JPH0271347A - Battery back-up control system for extended storage device - Google Patents

Abstract

PURPOSE:To realize the nonvolatilization of data at service interruption and the reduction of the IPL processing time by limiting the battery back-up range to a DRAM and a holding circuit for contents of the DRAM. CONSTITUTION:The unit power controllers (GSU-0-UPC) 2-a and (GSU-1-UPC) 2-b are added to the extended storage devices (GSU-0) 1-a and (GSU-1) 1-b respectively. Furthermore the batteries 3-a and 3-b are set to both extended storage devices. In case a service interruption, for example, occurs, the status information on the back-up result is read out and the successive process is possible as it is based on the contents of the extended storage device in an IPL process carried out after the service interruption is released. Then a process using a back-up mechanism is carried out with the OFF time of a power supply kept less than 24hr, for example, and a process using a magnetic disk device DASD is carried out with the power supply OFF time kept more than 24hr respectively.

Description

[Detailed Description of the Invention] [Summary Regarding the panteri bank-up control method of a computer system equipped with a GSU (extended storage device), power outages occur due to the increase in the capacity of the GSU. In order to solve the problem of saving data from the GSLJ to the magnetic disk unit and loading data from the magnetic disk unit to the GSU due to the input power being turned off, the Panteri backup mechanism has an external A stage is provided for controlling the operation of the battery backup mechanism according to an instruction and for holding status information representing the backup result of the extended storage device, and the central processing unit is provided with an instruction for instructing the operation of the battery backup mechanism. , and battery
Add a command to read the status information that is the backup result, l P 1. In some cases, the above status information is read and the IPL procedure is determined.

[Industrial Application Field] The present invention relates to a battery backup control system for a GSU in a computer/system equipped with an extended storage device (hereinafter also referred to as GSLJ).

[Prior Art] In recent years, demands for higher performance on computer systems have become increasingly severe. There is a strong demand for high-speed true standby and smooth resumption of operation in the event of a system failure.

In response to these demands, a large-scale computer system (hereinafter also referred to as GCMP) in which a plurality of 21 monitors are connected to a high-throughput GSIJ is being provided.

The above is a brief explanation of this GCM I).

Figure 5 shows the system configuration 1 of GCMP according to the conventional technology.
5i1 a IJ expansion record; 6゛(
GSU-0), 5O-1) is an expanded storage unit (GSU-1)
), 51-a is a magnetic disk device (DA) for GSU-0.
SI)), 5]-b is the magnetic disk unit W for GSU-1
(DASL)), 52-a and 52b are batteries, and 53-a to 53-d are storage access control devices (
MCU>, 54-a to 54d are a bisprocessor (SVP) and a system control interface (SCI), 55-a to 55-d are central processing units (CPUs), respectively, which control a plurality of channels. This represents a computer system consisting of a channel processing unit (CHP) and a main storage unit (MSU).In other words, in this example, two G5Us 30-a and 50-b are provided, and the GSU is This is an example where a plurality of combicoater systems 55-a to 55-d, z and D, share the same.

Each computer system 55-a to 55-d has a memory access control unit (MCU) 53a to 53-d, respectively.
is connected to GSU-0 and GSU-1 via
The U provides a large amount of expanded memory for each computer system, making it possible, for example, to configure a large system with a single system image, and also provides redundancy of the GSU, which serves as a backup in case of system failure. even higher reliability can be obtained), and furthermore,
This enables high-speed hot standby of the standby system in the event that one of the systems in the system fails.

As described above, the use of extended storage (GSU) has various advantages, and plays an important role, especially for increasing the reliability of the system. However, GSU is usually composed of semiconductor memory elements. Therefore, it is extremely important to take measures to prevent data loss during power outages.

Therefore, as shown in the example of FIG.
1 and a panteri device 51a, respectively.

52-b is provided, and the battery device serves as a back amplifier (non-volatile).

When the GSU is configured with a semiconductor memory element (for example, DRAM) to make it non-volatile, when a power outage occurs in the GSU, the entire GSU is backed up by the panteri device for a certain period of time, and during that time, the magnetic disk device 51a dedicated to the backup amplifier is , 51-b, and when the power is turned on, the magnetic disk device! 251-a
, load the data from 51-b to GSU again,
The GSU is configured to be ready for use.

"Problem to be Solved by the Invention" When the above-described method is adopted for an expanded storage unit (GSU), the following problems occur.

(1) The recent increase in the density of memory elements (DRAM) has made it easier to increase the capacity of GSLJs, but the increase in density of magnetic disk devices cannot keep up and requires a huge amount of hardware. shall be.

(2) The process of saving data to the magnetic disk device and loading it from the magnetic disk device to the GSU requires complex control.

(3) Saving to the magnetic disk device It takes a long time to load from the magnetic disk device to the GSU.

