A power-off protection method, device, and storage system

Abstract

The present application discloses a power-down protection method, apparatus and storage system. The method includes detecting in real time whether a power-down event occurs in the storage system; when the power-down event occurs in the storage system, reading the working controller in the working state; controlling the power supply of the storage system to switch from the main power supply to the battery backup unit, and supplying power to the working controller through the battery backup unit, so as to avoid the loss of memory data caused by power-down. In the embodiment of the present application, a battery backup unit is arranged in a storage system with dual controllers, and the battery backup unit is connected to the main controller and the standby controller. Then, when a power-down event occurs in the storage system, by controlling the battery backup unit to supply power to the working controller in the main controller and the standby controller in the working state, the loss of memory data caused by power-down can be avoided. In this way, not only can the loss of memory data caused by power-down be avoided, but also the hardware cost of the storage system with dual controllers can be reduced.

Description

Technical Field

[0001] The present application relates to the technical field of servers, and particularly relates to a power failure protection method, device, and storage system. Background Art

[0002] With the advent of the data era, how to ensure the reliability of data storage has received increasing attention. A dual-controller storage system can provide continuous service support through two controllers, and load balancing can be achieved between the two controllers, which is an effective way to ensure data reliability.

[0003] Currently, a dual-controller storage system is configured with a main power supply PSU (Power Supply Unit) and a battery backup unit (BBU). The storage system is powered by the main power supply; when the system experiences an unexpected power failure, the BBU powers the storage system) in the Save to RAM mode: provides cache power supply for a period of time during power failure to ensure that the data in the cache is not lost. However, in the existing dual-controller storage system, a battery backup unit (BBU) is equipped in the controller gap of each controller, which results in a relatively high cost of the storage system.

[0004] Therefore, the existing technology still needs to be improved. Summary of the Invention

[0005] The technical problem to be solved by the present application is to provide a power failure protection method, device, and storage system in view of the deficiencies of the existing technology.

[0006] To solve the above technical problem, a first aspect of the present application provides a power failure protection method, which is applied to a storage system with dual controllers. The storage system with dual controllers includes a main controller, a standby controller, a main power supply, and a battery backup unit. Both the main controller and the standby controller are connected to the main power supply and the battery backup unit. The power failure protection method specifically includes:

[0007] Real-time detection of whether a power failure event occurs in the storage system;

[0008] When a power failure event occurs in the storage system, read the working controller in the working state, where the working controller is the main controller or the standby controller;

[0009] Control the power supply of the storage system to be switched from the main power supply to the battery backup unit, and supply power to the working controller through the battery backup unit to avoid the loss of memory data due to power failure.

[0010] The power failure protection method, wherein the method further includes:

[0011] Real-time detection of the controller state of the main controller;

[0012] When the controller state of the main controller is an abnormal state, set the standby controller as the working controller and generate a controller switching instruction;

[0013] Switch the battery backup unit to the standby controller through the controller switching instruction, so as to supply power to the standby controller through the battery backup unit.

[0014] The power-off protection method as described above, wherein the controlling to switch the battery backup unit to the standby controller through the controller switching instruction specifically includes:

[0015] Send the controller switching instruction to the shared backplane between the main controller and the standby controller, and switch the battery backup unit to the standby controller through the shared backplane.

[0016] The power-off protection method as described above, wherein the controlling to switch the battery backup unit to the standby controller through the shared backplane specifically includes:

[0017] Control the shared backplane to obtain controller information;

[0018] Control the shared backplane to turn on the standby power supply circuit corresponding to the standby controller based on the controller information, so as to switch the battery backup unit to the standby controller.

[0019] The power-off protection method as described above, wherein the battery backup unit is provided with a main power supply circuit for supplying power to the main controller and a standby power supply circuit for supplying power to the standby controller, and the power supply states of the main power supply circuit and the standby power supply circuit are mutually exclusive.

[0020] The power-off protection method as described above, wherein the method further includes:

[0021] The main controller and the standby controller perform status synchronization through the shared backplane between the main controller and the standby controller.

