No data loss IT disaster recovery over extended distances

• US 7,577,868 B2
• Filed: 09/22/2006
• Issued: 08/18/2009
• Est. Priority Date: 09/30/2005
• Status: Active Grant

• Current Assignee: Lockheed Martin Corporation (Martin Marietta Corporation)
• Original Assignee: Lockheed Martin Corporation (Martin Marietta Corporation)
• Inventors: Aidun, Mehrdad
• Primary Examiner(s): Maskulinski; Michael C
• Assistant Examiner(s): Manoskey; Joseph D
• Application Number:
  US11/534,546
• Publication Number:
  US 20070079171A1
• Time in Patent Office: 1,061 Days
• Field of Search: 714/5, 714/6, 714/7, 714/8, 714/42
• US Class Current: 714/6.1
• CPC Class Codes: G06F 11/2058 using more than 2 mirrored copies
• CPC Class Codes: G06F 11/2069 Management of state, configuration or failover
• CPC Class Codes: G06F 11/2074 Asynchronous techniques
• CPC Class Codes: G06F 11/2076 Synchronous techniques
• CPC Class Codes: G06F 11/2082 Data synchronisation

Abstract

Systems and methods operating over extended distances provide for recovery of data and operational continuity of computer applications accessing data within an information technology system if an event occurs effecting access to the data. In one embodiment, an extended distance data recovery system (100) includes first, second and third data storage devices (112, 122, 132) located at respective first, second and third sites (110, 120, 130). The second and third sites (120, 130) are remotely located from the first site (110) with the second site (120) being nearby the first site (110). The first data storage device (112) has data (116) stored thereon. A computer executable control process (150) directs synchronous replication of the data (116), either at the storage level or at the application level, onto the second data storage device (122). The control process (150) also directs asynchronous replication of the data (116) from the second data storage device (122) onto the third data storage device (132) and coordinates among the three sites (110, 120, 130) the state of application servers, storage replication, network address changes, and other prerequisite aspects of the IT infrastructure required to allow the application servers to successfully start at the disaster recovery site.

Claims

1. An extended distance data recovery system comprising:

a first data storage device located at a first site, said first data storage device storing the data thereon;

a second data storage device located at a second site, said second data storage device being communicatively connected with said first data storage device;

a third data storage device located at a third site, said third data storage device being communicatively connected with said second data storage device; and

a computer executable control process executable to direct synchronous replication of the data onto said second data storage device;

said control process being further executable to direct asynchronous replication of the data from said second data storage device onto said third data storage device, wherein said control process directs the synchronous and asynchronous replication of the data such that the data is initially replicated onto said second data storage device and thereafter replicated from said second data storage device onto said third data storage device with operation of a user application at the first site involving the data being allowed to continue during the asynchronous replication of the data from said second data storage device to said third data storage device;

at least two independent sets of one or more data storage devices located at said first site, said first data storage device being included in one of said sets, wherein a first one of said sets of one or more data storage devices has a first set of data stored thereon, and wherein a second one of said sets of one or more data storage devices has a second set of data stored thereon;

a set of one or more data storage devices located at said third site, said third data storage device being included in said set of data storage devices located at said third site; and

a set of one or more data storage devices located at a fourth site;

wherein said control process is executable to direct synchronous replication of the first and second sets of data from said first and second sets of one or more data storage devices located at said first site onto said second data storage device located at said second site; and

wherein said control process is further executable to direct asynchronous replication of the first set of data from said second data storage device located at said second site onto said set of one or more data storage devices located at said third site and asynchronous replication of the second set of data from said second data storage device located at said second site onto said set of one or more data storage devices located at said fourth site.

2. The system of claim 1 wherein the control process directs synchronous replication of the data onto said second storage device at an application level.

3. The system of claim 1 wherein the control process directs synchronous replication of the data onto said second storage device at a data storage level.

4. The system of claim 1, wherein said control process is further executable to monitor an operational status of said first data storage device and, upon occurrence of an event effecting availability of the data from said first data storage device, update location identifying information associated with the data wherein a computer application accesses the data from one of said second site and said third site.

