JPH1027047A - Method for blocking package - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a method for blocking package by which active lines can be inserted into and removed from the packages of a storage system constituted of a plurality of packages which commonly use a bus and are constituted so that the active lines can be inserted and removed from the packages without giving any influence on the operations in the system. SOLUTION: Each of the packages 4 and 6 of a storage system has a control means 11 and a clock generating section 14. When a fault occurs in one package 4 or 6, an insertion/removal control section 13 provided in the control means 11 blocks a bus driver 15 and the clock generating section 14. When the section 14 is blocked, the internal circuit of the package is reset and the function of the package is stopped, namely, the package is blocked.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a storage system which can be maintained without powering down when an information processing apparatus is maintained, and more particularly to a magnetic disk sub-system capable of hot-swapping each package with respect to a common bus. About the system.

[0002]

2. Description of the Related Art Currently, nonstop operation is required for computer systems used in plant control and financial systems. However, in a conventional computer system, when a failure occurs in a part of the system, it is necessary to once turn off the power of the system and perform a recovery operation. For non-stop operation, it is necessary to replace or maintain a failed part without turning off the system power.

[0003] The following applications are related to the hot-swap technique for realizing such non-stop maintenance. Japanese Patent Application Laid-Open No. HEI 5-175675 discloses that in an electronic device having a plurality of packages connected to a common bus, a control device provided outside the package when the package is inserted or removed is a connection circuit between the package and the common bus. There is disclosed a technique for controlling a bus buffer and logically separating a package from a common bus. More specifically, the connection between the bus buffer and the common bus is made high impedance.

It is also effective to employ a technique for improving the reliability of the entire system, that is, a fault-tolerant system in which the system is constituted by a plurality of redundant systems in order to operate the computer system without stopping. As a known example of this kind, Japanese Patent Laid-Open Publication No. Hei 3-26611 discloses a system including a plurality of redundant systems, in which parts other than the redundant system interface unit are operated by independent clocks for each redundant system. .

[0005]

Problems to be Solved by the Invention
In the electronic device disclosed in Japanese Patent Laid-Open Publication No. H05-205, control of hot-swap and diagnosis of a plurality of packages is performed centrally by a specific control unit in the device. Therefore, when a failure occurs in the control unit, the system is disabled. There is a problem that stop maintenance becomes impossible.
Further, only the technology for logically separating the bus buffer from the common bus, that is, the technology for separating the package from the data bus for transmitting data is disclosed, and the effect on the entire system is not considered at all. There are points.

[0006] Also, Japanese Patent Application Laid-Open No. 3-26611 discloses that
Although a system that operates with an independent clock for each redundant system is disclosed, there is a problem that replacement of each redundant system without affecting the operation of the system during operation of the system is not considered at all. is there.

SUMMARY OF THE INVENTION One object of the present invention is to provide a storage system composed of a plurality of packages which share a bus and which can be hot-plugged without hot-plugging a package without affecting the operation in the system. It is to provide a feasible storage system.

Another object of the present invention is to provide a magnetic disk subsystem in which each package is detachably connected to a common bus and can be inserted and removed without affecting other packages.

[0009]

According to the present invention, there is provided a storage system comprising: a plurality of upper connection logic devices constituting an interface to a higher device; a storage device for storing data;
A plurality of storage device side connection logic devices constituting an interface to the storage means, and a temporary storage device for temporarily storing data transferred between the upper connection side logic device and the storage device side connection logic device. . The upper connection logic device, the storage device connection logic device, and the temporary storage device are each configured by a plurality of packages connected to a common bus that interconnects these devices,
Each of the packages has a clock circuit for supplying a clock to the internal circuit, and control means for stopping supply of the clock to the internal circuit and performing a closing process. Each package is configured to be freely inserted into and removed from the common bus.

[0010]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to embodiments.