Therefore, conventionally, in order to solve the problems (1) to (3) above, (1) DRAM requires a large current (power) during operation (writing/reading); The holding process (called refresh) alone does not require much current.

Utilizing this characteristic, the battery device backs up only the DRAM and the refresh circuit to lengthen the guaranteed bank-up time.

(2) Do not save to the magnetic disk device.

It was necessary to take such measures.

However, even if the above measures are taken, future D R
It has the advantage that the power consumption for refresh does not change much even if the AM density becomes higher and the GSU becomes larger in capacity, but even if the backup amplifier guarantee time is extended, it can still be treated the same as a magnetic disk device. However, time constraints remain.

The present invention has been made in view of the above problems, and is directed to a computer system 1 equipped with an expanded storage device (GSLi).
The present invention aims to provide an improved battery bank-up control scheme for the GSU in No. 1.

[Means for Solving the Problems] According to the present invention, the above objects are achieved by the means described in the claims.

That is, the present invention provides at least one expanded storage device;
In a computer system having a battery backup mechanism that retains the storage contents when inputting data in the expanded storage device and power is turned off, the battery backup mechanism includes a device that controls the operation of the battery backup mechanism by an external command; and a means for holding status information representing the backup results of the extended storage device is provided, and the central processing unit is provided with instructions for instructing the operation of the battery backup mechanism and instructions for reading the status information representing the backup results; At the time of IPL, which is the initial program load, the system reads the status information of the backup results mentioned above and determines the IPL procedure, and at the time of IPL and at the end of operation, it reads the status information of the backup result and determines the IPL procedure.
This is a battery backup control method for an extended storage device that instructs the battery bank-up mechanism to operate in preparation for processing L.

[Function] When backing up the extended storage device with a battery device, even if the range of battery backup is limited to the RAM section and its two refresh circuits and the backup time is extended, the time limit is limited. Generally, the limit is several tens of hours.

Therefore, in order to properly use an extended storage device that can be backed up by a battery pack and a magnetic disk device that permanently stores data, the battery backup mechanism has
The central processing unit is provided with a means for controlling the operation of the battery backup mechanism by an external command and retaining status information representing the backup result of the extended storage device even when the power is turned off. Add commands to instruct operations and commands to read status information, which is the backup result. For example, in the case of a power outage, it is generally unlikely that the power outage will last for several tens of hours, and the I P 1. In the process, the status information of the backup result is read, and the process can be continued depending on the contents of the extended storage device.

In addition, when the power is turned off after the end of operation, the operation of the back amplifier mechanism is specified according to the schedule registered in advance, and if the power off time is within 24 hours, processing using the back amplifier mechanism is performed for 24 hours. If it exceeds this, by switching to processing using a magnetic disk device (DASD), it is possible to achieve non-volatility during power outages and to shorten IPI and time.

[Embodiment] FIG. 1 shows a configuration diagram of a GCMP system according to an embodiment of the present invention, and l-a is an extended storage unit (GSU-0).
, 1-l) is an extended storage unit (GSU-1), and 2-a is a unit power controller 5 for GSU-0.
(GStJ-Q~UPC>, 2-b is the unit power controller for GSUl-1 (GSLJ~1UPc)
), 3a, 3-b are batteries, 4a, 4b, 4c, 4
d is a memory access control unit (MCU), 5a, 5
- b, 5-c, 5-d are service 7. -7'
.

Processor (SVP) and System Control I:'
97 Aix (SCI), 6a, 6b, 6c, 1
3d is a computer system consisting of a central processing unit (CPU), a channel processing unit (CHP) that controls multiple channels, and a main storage unit (MSLI), respectively;
10 to a110-b represent mentors within each CSU.

In the system configuration diagram of FIG. 1, in comparison with the conventional GCM P system configuration diagram of FIG.
The controller (GSUO-t, JPc) 2-a connects the extended storage device f (GSUl) l-bl: unit power
A new controller (GSII-IUPc) 2-b has been installed.

For other parts, examples of similar configurations are given to facilitate comparison with the conventional example.

That is, the extended storage device (GSU-0, C5U-1>
1-a and 1-b are used, each extended storage device is attached with batch IJ 3-a and 3-b, and the extended storage device (GSU-0, GStJl) is connected to system Δ~/Sdem D. A plurality of combinations 1, 6a to 6
This is an example where b is shared.

Also, the onrator (O5C) 10-a in the figure.

10-b is an onlator within the GSU, which is independent of each system's clock.

Unit power controller (UPC) 2-a, 2
-b is a part directly related to the present invention, and is a device that performs power control of expanded storage units (GSU) 1-a and 1-b and maintains status for additional instructions according to the present invention.

The present invention is realized by two instructions added to the central processing unit (CPU) to control the functions of the unit power controller and the newly added hack amplifier mechanism.