[0022] The power-off protection method as described above, wherein the storage system of the dual controllers further includes a persistent storage module; after supplying power to the working controller through the battery backup unit, the method further includes:

[0023] Control the in-memory data in the storage system to be stored in the persistent storage module.

[0024] The second aspect of the present application provides a power-off protection device, wherein the power-off protection device specifically includes:

[0025] A detection module, configured to detect in real time whether a power-off event occurs in the storage system;

[0026] A reading module, configured to read a working controller in a working state when a power failure event occurs in the storage system, where the working controller is a main controller or a standby controller;

[0027] A switching module, configured to control the power supply of the storage system to be switched from a main power supply to a battery backup unit, and supply power to the working controller through the battery backup unit, so as to avoid loss of memory data caused by power failure.

[0028] For the power failure protection device, the switching module is further configured to: detect the controller state of the main controller in real time; and when the controller state of the main controller is an abnormal state, set the standby controller as the working controller and generate a controller switching instruction, so as to switch the battery backup unit to the standby controller through the controller switching instruction, and supply power to the standby controller through the battery backup unit.

[0029] A third aspect of the present application provides a storage system with dual controllers, where the storage system with dual controllers includes a main controller, a standby controller, a battery backup unit, and a power failure protection device. The main controller and the standby controller are both connected to the battery backup unit. The power failure protection device is configured to detect in real time whether a power failure event occurs in the storage system. When the storage system has a power failure event, read the working controller in the working state, control the power supply of the storage system to be switched from the main power supply to the battery backup unit, and supply power to the working controller through the battery backup unit, so as to avoid loss of memory data caused by power failure, where the working controller is the main controller or the standby controller.

[0030] Beneficial effects: Compared with the prior art, the present application provides a power failure protection method, device and storage system. The method includes detecting in real time whether a power failure event occurs in the storage system; when the storage system has a power failure event, reading the working controller in the working state; controlling the power supply of the storage system to be switched from the main power supply to the battery backup unit, and supplying power to the working controller through the battery backup unit, so as to avoid loss of memory data caused by power failure. In the embodiment of the present application, a battery backup unit is provided in the storage system with dual controllers, and the battery backup unit is connected to the main controller and the standby controller. Then, when a power failure event occurs in the storage system, the battery backup unit is controlled to supply power to the working controller in the main controller and the standby controller, so as to avoid loss of memory data caused by power failure. This can not only avoid loss of memory data caused by power failure, but also reduce the hardware cost of the storage system with dual controllers. Description of the Drawings

[0031] To more clearly illustrate the technical solutions in the embodiments of the present application, the following will briefly introduce the drawings required for the description of the embodiments. Obviously, the drawings in the following description are only some embodiments of the present application. For those of ordinary skill in the art, without creative efforts, other drawings can also be obtained based on these drawings.

[0032] Figure 1 It is a schematic block diagram of a storage system with dual controllers provided by an embodiment of the present application.

[0033] Figure 2 It is a flowchart of a power-off protection method provided by an embodiment of the present application.

[0034] Figure 3 It is a schematic flowchart of the switching process of the battery backup unit.

[0035] Figure 4 It is a schematic block diagram of a power-off protection device provided by an embodiment of the present application. Detailed implementation manners

[0036] The embodiments of the present application provide a power-off protection method, device and storage system. To make the purpose, technical solutions and effects of the present application clearer and more definite, the following further describes the present application in detail with reference to the accompanying drawings and by way of examples. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0037] Those skilled in the art of the present technology can understand that unless specifically stated otherwise, the singular forms "a", "an", "the" and "said" used herein may also include the plural forms. It should be further understood that the term "comprising" used in the specification of the present application means the presence of the described features, integers, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or their groups. It should be understood that when we say that an element is "connected" or "coupled" to another element, it can be directly connected or coupled to other elements, or there may also be intermediate elements. In addition, the "connection" or "coupling" used herein may include wireless connection or wireless coupling. The phrase "and / or" used herein includes all or any unit and all combinations of one or more related listed items.

