Power failure protection method and device and storage system

Abstract

The invention discloses a power failure protection method and device and a storage system. The method comprises the steps that whether a power failure event occurs in the storage system or not is detected in real time; when a power failure event occurs in the storage system, reading the working controller in a working state; the power supply of the storage system is controlled to be switched from the main power supply to the battery backup unit, and the battery backup unit is used as a working controller, so that memory data loss caused by power failure is avoided. According to the embodiment of the invention, the battery backup unit is arranged in the storage system with the double controllers, and the battery backup unit is connected with the main controller and the backup controller; by controlling the battery backup unit to supply power to the working controller in the working state in the main controller and the standby controller, the memory data loss caused by power failure is avoided, so that the memory data loss caused by power failure can be avoided, and the hardware cost of the dual-controller storage system can be reduced.

Description

Technical Field

[0001] The present application relates to the field of server technology, and in particular to a power-off protection method, device and storage system. Background Art

[0002] With the advent of the data age, how to ensure the reliability of data storage has received more and more attention. The dual-controller storage system can provide continuous business support through two controllers, and load balancing can be achieved between the two controllers. It is an effective way to ensure data reliability.

[0003] At present, dual-controller storage systems are equipped with a main power supply PSU (Power Supply Unit) and a battery backup unit (Battery Backup Unit, BBU). The storage system is powered by the main power supply; when the system loses power unexpectedly, the BBU supplies power to the storage system) Save to RAM mode: when power is off, the cache is powered for a period of time to ensure that the data in the cache will not be lost. However, the existing dual-controller storage system is equipped with a battery backup unit (BBU) in the controller slot of each controller, which will lead to a high cost of the storage system.

[0004] Therefore the prior art still needs to be improved and enhanced. Summary of the invention

[0005] The technical problem to be solved by the present application is to provide a power-off protection method, device and storage system in view of the deficiencies in the prior art.

[0006] In order to solve the above technical problems, the first aspect of the present application provides a power-off protection method, which is applied to a dual-controller storage system, wherein the dual-controller storage system includes a main controller, a backup controller, a main power supply, and a battery backup unit, wherein the main controller and the backup controller are both connected to the main power supply and the battery backup unit; the power-off protection method specifically includes: Real-time detection of power outages in the storage system; When a power failure event occurs in the storage system, a working controller in a working state is read, wherein the working controller is a main controller or a standby controller; The power supply of the storage system is controlled to switch from the main power supply to the battery backup unit, and the battery backup unit is used as the working controller to avoid memory data loss due to power failure.

[0007] The power-off protection method, wherein the method further comprises: detecting the controller state of the main controller in real time; When the controller state of the main controller is an abnormal state, setting the standby controller as a working controller and generating a controller switching instruction; The battery backup unit is switched to the standby controller through the controller switching instruction, so that the standby controller is powered by the battery backup unit.

[0008] The power-off protection method, wherein the control of switching the battery backup unit to the standby controller through the controller switching instruction specifically includes: The controller switching instruction is sent to a shared backplane between the main controller and the standby controller, and the battery backup unit is switched to the standby controller through the shared backplane.

[0009] The power-off protection method, wherein the switching of the battery backup unit to the standby controller through the shared backplane specifically includes: Controlling the shared backplane to obtain controller information; The shared backplane is controlled to start a backup power supply circuit corresponding to the backup controller based on the controller information, so as to switch the battery backup unit to the backup controller.

[0010] In the power-off protection method, the battery backup unit is provided with a main power supply circuit for powering a main controller and a backup power supply circuit for powering a backup controller, and the power supply state of the main power supply circuit and the power supply state of the backup power supply circuit are mutually exclusive.

[0011] The power-off protection method, wherein the method further comprises: The main controller and the standby controller perform state synchronization via a shared backplane between the main controller and the standby controller.

[0012] The power-off protection method, wherein the storage system of the dual controller further includes a persistent storage module; after the working controller is powered by the battery backup unit, the method further includes: Control the memory data in the storage system to store in the persistent storage module.

