Cluster Node Device Avoidance-Override Recovery Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In cluster systems, unsynchronized time between node devices can lead to all nodes being stopped due to recovery operations, causing service disruptions.
Innovation Solution
A node device with a determination unit to assess whether it should prioritize avoiding recovery operations over executing them, and a report request unit to gather state information from other nodes, allowing it to decide whether to perform a recovery operation based on the reported states of other nodes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a standby system issues a reset to the failed system based on reset delay time, then recovery operation is executed, but all node devices may be stopped when time is not synchronized
Solution Approach 1:
The system introduces a feedback mechanism where node devices report their state (normal or abnormal) to the standby system. The standby system uses this feedback information to determine whether to execute the recovery operation, preventing simultaneous resets of all nodes and ensuring service continuity while maintaining recovery reliability.
2Reliability
If all node devices execute recovery operation simultaneously, then failure recovery is achieved, but all services are disrupted
Solution Approach 1:
The standby system performs a preliminary check by requesting state reports from all node devices before executing the recovery operation. This preliminary action allows the system to identify whether other nodes are already abnormal, and thus avoid executing recovery operations that would cause service disruption, while still achieving failure recovery when appropriate.
Data Source
AI summary
When a node device (10-1) has detected a system failure in a cluster system (1), it determines whether the node device (10-1) is an avoidance-override device. Then, when the node device (10-1) determines that the own node device is an avoidance priority device, the node device (10-1) transmits a request signal to a node device (10-2) other than the node device (10-1). The request signal is a signal for requesting a report about a normal state and an abnormal state of the node device (10-2). Then, the node device (10-1) determines whether to execute a recovery operation of the own node device or to avoid executing a recovery operation of the own node device based on the report from the node device (10-2).