Fault tolerant multiple network servers

• US 5,781,716 A
• Filed: 02/19/1997
• Issued: 07/14/1998
• Est. Priority Date: 05/19/1995
• Status: Expired due to Term

• Current Assignee: QNAP Systems Incorporated
• Original Assignee: Compaq Computer Corporation (HP Inc.)
• Inventors: Lawler, Thomas S., Stewart, Gregory Mart, Hemphill, John M.
• Primary Examiner(s): Decady, Albert
• Application Number:
  US08/802,644
• Time in Patent Office: 510 Days
• Field of Search: 395/180, 395/182.02, 395/181, 395/182.01, 395/182.03, 395/182.08, 395/182.09, 395/182.11, 395/182.21, 395/182.15, 395/183.13, 364/268, 364/269.9, 364/242.94, 364/228.3, 364/229, 364/229.4
• US Class Current: 714/4.5
• CPC Class Codes: G06F 11/0757 by exceeding a time limit, i.e. time-out, e.g. watchdogs
• CPC Class Codes: G06F 11/142 Reconfiguring to eliminate the error group management mechanisms in a peer-to-peer network H04L67/1044
• CPC Class Codes: G06F 11/1482 by means of middleware or OS functionality
• CPC Class Codes: G06F 11/2002 where interconnections or communication control functionality are redundant flexible arrangements for bus networks involving redundancy H04L12/40176
• CPC Class Codes: G06F 11/2005 using redundant communication controllers
• CPC Class Codes: G06F 11/2007 using redundant communication media
• CPC Class Codes: G06F 11/2023 Failover techniques
• CPC Class Codes: G06F 11/2028 eliminating a faulty processor or activating a spare
• CPC Class Codes: G06F 11/2033 switching over of hardware resources
• CPC Class Codes: G06F 11/2035 without idle spare hardware
• CPC Class Codes: G06F 11/2038 with a single idle spare processing component
• CPC Class Codes: G06F 11/2046 where the redundant components share persistent storage G06F11/2043 takes precedence
• CPC Class Codes: G06F 11/2092 Techniques of failing over between control units
• CPC Class Codes: G06F 11/22 Detection or location of defective computer hardware by testing during standby operation or during idle time, e.g. start-up testing
• CPC Class Codes: G06F 13/4022 using switching circuits, e.g. switching matrix, connection or expansion network G06F13/4009 takes precedence

Abstract

A fault tolerant multiple network server system in which multiple servers concurrently act as back-up servers for each other even while they are providing their own server services to the system. Rather than having an unused server monitoring for failure of a primary server and taking over control, each is act upon the network, but when its partner should fail, it assumes control of these partner servers storage subsystem. In this way, processing power of both servers is available during normal operation, but they each provide back-up capability for the other.

Claims

1. An active server for use with a partner active server coupled to a second storage system in a network, the partner active server providing network data to the second storage system via a partner network operating system, the active server comprising:

a connection for a first storage system, the active server providing network data to said first storage system via a network operating system;

a recovery agent for providing and receiving heartbeat messages to and from the partner active server, said recovery agent sending a switch command upon a failure to receive the heartbeat message from the partner active server; and

a connection for the second storage system, the active server providing network data to the second storage system via the network operating system upon receipt by the second storage system of said switch command,

wherein the network data provided to said first storage system by said active server is different from the network data provided to said second storage system by said partner active server.

2. The active server of claim 1, further comprising:

registered applications, said recovery agent sending a predetermined message to said registered applications upon a failure of the partner active server to send the heartbeat message.

3. The active server of claim 1, further comprising:

a recovery controller for providing reset signals to the second storage system for coupling the second storage system and the active server wherein the switch command from said recovery agent includes the providing of the reset signals by the recovery controller to the second storage system.

4. The active server of claim 3, further comprising:

a network operating system for providing logical recognition of the second storage system by said recovery controller as part of the switch command from said recovery agent.

5. A system comprising the active server of claim 1, and further comprising the first storage system connected to said connection for the system, wherein the first storage system is switchable from the active server to to the partner active server upon receipt by the first storage system of a switch command from the partner active server indicating a failure to receive a heartbeat message from the active server.