A Design Method for Redundant Modules in Distributed Systems

Abstract

This invention discloses a design method for redundant modules in a distributed system, belonging to the field of system control technology. It includes: module architecture design, module function design, and module workflow design. The module architecture comprises a configuration layer, a communication layer, a logic layer, and an application layer. The module functions include configuration, management, detection, availability assessment, decision-making, and information synchronization functions. The redundant modules are located on different hardware devices within the distributed system. This invention improves resource utilization.

Description

Technical Field

[0001] This invention relates to the field of system control technology, and in particular to a design method for redundant modules in a distributed system. Background Technology

[0002] In rail transit control systems, such as the Automatic Train Management (ATS) system, the ATS is responsible for automatic monitoring and dispatching of trains. The reliability of the ATS system directly impacts the safe operation and operational efficiency of trains. To ensure the reliability of the ATS system, a redundant architecture of physical equipment is typically adopted. This means that identical business application computing or service computer software modules are deployed on different server devices and can run simultaneously according to design requirements. Only the primary application software module provides services. When the primary server's application software module or device fails, the system switches to another server device providing the same application service, ensuring uninterrupted operation or service of the application software module.

[0003] Currently, the high reliability of ATS systems is mainly achieved through hardware redundancy. This is achieved by using a dual-machine hot standby approach, where the primary and backup devices operate simultaneously. When the primary device fails, the backup device can immediately take over, ensuring the system's normal operation. Furthermore, increasing the number of devices can allow the system to continue operating even when some devices fail.

[0004] In response to the aforementioned technologies, this disclosure allows operators to stop service support for the original equipment when the software system on the primary equipment fails, and to activate the corresponding backup server equipment to take over the service, thereby ensuring the continuity of application system services, abandoning the use of the software-failed equipment, and reducing the utilization efficiency of equipment resources. Summary of the Invention

[0005] To improve resource utilization, this invention provides a design method for redundant modules in a distributed system.

[0006] The distributed system redundancy module design method provided by this invention adopts the following technical solution:

[0007] A method for designing redundant modules in a distributed system includes module architecture design, module function design, and module workflow design. The module architecture comprises a configuration layer, a communication layer, a logic layer, and an application layer. The module functions include configuration, management, detection, availability assessment, decision-making, and information synchronization functions. Redundant modules are located on different hardware devices within the distributed system. The configuration function configures the functional parameters of the modules on different hardware devices. The management function registers with redundant modules within the system, receives registration information from other redundant modules, and monitors and manages the redundant modules. The detection function performs performance and application detection on the modules themselves, obtaining and outputting detection data. The availability assessment function evaluates the modules' own effectiveness based on the acquired detection data and assesses business application metrics, obtaining and outputting evaluation data. The decision-making function determines the switching method for redundant modules based on the evaluation data. The information synchronization function periodically broadcasts the module's own status to other redundant modules and simultaneously receives status information from other redundant modules, achieving status synchronization between redundant modules.

[0008] Furthermore, the configuration layer is used to configure the application data and system data of the module;

[0009] The communication layer is used to handle dynamic data transmission of application modules, redundant module status reception and output of the module's status, and transmission of system management commands for the module; the logic layer is used for module status management and module switching management; and the application layer is used for application business operations.

[0010] Furthermore, the configuration functions include: configuring a unique identifier for module discovery and identification of redundant modules within different hardware devices; configuring operating modes for configuring the module's operating mode under various redundancy schemes; configuring network parameters and communication protocols, configuring different network parameters according to the hardware device where the module is located to facilitate the planning of communication resources between modules; configuring alarm thresholds and switching thresholds, performing hierarchical calculations based on module status information, and configuring alarm thresholds and switching thresholds according to the calculation data; configuring time parameters, configuring the module fault allowable time and redundant module fault switching time according to the redundancy scheme; and configuring module priorities, configuring different priorities for redundant modules to guide the priority logic for switching between modules.

[0011] Furthermore, the management functions include: module identification management, used to discover and identify other redundant modules using the network, receive online registrations of other redundant modules, and manage them uniformly; module self-management, used to calculate the utilization rates of storage resources, computing resources, and network resources, and to conduct comprehensive analysis and management; and module status management, used to synchronize its own performance status to other redundant modules, while receiving the performance status of other redundant modules and selecting a redundancy switching scheme that meets the requirements.