[0038] Those skilled in the art can understand that, unless otherwise defined, all terms used herein (including technical and scientific terms) have the same meaning as commonly understood by those of ordinary skill in the field to which this application belongs. It should also be understood that terms such as those defined in a general dictionary should be understood to have a meaning consistent with their meaning in the context of the prior art, and will not be interpreted in an idealized or overly formal sense unless specifically defined as here.

[0039] It should be understood that the sequence numbers and magnitudes of the steps in this embodiment do not imply the order of execution. The order of execution of each process is determined by its function and internal logic, and should not constitute any limitation to the implementation process of the embodiments of this application.

[0040] Through research, it is found that with the advent of the data era, how to ensure the reliability of data storage has received increasing attention. A dual-controller storage system can provide continuous business support through two controllers, and load balancing can be achieved between the two controllers, which is an effective way to ensure data reliability.

[0041] Currently, the dual-controller storage system is configured with a main power supply PSU (Power Supply Unit) and a battery backup unit (Battery Backup Unit, BBU). The storage system is powered by the main power supply; when the system suddenly loses power, the BBU powers the storage system) in the Save to RAM mode: providing cache power supply for a period of time when power is off to ensure that the data in the cache will not be lost. However, in the existing dual-controller storage system, a battery backup unit (BBU) is equipped in the controller gap of each controller, which will result in a relatively high cost of the storage system.

[0042] To solve the above problems, in the embodiments of this application, it is detected in real time whether a power-off event occurs in the storage system; when the power-off event occurs in the storage system, the working controller in the working state is read; the power supply of the storage system is controlled to be switched from the main power supply to the battery backup unit, and the working controller is powered by the battery backup unit to avoid the loss of in-memory data due to power-off. In the embodiments of this application, by setting a battery backup unit in the dual-controller storage system, connecting the battery backup unit to the main controller and the standby controller, and then when a power-off event occurs in the storage system, controlling the battery backup unit to supply power to the working controller in the main controller and the standby controller in the working state to avoid the loss of in-memory data due to power-off. In this way, not only can the loss of in-memory data due to power-off be avoided, but also the hardware cost of the dual-controller storage system can be reduced.

[0043] The following further illustrates the application content by describing the embodiments in conjunction with the accompanying drawings.

[0044] This embodiment provides a power-off protection method, which is applied to a storage system with dual controllers. As Figure 1 shown, the storage system with dual controllers includes a primary controller, a standby controller, a primary power supply, and a battery backup unit. The primary power supply is connected to the primary controller and the standby controller to supply power to the primary controller and the standby controller. The battery backup unit is connected to the primary controller and the standby controller to supply power to the working controller in the working state among the primary controller and the standby controller when the primary power supply is abnormal. Among them, in the normal operation state of the storage system, the primary controller and the standby controller work with the power supply support of the primary power supply, and the battery backup unit does not supply power to the primary controller and the standby controller. If the primary power supply of the storage system is abnormally powered off (that is, a power-off event occurs in the storage system), the power-off protection method provided in the embodiments of the present application can be adopted.

[0045] As Figure 2 shown, the power-off protection method provided in the embodiments of the present application specifically includes:

[0046] S10. Detect in real time whether a power-off event occurs in the storage system.

[0047] Specifically, the power-off event refers to the power-off of the primary power supply in the storage system. That is to say, the power supply state of the primary power supply in the storage system is detected in real time. When it is detected that the power supply state of the primary power supply is in the power-off state, it is determined that a power-off event occurs in the storage system. On the contrary, when it is detected that the power supply state of the primary power supply is in the normal state, it is determined that no power-off event occurs in the storage system.

[0048] S20. When a power-off event occurs in the storage system, read the working controller in the working state.

[0049] Specifically, the occurrence of a power-off event in the storage system indicates that the primary power supply in the storage system cannot supply power to the working controller due to abnormal power-off. In order to avoid the security and permanence of the valid data in the storage system, it is necessary to use the standby controller to supply power to the working controller. Since only one standby controller is deployed in the embodiments of the present application, when a power-off event occurs in the storage system, it is necessary to determine the working controller in the working state so as to switch the battery backup unit to the working controller to maintain the normal operation of the storage system, thereby ensuring the security of the memory data in the storage system.