5. The system of claim 1, wherein said third site is geographically separated from said first and second sites, and wherein said second site is geographically separated from said first and third sites.

6. The system of claim 5, wherein a maximum allowable geographical separation distance between said first and second sites varies depending upon application sensitivity to a roundtrip packet delay time between said first and second sites and architectural and operational conditions of a data network connecting said first and second sites.

7. An extended distance data recovery system comprising:

a first data storage device located at a first site, said first data storage device storing the data thereon;

a second data storage device located at a second site, said second data storage device being communicatively connected with said first data storage device;

a third data storage device located at a third site, said third data storage device being communicatively connected with said second data storage device; and

a computer executable control process executable to direct synchronous replication of the data onto said second data storage device;

said control process being further executable to direct asynchronous replication of the data from said second data storage device onto said third data storage device, wherein said control process directs the synchronous and asynchronous replication of the data such that the data is initially replicated onto said second data storage device and thereafter replicated from said second data storage device onto said third data storage device with operation of a user application at the first site involving the data being allowed to continue during the asynchronous replication of the data from said second data storage device to said third data storage device;

wherein said control process is further executable to monitor an operational status of said first data storage device and, upon occurrence of an event effecting availability of the data from said first data storage device, update location identifying information associated with the data wherein a computer application accesses the data from one of said second site and said third site; and

wherein said control process updates said location identifying information with one or more domain name servers.

8. An extended distance data recovery system comprising:

a first data storage device located at a first site, said first data storage device storing the data thereon;

a second data storage device located at a second site, said second data storage device being communicatively connected with said first data storage device;

a third data storage device located at a third site, said third data storage device being communicatively connected with said second data storage device; and

a computer executable control process executable to direct synchronous replication of the data onto said second data storage device;

said control process being further executable to direct asynchronous replication of the data from said second data storage device onto said third data storage device, wherein said control process directs the synchronous and asynchronous replication of the data such that the data is initially replicated onto said second data storage device and thereafter replicated from said second data storage device onto said third data storage device with operation of a user application at the first site involving the data being allowed to continue during the asynchronous replication of the data from said second data storage device to said third data storage device;

wherein said third site is geographically separated from said first and second sites, and wherein said second site is geographically separated from said first and third sites; and

wherein said first and second sites are geographically separated such that a maximum roundtrip packet delay time over a data network connecting said first and second sites is in the range of 0.5 milliseconds to 10 milliseconds.

9. The system of claim 8, wherein said control process is executable on a computer system located at a fourth site.

10. An extended distance data recovery system comprising:

a first data storage device located at a first site, said first data storage device storing the data thereon;

a second data storage device located at a second site, said second data storage device being communicatively connected with said first data storage device;

a third data storage device located at a third site, said third data storage device being communicatively connected with said second data storage device; and

a computer executable control process executable to direct synchronous replication of the data onto said second data storage device;

said control process being further executable to direct asynchronous replication of the data from said second data storage device onto said third data storage device, wherein said control process directs the synchronous and asynchronous replication of the data such that the data is initially replicated onto said second data storage device and thereafter replicated from said second data storage device onto said third data storage device with operation of a user application at the first site involving the data being allowed to continue during the asynchronous replication of the data from said second data storage device to said third data storage device;

wherein said control process is executable on a computer system located at any one or more of said first, second and third sites.

11. An extended distance data recovery system comprising:

a first data storage device located at a first site, said first data storage device storing the data thereon;

a second data storage device located at a second site, said second data storage device being communicatively connected with said first data storage device;

a third data storage device located at a third site, said third data storage device being communicatively connected with said second data storage device; and

a computer executable control process executable to direct synchronous replication of the data onto said second data storage device;

said control process being further executable to direct asynchronous replication of the data from said second data storage device onto said third data storage device, wherein said control process directs the synchronous and asynchronous replication of the data such that the data is initially replicated onto said second data storage device and thereafter replicated from said second data storage device onto said third data storage device with operation of a user application at the first site involving the data being allowed to continue during the asynchronous replication of the data from said second data storage device to said third data storage device

wherein said control process comprises instances thereof executable on computer systems located at each of said first, second and third sites.