[0012] Furthermore, the detection functions include: self-performance detection, which includes system detection and fault detection, used to calculate and analyze its own performance status and fault status, and obtain and output performance level data; application detection, which includes application data detection, application logic detection, application condition detection, and application service response time detection, used to calculate and analyze application status, and obtain and output application indicator data; alarm function, configured to send alarm information if performance level data exceeds an alarm threshold, and if application indicator data exceeds an alarm threshold; status information publishing, used to publish performance status, fault status, and application status information to the outside world to achieve system monitoring; and detection and maintenance, used to monitor application modules and perform necessary maintenance operations.

[0013] Furthermore, the availability assessment function includes: determining the health service indicators of the module application system based on the module performance level data; calculating and analyzing the health service indicators of the application system, and evaluating the availability indicators, which include system service efficiency and fault tolerance, and comprehensively calculating and outputting evaluation data.

[0014] Furthermore, the decision-making function includes: according to the module command management function, the module system allows users to manually switch strategy schemes via commands; based on the received evaluation data, the redundancy scheme and usage strategy are determined; if the evaluation data is within the configured switching threshold range, the primary module remains unchanged; if the evaluation data exceeds the preset switching threshold range, the redundant module with the optimal evaluation data is selected as the primary module switching direction.

[0015] Furthermore, the decision-making function also includes: configuring module switching priority, with manual switching strategy having higher priority than automatic switching strategy; the manual switching strategy includes module switching prohibited state and module switching allowed state, and each redundant module synchronizes and manages this state; when the system performs automatic switching, the switching prohibited state and switching allowed state of the redundant module are the primary conditions for switching.

[0016] Furthermore, the information synchronization function includes: periodically broadcasting its own status and application status to the redundant module according to a preset communication protocol, receiving status information from the redundant module, and realizing status synchronization between mutually redundant modules; separating static information and dynamic information, and determining the dynamic information that needs to be synchronized, so as to reduce information exchange between networks.

[0017] Furthermore, the module's workflow includes: reading the system configuration file to determine the module's static configuration information, including network configuration, working mode, system communication protocol, etc.; starting the communication service according to the network configuration and receiving and processing module status information data packets according to the system communication protocol; discovering and managing the status of mutually redundant modules based on the received information from other redundant modules; checking and determining whether the module of the application service master node in the redundant system conforms to the configured redundancy scheme according to the working mode; if the module of the application service master node in the redundant system does not conform to the redundancy scheme, comprehensively analyzing other redundant modules and determining whether they are the optimal modules; if the selected redundant module is the optimal module, starting the application service; determining whether the application service has started successfully and can provide services normally; if the application has started successfully and can provide services normally, marking the current module as the service master node; and publishing the service status information of this node.

[0018] Compared with the closest existing technology, the technical solution of the present invention has the following effects:

[0019] 1. A module-based application adaptation framework was implemented at the software level. When the redundant modules of the distributed system run on different hardware devices, the functional parameters are configured according to the system device requirements. The redundant modules register with each other to monitor and allocate distributed resources, which greatly improves resource utilization.

[0020] 2. It implements the redundant module function design in the distributed system, which is easy to expand and has versatility;

[0021] 3. Each module can undertake part of the computing function, which is conducive to the economic analysis of equipment resources, reduces the coupling of business data, and facilitates deployment; it is easy to expand performance and has versatility.

[0022] 4. The redundant module has the function of autonomous management of the module status within the system, realizing the switching between modules. Through the configuration of the module switching scheme, it can adapt to different resource conditions as needed and has wide applicability. Attached Figure Description

[0023] Figure 1 This is a flowchart illustrating a distributed system redundancy module design method according to an embodiment of the present invention.

[0024] Figure 2This is a schematic diagram of the module structure of a distributed system redundancy module design method according to an embodiment of the present invention.

[0025] Figure 3 This is a flowchart illustrating the redundant module system switching method according to an embodiment of the present invention.

[0026] Figure 4 This is a schematic diagram of the workflow of the distributed system redundancy module in an embodiment of the present invention.

[0027] Explanation of reference numerals in the attached figures:

[0028] 11. Configuration layer; 12. Communication layer; 13. Logic layer; 14. Application layer. Detailed Implementation

[0029] To enable those skilled in the art to better understand the technical solutions in this specification, the technical solutions in the embodiments of this specification will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments.

