APPROACH FOR MANAGING STATE INFORMATION BY A GROUP OF SERVERS THAT SERVICES A GROUP OF CLIENTS

• US 20100318605A1
• Filed: 08/25/2010
• Published: 12/16/2010
• Est. Priority Date: 07/14/2005
• Status: Active Grant

• Current Assignee: Brian Weis
• Original Assignee: Brian Weis
• Inventors: WEIS, BRIAN
• Granted Patent: US 7,991,836 B2
• Time in Patent Office: Days
• US Class Current: 709/203
• CPC Class Codes: G06F 11/1425 by reconfiguration of node membership
• CPC Class Codes: G06F 11/2028 eliminating a faulty processor or activating a spare
• CPC Class Codes: G06F 11/2041 with more than one idle spare processing component
• CPC Class Codes: H04L 41/0654 using network fault recovery ring fault isolation or reconfiguration in loop networks without recovery actions by a network management system H04L12/437
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management

Abstract

An approach for managing state information by a group of servers that services a group of clients is disclosed. One server is designated as the primary server and is responsible for generating state information to be used by both the servers and the clients. The remaining servers are designated as secondary servers that help to manage the group, but which do not generate the state information. When the primary server fails or is not available due to a network partition event, one of the secondary servers changes role to become the primary server. With a network partition event, each partition can have a primary server, and when the network partition heals, one of the primary servers changes role back to being a secondary server. As a result, the group of servers maintains a consistent set of state information without being vulnerable to the single failure of a server.

Claims

1. A non-transitory machine-readable medium storing one or more sequences of instructions which, when executed by one or more processors, causes the one or more processors to perform:

electronically causing one server of a first group of data processing servers to be designated as a primary server that generates the state information to be used by both the first group of data processing servers and a second group of clients;

wherein the state information supports communication between clients in the second group of clients according to a network security protocol;

electronically causing the remaining servers of the first group of data processing servers to be designated as secondary servers that receive the state information from the primary server and provide the state information to clients, wherein the secondary servers do not generate the state information; and

in response to detecting that the primary server cannot communicate with at least one secondary server, electronically causing one of the secondary servers to be designated as the primary server that generates additional state information to be used by both the first group of data processing servers and the second group of clients.

2. A non-transitory machine-readable medium as recited in claim 1, wherein, when the one or more sequences of instructions are executed by the one or more processors:

the primary server distributes the state information to the secondary servers;

the primary server and the secondary servers are capable of adding or removing a client from the group of clients; and

the primary server and the secondary servers are capable of distributing the state information to any client of the group of clients that contacts the primary server or one of the secondary servers.

3. A non-transitory machine-readable medium as recited in claim 1, wherein, when the one or more sequences of instructions are executed by the one or more processors, electronically causing one of the secondary servers to be designated as the primary server that generates additional state information comprises:

electronically causing first priority information for a first secondary server and second priority information for a second secondary server to be compared; and

based on the first priority information indicating a higher priority than the second priority information, electronically causing the first secondary server to be designated as the primary server.

4. A non-transitory machine-readable medium as recited in claim 1, wherein, when the one or more sequences of instructions are executed by the one or more processors:

the primary server not being able to communicate with said at least one secondary server further includes the primary server not being able to communicate with a first subgroup of secondary servers of the first group of data processing servers and a second subgroup of clients of the second group of clients, wherein the first subgroup of secondary servers includes the at least one secondary server; and

said one of the secondary servers that is designated as the primary server generates the additional state information to be used by both the first subgroup of servers and the second subgroup of clients.

5. A non-transitory machine-readable medium as recited in claim 4, wherein, when the one or more sequences of instructions are executed by one or more processors:

the primary server that is not able to communicate with the first subgroup of secondary servers and the second subgroup of clients is a first primary server;

said one of the secondary servers that is designated as the primary server that generates the additional state information is a second primary server; and

the first primary server is still able to communicate with a third subgroup of secondary servers of the first group of data processing servers and a fourth subgroup of clients of the second group of clients, wherein the third subgroup of secondary servers does not include the second primary server.