12. A method for providing recovery of data and operational continuity of computer applications accessing the data if an event occurs effecting access to the data on an information technology system, said method comprising the steps of:

storing the data at a first site;

synchronously replicating the data from the first site to a second site, wherein synchronous replication of the data is performed under the direction of a computer executable control process;

asynchronously replicating the data from the second site onto a third site, wherein asynchronous replication of the data is performed under the direction of the control process after synchronous replication of the data to the second site with operation of computer applications at the first site involving the data being allowed to continue during the asynchronous replication of the data from the second site to the third site;

monitoring an operational status of the first site;

updating, upon occurrence of the event, location identifying information associated with the data wherein the computer applications access the data from at least one of the second site and the third site;

storing additional data at the first site;

synchronously replicating the additional data from the first site to the second site, wherein synchronous replication of the additional data is performed under the direction of the computer executable control process; and

asynchronously replicating the additional data from the second site to a fourth site, wherein asynchronous replication of the additional data is performed under the direction of the control process.

13. The method of claim 12 wherein said step of synchronously replicating the data from the first site to the second site is performed at an application level.

14. The method of claim 12 wherein said step of synchronously replicating the data from the first site to the second site is performed at a data storage level.

15. The method of claim 12 wherein, in said steps of synchronously replicating and asynchronously replicating, the third site is geographically separated from the first and second sites, and wherein the second site is geographically separated from the first and third sites.

16. The method of claim 15 wherein, in said step of synchronously replicating, a maximum allowable geographical separation distance from the first site and the second site varies depending upon application sensitivity to a roundtrip packet delay time between said first and second sites and architectural and operational conditions of a data network connecting said first and second sites.

17. A method for providing recovery of data and operational continuity of computer applications accessing the data if an event occurs effecting access to the data on an information technology system, said method comprising the steps of:

storing the data at a first site;

synchronously replicating the data from the first site to a second site, wherein synchronous replication of the data is performed under the direction of a computer executable control process;

asynchronously replicating the data from the second site onto a third site, wherein asynchronous replication of the data is performed under the direction of the control process after synchronous replication of the data to the second site with operation of computer applications at the first site involving the data being allowed to continue during the asynchronous replication of the data from the second site to the third site;

monitoring an operational status of the first site; and

updating, upon occurrence of the event, location identifying information associated with the data wherein the computer applications access the data from at least one of the second site and the third site

wherein said updating comprises updating the location identifying information with one or more domain name sewers.

18. A method for providing recovery of data and operational continuity of computer applications accessing the data if an event occurs effecting access to the data on an information technology system, said method comprising the steps of:

storing the data at a first site;

synchronously replicating the data from the first site to a second site, wherein synchronous replication of the data is performed under the direction of a computer executable control process;

asynchronously replicating the data from the second site onto a third site, wherein asynchronous replication of the data is performed under the direction of the control process after synchronous replication of the data to the second site with operation of computer applications at the first site involving the data being allowed to continue during the asynchronous replication of the data from the second site to the third site;

monitoring an operational status of the first site; and

updating, upon occurrence of the event, location identifying information associated with the data wherein the computer applications access the data from at least one of the second site and the third site;

wherein in said step of synchronously replicating, the first and second sites are geographically separated such that a maximum roundtrip packet delay time over a data network connecting the first and second sites is in the range of 0.5 milliseconds to 10 milliseconds.

19. The method of claim 18 further comprising:

executing the control process on a computer system located at a fourth site.

20. A method for providing recovery of data and operational continuity of computer applications accessing the data if an event occurs effecting access to the data on an information technology system, said method comprising the steps of:

storing the data at a first site;

synchronously replicating the data from the first site to a second site, wherein synchronous replication of the data is performed under the direction of a computer executable control process;

asynchronously replicating the data from the second site onto a third site, wherein asynchronous replication of the data is performed under the direction of the control process after synchronous replication of the data to the second site with operation of computer applications at the first site involving the data being allowed to continue during the asynchronous replication of the data from the second site to the third site;

monitoring an operational status of the first site;

updating, upon occurrence of the event, location identifying information associated with the data wherein the computer applications access the data from at least one of the second site and the third site; and

executing the control process on a computer system located any one or more of said first, second and third sites.

