Automatic Failover Configuration with Redundant Observers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing database systems face challenges in ensuring automatic failover configurations prevent divergence between primary and standby databases, while maximizing availability and minimizing resource usage, particularly in managing state changes and quorum propagation during failovers.
Innovation Solution
The implementation of an automatic failover configuration that includes a primary database, a standby database, an active observer, and redundant observers, with an active observer monitor that detects the absence of the active observer and replaces it with a redundant observer, ensuring quorum and minimizing resource usage through careful state management and propagation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single active observer is used to monitor the primary and standby databases, then the system complexity is minimized, but the availability is reduced because the failover configuration cannot tolerate absence of the active observer
Solution Approach 1:
The patent applies preliminary action by deploying redundant observers in advance before any failure occurs. These standby observers are pre-positioned and ready to immediately take over if the active observer becomes absent, eliminating the single point of failure without requiring complex real-time detection or switching mechanisms.
Solution Approach 2:
The patent uses copying by creating redundant copies of the observer component. Instead of making the single observer more robust, the system creates multiple identical observer instances that can substitute for each other, thereby improving reliability through redundancy while keeping each individual observer simple.
2Reliability
If redundant observers are deployed to ensure availability, then the system can tolerate observer absence, but the resource usage increases
Solution Approach 1:
The patent applies partial action by deploying redundant observers that remain in a dormant or standby state, performing minimal monitoring functions. They only become fully active when needed, thus consuming fewer resources than if all observers were continuously fully operational, while still providing the reliability benefits of redundancy.
3Loss of time
If the active observer monitor continuously monitors observer status, then the absence detection is immediate, but the resource consumption increases
Solution Approach 1:
The patent applies periodic action by having the active observer monitor database states at regular intervals rather than continuously. This periodic monitoring approach detects absences within acceptable time frames while significantly reducing resource consumption compared to continuous monitoring, achieving a balance between detection speed and energy efficiency.
Data Source
AI summary
Techniques used in an automatic failover configuration having a primary database system, a standby database system, and an observer for preventing divergence among the primary and standby database systems while increasing the availability of the primary database system. In the automatic failover configuration, the primary database system remains available even in the absence of both the standby and the observer as long as the standby and the observer become absent sequentially. The failover configuration further permits automatic failover only when the observer is present and the standby and the primary are synchronized and inhibits state changes during failover. The database systems and the observer have copies of failover configuration state and the techniques include techniques for propagating the most recent version of the state among the databases and the observer and techniques for using carefully-ordered writes to ensure that state changes are propagated in a fashion which prevents divergence.