[0013] A second aspect of the present application provides a power-off protection device, wherein the power-off protection device specifically comprises: A detection module is used to detect in real time whether a power failure event occurs in the storage system; A reading module, used for reading a working controller in a working state when a power failure event occurs in the storage system, wherein the working controller is a main controller or a standby controller; The switching module is used to control the power supply of the storage system to switch from the main power supply to the battery backup unit, and the battery backup unit is used as the working controller to avoid memory data loss due to power failure.

[0014] The power-off protection device, wherein the switching module is also used to: detect the controller state of the main controller in real time; and when the controller state of the main controller is abnormal, set the backup controller as the working controller, and generate a controller switching instruction to switch the battery backup unit to the backup controller through the controller switching instruction, so as to power the backup controller through the battery backup unit.

[0015] A third aspect of the present application provides a dual-controller storage system, wherein the dual-controller storage system includes a main controller, a backup controller, a battery backup unit and a power-off protection device, wherein the main controller and the backup controller are both connected to the battery backup unit, and the power-off protection device is used to detect in real time whether a power-off event occurs in the storage system. When a power-off event occurs in the storage system, a working controller in a working state is read, and the power supply of the storage system is controlled to switch from the main power supply to the battery backup unit, and the battery backup unit is used for the working controller to avoid memory data loss due to power off, wherein the working controller is a main controller or a backup controller.

[0016] Beneficial effect: Compared with the prior art, the present application provides a power-off protection method, device and storage system, the method comprising real-time detection of whether a power-off event occurs in the storage system; when a power-off event occurs in the storage system, reading a working controller in a working state; controlling the power supply of the storage system to switch from the main power supply to the battery backup unit, and using the battery backup unit to supply power to the working controller to avoid memory data loss due to power off. The embodiment of the present application sets a battery backup unit in a dual-controller storage system, connects the battery backup unit to the main controller and the backup controller, and then when a power-off event occurs in the storage system, controls the battery backup unit to supply power to the working controller in the main controller and the backup controller to avoid memory data loss due to power off. This can not only avoid memory data loss due to power off, but also reduce the hardware cost of the dual-controller storage system. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0018] Figure 1 A functional block diagram of a dual-controller storage system provided in an embodiment of the present application.

[0019] Figure 2 A flowchart of a power-off protection method provided in an embodiment of the present application.

[0020] Figure 3 Schematic diagram of the switching process of the battery backup unit.

[0021] Figure 4 This is a functional block diagram of a power-off protection device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0022] The embodiments of the present application provide a power-off protection method, device and storage system. To make the purpose, technical solution and effect of the present application clearer and more specific, the present application is further described in detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0023] It will be understood by those skilled in the art that, unless expressly stated, the singular forms "one", "said", and "the" used herein may also include plural forms. It should be further understood that the term "comprising" used in the specification of the present application refers to the presence of the features, integers, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or groups thereof. It should be understood that when we refer to an element as being "connected" or "coupled" to another element, it may be directly connected or coupled to the other element, or there may be intermediate elements. In addition, the "connection" or "coupling" used herein may include wireless connection or wireless coupling. The term "and / or" used herein includes all or any unit and all combinations of one or more associated listed items.

[0024] It will be understood by those skilled in the art that, unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as those generally understood by those skilled in the art to which this application belongs. It should also be understood that terms such as those defined in general dictionaries should be understood to have meanings consistent with the meanings in the context of the prior art, and will not be interpreted with idealized or overly formal meanings unless specifically defined as here.

[0025] It should be understood that the sequence numbers and sizes of the steps in this embodiment do not mean the order of execution. The execution order of each process is determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiment of the present application.

[0026] After research, it was found that with the advent of the data age, how to ensure the reliability of data storage has received more and more attention. The dual-control storage system can provide continuous business support through two controllers, and load balancing can be achieved between the two controllers. It is an effective way to ensure data reliability.