FIG. 1 is a system schematic diagram of a storage system described in this embodiment. In this embodiment, a magnetic disk is used as a storage medium, but there is no problem if another storage medium is used. A storage system using a magnetic disk as a storage medium, that is, a magnetic disk subsystem 1 includes a common bus 3, a host adapter package 4 connected to the common bus 3, a cache package 5, a disk adapter package 6, and a maintenance processor 9 (hereinafter SVP 9). ).

The common bus 3 includes a data bus, a control bus, and a power supply line (not shown).

The host adapter package 4 is an interface with the host computer 2, and includes a data processing unit 10 a for processing data, and a host adapter package 4 connected to the data processing unit 10 a and connected to the common bus 3.
A bus driver 15 serving as an interface, a control unit 11 for controlling the data transfer thereof, and a clock generator 14 for generating a package operation reference signal. The control unit 11 controls the SV through the maintenance information transmission path 8
A package control unit 12 that reports the operation state of the package to P9, an insertion / removal control unit 1 that instructs a package closing process in preparation for removal of a package according to an instruction of the package control unit 12, and initializes the package after the package is inserted.
3

The package control unit 12 has a microprocessor 16 (hereinafter referred to as MP16), monitors the operation state of the package, and determines that a failure has occurred in the package, for example, a failure has occurred in data communication with another package. In such a case, the blockage of the package is instructed to the insertion / extraction controller 13. When instructed by the package controller 12 to close the faulty package, the insertion / removal controller 13 sends a PKOFF signal to the bus driver 15 and a reset signal to the clock generator 14 and the data processor 10a. Perform closing processing. At that time, the bus driver 15
Are in a high impedance state with respect to the common bus 3, and the package 4 is logically separated from the common bus 3. In addition, since at least the clock generator 14 is in the closed state, the circuit in the package is in the reset state, and the function of the package is stopped, that is, the package is in the closed state. When the package is closed, the power consumption of the package decreases. As a result, when the package 4 is removed, the bus driver 15 is in a high-impedance state with respect to the common bus 3 and does not emit noise to the data bus and the control bus of the common bus 3. Since the power consumption of the package is reduced, no noise is generated on the power supply line of the common bus. Therefore, in the magnetic disk subsystem to which the present invention is applied, it is possible to remove a package while reducing the influence on other packages connected through the common bus 3.

The package control unit 12 also detects a failure of another package responded via the common bus 3 and can instruct a closing process of the package.

The cache package 5 without the package control unit 12 includes the data processing unit 10b, the insertion / removal control unit 1
3 comprises a control unit 11 ′ having a clock signal generator 3, a clock generator 14, and a bus driver 15. The control means 11 ′ does not have the package control unit 12 unlike the control means 11, so that the closing process of the package 5 is performed by the package control unit 12 of another package via the common bus 3.

The disk adapter package 6 has substantially the same configuration as the host adapter package 4. However, the data processing unit 10c in the disk adapter package 6 is connected to the bus driver 15 and the magnetic disk group 7. Although not shown, the data processing unit 10c can be connected to a plurality of magnetic disk groups 7. The magnetic disk group 7 has a plurality of magnetic disk devices 17, each of which is connected in parallel to the data processing unit 10c. Further, since the disk adapter package 6 has the package control unit 12 like the host adapter package 4, the disk adapter package 6 can shift to the closed state by itself.

The package newly inserted into the subsystem is subjected to self-diagnosis by the package closing control unit 45, and is incorporated into the subsystem according to an instruction from the SVP 9.

In the magnetic disk subsystem to which the present invention is applied, in order to perform maintenance replacement of a normally operating package, the SVP 9 is operated to block the package control unit 12 of the package to be maintained. To instruct. The SVP 9 is provided with a display unit 18 and input means (not shown). If the package to be maintained does not have the package control unit 12, the closing process of the target package is performed through the package control unit 12 of the package that is not to be maintained.

As described above, in the magnetic disk subsystem to which the present invention is applied, the monitoring of the package failure and the closing processing are performed for each package, so that the system can be maintained without interruption.

