Information processing system, information processing apparatus, and control method for information processing system

• US 20050160305A1
• Filed: 04/06/2004
• Published: 07/21/2005
• Est. Priority Date: 01/09/2004
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Hitachi, Ltd.
• Inventors: Soejima, Kenichi
• Granted Patent: US 7,114,094 B2
• Time in Patent Office: Days
• US Class Current: 714/2
• CPC Class Codes: G06F 11/1451 by selection of backup contents
• CPC Class Codes: G06F 11/2028 eliminating a faulty processor or activating a spare
• CPC Class Codes: G06F 11/2071 using a plurality of controllers

Abstract

An information processing system has: information processing apparatus installed at each site, the apparatuses being interconnected with each other; fail-over processor realized by program executed by a processing apparatus, wherein when failure occurs, the fail-over processor performs to fail-over of making another different from the processing apparatus hit by the failure inherit processes executed by the processing apparatus hit by the failure; a recovery capability judge for judging whether essential data is managed in recoverable state at any processing apparatus excepting the processing apparatus hit by the failure, when the fail-over is executed passing from the processing apparatus hit by the failure to the other, the essential data necessary for performing fail-over; and backup data generator for generating backup data necessary for recovering the essential data if the data is not managed in recoverable state.

Claims

1. An information processing system comprising:

an information processing apparatus installed at each of a plurality of sites, said information processing apparatuses being interconnected to be able to communicate with each other;

a fail-over processor realized by a program executed by one or more information processing apparatuses, wherein when a failure occurs at one of said information processing apparatuses, said fail-over processor performs a process related to fail-over of making another information processing apparatus different from said information processing apparatus hit by said failure inherit processes executed by said information processing apparatus hit by said failure;

a recovery capability judge for judging whether essential data is managed in a recoverable state at any one of said information processing apparatuses excepting said information processing apparatus hit by said failure, when said fail-over is executed passing from said information processing apparatus hit by said failure to said other information processing apparatus, said essential data being necessary data for performing a process to be dealt with said fail-over; and

a backup data generator for generating backup data necessary for recovering said essential data if said essential data is not managed in the recoverable state.

2. The information processing system according to claim 1, wherein said recovery capability judge judges whether said essential data is managed in the recoverable state, by judging whether said backup data is generated at any one of said information processing apparatuses excepting said information processing apparatus hit by said failure.

3. The information processing system according to claim 1, further comprising:

an inquiry message transmitter realized by a program executed by one or more information processing apparatuses, said inquiry message transmitter transmitting an inquiry message to said other information processing apparatus when said fail-over is to be executed, said inquiry message inquiring about whether said essential data is managed in the recoverable state at said other information processing apparatus;

wherein said recovery capability receives a response to said inquiry message transmitted from said inquiry message transmitter, from said other information processing apparatus, said response being set with information indicating whether said essential data is managed in the recoverable state, and judges whether said essential data is managed in the recoverable state, in accordance with said received response.

4. The information processing system according to claim 1, wherein:

said inquiry message transmitter transmits said inquiry message added with identification information of said essential data to said other information processing apparatus; and

said information processing apparatus for receiving said inquiry message comprises;

a backup data management information storage realized by a program executed by said information processing apparatus, said backup data management information storage storing a correspondence between information indicating whether said essential data is managed in the recoverable state at said information processing apparatus and said identification information of said essential data;

an inquiry message receiver for receiving said inquiry message; and

an inquiry message responder for acquiring from said backup data management information storage, information indicating whether said essential data is managed in the recoverable state at said information processing apparatus, said information corresponding to said identification information added to said inquiry message added to said inquiry message received by said inquiry message receiver, and for answering back said response to a transmission source of said inquiry message, said response being set with information of whether said essential data is management in the recoverable state at said information processing apparatus.