[0050] Furthermore, the working controller in the working state can be determined by reading the controller identifier. Specifically, the working controller identifier can be pre-configured, and the working controller identifier is the primary controller identifier or the standby controller identifier. The working controller in the working state is determined by reading the primary controller identifier or the standby controller identifier included in the working controller identifier. In addition, in practical applications, the working controller in the working state can also be determined by reading the controller status of the controller. Specifically, when both the primary controller and the standby controller are in the normal state, the primary controller will be used as the working controller. Therefore, when a power-off event occurs in the storage system, first read the controller status of the primary controller. If the controller status of the primary controller is the normal state, it is determined that the primary controller is the working controller. Otherwise, if the controller status of the primary controller is the abnormal state, it is determined that the standby controller is the working controller.

[0051] In addition, in order to prevent the storage system from being abnormal due to the abnormality of the primary controller, the control status of the primary controller is also detected during the working process of the storage system, and the working controller in the working state is determined based on the control status of the primary controller. Based on this, as Figure 3 shown, the power-off protection method further includes:

[0052] H10. Real-time detect the controller status of the primary controller;

[0053] H20. When the controller status of the primary controller is the abnormal state, set the standby controller as the working controller and generate a controller switching instruction;

[0054] H30. Switch the battery backup unit to the standby controller through the controller switching instruction to supply power to the standby controller through the battery backup unit.

[0055] Specifically, the controller state of the main controller includes an abnormal state and a normal state. The abnormal state indicates that the main controller cannot work properly, and in this case, the standby controller needs to be used as the working controller. The normal state indicates that the main controller can work properly, and the main controller continues to be used as the working controller. Therefore, when the controller state of the main controller is in the abnormal state, the standby controller needs to be set as the working controller, and at the same time, it is necessary to control the battery backup unit to switch from powering the main controller to powering the standby controller. That is to say, after the standby controller is set as the working controller, a controller switching instruction for switching the battery backup unit to the standby controller will be formed. Through this controller switching instruction, it is controlled to switch the battery backup unit to the standby controller, so as to power the standby controller through the battery backup unit. Among them, switching the battery backup unit to the standby controller can be to disconnect the connection between the battery backup unit and the main controller and establish the connection between the battery backup unit and the standby controller. In this way, the battery backup unit only powers the working controller in the working state, avoiding the power waste of the battery backup unit and improving the power supply duration of the battery backup unit.

[0056] To realize the switching of the battery backup unit between the main controller and the standby controller, the battery backup unit can be configured with two power supply circuits, namely the main power supply circuit and the standby power supply circuit. The battery backup unit is connected to the main controller through the main power supply circuit, and the battery backup unit is connected to the standby controller through the standby power supply circuit. When the battery backup unit powers the main controller, the main power supply circuit is in a connected state, and the standby power supply circuit is in a disconnected state. On the contrary, when the battery backup unit powers the standby controller, the main power supply circuit is in a disconnected state, and the standby power supply circuit is in a connected state. That is to say, the power supply states of the main power supply circuit for powering the main controller and the standby power supply circuit for powering the standby controller are mutually exclusive. In the embodiment of the present application, by using the main power supply circuit and the standby power supply circuit to connect the battery backup unit to the main controller and the standby controller respectively, and keeping the power supply states of the main power supply circuit and the standby power supply circuit mutually exclusive, in this way, a battery backup unit can play a power-off protection role for the main controller and the standby controller, avoiding the loss of memory data in the storage system due to power-off, and at the same time, it can also improve the power supply duration of the battery backup unit.

[0057] Furthermore, to realize the switching of the main power supply circuit and the standby power supply circuit, the main controller and the standby controller share a backplane, and the switching of the battery backup unit between the main controller and the standby controller is controlled through the shared backplane between the two. Based on this, the specific process of controlling the switching of the battery backup unit to the standby controller through the controller switching instruction includes:

[0058] Send the controller switching instruction to the shared backplane of the main controller and the standby control room, and switch the battery backup unit to the standby controller through the shared backplane.