[0027] At present, dual-controller storage systems are equipped with a main power supply PSU (Power Supply Unit) and a battery backup unit (Battery Backup Unit, BBU). The storage system is powered by the main power supply; when the system loses power unexpectedly, the BBU supplies power to the storage system) Save to RAM mode: when power is off, the cache is powered for a period of time to ensure that the data in the cache will not be lost. However, the existing dual-controller storage system is equipped with a battery backup unit (BBU) in the controller slot of each controller, which will lead to a high cost of the storage system.

[0028] In order to solve the above problems, in an embodiment of the present application, it is detected in real time whether a power failure event occurs in the storage system; when a power failure event occurs in the storage system, the working controller in working state is read; the power supply of the storage system is controlled to switch from the main power supply to the battery backup unit, and the working controller is powered by the battery backup unit to avoid memory data loss caused by power failure. In an embodiment of the present application, a battery backup unit is set in a dual-controller storage system, and the battery backup unit is connected to the main controller and the backup controller. Then, when a power failure event occurs in the storage system, the battery backup unit is controlled to supply power to the working controller in the main controller and the backup controller in working state to avoid memory data loss caused by power failure. This can not only avoid memory data loss caused by power failure, but also reduce the hardware cost of the dual-controller storage system.

[0029] The application content is further explained below through the description of embodiments in conjunction with the accompanying drawings.

[0030] This embodiment provides a power-off protection method, which is applied to a storage system with dual controllers, such as Figure 1As shown, the dual-controller storage system includes a main controller, a backup controller, a main power supply and a battery backup unit. The main power supply is connected to the main controller and the backup controller to supply power to the main controller and the backup controller. The battery backup unit is connected to the main controller and the backup controller to supply power to the working controller in the main controller and the backup controller when the main power supply is abnormal. Wherein, when the storage system is operating normally, the main controller and the backup controller operate with the power supply support of the main power supply, and the battery backup unit does not supply power to the main controller and the backup controller. If the main power supply of the storage system is abnormally powered off (i.e., a power-off event occurs in the storage system), the power-off protection method provided in the embodiment of the present application can be adopted.

[0031] like Figure 2 As shown, the power-off protection method provided in the embodiment of the present application specifically includes: S10: Detect in real time whether a power failure event occurs in the storage system.

[0032] Specifically, the power-off event refers to the power-off of the main power supply in the storage system, that is, the power supply status of the main power supply in the storage system is detected in real time. When it is detected that the power supply status of the main power supply is in a power-off state, it is determined that a power-off event has occurred in the storage system. Conversely, when it is detected that the power supply status of the main power supply is in a normal state, it is determined that no power-off event has occurred in the storage system.

[0033] S20. When a power failure event occurs in the storage system, a working controller in a working state is read.

[0034] Specifically, the power failure event in the storage system indicates that the main power supply in the storage system cannot supply power to the working controller due to abnormal power failure, and in order to ensure the security and permanence of valid data in the storage system, a backup controller needs to be used to supply power to the working controller. Since only one backup controller is deployed in the embodiment of the present application, when a power failure event occurs in the storage system, it is necessary to determine the working controller in working state, so as to switch the battery backup unit to the working controller and maintain the normal operation of the storage system, thereby ensuring the security of the memory data of the storage system.

[0035] Further, the working controller in working state can be read by reading the controller identifier. Specifically, the working controller identifier can be pre-configured, and the working controller identifier is the main controller identifier or the standby controller identifier. The working controller in working state is determined by reading the main controller identifier or the standby controller identifier included in the working controller identifier. In addition, in practical applications, the working controller in working state can also be determined by reading the controller state of the controller. Specifically, when both the main controller and the standby controller are in normal state, the main controller will be used as the working controller. For this reason, when an event occurs in the storage system, the controller state of the main controller is read first. If the controller state of the main controller is in normal state, the main controller is determined to be the working controller. On the contrary, if the controller state of the main controller is in abnormal state, the standby controller is determined to be the working controller.

[0036] In addition, in order to prevent the storage system from being abnormal due to the abnormality of the main controller, the control state of the main controller is also detected during the operation of the storage system, and the working controller in the working state is determined based on the control state of the main controller. Figure 3 As shown, the power-off protection method further includes: H10, detecting the controller state of the main controller in real time; H20. When the controller state of the main controller is abnormal, the standby controller is set as the working controller, and a controller switching instruction is generated; H30. Switch the battery backup unit to the backup controller through the controller switching instruction, so as to supply power to the backup controller through the battery backup unit.