5. The information processing system according to claim 4, wherein:

said backup data management information storage stores the information of whether said essential data is managed in the recoverable state at said information processing apparatus and information necessary for reading said backup data, in correspondence with said identification information of said essential data;

said information processing apparatus further comprises a backup data reader realized by a program executed by said information processing apparatus, said backup data reader performing a process of reading said backup data in accordance with the information necessary for reading said backup data;

said inquiry message responder acquires from said backup data management information storage the information of whether said essential data is managed in the recoverable state at said information processing apparatus and the information necessary for reading said backup data, respectively corresponding to said identification information added to said inquiry message received at said inquiry message receiver, and judges whether said essential data is managed in the recoverable state at said information processing apparatus, in accordance with the information of whether said essential data is managed in the recoverable state at said information processing apparatus;

said inquiry message responder returns back said response set with the information representative of that said essential data is not managed in the recoverable state at said information processing apparatus, to a transmission source of said inquiry message, if said inquiry message responder judges that the essential data is not managed in the recoverable state at said information processing apparatus;

said backup data reader performs a process of reading said backup data in accordance with the information necessary for reading said backup data corresponding to said identification information, if said inquiry message responder judges that the essential data is managed in the recoverable state at said information processing apparatus;

if said process succeeds, said inquiry message responder returns said response set with the information representative of that said essential data is managed in the recoverable state at said information processing apparatus, back to a transmission source of said inquiry message; and

if said process fails, said inquiry message responder returns said response set with the information representative of that said essential data is not managed in the recoverable state at said information processing apparatus, back to the transmission source of said inquiry message.

6. The information processing system according to claim 4, wherein:

said information processing apparatus further comprises a backup data effective term storage realized by a program executed by said information processing apparatus, said backup data effective term storage storing a correspondence between said identification information of said essential data and information representative of an effective term of said backup data;

said inquiry message responder acquires from said backup data effective term storage information representative of the effective term of said backup data corresponding to said identification information added to said inquiry message;

said inquiry message responder returns back said response set with the information representative of that said essential data is managed in the recoverable state at said information processing apparatus, if said effective term is after a current date and time; and

said inquiry message responder returns back said response set with the information representative of that said essential data is not managed in the recoverable state at said information processing apparatus, if said effective term before the current date and time.

7. The information processing system according to claim 1, further comprising:

a recovery necessity manager realized by a program executed by one or more information processing apparatus, said recovery necessity manager storing a correspondence between identification information of said essential data and recovery necessity information representative of that said backup data of said essential data is required to be managed at any one of said information processing apparatuses;

wherein said recovery capability judge acquires said recovery necessity information of said essential data from said recovery necessity manager, if said acquired recovery necessity information indicates that said backup data of said essential data is required to be managed, said recovery capability judges performs said judge of whether said essential data is managed in the recoverable state, and if said recovery capability judge judges that said essential data is managed in the recoverable state, said backup data generator generates said backup data.

8. The information processing system according to claim 1, further comprising:

a recovery data management destination storage realized by a program executed by one or more information processing apparatuses, said recovery data management destination storage managing a correspondence between identification information of said essential data and identification information of said information processing apparatus for making said essential data to be managed in the recoverable state;

wherein said backup data generator identifies said information processing apparatus for making said essential data to be managed, in accordance with said recovery data management destination storage and makes said identified information processing apparatus to generate said backup data.

9. The information processing system according to claim 8, further comprising:

a backup capability inquiry message transmitter realized by a program executed by one or more information processing apparatuses, said backup capability inquiry message transmitter transmitting a backup capability inquiry message inquiring about whether said essential data can be managed in the recoverable state, to said information processing apparatus for making said essential data to be managed;

wherein said backup data generator controls to make any one of said information processing apparatus hit by said failure and said information processing apparatus excepting said information processing apparatus for making said essential data to be managed, generate said backup data.

10. The information processing system according to claim 1, further comprising:

first and second storage apparatuses connected to at least any one of said information processing apparatuses in a communication enabled state;

wherein said first storage apparatus stores said essential data and includes a backup data controller realized by a program executed by one or more information processing apparatuses, said backup data controller controls to make said backup data generated by said backup data generator be stored in said second storage apparatus.