[0030] In the description of the embodiments of the present invention, words such as "for example" or "for instance" are used to indicate examples, illustrations, or explanations. Any embodiment or design described as "for example" or "for instance" in the embodiments of the present invention should not be construed as being more preferred or advantageous than other embodiments or designs. Rather, the use of words such as "for example" or "for instance" is intended to present the relevant concepts in a specific manner.

[0031] In the description of the embodiments of the present invention, the term "multiple" means two or more. For example, multiple systems means two or more systems, and multiple screen terminals means two or more screen terminals. Furthermore, the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the indicated technical features. Thus, a feature defined with "first" or "second" may explicitly or implicitly include one or more of that feature. The terms "comprising," "including," "having," and variations thereof all mean "including but not limited to," unless otherwise specifically emphasized.

[0032] In rail transit control systems, such as the Automatic Train Control (ATS) system, which is responsible for automatic train monitoring and dispatching, the reliability of the ATS system directly affects the safe operation and operational efficiency of trains. To ensure the reliability of the ATS system, a redundant architecture of physical equipment is usually adopted. That is, the same business application computing or service computer software modules are deployed on different server devices and can run simultaneously according to design requirements. Only the primary application software module provides services. When the application software module or device of the primary server fails, the system switches to other server devices providing the same application services, ensuring uninterrupted operation or service of the application software modules.

[0033] Currently, the high reliability of ATS systems is mainly achieved through hardware redundancy. This is achieved by using a dual-machine hot standby approach, where the primary and backup devices operate simultaneously. When the primary device fails, the backup device can immediately take over, ensuring the system's normal operation. Furthermore, increasing the number of devices can allow the system to continue operating even when some devices fail.

[0034] When the software system on the primary device fails, the operator stops service support for the original device and activates the corresponding backup server device to take over the service, thereby ensuring the continuity of application system services. This abandons the use of the software-failed device and reduces the utilization efficiency of equipment resources.

[0035] To address the aforementioned technical problems, this invention provides a method for designing redundant modules in a distributed system, referring to... Figure 1 , Figure 1 This is a flowchart illustrating a distributed system redundancy module design method provided by an embodiment of the present invention. This distributed system redundancy module design method is applied to application systems with unevenly distributed business modules that have subdivided functions, distributed application systems with different reliability requirements, and application systems with scheduling requirements for overall equipment resources. The method includes steps S101 to S103, as follows:

[0036] S101: Module architecture design;

[0037] Specifically, the structure of a modular architecture can be as follows: Figure 2 As shown, the module architecture includes a configuration layer 11, a communication layer 12, a logic layer 13, and an application layer 14.

[0038] In some possible embodiments, the configuration layer 11 is used to configure the application data and system data of the module; the communication layer 12 is used to process the dynamic data transmission of the application module, the reception of redundant module status and the output of the status of this module, and the transmission of system management commands of this module; the logic layer 13 is used for the management of module status and the management of module switching; and the application layer 14 is used for the operation of application services.

[0039] Specifically, the configuration layer 11 includes two types of configuration: application module data configuration and module system configuration; the communication layer 12 mainly handles dynamic data transmission of application modules, reception of redundant module status and output of the module's status, and transmission of system management commands for the module. Dynamic data transmission of application modules includes application input data and application output data, and transmission of system management commands for the module includes other management information input and other management information output. It uses an available information processing system to store module configuration information and application data information; the logic layer 13 includes module status management and module switching behavior management, as well as switching logic; the application layer 14 mainly performs application business calculations, enabling the module to have independent computing capabilities.

[0040] S102: Module Function Design;

[0041] Specifically, the module functions include configuration, management, detection, availability assessment, decision-making, and information synchronization. Redundant modules are deployed on different hardware devices within the distributed system. The configuration function configures the module's operating parameters on different hardware devices. The management function registers with redundant modules within the system, receives registration information from other redundant modules, and monitors and manages redundant modules. The detection function performs performance and application testing, obtaining and outputting test data. The availability assessment function evaluates the module's own effectiveness based on the acquired test data and assesses business application metrics, obtaining and outputting evaluation data. The decision-making function determines the switching method for redundant modules based on the evaluation data. The information synchronization function periodically broadcasts its own status to other redundant modules and simultaneously receives status information from other redundant modules, achieving status synchronization between redundant modules.