[0037] Specifically, the controller state of the main controller includes an abnormal state and a normal state. The abnormal state indicates that the main controller cannot work normally, and the backup controller needs to be used as the working controller. The normal state indicates that the main controller can work normally, and the main controller continues to be used as the working controller. To this end, when the controller state of the main controller is an abnormal state, the backup controller needs to be set as the working controller, and at the same time, the battery backup unit needs to be controlled to switch from powering the main controller to powering the backup controller. That is to say, after the backup controller is set as the working controller, a controller switching instruction for switching the battery backup unit to the backup controller will be formed, and the controller switching instruction is used to control the battery backup unit to switch to the backup controller, so as to power the backup controller through the battery backup unit, wherein switching the battery backup unit to the backup controller can disconnect the connection between the battery backup unit and the main controller, and establish a connection between the battery backup unit and the backup controller, so that the battery backup unit only powers the working controller in the working state, avoiding power waste of the battery backup unit, and can increase the power supply time of the battery backup unit.

[0038] In order to realize the switching of the battery backup unit between the main controller and the backup controller, the battery backup unit can be configured with two power supply circuits, namely the main power supply circuit and the backup power supply circuit. The battery backup unit is connected to the main controller through the main power supply circuit, and the battery backup unit is connected to the backup controller through the backup power supply circuit. When the battery backup unit supplies power to the main controller, the main power supply circuit is in a connected state and the backup power supply circuit is in a disconnected state. Conversely, when the battery backup unit supplies power to the backup controller, the main power supply circuit is in a disconnected state and the backup power supply circuit is in a connected state. In other words, the power supply states of the main power supply circuit used to supply power to the main controller and the backup power supply circuit used to supply power to the backup controller are mutually exclusive. The embodiment of the present application connects the battery backup unit to the main controller and the backup controller respectively by using the main power supply circuit and the backup power supply circuit, and keeps the power supply states of the main power supply circuit and the backup power supply circuit mutually exclusive. In this way, a battery backup unit can be used to protect the main controller and the backup controller from power failure, thereby avoiding the loss of memory data in the storage system due to power failure, and at the same time, the power supply time of the battery backup unit can be increased.

[0039] Furthermore, in order to realize the switching between the main power supply circuit and the backup power supply circuit, the main controller and the backup controller share a backplane, and the switching of the battery backup unit between the main controller and the backup controller is controlled by the shared backplane between the two. Based on this, the control of switching the battery backup unit to the backup controller through the controller switching instruction specifically includes: The controller switching instruction is sent to a shared backplane between the main controller and the standby controller, and the battery backup unit is switched to the standby controller through the shared backplane.

[0040] Specifically, the shared backplane is used to control the switching of the battery backup unit between the main controller and the backup controller, and is also used for state synchronization between the main controller and the backup controller, that is, the main controller and the backup controller can communicate through the shared backplane to keep alive in order to transfer data between the two. In other words, when an abnormality is detected in the main controller, a controller switching instruction is actively initiated, and the shared backplane is notified through the controller switching instruction to switch the battery backup unit to the backup controller. Of course, when the main controller returns to normal, a controller switching instruction is also actively initiated, and the shared backplane is notified through the controller switching instruction to switch the battery backup unit back to the main controller, that is, when the backup controller is used as the working controller, the controller state of the main controller is detected in real time. When the controller state of the main controller is converted from an abnormal state to a normal state, a controller switching instruction is generated, and the shared backplane is notified through the controller switching instruction to switch the battery backup unit back to the main controller.

[0041] In one implementation, switching the battery backup unit to the standby controller through the shared backplane specifically includes: Controlling the shared backplane to obtain controller information; The shared backplane is controlled to start a backup power supply circuit corresponding to the backup controller based on the controller information, so as to switch the battery backup unit to the backup controller.