6. A non-transitory machine-readable medium as recited in claim 5, wherein the one or more sequences of instructions, when executed by the one or more processors, further causes the one or more processors to perform:

when the first primary server is again able to communicate with the first subgroup of secondary servers and the second subgroup of clients,

electronically causing first state information from the first primary server and second state information from the second primary server to be synchronized;

electronically causing one primary server from among the first primary server and the second primary server to be designated as the primary server that generates additional state information for both the first group of data processing servers and the second group of clients; and

electronically causing the other primary server from among the first primary server and the second primary server to be designated as a secondary server.

7. A non-transitory machine-readable medium as recited in claim 1, wherein, when the one or more sequences of instructions are executed by one or more processors:

each client of the second group of clients includes an ordered listing of the servers in the first group of data processing servers;

each client selects a particular server of the second group of servers to obtain state information from based on the ordered listing;

the ordered listings for the clients are arranged so that requests from the clients of the second group of clients are distributed among the servers of the first group of data processing servers; and

the primary server is the only server among the first group of data processing servers to be designated as the primary server.

8. A non-transitory machine-readable medium as recited in claim 1, wherein, when the one or more sequences of instructions are executed by one or more processors:

the state information and the additional state information each include one or more objects;

the primary server can create new objects and destroy existing objects but cannot modify existing objects;

the primary server and each secondary server are active servers;

the primary server is a master server and each secondary server is a slave server;

each server in the first group of data processing servers is included in a different local area network (LAN);

the state information and the additional state information include one or more security associations that are based on Internet Protocol Security (IPsec);

the first group of data processing servers uses a group key management system based on Group Domain of Interpretation (GDOI); and

the first group of data processing servers provides IPsec keys to the second group of clients based on GDOI as part of a feature selected from the group consisting of a secure multicast feature and a group virtual private network (VPN) feature.

9. A non-transitory machine-readable medium storing one or more sequences of instructions which, when executed by one or more processors, cause the one or more processors to manage state information to be used by a first group of data processing servers and a second group of clients by performing:

electronically receiving the state information from a first server at a second server, wherein;

the first server is included in the first group of data processing servers and is responsible for generating the state information;

the second server is included in the first group of data processing servers and is responsible for providing the state information to clients in the second group of clients, but is not responsible for generating the state information;

the state information is to be used by both the first group of data processing servers and the second group of clients;

wherein the state information supports communication between clients in the second group of clients according to a network security protocol;

the second server electronically detecting that the first server is not able to communicate with the second server;

in response to said detecting,

the second server determining that the second server should be responsible for generating the state information in place of the first server; and

the second server generating the state information.

10. A non-transitory machine-readable medium as recited in claim 9, wherein the one or more sequences of instructions, when executed by the one or more processors, further causes the one or more processors to perform:

the second server detecting that the first server is again able to communicate with the second server;

the second server sending first state information to the first server;

the second server receiving second state information from the first server;

the second server generating third state information by synchronizing the first state information and the second state information;

the second server providing priority information to the first server; and

the second server receiving designation information from the first server that indicates that the first server is not responsible for generating the state information.

11. A non-transitory machine-readable medium as recited in claim 9, wherein, when the one or more sequences of instructions are executed by one or more processors:

prior to the second server detecting that the first server is not able to communicate with the second server, the first server is designated as a primary server and the second server is designated as a secondary server;

after the second server determines that the second server should be responsible for generating the state information in place of the first server, the second server is designated as the primary server; and

detecting that the first server is not able to communicate with the second server further comprises;

the second server determining that no messages from the first server have been received within a first specified period of time; and

the second server determining that the first server fails to respond within a second specified period of time to a message sent from the second server to the first server.

12. A non-transitory machine-readable medium as recited in claim 9, wherein, when the one or more sequences of instructions are executed by one or more processors:

the state information includes one or more group keys to be used for encrypting and decrypting communications among the second group of clients and between the first group of data processing servers and the second group of clients according to the Internet Protocol Security (IPsec);

the first server receiving the state information from the first server includes the first server receiving the one or more group keys from the second server;

the second server generating the state information includes;

the second server generating at least one additional group key; and

the second server communicating the at least one additional group key to the second group of clients using a rekey message.