[0042] In some possible embodiments, the configuration functions include: configuring a unique identifier for module discovery and identification of redundant modules within different hardware devices; configuring operating modes for configuring the module's operating mode under multiple redundancy methods; configuring network parameters and communication protocols, configuring different network parameters according to the hardware device where the module is located to facilitate the planning of communication resources between modules; configuring alarm thresholds and switching thresholds, performing hierarchical calculations based on module status information, and configuring alarm thresholds and switching thresholds according to the calculation data; configuring time parameters, configuring the module fault allowable time and redundant module fault switching time according to the redundancy scheme; and configuring module priorities, configuring different priorities for redundant modules to guide the priority logic of switching between modules.

[0043] Specifically, when distributed system redundancy modules run on different hardware devices, necessary configuration parameters are provided to ensure system usability. Each redundant module on each device is configured with a unique identifier for easy discovery and identification by the management system. Based on system reliability requirements and redundancy design, the operating modes of each module are configured, such as hot standby, cold standby, master-slave, dual-master, etc., to support deployment under various redundancy methods such as parallel processing and voting. For modules distributed across different devices, different network parameters are configured as needed to facilitate the planning of communication resources between modules.

[0044] Specifically, modules, based on device configuration and efficiency goals, perform graded calculations on various factors affecting system performance, such as storage resources, computing resources, network resources, and read / write efficiency, according to the efficiency level of each factor. These calculations are then converted into performance levels, and alarm and switching thresholds are configured for each level to facilitate diagnosis, alarming, and performance evaluation of the operating environment. Redundant modules require multiple redundancy schemes and switching strategies for system decision-making. Module failure tolerance time and redundant module failover time are configured. Designed according to resource allocation and reliability requirements, different priorities are configured for redundant modules to guide the priority logic for switching between them. System management protocols or communication methods are agreed upon and configured. In addition, basic parameters such as module version, log level, module status, and alarm level should be configured. Modules are loosely coupled and strongly cohesive; development, testing, release, and upgrades are independent and do not depend on other applications.

[0045] Specifically, the module possesses excellent scalability, facilitating the addition or removal of business applications, and provides a unified interface that integrates applications from different operating systems (Windows, Linux) and different programming languages ​​(C++, C#, Java). This allows the redundant module to be configured with necessary functional parameters while running on hardware devices. Thus, it achieves the functional design of redundant modules in a distributed system, is easily expandable, enables multiple redundant operating modes, reduces deployment difficulty, and possesses versatility.

[0046] In some possible embodiments, the management functions include: module identification management, used to discover and identify other redundant modules using the network, receive online registrations of other redundant modules, and manage them uniformly; module self-management, used to calculate the utilization rates of storage resources, computing resources, and network resources, and to conduct comprehensive analysis and management; and module status management, used to synchronize its own performance status to other redundant modules, while receiving the performance status of other redundant modules and selecting a redundancy switching scheme that meets the requirements.

[0047] Specifically, after the module starts, it discovers and identifies other redundant modules in the system configuration via the network according to a predetermined communication protocol, receives online registration from each module, and manages them uniformly. Redundant modules can calculate their own status, including storage resources, computing resources, and network resources. Based on device configuration and reliability design requirements, they dynamically calculate the resource utilization rate of each item to perform comprehensive analysis and management of the module. Each module synchronizes its own performance status to other redundant modules in real time according to the agreed system management protocol and communication method, while simultaneously receiving the performance status of other redundant modules and selecting a redundancy switching scheme that meets the requirements based on the configuration.

[0048] In some possible embodiments, the detection function includes: self-performance detection, which includes system detection and fault detection, used to calculate and analyze its own performance status and fault status, and obtain and output performance level data; application detection, which includes application data detection, application logic detection, application condition detection, and application service response time detection, used to calculate and analyze application status, and obtain and output application indicator data; alarm function, configured to send alarm information if performance level data exceeds an alarm threshold; and to send alarm information if application indicator data exceeds an alarm threshold; status information publishing, used to publish performance status, fault status, and application status information to the outside world to achieve system monitoring; and detection and maintenance, used to monitor application modules and perform necessary maintenance operations.