[0042] Specifically, after receiving the controller switching instruction, the shared backplane will obtain the controller information based on the controller switching instruction. When the controller information is a backup controller, the backup power supply circuit corresponding to the backup controller is turned on so that the battery backup unit is connected to the backup controller, so that the backup controller can be powered by the battery backup unit. In addition, since the power supply states of the backup power supply circuit corresponding to the backup controller and the main power supply circuit corresponding to the main controller are mutually exclusive, when the backup power supply circuit corresponding to the backup controller is turned on, the main power supply circuit corresponding to the main controller is turned off to control the battery backup unit not to power the main controller. Of course, in actual applications, the battery backup unit can also be switched to the main controller, so that the controller information can also be the main controller, and when the controller information is the main controller, the main power supply circuit corresponding to the main controller is turned on so that the battery backup unit is connected to the main controller.

[0043] S30, controlling the power supply of the storage system to switch from the main power supply to the battery backup unit, and using the battery backup unit as the working controller to avoid memory data loss due to power failure.

[0044] Specifically, when a power outage occurs in the storage system, it indicates that the main power supply is abnormal. Therefore, the power supply is switched from the main power supply to the battery backup unit. When switching from the main power supply to the battery backup unit, since a battery backup unit is used to power the main controller and the standby controller in this application, only the working controller needs to be powered by the battery backup unit, thereby avoiding the loss of memory data caused by power outage.

[0045] Furthermore, in order to avoid the loss of memory data caused by power failure, after the main power supply is switched to the battery backup unit, the memory data in the storage system will be stored in a non-volatile storage medium to ensure the security of the valid data in the cache. To this end, the dual-controller storage system also includes a persistent storage module; the persistent storage module is used to save memory data when a power failure occurs in the storage system, wherein the persistent storage module can be a read-only memory (ROM), a programmable read-only memory (PROM), an electrically alterable read-only memory (EAROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a flash memory, etc., to ensure the security of the written data.

[0046] Of course, in actual applications, after the main power source is switched to the battery backup unit, the cache status of the memory data in the storage system and the power status of the main power source can also be detected. When the cache status is cache completion or the power status is normal, the power supply of the storage system is switched from the battery backup unit to the main power source. Furthermore, if the battery backup unit supplies power to the main controller, the power supply status of the battery backup unit remains unchanged. On the contrary, if the battery backup unit supplies power to the standby controller, the controller status of the main controller will continue to be detected.

[0047] In summary, the present embodiment provides a power-off protection method, device and storage system, the method comprising real-time detection of whether a power-off event occurs in the storage system; when a power-off event occurs in the storage system, reading a working controller in a working state; controlling the power supply of the storage system to switch from the main power supply to the battery backup unit, and using the battery backup unit to supply power to the working controller to avoid memory data loss due to power off. The present embodiment of the application sets a battery backup unit in a dual-controller storage system, and connects the battery backup unit to the main controller and the backup controller. Then, when a power-off event occurs in the storage system, the battery backup unit is controlled to supply power to the working controller in the main controller and the backup controller to avoid memory data loss due to power off. This can not only avoid memory data loss due to power off, but also reduce the hardware cost of the dual-controller storage system.

[0048] Based on the above power-off protection method, this embodiment provides a power-off protection device, such as Figure 4 As shown, the power-off protection device specifically includes: The detection module 100 is used to detect in real time whether a power failure event occurs in the storage system; A reading module 200, used for reading a working controller in a working state when a power failure event occurs in the storage system, wherein the working controller is a main controller or a standby controller; The switching module 300 is used to control the power supply of the storage system to switch from the main power supply to the battery backup unit, and the battery backup unit is used as the working controller to avoid memory data loss due to power failure.

[0049] In one implementation, the switching module is also used to detect the controller status of the main controller in real time; and when the controller status of the main controller is an abnormal state, the backup controller is set as the working controller, and a controller switching instruction is generated to switch the battery backup unit to the backup controller through the controller switching instruction, so as to power the backup controller through the battery backup unit.

