High reliability in storage array systems

• US 10,372,354 B1
• Filed: 06/15/2017
• Issued: 08/06/2019
• Est. Priority Date: 06/15/2017
• Status: Active Grant

• Current Assignee: Nutanix Incorporated
• Original Assignee: Nutanix Incorporated
• Inventors: Parvathareddy, Abhiram, Tulshibagwale, Raghav Koteshwar
• Primary Examiner(s): Cardwell, Eric
• Application Number:
  US15/624,288
• Time in Patent Office: 782 Days
• CPC Class Codes: G06F 3/0619 in relation to data integrity, e.g. data losses, bit errors
• CPC Class Codes: G06F 3/0634 by changing the state or mode of one or more devices
• CPC Class Codes: G06F 3/065 Replication mechanisms
• CPC Class Codes: G06F 3/0653 Monitoring storage devices or systems
• CPC Class Codes: G06F 3/0665 at area level, e.g. provisioning of virtual or logical volumes
• CPC Class Codes: G06F 3/0683 Plurality of storage devices
• CPC Class Codes: G06F 3/0689 Disk arrays, e.g. RAID, JBOD

Abstract

A storage system for providing zero data loss during failover and failback. A storage system comprises a dual controller that includes a first controller to process a first set of storage I/O operations and a first hardware timer. Redundancy is provided by a second controller that processes a second set of storage I/O operations. The second controller has a corresponding second hardware timer. Both the first controller and second controller each employ respective dual channel drive interfaces. The dual channel drives are arranged in an array. Each controller executes instructions to access at least two different portions of any one of the plurality of dual channel drives. In a failover scenario, when a controller suspects failure of a peer, a lockless signaling protocol is invoked. After a delay for a hardware timer timeout period, the protocol signals an intention to take over resources as soon as mutual exclusion is guaranteed.

Claims

1. A system comprising:

a first controller having a first timer and a first drive interface;

a second controller having a second timer and second drive interface; and

a set of dual channel drives electrically coupled to both the first drive interface and the second drive interface, wherein the first controller writes a controller status to a status area on one or more of the set of dual channels drives based on at least the first timer, and the second controller reads the status area based on at least the second timer to determine if the first controller reported operational status during a first time period of the first timer corresponding to a second time period of the second timer.

2. The system of claim 1, wherein the first timer and the second timer are separate hardware timers.

3. The system of claim 1, wherein the first controller and the second controller correspond to separate hardware.

4. The system of claim 1, wherein the first drive interface comprises at least a first plurality of physical hardware interface connections and the second drive interface comprises at least a second plurality of physical hardware interface connections.

5. The system of claim 1, wherein the first controller is a sole owner of the set of dual channel drives.

6. The system of claim 1, wherein the set of dual channel drives comprise two physical connections for connection to respective drive interfaces.

7. The system of claim 6, wherein at least some of the set of dual channel drives are initially assigned to a first redundancy group.

8. The system of claim 6, wherein the first controller writes controller status information to two or more of the set of dual channel drives.

9. The system of claim 6, wherein the second controller reads controller status information from two or more of the set of dual channel drives to implement a consensus scheme.

10. The system of claim 1, wherein the second controller resets the second timer in response to determining that the first controller reported operational status during a corresponding time period.

11. The system of claim 1, wherein the first controller issues an instruction to pause the second timer for timeout period.

12. The system of claim 1, wherein the second controller signals an intention to take ownership of the set of dual channel drives in response to failing to determine that the first controller provided controller status information reporting an operational status.

13. The system of claim 1, wherein the status area on the one or more of the set of dual channels drives are separate from user data areas.

14. A method comprising:

writing a controller state to a status area on one or more of a set of dual channel drives based on at least a first timer by a first controller having a first drive interface electrically coupled to the set of dual channel drives;

reading a controller state from the status area on one or more of the set of dual channel drives based on at least a second timer by a second controller having a second drive interface electrically coupled to the set of dual channel drives; and

determining if the first controller reported operational status during a first time period of the first timer corresponding to a second time period of the second timer.

15. The method of claim 14, wherein the first timer and the second timer are separate hardware timers.

16. The method of claim 14, wherein the first controller and the second controller correspond to separate hardware.

17. The method of claim 14, wherein the first drive interface comprises at least a first plurality of physical hardware interface connections and the second drive interface comprises at least a second plurality of physical hardware interface connections.

18. The method of claim 14, wherein the first controller is a sole owner of the set of dual channel drives.

19. A non-transitory computer readable medium having stored thereon a sequence of instructions which, when executed by a processor performs a set of acts comprising:

writing a controller state to a status area on one or more of a set of dual channel drives based on at least a first timer by a first controller having a first drive interface electrically coupled to the set of dual channel drives;

reading a controller state from the status area on one or more of the set of dual channel drives based on at least a second timer by a second controller having a second drive interface electrically coupled to the set of dual channel drives; and

determining if the first controller reported operational status during a first time period of the first timer corresponding to a second time period of the second timer.

20. The computer readable medium of claim 19, wherein the first timer and the second timer are separate hardware timers.