Automatic failover configuration with redundant abservers
First Claim
1. An automatic failover configuration comprising:
- participants that are implemented in a processor and a memory device accessible to the processor, the participants includinga primary database system that processes transactions and produces redo data therefor,a standby database system that receives the redo data via a redo communications link, andan active observer that exchanges first control messages with the primary database system and the standby database system;
one or more redundant observers;
one or more non-redo communications links that are not redo communications links and that link the active observer and the redundant observers to the primary database system and the standby database system,the active observer and the redundant observers operating on non-database system entities which are coupled to the non-redo communication link and having hardware and/or operating system platforms that are different from the hardware and/or operating system platforms used in the primary and standby database systems; and
an active observer monitor that detects absence of the active observer by monitoring the primary database system and the standby database system via the non-redo communications links for receipt of control messages from the active observer and replaces the absent active observer with an observer of the redundant observers.
1 Assignment
0 Petitions
Accused Products
Abstract
Techniques used in an automatic failover configuration having a primary database system, a standby database system, and an observer for preventing divergence among the primary and standby database systems while increasing the availability of the primary database system. In the automatic failover configuration, the primary database system remains available even in the absence of both the standby and the observer as long as the standby and the observer become absent sequentially. The failover configuration further permits automatic failover only when the observer is present and the standby and the primary are synchronized and inhibits state changes during failover. The database systems and the observer have copies of failover configuration state and the techniques include techniques for propagating the most recent version of the state among the databases and the observer and techniques for using carefully-ordered writes to ensure that state changes are propagated in a fashion which prevents divergence.
-
Citations
18 Claims
-
1. An automatic failover configuration comprising:
-
participants that are implemented in a processor and a memory device accessible to the processor, the participants including a primary database system that processes transactions and produces redo data therefor, a standby database system that receives the redo data via a redo communications link, and an active observer that exchanges first control messages with the primary database system and the standby database system; one or more redundant observers; one or more non-redo communications links that are not redo communications links and that link the active observer and the redundant observers to the primary database system and the standby database system, the active observer and the redundant observers operating on non-database system entities which are coupled to the non-redo communication link and having hardware and/or operating system platforms that are different from the hardware and/or operating system platforms used in the primary and standby database systems; and an active observer monitor that detects absence of the active observer by monitoring the primary database system and the standby database system via the non-redo communications links for receipt of control messages from the active observer and replaces the absent active observer with an observer of the redundant observers. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9)
-
-
10. An observer for use in an automatic failover configuration having a primary database system and a standby database system, the observer being one of a plurality of observers in the automatic failover configuration and being implemented in a processor having a storage device accessible to the processor and the observer having communication links to the primary database system and the standby database system, exchanging control messages with the primary and/or the standby, and providing a quorum to the primary or the standby for a transition from a configuration state of the automatic failover configuration to another configuration state thereof,
the observer comprising: -
an active observer indicator that indicates whether the observer is exchanging control messages with the primary and/or the standby; an automatic failover configuration state handler that responds to the control messages when the observer is active by providing the quorum where necessary; and an active observer monitor which, when the observer is not active, monitors whether the active observer has become absent from the automatic failover configuration and when the active observer has become absent, acts to make another of the plurality of observers the active observer, the observer being linked by one or more non-redo communications links that are not redo communications links to the other observer, the primary database system, and the standby database system, the observer and the other observer operating on non-database system entities which are coupled to the non-redo communication link and having hardware and/or operating system platforms that are different from the hardware and/or operating system platforms used in the primary and standby database systems, and the active observer monitor detecting absence of the active observer by monitoring the primary database system and the standby database system via the non-redo communications links for receipt of control messages from the active observer. - View Dependent Claims (11, 12, 13, 14)
-
-
15. A method practiced in an observer belonging to an automatic failover configuration having a primary database system and a standby database system and one or more observers, the observers being implemented in a processor having a storage device accessible to the processor, the observers having communication links to the primary database system and the standby database system, and an active observer of the observers exchanging control messages with the primary and/or the standby and providing a quorum to the primary or the standby for a transition from a configuration state of the automatic failover configuration to another configuration state thereof,
the method comprising the steps of: -
when the observer is the active observer, ceasing to be the active observer in response to a control message indicating that the observer is no longer the active observer; when the observer is not the active observer, monitoring whether the active observer has become absent from the automatic failover configuration; and when the active observer has become absent, acting to make another of the observers the active observer, the observer being linked by one or more non-redo communications links that are not redo communications links to the other observer, the primary database system, and the standby database system, the observers operating on non-database system entities which are coupled to the non-redo communication link and having hardware and/or operating system platforms that are different from the hardware and/or operating system platforms used in the primary and standby database systems; and the active observer monitor detecting absence of the active observer by monitoring the primary database system and the standby database system via the non-redo communications links for receipt of control messages from the active observer. - View Dependent Claims (16, 17, 18)
-
Specification