[0050] Based on the above power-off protection method, this embodiment provides a dual-controller storage system, such as Figure 1As shown, the dual-controller storage system includes a main controller, a backup controller, a battery backup unit and a power-off protection device. The main controller and the backup controller are both connected to the battery backup unit. The power-off protection device is used to detect in real time whether a power-off event occurs in the storage system. When a power-off event occurs in the storage system, the working controller in a working state is read, and the power supply of the storage system is controlled to switch from the main power supply to the battery backup unit. The battery backup unit is used for the working controller to avoid memory data loss due to power off, wherein the working controller is a main controller or a backup controller.

[0051] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit it. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A power-off protection method, characterized in that: A storage system applied to a dual-controller, the dual-controller storage system comprising a main controller, a backup controller, a main power supply and a battery backup unit, wherein the main controller and the backup controller are both connected to the main power supply and the battery backup unit; The power-off protection method specifically includes: Real-time detection of power outages in the storage system; When a power failure event occurs in the storage system, a working controller in a working state is read, wherein the working controller is a main controller or a standby controller; The power supply of the storage system is controlled to switch from the main power supply to the battery backup unit, and the battery backup unit is used as the working controller to avoid memory data loss due to power failure.

2. The power-off protection method according to claim 1, characterized in that: The method further comprises: detecting the controller state of the main controller in real time; When the controller state of the main controller is an abnormal state, setting the standby controller as a working controller and generating a controller switching instruction; The battery backup unit is switched to the standby controller through the controller switching instruction, so that the standby controller is powered by the battery backup unit.

3. The power-off protection method according to claim 2, characterized in that: The controlling of switching the battery backup unit to the standby controller through the controller switching instruction specifically includes: The controller switching instruction is sent to a shared backplane between the main controller and the standby controller, and the battery backup unit is switched to the standby controller through the shared backplane.

4. The power-off protection method according to claim 3, characterized in that: The switching of the battery backup unit to the standby controller through the shared backplane specifically includes: Controlling the shared backplane to obtain controller information; The shared backplane is controlled to start a backup power supply circuit corresponding to the backup controller based on the controller information, so as to switch the battery backup unit to the backup controller.

5. The power-off protection method according to claim 4, characterized in that: The battery backup unit is provided with a main power supply circuit for supplying power to the main controller and a backup power supply circuit for supplying power to the backup controller, and the power supply state of the main power supply circuit and the power supply state of the backup power supply circuit are mutually exclusive.

6. The power-off protection method according to claim 1, characterized in that: The method further comprises: The main controller and the standby controller perform state synchronization via a shared backplane between the main controller and the standby controller.

7. The power-off protection method according to claim 1, characterized in that: The dual-controller storage system further includes a persistent storage module; after the battery backup unit is used as the working controller, the method further includes: Control the memory data in the storage system to store in the persistent storage module.

8. A power-off protection device, characterized in that: The power-off protection device specifically comprises: A detection module is used to detect in real time whether a power failure event occurs in the storage system; A reading module, used for reading a working controller in a working state when a power failure event occurs in the storage system, wherein the working controller is a main controller or a standby controller; The switching module is used to control the power supply of the storage system to switch from the main power supply to the battery backup unit, and the battery backup unit is used as the working controller to avoid memory data loss due to power failure.

9. The power-off protection device according to claim 8, characterized in that: The switching module is also used to: detect the controller status of the main controller in real time; and when the controller status of the main controller is abnormal, set the backup controller as the working controller and generate a controller switching instruction to switch the battery backup unit to the backup controller through the controller switching instruction, so as to power the backup controller through the battery backup unit.

10. A dual-controller storage system, characterized in that: The dual-controller storage system includes a main controller, a backup controller, a battery backup unit and a power-off protection device. The main controller and the backup controller are both connected to the battery backup unit. The power-off protection device is used to detect in real time whether a power-off event occurs in the storage system. When a power-off event occurs in the storage system, the working controller in working state is read, and the power supply of the storage system is controlled to switch from the main power supply to the battery backup unit. The battery backup unit is used for the working controller to avoid memory data loss due to power off, wherein the working controller is a main controller or a backup controller.

Images