FIG. 2 is a diagram showing an example of an additional instruction to the central processing unit according to the present invention, in which (a) is the instruction format of the backup operation designation instruction (SET GSU BMODE), and (a) is the instruction format of the backup operation designation instruction (SET GSU BMODE), and (a) is the instruction format of the backup operation designation instruction (SET GSU BMODE), This indicates a status read command (SENCE GSLI 5TATUS).

In FIG. 2(a), 20 indicates the instruction format of a back amplifier operation designation instruction (hereinafter also referred to as SGB), and OP''
X'' is an instruction code, and R1 is an operand part, which specifies the Renstar number that holds the address on the main memory where the backup operation designation information 21 is stored.

When this command is issued, the backup operation designation information 2I on the main memory is read out under the command control of the CPU and sent to the UPC of the corresponding GSU.

In this example, the bank up operation designation information 21 is composed of 8 bits for each GSU, and is set to E3R at the 4th bit.
(Backup Failure Re5et), 6
B I (Backup Invaiid)
ation).

That is, BR is an instruction to reset the buffer knob failure flag and invalidation flag, and is used to instruct the BL backup mechanism to be invalidated.

Depending on the contents, the GSU disables the up failure flag, the invalidation flag, and the backup mechanism.

In FIG. 2 (1)), 22 is the instruction format of the backup result status read instruction (also called SO8 instruction), OP"Y'" is the instruction code, Rl is the operand part, and the bank up Result status information 2
Specify the register number that holds the address in main memory where 3 is stored.

When this command is issued, under the command control of CPLI,
Backup result status information 23 held by the GSU's UPC is read out via the GSU and stored in the corresponding portion of the main memory specified by the instruction.

The backup status information 23 consists of 8 bits for each GSU, and the BS (Backup
5upport), 6th note Bl (mouth ackupInvalidation),
B P (BackupFailure>
information is retained.

BS indicates whether the back amplifier mechanism is disabled, Bl indicates whether the back amplifier mechanism is disabled, and BF indicates the buffer knob failure flag.

Next, the operation of the battery backup control system according to the present invention will be explained using the flowchart of FIG.

FIG. 3 shows an operating system according to the invention l, (O
3 is a flowchart showing the control of the battery backup mechanism in step 3>.

Step 30 in the figure is a request to start initial programming (IPL), and step 31 is a request to start initial programming (IPL).
This indicates the end of operation of the MP system.

In either step 30 or step 31, the battery
Control of the backup mechanism is performed.

When there is an IPL start request, the GCMP
Check whether it is the MASTER system within the system.

If the system is not a MASTER system, the battery bank-up mechanism is not controlled, but if it is a MASTER system, the SGS command is issued at step 32-1 in the figure.

The result of the SO3 instruction is stored at the address on the main memory specified by the instruction, and its contents are stored in 32-2 to 32-3 in the figure.
Check in step 2-4.

What is being investigated using each 2-bit AND condition is:
This is because the target is two GStJs composed of GSUO/1.

However, in order to achieve high reliability, the GSU may be duplicated (for example,
(Contents of GSIJ-0 - Contents of GSU-1), the OR condition can be used (the one that is successful can be used).

If the condition of step 32-2 is not satisfied, the process moves to step 35 and IPL processing is performed, but the necessary data is loaded from the magnetic disk device (DASD).

If the condition in step 32-2 is satisfied, then the conditions in step 32-3 and step 32-4 are checked.

If both conditions are satisfied, the process moves to step 34 and the GSU
IPL processing is performed using the backed up data.

If one or both of the conditions shown in steps 32-3 and 32-4 are not satisfied, the process moves to step 33, the SGB command is issued, and in the process of step 33, the B
Set R-“]j” and Bl-“00”, and set the SGB command so that the backup mechanism works again when a power outage occurs.

Also, as maintenance information, step 32
-3 and 32-4 determination results can be used.

From step 33, the process moves to step 35 unconditionally, and from step 34 or step 35, the process waits until the condition of the next step 30 or step 31 occurs. What is important here is the case where the turn off of the power is due to a power outage and the route from step 32-4 to step 33 is followed.

In this case, BF≠“00”, that is, the backup after the power outage has failed, so the processing after the IPL needs to return to the previous state.

In order to reduce this probability, the above-mentioned duplex configuration (G
The content of S U O = the content of GSUl) may be used.

At step 31, when the operation is completed, the process moves to step 36, where the area of the GSU corresponding to the system is stored in the magnetic disk device (DASD).

Furthermore, when moving from step 36 to step 36-1,
S according to the preset schedule
Controls the Bl flag by the GB instruction.

For example, if the power is to be turned off for a long period of time, such as during New Year's, the battery backup mechanism should be set in advance so that it does not work.

This has the effect of prolonging the lifespan of panteri.