11. The information processing system according to claim 1, further comprises:

a storage apparatus connected to said information processing apparatus at a destination of said fail-over in a communication enabled state;

wherein;

said storage apparatus includes first and second logical volumes which are storage areas logically set to a storage area provided by said storage apparatus;

said first logical volume stores said essential data; and

said backup data generator controls to store a copy of said essential data stored in said first logical volume in said second logical volume.

12. The information processing system according to claim 1, wherein:

said information processing apparatus comprises;

a failure detector for detecting a failure at said information processing apparatus; and

a failure information transceiver for transferring failure information containing information representative of a type of said detected failure to and from another information processing apparatus, said failure detector and said failure transceiver being realized by programs executed by said information processing apparatus, and

said information processing system further comprises a failure type specific recovery necessity storage realized by a program executed by one or more information processing apparatuses, said failure type specific recovery necessity storage storing a correspondence between information representative of the type of said failure and recovery necessity information representative of whether it is necessary for managing said essential data in the recoverable state,

wherein when said fail-over is executed, said backup data generator acquires said recovery necessity information corresponding to the type of said failure contained in said failure information received by said failure information transceiver from said failure type specific recovery necessity storage, and generates said backup data if said recovery necessity information indicates that it is necessary to manage said essential data in the recoverable state.

13. The information processing system according to claim 1, wherein:

said information processing apparatus comprises;

a failure detector for detecting a failure at said information processing apparatus; and

a failure information transceiver for transferring failure information containing information representative of a location of said detected failure to and from another information processing apparatus, said failure detector and said failure transceiver being realized by programs executed by said information processing apparatus, and

said information processing system further comprises a failure location specific recovery necessity storage realized by a program executed by one or more information processing apparatuses, said failure location specific recovery necessity storage storing a correspondence between information representative of the location of said failure and recovery necessity information representative of whether it is necessary for managing said essential data in the recoverable state,

wherein when said fail-over is executed, said backup data generator acquires said recovery necessity information corresponding to the location of said failure contained in said failure information received by said failure information transceiver from said failure location specific recovery necessity storage, and generates said backup data if said recovery necessity information indicates that it is necessary to manage said essential data in the recoverable state.

14. The information processing system according to claim 1, further comprising:

a first storage apparatus installed at a first site and connected said information processing apparatus hit by said failure in a communication enabled state;

a second storage apparatus for storing a copy of said essential data stored in said first storage apparatus, said second storage apparatus being connected in a communication enabled state to said first information processing apparatus and a second information processing apparatus which inherits processed executed by said first information processing apparatus when a failure occurs at said first information processing apparatus;

a backup apparatus for storing said backup data necessary for recovering data stored in said second storage apparatus; and

a backup processor realized by a program executed by one or more information processing apparatuses, said backup processor controlling to make said backup data generated by said backup data generator be stored in said backup apparatus when said fail-over is executed.

15. The information processing system according to claim 14, wherein:

said first storage apparatus has a first logical volume which is a storage area logically set to a storage area provided by said first storage apparatus, said first logical volume storing said essential data;

said second storage apparatus has a second logical volume for storing a copy of data stored in said first logical volume;

said first storage apparatus has a write data transmitter for transmitting a copy of write data in said first logical volume to said second storage apparatus, when said data is written in said first logical volume; and

said second storage apparatus has a write data receiver for receiving said write data and a logical volume controller for controlling to write the received write data in said second logical volume.

16. An information processing apparatus installed at each of a plurality of sites, comprising:

a fail-over processor connected to the information processing apparatus installed at another site, wherein when a failure occurs at said other information processing apparatuses, said fail-over processor performs a process related to fail-over of inheriting processes executed by said other information processing apparatus;

a recovery capability judge for judging whether essential data is managed in a recoverable state at one of the information processing apparatuses and the information processing apparatus excepting said information processing apparatus hit by said failure, said essential data being necessary data for performing a process to be dealt with said fail-over; and

a backup data generator for generating backup data necessary for recovering said essential data if said essential data is not managed in the recoverable state.