[0059] Specifically, the shared backplane is used to control the switching of the battery backup unit between the main controller and the standby controller, and is also used for status synchronization between the main controller and the standby controller, that is, the main controller and the standby controller can perform keep-alive communication through the shared backplane to transfer data between them. That is to say, when the main controller is detected to be abnormal, a controller switching instruction will be actively initiated, and the shared backplane will be notified through the controller switching instruction to switch the battery backup unit to the standby controller. Of course, when the main controller returns to normal, a controller switching instruction will also be actively initiated, and the shared backplane will be notified through the controller switching instruction to switch the battery backup unit back to the main controller. That is, when the standby controller is used as the working controller, the controller status of the main controller will be detected in real time. When the controller status of the main controller changes from abnormal to normal, a controller switching instruction will be generated, and the shared backplane will be informed through the controller switching instruction to switch the battery backup unit back to the main controller.

[0060] In one implementation, the switching of the battery backup unit to the standby controller through the shared backplane specifically includes:

[0061] Control the shared backplane to obtain controller information;

[0062] Control the shared backplane to turn on the standby power supply circuit corresponding to the standby controller based on the controller information to switch the battery backup unit to the standby controller.

[0063] Specifically, after receiving the controller switching instruction, the shared backplane will obtain controller information based on the controller switching instruction. When the controller information is the standby controller, the standby power supply circuit corresponding to the standby controller will be turned on so that the battery backup unit is connected to the standby controller, and thus the battery backup unit can supply power to the standby controller. In addition, since the power supply states of the standby power supply circuit corresponding to the standby controller and the main power supply circuit corresponding to the main controller are mutually exclusive, when the standby power supply circuit corresponding to the standby controller is turned on, the main power supply circuit corresponding to the main controller will be turned off to control the battery backup unit not to supply power to the main controller. Of course, in practical applications, the battery backup unit can also be switched to the main controller, so the controller information can also be the main controller. When the controller information is the main controller, the main power supply circuit corresponding to the main controller will be turned on so that the battery backup unit is connected to the main controller.

[0064] S30. Control the power supply of the storage system to switch from the main power supply to the battery backup unit, and supply power to the working controller through the battery backup unit to avoid the loss of memory data due to power failure.

[0065] Specifically, when a power failure event occurs in the storage system, it indicates that the main power supply is abnormal. Therefore, the power supply is switched from the main power supply to the battery backup unit. And when switching from the main power supply to the battery backup unit, since in this application, one battery backup unit supplies power to the main controller and the standby controller, only the working controller needs to be supplied power by the battery backup unit, so that the loss of memory data due to power failure can be avoided.

[0066] Furthermore, to avoid the loss of memory data due to power failure, after switching from the main power supply to the battery backup unit, the memory data in the storage system will be stored in a non-volatile storage medium to ensure the security of the valid data in the cache. Therefore, the dual-controller storage system further includes a persistent storage module; the persistent storage module is used to save the memory data when a power failure event occurs in the storage system. Among them, the persistent storage module can be a read-only memory (ROM), a programmable read-only memory (PROM), an electrically alterable read-only memory (EAROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a flash memory (Flash Memory), etc., to ensure the security of the written data.

[0067] Of course, in practical applications, after switching from the main power supply to the battery backup unit, the cache status of the memory data in the storage system and the power status of the main power supply can also be detected. When the cache status is cache completed or the power status is normal, the power supply of the storage system is switched from the battery backup unit to the main power supply. And if the battery backup unit supplies power to the main controller, the power supply state of the battery backup unit remains unchanged. On the contrary, if the battery backup unit supplies power to the standby controller, the controller status of the main controller will continue to be detected.