21. A method for providing recovery of data and operational continuity of computer applications accessing the data if an event occurs effecting access to the data on an information technology system, said method comprising the steps of:

storing the data at a first site;

synchronously replicating the data from the first site to a second site, wherein synchronous replication of the data is performed under the direction of a computer executable control process;

asynchronously replicating the data from the second site onto a third site, wherein asynchronous replication of the data is performed under the direction of the control process after synchronous replication of the data to the second site with operation of computer applications at the first site involving the data being allowed to continue during the asynchronous replication of the data from the second site to the third site;

monitoring an operational status of the first site;

updating, upon occurrence of the event, location identifying information associated with the data wherein the computer applications access the data from at least one of the second site and the third site; and

executing instances of the control process on computer systems located at each of said first, second and third sites.

22. A system providing for recovery of data and operational continuity of computer applications accessing the data if an event occurs effecting access to the data on an information technology system, said system comprising:

means for storing data at a first site;

means for storing data at a second site;

means for synchronously replicating the data from the first site to the second site;

means for storing data at a third site;

means for asynchronously replicating the data from the second site onto the third site, wherein said means for asynchronously replicating the data asynchronously replicate the data from the second site onto the third site after synchronous replication of the data to the second site with operation of computer applications at the first site involving the data being allowed to continue during the asynchronous replication of the data from the second site to the third site;

means for monitoring an operational status of the first site and updating, upon occurrence of the event, location identifying information associated with the data wherein the computer applications access the data from at least one of the second site and the third site;

means for storing additional data at the first site, wherein said means for synchronously replicating are also for synchronously replicating the additional data onto said means for storing data at the second site; and

means for storing data at a fourth site, wherein said means for asynchronously replicating are also for asynchronously replicating the additional data from said means for storing data at the second site to said means for storing data at the fourth site.

23. The system of claim 22 wherein said means for storing data at a first site comprise a first data storage device, said means for storing data at a second site comprise a second data storage device, and said means for storing data at a third site comprise a third data storage device.

24. The system of claim 22 wherein said means for synchronously replicating the data, said means for asynchronously replicating the data, and said means for monitoring comprise a computer executable control process.

25. The system of claim 22 wherein said means for synchronously replicating the data from the first site to the second site replicate the data at an application level.

26. The system of claim 22 wherein said means for synchronously replicating the data from the first site to the second site replicate the data at a data storage level.

27. The system of claim 22, wherein the third site is geographically separated from the first and second sites, and wherein the second site is geographically separated from the first and third sites.

28. The system of claim 27, wherein a maximum allowable geographical separation distance between the first and third sites varies depending upon application sensitivity to a roundtrip packet delay time between said first and second sites and architectural and operational conditions of a data network connecting said first and second sites.

29. A system providing for recovery of data and operational continuity of computer applications accessing the data if an event occurs effecting access to the data on an information technology system, said system comprising:

means for storing data at a first site;

means for storing data at a second site;

means for synchronously replicating the data from the first site to the second site;

means for storing data at a third site;

means for asynchronously replicating the data from the second site onto the third site, wherein said means for asynchronously replicating the data asynchronously replicate the data from the second site onto the third site after synchronous replication of the data to the second site with operation of computer applications at the first site involving the data being allowed to continue during the asynchronous replication of the data from the second site to the third site; and

means for monitoring an operational status of the first site and updating, upon occurrence of the event, location identifying information associated with the data wherein the computer applications access the data from at least one of the second site and the third site;

wherein the third site is geographically separated from the first and second sites, and wherein the second site is geographically separated from the first and third sites; and

wherein said first and second sites are geographically separated such that a maximum roundtrip packet delay time over a data network connecting the first and second sites is in the range of 0.5 milliseconds to 10 milliseconds.