Since the magnetic disk subsystem to which the present invention is applied has a clock generator 14 for each package, a clock, that is, a reference frequency in the package is supplied for each package. For this reason,
Since the clock signal supplied to each package is not interrupted by the blockage of another package, it goes without saying that the failure of one package does not stop the entire subsystem.

Further, the other packages for which the blockage of the package has been confirmed are replaced with the maintenance information transmission line 8.
Is notified to the SVP 9 via the
Since the display of the closed package is instructed, it is possible to monitor the occurrence of a failure at the time of inserting / removing the package and prevent the package from being erroneously removed.

FIG. 2 is a configuration diagram of a magnetic disk subsystem according to an embodiment of the present invention. FIG. 2 shows a more detailed configuration of the storage system in FIG.

In this embodiment, the host adapter package 4 has four sides, and each host adapter package performs data transfer between the host computer and the data bus 31, and has a data transfer control function for the data bus 31. A bus controller 5 for transferring control information to and from the cache package 5 via the control system bus 32
2. A clock generator 14 for supplying a clock to an internal circuit of the host adapter package 4 via a supply path (not shown), receives a data transfer request from the host computer, and controls the host adapter package 4 (data transfer and fault monitoring). Microprocessor 16 (hereinafter M
P16), a LAN control unit 44 for controlling communication with the maintenance LAN, a boot device 43 which stores a microprocessor control program and is a rewritable memory such as a flash ROM, and a host adapter package 4 according to instructions from the MP16. A package closing control unit 45 that closes the package in preparation for removal of the package, that is, stops the function of the package, an LED 46 that turns on to indicate that the host adapter package 4 is in a closed state, the bus driver 47, and the insertion and removal of the host adapter package 4. The bus driver 47 includes a bus driver power controller 48 for controlling the power of the bus driver 47, and a main edge connector 60 for connecting the host adapter package 4 to the main platter 61. Disk adapter package 6
Is composed of eight surfaces in the subsystem of the present embodiment. Each disk adapter package has substantially the same configuration as the host adapter package 4, and the data transfer unit 41 transmits data between the data bus 31 and the magnetic disk group 7. The host adapter package 4 is different from the host adapter package 4 in that the host adapter package 4 performs transfer and has a data transfer control function for the data bus 31 and the magnetic disk group 7.
4, MP16, LAN control unit 44, boot device 4
3. The functions of the package closing control unit 45, the LED 46, the bus driver 47, the bus driver power control unit 48, and the main edge connector unit 60 are the same as those of the host adapter package 4.

The cache package 5 has M of each adapter.
A shared memory unit 53 that is commonly accessible from P16 and stores various management information on the state and operation of each package, and a shared memory control unit that transfers control information to and from each adapter via the control system bus 32 54, a cache memory unit 51 for temporarily storing data interposed between the host adapter package 4 and the disk adapter package 6 in data transfer between the host adapter package 4 and the disk adapter package 6, and the control bus 3
2, a cache memory control unit 52 for transferring control information to and from each package via the package 2, a package closing control unit 45 for closing a package in preparation for removal of a package in accordance with an instruction of an MP of another package, an LED 46, a bus driver 47. , A clock generator 14, and a bus driver power controller 48. If the contents of the shared memory unit 53 are lost, the operation of the subsystem becomes impossible. For non-stop operation of the subsystem, it is necessary to duplicate the cache package 5 in preparation for replacement. Therefore, the subsystem has two cache packages 5 storing the same information.

FIG. 3 is a diagram showing the configuration of the main edge connector 60 and the bus driver power supply controller 48 and the operation timing when the package is inserted and removed. Main edge connector 6
Pins 0 include a general power supply pin 71 for supplying the operating power of the package, a signal pin 72 for connecting an output signal of the bus driver to a data bus or a control bus, and a bus driver bias signal for applying a bias signal to the bus driver. There are a pin 73 and a ground pin 74. Hereinafter, the data bus 31 and the control bus 32 to which the signal pins 72 are connected are referred to as signal buses for the sake of explanation.