17. The information processing apparatus according to claim 16, further comprising:

an inquiry message transmitter for transmitting an inquiry message added with identification information of said essential data to said other information processing apparatus, said inquiry message inquiring about whether said essential data is managed in the recoverable state at said other information processing apparatus;

an inquiry message receiver for receiving said inquiry message;

a backup data management information storage for storing a correspondence between information indicating whether said essential data is managed in the recoverable state at the information processing apparatus and said identification information of said essential data; and

an inquiry message responder for answering back said response to a transmission source of said inquiry message, said response being set with information of whether said essential data is management in the recoverable state at the information processing apparatus, and said information corresponding to said identification information added to said inquiry message added to said inquiry message received by said inquiry message receiver,

wherein said recovery capability judge judges whether said essential data is managed in the recoverable state, basing upon whether said response to said inquiry message transmitted by said inquiry message transmitter is set with the information representative of that said essential data is managed in the recoverable state.

18. The information processing apparatus according to claim 17, wherein

said backup data management information storage stores the information of whether said essential data is managed in the recoverable state at the information processing apparatus and information necessary for reading said backup data, in correspondence with said identification information of said essential data;

the information processing apparatus further comprises a backup data reader for reading said backup data in accordance with the information necessary for reading said backup data;

said inquiry message responder acquires from said backup data management information storage the information of whether said essential data is managed in the recoverable state at the information processing apparatus and the information necessary for reading said backup data, respectively corresponding to said identification information added to said inquiry message received at said inquiry message receiver, and judges whether said essential data is managed in the recoverable state at the information processing apparatus;

if said inquiry message responder judges that the essential data is managed in the recoverable state at said information processing apparatus, said backup data reader performs a process of reading said backup data in accordance with the information necessary for reading said backup data;

if said process succeeds, said inquiry message responder returns said response set with the information representative of that said essential data is managed in the recoverable state at the information processing apparatus, back to a transmission source of said inquiry message; and

if said process fails, said inquiry message responder returns said response set with the information representative of that said essential data is not managed in the recoverable state at the information processing apparatus, back to the transmission source of said inquiry message.

19. The information processing apparatus according to claim 17, wherein:

said backup data management information storage stores the information of whether said essential data is managed in the recoverable manner at the information processing apparatus, the information necessary for reading said backup data, and information representative of an effective term of said backup data, respectively in correspondence with said identification information of said essential data; and

the information processing apparatus further comprises a site information storage for storing, for each of other information processing apparatuses constituting a cluster for executing said fail-over together with the information processing apparatus, identification information of said other information processing apparatuses,

wherein said inquiry message responder;

acquires the effective term of said backup data corresponding to said identification information of said essential data added to said inquiry message from said backup data management information storage;

answering back the information representative of that said essential data is managed in the recoverable state at the information processing apparatus, if the effective term is after a current date and time; and

answering back the information representative of that said essential data is not managed in the recoverable state at the information processing apparatus, if the effective term is after the current date and time.

20. A control method for an information processing system constituting a fail-over type cluster, in which an information processing apparatus is installed at each of a plurality of sites, said information processing apparatuses being interconnected to be able to communicate with each other, and when a failure occurs at one of said information processing apparatuses, another information processing apparatus different from said information processing apparatus hit said the failure inherits processes executed said the information processing apparatus hit by the failure, the control method comprising the steps of:

when said fail-over is executed passing from said information processing apparatus hit by said failure to said other information processing apparatus,

judging whether essential data is managed in a recoverable state at any one of said information processing apparatuses excepting said information processing apparatus hit by said failure, said essential data being necessary data for said information processing apparatus to perform a process to be dealt with said fail-over; and

generating backup data necessary for recovering said essential data if said essential data is not managed in the recoverable state.