[0049] Specifically, in a distributed system, redundant modules operate on multiple devices in the network, typically requiring monitoring of the system performance of each device, such as network resources, computing resources, and storage resources. The redundant modules possess calculation and analysis capabilities for these status indicators affecting system performance. Based on device configuration and reliability design requirements, they dynamically calculate and quantify the status of each indicator to obtain performance level data. The modules also obtain application indicator data through application monitoring. When the performance level data and application indicator data exceed alarm thresholds, the modules send alarm information. To facilitate the monitoring of the redundant system and application systems, the redundant modules also need to publish their own status and application status information. Based on this data, terminal modules are developed to implement system monitoring and provide maintenance interfaces, enabling necessary maintenance operations as needed.

[0050] Specifically, the calculation items include system performance status calculation and system fault status calculation. System performance status mainly includes CPU usage, memory usage, disk read / write speed, and disk usage; network performance status includes traffic monitoring, latency monitoring, and bandwidth monitoring; application detection includes application data, application logic, and application conditions. The application data processed by the module mainly includes static data and dynamic data. Static data is the basic configuration of application services, while dynamic data is the dynamic input data during application logic operations, which is also the target of the distributed module. The module verifies and alarms the validity of static and dynamic application data. In addition, other monitoring items include application service response time and request data queue. The redundant module's resource calculation function helps to balance resource usage, improve system operating efficiency, and facilitate overall system economic planning.

[0051] In some possible embodiments, the availability assessment function includes: determining the health service indicators of the module application system based on module performance level data; calculating and analyzing the health service indicators of the application system, and evaluating the availability indicators, which include system service efficiency and fault tolerance, and comprehensively calculating and outputting evaluation data.

[0052] Specifically, the module must not only perform self-assessment of its own effectiveness but also have the function of evaluating business application metrics. First, quantifiable metrics for the effectiveness of redundant modules are defined, such as response time and memory usage changes. These metrics are then evaluated individually and comprehensively to determine the health service metrics of the module's application system. Second, as needed, service metrics for each application module are calculated separately, such as application task service time and command response time, to analyze and evaluate system service efficiency, fault tolerance, and other availability metrics.

[0053] In some possible embodiments, the decision-making function includes: according to the module command management function, the module system allows users to manually switch strategy schemes via commands; based on the received evaluation data, a redundancy scheme and usage strategy are determined; if the evaluation data is within the configured switching threshold range, for example, CPU utilization is less than 50% and memory utilization is less than 70%, the primary module remains unchanged; if the evaluation data exceeds the preset switching threshold range, the redundant module with the best evaluation data is selected as the primary module switching direction.

[0054] Specifically, such as Figure 3 As shown, Figure 3This is a schematic diagram of the redundancy module system switching method provided in an embodiment of the present invention. The system monitors whether the user has entered a switching request command based on the redundancy module command management function. If a user switching request is detected, and if the local module meets the preset redundancy scheme, the system upgrades the local master node according to the user's selection and starts the application module based on the local master node. The system determines whether the master node module is faulty by monitoring for faults in the master node module. If the master node module is faulty, and the local module meets the preset redundancy scheme, the system upgrades the redundant module to the local master node and starts the application module based on the local master node. The system determines whether a master node module switching request has been entered by monitoring the performance of the master node module. If a master node module switching request is entered, and the local module meets the preset redundancy scheme, the system upgrades the redundant module to the local master node and starts the application module based on the local master node. In this way, by configuring the module switching scheme, the system can adapt to different resource conditions as needed, effectively improving the applicability of the system.

[0055] In some possible embodiments, the decision-making function further includes: configuring module switching priority, with manual switching strategy having a higher priority than automatic switching strategy; the manual switching strategy includes a module switching prohibited state and a module switching allowed state, with each redundant module synchronizing and managing this state; when the system performs automatic switching, the switching prohibited state and switching allowed state of the redundant module are the primary conditions for switching.

[0056] Specifically, manual handover takes precedence over automatic handover. The manual handover strategy includes the prohibited and permitted handover states for each redundant module, and each redundant module synchronizes and manages this state. This ensures that after a manual handover, the redundant system has a flag indicating that the specified module is prohibited from handover, preventing a return to the prohibited direction module under optimal handover conditions. When the redundant system performs autonomous handover, the prohibited and permitted handover states of the handover direction module are the primary criteria for judgment. For systemic fault conditions indicated in the system configuration, the module provides basic automatic detection functions, such as the communication status between the primary node and the local node, and the communication status between the primary node and the service target.

[0057] In some possible embodiments, the information synchronization function includes: periodically broadcasting its own status and application status to the redundant module according to a preset communication protocol, receiving status information from the redundant module, and realizing status synchronization between mutually redundant modules; separating static information and dynamic information, and determining the dynamic information that needs to be synchronized, so as to reduce information exchange between networks.