The bus driver 47 supplies a bias signal (Li)
Is given, the output signal is biased, and the capacitance of the output signal pin is reduced. While the power supply (Vcc) is not connected, the output signal pin is in a high impedance state.

When the package is inserted, the pins of the main edge connector 60 are (1) a ground pin 74, a bus driver bias signal pin 73, (2) a signal pin 72, and (3)
The general power supply pins 71 are connected to the platter side in this order. Therefore, the output signal of the bus driver 47 when the signal pin 72 is connected is biased, and the potential of the signal pin 72 which is the output pin of the bus driver is close to the potential of the signal bus of the platter. 7
Because the capacitance of 2 is already low,
The generation of noise due to the current drawn from the signal bus to the signal pin 72 is suppressed. Since the general power supply pin 71 is connected last, the signal pin 72 has a high impedance when the signal pin 72 is connected, so that the signal bus is not adversely affected at the time of connection.

When the package is removed, the pins of the main edge connector 60 are disconnected in the order of (1) a general power supply pin 71, (2) a signal pin 72, (3) a ground pin 74, and a bus driver bias signal pin 73. It is. Prior to the removal of the package, a PKOFF signal is issued by the package closing control circuit, the power supply to the bus driver 47 is cut off, and the output pin thereof becomes high impedance. Therefore, when the signal pin 72 is disconnected from the signal bus, the signal pin 72 has a high impedance, its potential is close to the potential of the signal bus by the bias signal (Li), and the capacitance is further reduced. Therefore, the influence of noise on the signal bus at the time of removal is suppressed.

FIG. 4 is a flowchart showing a procedure for exchanging packages (the host adapter package 4 and the disk adapter package 6) having the failed MP 16 in the system operating state. In the following, the procedure of hot-swap processing of a package with MP in the case of failure replacement will be described with reference to FIG.

When a failure occurs in the package with MP, the MP 16 in the failure package detects the failure (step 101), and in accordance with the instruction from the MP 16, the package closing control unit 71 issues a PKOFF signal to the internal circuit of the package. (Step 102). Since the clock is stopped by the reset signal, the operation of the internal circuit of the package is stopped, and the power consumption of the package is reduced (step 103). The reset signal stops the power supply to the bus driver 47 by the bus driver power supply control unit 92, and the output of the bus driver 47 becomes high impedance. Further, the package closing control section turns on the LED 72 to notify the maintenance staff of the completion of the package closing, and the package removal preparation is completed (step 104).

On the other hand, a normally operating package is:
The blockage of the failed package is confirmed via the control system bus 32 (step 105), and the blockage of the package is determined by the maintenance LAN.
Then, the SVP is notified to the shared memory 54 via the control system bus 32 (step 106). The SVP notified of the blockage of the package displays on the display unit 21 that the package has been blocked (step 107). Other packages are shared memory 5
When the user accesses the No. 3, it is possible to know the blockage of the package. After confirming the lighting of the LED and the display of the SVP (step 108), the maintenance person removes the package (step 109). At this time, the package removed by the package closing control unit 45 is in the low power consumption state as described above, and the main edge connector 6 is removed when the package is removed.
This prevents excessive current from flowing into the power supply pin 0 and causing damage. Similarly, the output of the bus driver is also high impedance, so that the influence of noise on the signal bus when the package is removed is suppressed, so that the operation of the entire system is not affected.

Next, the replacement package is inserted by the maintenance staff (step 110). When the signal pin 72 of the main edge connector 60 is connected, the output signal of the bus driver 91 is biased, the potential of the signal pin 72 is close to the potential of the signal bus of the platter, and the capacitance of the signal pin 72 is reduced. Since the state is already low, generation of noise from the signal bus to the signal pin 72 is suppressed. When the general power supply pin 71 is connected, the signal pin 72 has a high impedance, so that the signal bus is not adversely affected.