[0068] In summary, this embodiment provides a power-down protection method, apparatus, and storage system. The method includes detecting in real time whether a power-down event occurs in the storage system; when the power-down event occurs in the storage system, reading the working controller in the working state; and controlling the power supply of the storage system to switch from the main power supply to the battery backup unit, and powering the working controller through the battery backup unit to avoid loss of memory data caused by power-down. In the embodiment of the present application, a battery backup unit is provided in a dual-controller storage system, and the battery backup unit is connected to the main controller and the standby controller. Then, when a power-down event occurs in the storage system, by controlling the battery backup unit to supply power to the working controller in the main controller and the standby controller in the working state, loss of memory data caused by power-down can be avoided. This can not only avoid loss of memory data caused by power-down, but also reduce the hardware cost of the dual-controller storage system.

[0069] Based on the above power-down protection method, this embodiment provides a power-down protection apparatus, as Figure 4 shown. The power-down protection apparatus specifically includes:

[0070] A detection module 100, configured to detect in real time whether a power-down event occurs in the storage system;

[0071] A reading module 200, configured to read the working controller in the working state when the power-down event occurs in the storage system, where the working controller is the main controller or the standby controller;

[0072] A switching module 300, configured to control the power supply of the storage system to switch from the main power supply to the battery backup unit, and power the working controller through the battery backup unit to avoid loss of memory data caused by power-down.

[0073] In one implementation, the switching module is further configured to detect the controller state of the main controller in real time; and when the controller state of the main controller is an abnormal state, set the standby controller as the working controller and generate a controller switching instruction, so as to switch the battery backup unit to the standby controller through the controller switching instruction and power the standby controller through the battery backup unit.

[0074] Based on the above power-down protection method, this embodiment provides a dual-controller storage system, as Figure 1As shown, the storage system of the dual controllers includes a main controller, a standby controller, a battery backup unit, and a power failure protection device. Both the main controller and the standby controller are connected to the battery backup unit. The power failure protection device is used to detect in real time whether a power failure event occurs in the storage system. When a power failure event occurs in the storage system, it reads the working controller in the working state and controls the power supply of the storage system to switch from the main power supply to the battery backup unit, and supplies power to the working controller through the battery backup unit to avoid the loss of memory data caused by power failure. Among them, the working controller is the main controller or the standby controller.

[0075] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that they can still modify the technical solutions recorded in the foregoing embodiments, or perform equivalent replacements on some of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A power-down protection method, characterized in that, A storage system applied to a dual controller, the storage system of the dual controller includes a primary controller, a standby controller, a primary power supply, and a battery backup unit. Both the primary controller and the standby controller are connected to the primary power supply and the battery backup unit. The primary power supply is connected to the primary controller and the standby controller to supply power to the primary controller and the standby controller. The battery backup unit is connected to the primary controller and the standby controller to supply power to the working controller in the working state among the primary controller and the standby controller when the primary power supply is abnormal; The power failure protection method specifically includes: Real-time detect whether a power failure event occurs in the storage system; When a power failure event occurs in the storage system, read the working controller in the working state, where the working controller is the primary controller or the standby controller; Control the power supply of the storage system to switch from the primary power supply to the battery backup unit, and supply power to the working controller through the battery backup unit to avoid loss of memory data due to power failure; Among them, during the working process of the storage system, the control state of the primary controller is detected, and the working controller in the working state is determined based on the control state of the primary controller. The specific process of determining the working controller in the working state based on the control state of the primary controller is: Real-time detect the controller state of the primary controller; When the controller state of the primary controller is an abnormal state, set the standby controller as the working controller and generate a controller switching instruction; Send the controller switching instruction to the shared backplane between the primary controller and the standby controller, and switch the battery backup unit to the standby controller through the shared backplane to supply power to the standby controller through the battery backup unit, and disconnect the connection between the battery backup unit and the primary controller; When the primary controller returns to normal, actively initiate a controller switching instruction, and notify the shared backplane to switch the battery backup unit back to the primary controller through the controller switching instruction.

2. The power-down protection method according to claim 1, wherein The switching the battery backup unit to the standby controller through the shared backplane specifically includes: Control the shared backplane to obtain controller information; Control the shared backplane to turn on the standby power supply circuit corresponding to the standby controller based on the controller information to switch the battery backup unit to the standby controller.