[0058] Specifically, to ensure the overall continuity of the system, before switching redundant modules, it is necessary to understand and determine the health of the target module system. The module should be constructed with the ability to manage the status of other similar redundant modules in the network. Therefore, modules should broadcast their status to other modules at regular intervals according to a preset general protocol, and at the same time receive status information from other modules to achieve status synchronization between redundant modules.

[0059] S103: Module workflow design;

[0060] In some possible implementations, refer to Figure 4 , Figure 4 This is a schematic diagram of the workflow of a distributed system redundancy module provided in an embodiment of the present invention. It includes steps S301 to S309, as follows: S301: Read the system configuration file to determine the static configuration information of the module, including network configuration, working mode, system communication protocol, etc.; S302: Start the communication service according to the network configuration, and receive and process module status information data packets according to the system communication protocol; S303: Discover and manage the status of mutually redundant modules based on the received information of other redundant modules; S304: Check and determine whether the module of the application service master node in the redundant system conforms to the configured redundancy scheme according to the working mode; S305: If the module of the application service master node in the redundant system does not conform to the redundancy scheme, comprehensively analyze other redundant modules and determine whether they are the optimal modules; S306: If the selected redundant module is the optimal module, start the application service; S307: Determine whether the application service has started successfully and can provide services normally; S308: If the application has started successfully and can provide services normally, mark the current module as the service master node; S309: Publish the service status information of this node.

[0061] Specifically, upon module startup, the system configuration file is read first to determine the module's static configuration information, including network configuration, operating mode, and system communication protocol. Based on the network configuration information, the system starts the communication service and receives and processes module status information data packets according to the system communication protocol. Next, based on the received information from other redundant modules, the system identifies and manages the states of mutually redundant modules. According to the operating mode, it checks whether the application service master node module in the redundant system conforms to the configured redundancy scheme. If other module states meet the requirements, this module repeats step S303; otherwise, it proceeds to step S305. Based on the configuration, the optimal module is selected from the module status management. If this module is the optimal one, it proceeds to step S306. The system starts the application service. If the application service starts successfully and provides services normally, it proceeds to step S308; otherwise, it proceeds to step S309. The current module is marked as the service master node, and the service status information of this node is published.

[0062] In summary, the distributed system redundancy module design implements an application adaptation framework based on module self-management at the software level. This framework achieves unified management of similar redundant modules in the communication network and adapts to business applications. It enables monitoring and allocation of distributed resources, resulting in high resource utilization. Each module can handle a portion of the computation, facilitating load balancing. Furthermore, it reduces business data coupling, is easily scalable, and possesses versatility. Through the configuration of module switching schemes, it can adapt to different resource conditions as needed, demonstrating broad applicability.

[0063] It should be noted that any process or method description in the flowchart or otherwise described herein can be understood as representing a module, segment, or portion of code comprising one or more executable instructions for implementing custom logic functions or processes, and the scope of the preferred embodiments of the invention includes additional implementations in which functions may be performed not in the order shown or discussed, including substantially simultaneously or in reverse order depending on the functions involved, as should be understood by those skilled in the art to which the embodiments of the invention pertain.

[0064] The foregoing description is merely an exemplary embodiment of this disclosure and should not be construed as limiting the scope of this disclosure. Any equivalent changes and modifications made in accordance with the teachings of this disclosure shall still fall within the scope of this disclosure. Those skilled in the art will readily conceive of other embodiments of this disclosure upon considering the specification and the disclosure of practical truth. This invention is intended to cover any variations, uses, or adaptations of this disclosure that follow the general principles of this disclosure and include common knowledge or customary techniques in the art not described in this disclosure.