When the package closing control unit 71 detects the connection of the general power supply pin 71, the reset package is reset.
Is issued (step 111), and the MP of the exchange package is
16 starts operation. After performing the self-diagnosis (Step 112), the MP 16 of the exchange package operates according to the control program of the boot device 43 to perform the self-diagnosis and initialization of the exchange package (Step 113).

If an abnormality is detected during the self-diagnosis in steps 112 and 113, the package is closed and replaced again (step 102). If there is no abnormality as a result of the self-diagnosis, the replacement package is incorporated into the subsystem according to the instruction of the SVP 9 (step 114), and the normal operation is started (step 100).

FIG. 5 is a flowchart showing a procedure for replacing a package with an MP in a system operating state in order to perform maintenance and replacement of the package with the MP. The procedure of hot-swap processing of a package with MP for maintenance and replacement will be described below with reference to FIG.

The SVP 9 issues a maintenance replacement request by operation of a maintenance person (step 200). The maintenance replacement request is issued from the SVP 9 to the MP 16 of the maintenance target package via the maintenance LAN 8 (step 201), and the maintenance exchange request is transmitted to the M of the non-maintenance target package via the control system bus 32.
It may be issued to P16 (step 202 ').
In the former case, the MP 16 of the maintenance target package instructs the package closing processing unit to perform the closing process, the closing process is executed (steps 201 to 204), and the other packages confirm the blocking of the maintenance target package (step 205). In the latter case, the MP 16 of the package not to be maintained instructs the blocking processing unit of the package to be maintained to perform the blocking process, and the blocking process is executed (steps 201 ′ to 204 ′). Is confirmed (step 205). Thereafter, hot-swap of the package is performed in the same procedure (steps 206 to 214) as when the faulty package is replaced.

The failure detection of the package having no MP (cache package 5) is performed by MP1 of the package with MP.
6 is performed via the control system bus 32. In addition, the maintenance replacement request for the package without MP is
P16 receives and controls maintenance and replacement of the package without MP via the control system bus 32. The hot-line insertion / extraction process of the package without the MP is performed by the MP 16 of the package with the MP instructing the package closing processing unit of the package without the MP to be inserted / removed via the control system bus 32 to perform the closing process, and confirming that the package is closed. Perform the same procedure as for the package with MP.

According to the present embodiment, in a magnetic disk subsystem composed of a plurality of packages that can be hot-plugged into and removed from a common bus, an arbitrary operation can be performed without affecting the operation of other packages in the system. There is an effect that the package can be hot-swapped.

By closing the package by the insertion / removal control unit, the power consumption of the package is reduced, the influence on the power bus at the time of insertion / removal is suppressed, and the connector unit 60 is prevented from being damaged.

According to this embodiment, since the clock signal is supplied from each package, the failure of one package does not halt the entire subsystem, so that the fault tolerance of the entire subsystem is improved.

Further, in this embodiment, since the closed package can be easily confirmed, the whole subsystem will not be damaged by erroneous removal. Further, since a plurality of confirmation means are provided, it is easy to find a failure of the confirmation means.

According to still another operation of the present invention,
The inserted package performs its own self-diagnosis and performs SVP9
The subsystem can be operated regardless of the package insertion and its self-diagnosis.

[0044]

As described above, according to the present invention, in a storage system composed of a plurality of packages that share a bus and can be hot-plugged, hot-plugging of a package can be performed without affecting operation in the system. The effect is that it can be implemented.

[Brief description of the drawings]

FIG. 1 is a principle diagram of the present invention.

FIG. 2 is a system configuration diagram of an embodiment of the present invention.

FIG. 3 is a diagram illustrating a configuration of a connector and a bus driver power supply control unit and an operation timing when a package is inserted and removed;

FIG. 4 is a flowchart showing a procedure for replacing a failed package in a system operation state.

FIG. 5 is a flowchart showing a procedure for replacing a package in a system operation state for maintenance of a package.