3. The power-down protection method according to claim 2, wherein The battery backup unit is provided with a primary power supply circuit for supplying power to the primary controller and a standby power supply circuit for supplying power to the standby controller, and the power supply states of the primary power supply circuit and the standby power supply circuit are mutually exclusive.

4. The power-off protection method according to claim 1, characterized in that, The method further includes: The primary controller and the standby controller perform status synchronization through the shared backplane between the primary controller and the standby controller.

5. The power-down protection method according to claim 1, characterized in that, The storage system of the dual controller further includes a persistent storage module; after supplying power to the working controller through the battery backup unit, the method further includes: Control the memory data in the storage system to be stored in the persistent storage module.

6. A power-off protection device, characterized in that, A storage system applied to a dual controller. The storage system of the dual controller includes a primary controller, a standby controller, a primary power supply, and a battery backup unit. Both the primary controller and the standby controller are connected to the primary power supply and the battery backup unit. The primary power supply is connected to the primary controller and the standby controller to supply power to the primary controller and the standby controller. The battery backup unit is connected to the primary controller and the standby controller to supply power to the working controller in the primary controller and the standby controller that is in the working state when the primary power supply is abnormal. The power-off protection device specifically includes: A detection module for real-time detecting whether a power-off event occurs in the storage system. A reading module for reading the working controller in the working state when the power-off event occurs in the storage system, where the working controller is the primary controller or the standby controller. A switching module for controlling the power supply of the storage system to be switched from the primary power supply to the battery backup unit, and supplying power to the working controller through the battery backup unit to avoid loss of memory data caused by power-off. Wherein, during the working process of the storage system, the control state of the primary controller is detected, and the working controller in the working state is determined based on the control state of the primary controller. The specific process of determining the working controller in the working state based on the control state of the primary controller is as follows: Real-time detecting the controller state of the primary controller. When the controller state of the primary controller is an abnormal state, setting the standby controller as the working controller and generating a controller switching instruction. Sending the controller switching instruction to the shared backplane between the primary controller and the standby controller, and switching the battery backup unit to the standby controller through the shared backplane to supply power to the standby controller through the battery backup unit, and disconnecting the connection between the battery backup unit and the primary controller. When the primary controller returns to normal, actively initiating a controller switching instruction, and notifying the shared backplane to switch the battery backup unit back to the primary controller through the controller switching instruction.

7. A storage system with dual controllers, characterized in that, The storage system of the dual controller includes a primary controller, a standby controller, a primary power supply, a battery backup unit, and a power-off protection device. Both the primary controller and the standby controller are connected to the battery backup unit. The primary power supply is connected to the primary controller and the standby controller to supply power to the primary controller and the standby controller. The battery backup unit is connected to the primary controller and the standby controller to supply power to the working controller in the primary controller and the standby controller that is in the working state when the primary power supply is abnormal. The power-off protection device is used for real-time detecting whether a power-off event occurs in the storage system. When the power-off event occurs in the storage system, reading the working controller in the working state, controlling the power supply of the storage system to be switched from the primary power supply to the battery backup unit, and supplying power to the working controller through the battery backup unit to avoid loss of memory data caused by power-off, where the working controller is the primary controller or the standby controller. Among them, during the operation of the storage system, the control state of the main controller is detected, and the working controller in the working state is determined based on the control state of the main controller. The specific process of determining the working controller in the working state based on the control state of the main controller is as follows: Detect the controller state of the main controller in real time; When the controller state of the main controller is an abnormal state, set the standby controller as the working controller and generate a controller switching instruction; Send the controller switching instruction to the shared backplane between the main controller and the standby controller, and switch the battery backup unit to the standby controller through the shared backplane to supply power to the standby controller through the battery backup unit, and disconnect the connection between the battery backup unit and the main controller; When the main controller returns to normal, actively initiate a controller switching instruction, and notify the shared backplane to switch the battery backup unit back to the main controller through the controller switching instruction.

Images