System and method for simplifying and managing complex transactions in a distributed high-availability computer system

• US 6,618,805 B1
• Filed: 06/30/2000
• Issued: 09/09/2003
• Est. Priority Date: 06/30/2000
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: Kampe, Mark A.
• Primary Examiner(s): Heckler, Thomas M.
• Application Number:
  US09/608,785
• Time in Patent Office: 1,166 Days
• Field of Search: 713/1, 713/100, 709/220, 709/221, 714/2-13, 717/168-173
• US Class Current: 713/1
• CPC Class Codes: G06F 11/1433 during software upgrading

Abstract

A method and system that manage upgrades in a high-availability computer system by viewing the upgrade process as driving the system between a succession of stable configurations. The mechanism used by a described embodiment is an availability manager that is capable of ascertaining the state of each component and driving it toward a goal state by driving toward a succession of desired stable configurations. A high-level orchestration agent instructs the availability manager when a stable configuration has been reached and it is time to drive toward a next stable configuration.

Claims

1. An upgrade method for a computer system including a plurality of components, wherein each component has an operational state, comprising:

providing a succession of stable target configurations of the system, a configuration specifying a state of one or more components in the system;

providing a progress rule for each target configuration;

driving the system from a current stable target configuration to a next stable target configuration in the succession; and

applying an associated progress rule if the system fails to reach a stable target configuration.

2. The method of claim 1, wherein a stable target configuration is defined as a configuration in which the system can operate for a predefined length of time.

3. The method of claim 1, wherein the computer system is a high-availability computer system.

4. The method of claim 1, wherein a target configuration includes a plurality of states of system components.

5. The method of claim 4, wherein the plurality of states includes the states of at least:

primary, spare, and secondary.

6. The method of claim 1, further including an availability manager, responsive to receipt of the current target configuration, that drives the components toward the states that make up the current target configuration.

7. The method of claim 6, wherein the availability manager publishes component operational states to other nodes within the highly available computer system.

8. The method of claim 6, wherein the orchestration agent receives published component operational states from the availability manager.

9. The method of claim 1, wherein a state of a component is active.

10. The method of claim 1, wherein a state of a component is standby.

11. The method of claim 1, wherein a state of a component is spare.

12. The method of claim 1, wherein a state of a component is off-line.

13. The method of claim 1, wherein a component status change is a component failure.

14. The method of claim 1, wherein failure to reach a stable target configuration is caused by a component loss of capacity.

15. The method of claim 1, wherein a failure to reach a stable target configuration is caused by a new component available.

16. The method of claim 1, wherein failure to reach a stable target configuration is caused by a request to take a component off-line.

17. An upgrade apparatus for a computer system including a plurality of components, wherein each component has an operational state, comprising:

a software portion configured to provide a succession of stable target configurations of the system, a configuration specifying a state of one or more components in the system;

a software portion configured to provide a progress rule for each target configuration;

a software portion configured to drive the system from a current stable target configuration to a next stable target configuration in the succession; and

a software portion configured to apply an associated progress rule if the system fails to reach a stable target configuration.

18. The apparatus of claim 17, wherein a stable target configuration is defined as a configuration in which the system can operate for a predefined length of time.

19. A computer program product, on a computer readable medium, that provides an upgrade method for a computer system including a plurality of components, wherein each component has an operational state, the acts performed by the computer program product comprising:

providing a succession of stable target configurations of the system, a configuration specifying a state of one or more components in the system;

providing a progress rule for each target configuration;

driving the system from a current stable target configuration to a next stable target configuration in the succession; and

applying an associated progress rule if the system fails to reach a stable target configuration.

20. The computer program product of claim 19, wherein a stable target configuration is defined as a configuration in which the system can operate for a predefined length of time.