FIG. 4 is a diagram showing an example of the system configuration of the battery backup mechanism.

FIG. 2 is a system configuration diagram for lengthening the backup guarantee period, which is a premise of the present invention.

In the figure, 40 is a power input port, and 41 is a charger for disassembly, which charges the battery when the power is turned on. 42-a and 42-b in the figure are two batteries (BAT
I, B A T 2 ) are used alternately.

For example, when the power is turned on after BAT1 is used when the power is turned off, BAT I will be in a charging state, and the BAT2 side will be used at the next power outage or power off.

43 in the figure is a voltage converter (DC-DC converter), 4
4 is a power supply device for devices other than DRAM, 45 is a GSU, 4
6 is a power failure/recovery detection circuit, which directly controls the battery.

The backup mechanism of this example is not a special one, but is a well-known one, and a detailed explanation of its backup method and circuit operation will be omitted.

As explained above, according to the present invention, battery backup can be extended over a long period of time by limiting the scope of battery backup to DRAM and its content retention circuit, and generally the guaranteed time depends on the characteristics of the elements and the number of units used. It will be affected, but it will last for several tens of hours.

For example, even if the backup time is estimated to be 24 hours, the GCMP operator does not need to be so conscious of the backup time by performing the following processing.

(a) Backup during a power outage Generally speaking, it is unlikely that a power outage will last more than 24 hours, and in IPL processing after a power outage is canceled, by reading the backup status information, it is possible to continue processing from the contents of the GSU.

(b) When the power is turned off after the end of operation, the operation of the backup mechanism is specified according to the schedule registered in advance, and if the power is turned off for less than 24 hours, processing using the backup mechanism is performed, and if the power is turned off for more than 24 hours, processing is performed using the backup mechanism. By switching to processing using DASD, it is possible to achieve non-volatility during power outages and shorten IPL time.

In addition, if two GSUs are used for redundant control to increase reliability, it is possible to shorten the time when the power is turned off by making the data non-volatile, such as eliminating the need for output to the DASD.

Additionally, in one embodiment of the present invention, a expanded storage unit (GSU)
There are two computer systems sharing the GSU.
The case where there are four units is taken as an example, but of course the number is not limited to this.

[Effects of the Invention] As explained above, according to the present invention, by limiting the target range of battery backup to the DRAM and its content holding circuit, it is possible to extend the battery backup time, and in the case of a power outage, the power outage can be canceled. In subsequent IPL processing, it is possible to continue processing from the contents of GSU, reducing IPL processing time.In addition, when the power is turned off at the end of operation, processing using the backup mechanism can be performed depending on the power-off time. and D
By switching and using ASD processing, it is possible to make data non-volatile during a power outage and to shorten IPL processing time.

[Brief explanation of the drawing]

FIG. 1 is a system configuration diagram of GCMP according to an embodiment of the present invention, FIG. 2 is a diagram showing an embodiment of additional instructions to a central processing unit according to the present invention, and FIG. 3 is a diagram showing a system configuration diagram of GCMP according to an embodiment of the present invention. FIG. 4 is a diagram showing an example of a system configuration of a battery backup mechanism, and FIG. 5 is a diagram showing a system configuration of GCMP according to the prior art. 1-a...Extended storage unit (GSU-0), 1-b
...Extended storage unit f (GSU-1), 2-a...
...Unit power controller for GSU-0 (GSU-1-UPC), 2-b...c S U
-1 unit power controller (GSU-1)
iUPc), 3-a13-b...Battery, 4
a, 4b, 4c, 4d...Memory access control unit (MCU) 5-a, 5-b% 5-C15-d...-t-
hiss processor (SVP) and system control ink face (SCI), 6a, 5b, 5c, 5d... each central processing unit (CPU), channel processing unit (CHP) that controls multiple channels, and main memory A computer system consisting of (MSU), 10-a, 1 (1-b-==-oscillator in each GSU, 20... back amplifier operation designation instruction (S
GB) instruction format, 21... Bank up operation specification information, 22...
...Instruction format of status read command (SGS),

Claims (1)

[Scope of Claims] A computer system having at least one expanded storage device and a battery backup mechanism that maintains the storage contents when the input power is turned off to input data in the expanded storage device, the battery backup mechanism includes: Means is provided for controlling the operation of the battery backup mechanism by an external command and for holding status information representing the backup result of the extended storage device, and the central processing unit is provided with an instruction for instructing the operation of the battery backup mechanism; A command is added to read the status information that is the backup result, and the operating system reads the status information of the backup result and determines the IPL procedure at the time of IPL, which is the initial program load, and determines the IPL procedure. Next IPL
A battery/backup mechanism for an extended storage device is characterized in that it issues an operation instruction to a battery backup mechanism in preparation for processing.
Backup control method.