[Description of Signs] 2 Magnetic disk subsystem 3 Common bus 4 Host adapter package 5 Cache package 6 Disk adapter package 11 Control means 12 Package control unit 13 Insertion / extraction control unit 14 Clock generation circuit 15 Bus driver 16 Microprocessor

Claims (9)

[Claims] 1. An integrated circuit comprising: a common bus; an independent clock circuit connected to the common bus via a bus driver for supplying a clock to an internal circuit; and control means for controlling the internal circuit and the clock circuit. A package closing method for a storage system, comprising: a package; and a management unit that manages information on the package, wherein the control unit of the failed package detects a failure in the package; Control means for issuing a signal for stopping the clock circuit and a signal for stopping the bus driver; closing the package by stopping the clock circuit and the bus driver; and controlling the other package. Notifying the management unit of the blockage of the faulty package. Characteristic package closing method. 2. A common bus, an independent clock circuit connected to the common bus via a bus driver, for supplying a clock to an internal circuit, a control processor for controlling the internal circuit, and the internal processor according to instructions from the control processor. A package closing method for a storage system, comprising: two or more packages each having a circuit, an insertion / removal control unit that controls closing of the clock circuit and the bus driver, and management means for managing information on the packages. Detecting the fault in the package by the control processor of the generated package; and
Issuing a signal for stopping the clock circuit and the bus driver, closing the package by stopping the clock circuit and the bus driver, and closing the control processor of the other package. Notifying the management means. 3. A common bus, an independent clock circuit connected to the common bus via a bus driver, for supplying a clock to an internal circuit, a control processor for controlling the internal circuit, and the internal processor according to instructions from the control processor. A package closing method for a storage system, comprising: two or more packages each including a circuit, a clock circuit, and an insertion / removal control unit that controls closing of the bus driver, and management means for managing information on the packages. Means for issuing an exchange request to one of the two or more packages, and the control processor of the package to be exchanged receiving the exchange request; and A control unit stops the internal circuit, the clock circuit, and the bus driver. Issue, a step of closing the package by stopping the clock circuit and the bus driver, and a step of notifying the control means of the other processor of the faulty package to the management unit. A method of closing a package of a storage system. 4. A common bus, an independent clock circuit connected to the common bus via a bus driver, for supplying a clock to an internal circuit, a control processor for controlling the internal circuit, and the internal processor according to instructions from the control processor. A package closing method for a storage system, comprising: two or more packages each including a circuit, a clock circuit, and an insertion / removal control unit that controls closing of the bus driver, and management means for managing information on the packages. Means for issuing an exchange request to one of the two or more packages, and the control processor of one of the plurality of packages not subject to the exchange request receiving the exchange request; The insertion / removal control unit of the package to which the exchange request is applied, the control module having received the exchange request. The insertion / extraction controller issues a signal for stopping the internal circuit, the clock circuit, and a bus driver according to an instruction from a processor;
A storage system comprising: a step of closing the package by stopping the clock circuit and a bus driver; and a step of the control processor of another package notifying the management unit of the blockage of the faulty package. Package closure method. 5. The storage system, comprising: a plurality of upper-level logical devices connected to a higher-level device; a storage-side logical device connected to a storage device that stores data; and the higher-level device and the storage device. And a temporary storage device for temporarily storing data transferred between the devices, wherein each of the devices is constituted by the package.
5. The package closing method for a storage system according to any one of claims 4 to 4. 6. The package closure of a storage system according to claim 1, wherein said management means is a memory mounted on said package, and a package having said memory is duplicated. Method. 7. The method according to claim 1, wherein the signal for stopping the clock circuit is a reset signal. 8. A package closing method for a system including two or more packages having an independent clock circuit for supplying a clock to an internal circuit, and control means for controlling the internal circuit and the clock circuit, A package closing method, comprising: a step of detecting a failure in a package by the control means; and a step of stopping the internal clock by the control means. 9. The package closing method according to claim 13, wherein said control means closes the package by an instruction from outside of the package instead of detecting a failure.