failure repair or the like is incorporated into a system in which one processing unit 2 is in an operational state. Before actually installing the system in the system, a link is established between the processing unit 2 in the operating state and the processing unit 3 to be newly installed, and the processing unit 3 is tested as to whether it can be installed. Can do.
As a result, it is possible to accurately determine whether or not the processing unit 3 after failure repair is alone diagnosed, and to prevent the incomplete processing unit from being installed.

  As mentioned above, although the embodiment of the duplex processing apparatus, the duplex processing system, and the duplex processing method according to the present invention has been described, the present invention is not limited to the above-described embodiment, and various modifications may be made within the scope of the present invention. It goes without saying that is possible.

  INDUSTRIAL APPLICABILITY The present invention can be used in a processing system that processes a command from a host with a processing device with a dual processing unit, a processing device incorporated in the system, and a test method thereof.

DESCRIPTION OF SYMBOLS 1 Processing apparatus 2 Processing part (exclusive control processing part)
3. Processing unit (exclusive control processing unit)
DESCRIPTION OF SYMBOLS 10 Host transmission / reception processing part 20 Pre-installation test control part 30 Command distribution part 40 Exclusive control part 50 Pair communication control part 60 Pair communication transmission / reception processing part 70 Timer 80 Configuration control part 100 Exclusive control table self 101 Exclusive control table pair 200 Status storage part 300 Device number 400 Result storage area

Claims (9)

A processing device that has a pair of processing units that are duplicated, and when one of the processing units has a failure, the processing unit continues operation by the other processing unit,
Each of the processing units
Normally, when a command received by one processing unit is a command to be processed by the one processing unit, the command is processed by the one processing unit, and a command received by one processing unit is processed by the other processing unit. An exclusive control processing unit that transfers the command to the other processing unit for processing in the case of a command to be processed by the unit,
Link establishment determination means for determining link establishment with a processing unit that is separated from the processing device and newly incorporated;
A pre-embedding test means for testing whether or not the processing unit to be newly incorporated is a target,
The pre-embedding test means includes
When the command received by one processing unit is a command to be processed by the other processing unit newly incorporated, the processing is performed by the one processing unit and transferred to the other processing unit, The duplication processing apparatus is characterized by determining whether or not the newly incorporated processing unit can be incorporated by comparing the processing result and the processing time . Each of the processing units
Incorporation refusal to reject the incorporation request even if there is an incorporation request of the processing unit in which the test result cannot be incorporated when the result of the test by the pre-embedding test means of the newly incorporated processing unit cannot be incorporated The duplex processing apparatus according to claim 1, further comprising: means. The pre-embedding test means includes
3. The duplex processing apparatus according to claim 1, wherein when each processing unit processes the same command and the processing time exceeds a predetermined time, an installation request relating to a newly installed processing unit is rejected. 4. . The pre-embedding test means includes
The duplex processing apparatus according to any one of claims 1 to 3 , wherein the test is executed during system operation. Each of the processing units
The duplex processing apparatus according to any one of claims 1 to 4 , wherein when one processing unit has a failure, the other processing unit processes all commands. The pre-embedding test means includes
Duplication processing apparatus according to any one of claims 1 to 5, characterized in that executing the test when it receives a command assigned to the exclusive control processing unit to be tested. A duplex processing system that includes a pair of duplexed processing units and continues operation by the other processing unit when there is a failure in one processing unit,
Each of the processing units
Normally, when a command received by one processing unit is a command to be processed by the one processing unit, the command is processed by the one processing unit, and a command received by one processing unit is processed by the other processing unit. An exclusive control processing unit that transfers the command to the other processing unit for processing in the case of a command to be processed by the unit,
Link establishment determination means for determining link establishment with a processing unit that is separated from the processing device and newly incorporated;
A pre-embedding test means for testing whether or not the processing unit to be newly incorporated is a target,
The pre-embedding test means includes
When the command received by one processing unit is a command to be processed by the other processing unit newly incorporated, the processing is performed by the one processing unit and transferred to the other processing unit, By comparing the processing result and the processing time, it is determined whether or not the newly incorporated processing unit can be incorporated . A duplex processing method of continuing operation by the other processing unit when there is a failure in one processing unit by a pair of the processing units duplexed,
When each processing unit normally receives a command received by one processing unit as a command to be processed by the one processing unit, the one processing unit processes the command, and one processing unit receives the command. An exclusive control processing unit that transfers and processes the command to the other processing unit when the command to be processed by the other processing unit is ,
Determining link establishment with a processing unit that is separated from the exclusive control processing unit and newly incorporated;
And a step of testing whether or not the processing unit to be newly incorporated is to be incorporated,
The step of testing whether or not the installation is possible includes:
When the command received by one processing unit is a command to be processed by the other processing unit newly incorporated, the processing is performed by the one processing unit and transferred to the other processing unit, A duplication processing method characterized by determining whether or not the newly incorporated processing unit can be incorporated by comparing the processing result and the processing time . A computer comprising a duplex processing apparatus that includes a pair of processing units that are duplexed and that continues operation by the other processing unit when there is a failure in one processing unit,
In each processing unit,
Normally, when a command received by one processing unit is a command to be processed by the one processing unit, the command is processed by the one processing unit, and a command received by one processing unit is processed by the other processing unit. In the case of a command to be processed by a part, the command is transferred to the other processing part and functions as an exclusive control processing part .
Link establishment determination means for determining link establishment with a processing unit that is separated from the exclusive control processing unit and newly incorporated;
Targeting a newly installed processing unit, it functions as a pre-embedding test means for testing whether or not it can be incorporated,
In the pre-embedding test means,
When the command received by one processing unit is a command to be processed by the other processing unit newly incorporated, the processing is performed by the one processing unit and transferred to the other processing unit, A duplication processing program that makes it possible to determine whether or not the newly incorporated processing unit can be incorporated by comparing the processing result and the processing time .

Images