Claims

1. A method for designing redundant modules in a distributed system, characterized in that, The method comprises: The module architecture design, the module function design, the module workflow design; wherein, The module architecture comprises a configuration layer (11), a communication layer (12), a logic layer (13) and an application layer (14); the configuration layer (11) is used for configuring application data and system data of the module; the communication layer (12) is used for processing application module dynamic data transmission, module state receiving and module state output, and module system management command transmission; the logic layer (13) is used for module state management and module switching management; and the application layer (14) is used for application business operation; The module function comprises a configuration function, a management function, a detection function, an availability evaluation function, a decision function and an information synchronization function, and the redundant modules are arranged on different hardware devices in the distributed system; The configuration function is used for configuring function parameters of the module running in different hardware devices, and specifically comprises: configuring a unique identifier, which is used for module discovery and identification of the redundant modules in different hardware devices; configuring a working mode, which is used for configuring the working mode of the module in multiple redundancy modes; configuring network parameters and communication protocols, which are configured according to the hardware devices where the modules are located, so as to facilitate planning of communication resources between the modules; configuring alarm thresholds and switching thresholds, which are configured based on module state information, and are calculated and measured in stages; configuring time parameters, which are configured according to the redundancy scheme, and are used for configuring module fault allowable time and redundancy module fault switching time; and configuring module priorities, which are configured for different redundant modules, and are used for guiding the priority logic of switching between the modules; The management function is used for registering the redundant modules in the system, receiving registration information of other redundant modules, monitoring and managing the redundant modules, and specifically comprises: module identification management, which is used for discovering and identifying other redundant modules through the network, receiving online registration of other redundant modules, and uniformly managing; module self-management, which is used for calculating usage rates of storage resources, computing resources and network resources, and comprehensively analyzing and managing; and module state management, which is used for synchronizing the performance state of the module to other redundant modules, receiving the performance state of other redundant modules, and selecting a redundancy switching scheme meeting the requirements. The detection function is used for module self-performance detection and application detection, obtains and outputs detection data, and specifically includes: self-performance detection, which includes system detection and fault detection, is used for calculating and analyzing self-performance state and fault state, obtains and outputs performance level data; application detection, which includes application data detection, application logic detection, application condition detection, and application service response time detection, is used for calculating and analyzing application state, obtains and outputs application index data; an alarm function, which is configured to send alarm information if the performance level data exceeds an alarm threshold or if the application index data exceeds an alarm threshold; state information publishing, which is used for publishing performance state, fault state and application state information to the outside, and realizing system monitoring; detection maintenance, which is used for monitoring and realizing maintenance operation of the application module; The availability evaluation function is used for evaluating effectiveness of the module according to the obtained detection data, and evaluating service application indexes, obtaining and outputting evaluation data, and specifically includes: determining health service indexes of the module application system according to module performance level data; calculating the health service indexes of the application system, analyzing and evaluating availability indexes, the availability indexes including system service efficiency and fault tolerance capability, and comprehensively calculating and outputting evaluation data; The decision function is used for determining a module switching method of mutual redundancy according to the evaluation data, and specifically includes: determining a redundancy scheme and a use strategy according to the received evaluation data; if the evaluation data is within a configured switching threshold range, the master module remains unchanged; if the evaluation data exceeds a preset switching threshold range, the redundancy module with the optimal evaluation data is selected as the switching direction of the master module; a module switching priority is configured, and a manual switching strategy priority is higher than an automatic switching strategy priority; the manual switching strategy includes a module prohibited switching state and a module allowed switching state, and each module of mutual redundancy synchronizes and manages the state; the prohibited switching state and the allowed switching state of the redundancy module are the primary conditions for switching when the system performs automatic switching; The information synchronization function is used for broadcasting self state to other modules of mutual redundancy at a fixed time, receiving state information from other modules of mutual redundancy, and realizing state synchronization between modules of mutual redundancy, and specifically includes: broadcasting self state and application state to the redundancy module at a fixed time according to a preset communication protocol, receiving state information of the redundancy module, and realizing state synchronization between modules of mutual redundancy; separating static information and dynamic information, and determining dynamic information that needs to be synchronized, so as to reduce information exchange between networks.

2. The method of claim 1, wherein, The module workflow includes: Reading a system configuration file to determine various static configuration information of the module, the static configuration information including network configuration, working mode, and system communication protocol information; Starting a communication service according to the network configuration, and receiving and processing module state information data packets according to the system communication protocol; According to the received other redundant module information, discover and manage the module state which is redundant to each other; According to the working mode, check and judge whether the module of the application service master node in the redundant system is in conformity with the configured redundancy scheme; If the module of the application service master node in the redundant system is not in conformity with the redundancy scheme, comprehensively analyze other redundant modules and judge whether it is the optimal module; If the selected redundant module is the optimal module, start the application service; Determine whether the application service is successfully started and can normally provide service; If the application is successfully started and can normally provide service, mark the current module as the service master node; Publish the service state information of the current node.

Images