Synchronized Ring Software Download for 50 ms Recovery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In ring-based networks, traditional software upgrades often result in significant service outages due to the need to reset ring interface modules, making it difficult to maintain network recovery times of 50 ms or less while upgrading multiple nodes within a reasonable cost.
Innovation Solution
A two-phase synchronized software download and installation method is implemented, where main processing modules and user interface modules are upgraded in parallel in the first phase, and ring interface modules are upgraded one segment at a time in the second phase, ensuring only a single span is down at a time, with traffic diversion to maintain service.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional software upgrade method is used, then software can be upgraded, but service outage time increases significantly
Solution Approach 1:
The ring network is segmented into multiple upgrade zones, allowing different sections to be upgraded at different times. The system divides the network into first and second ring segments, enabling phased upgrades that maintain service continuity in non-upgraded segments while reducing overall service outage time.
Solution Approach 2:
The system performs preliminary actions by downloading software to a standby ring interface module before it is needed. The standby module receives and stores software images in advance, so when an upgrade is required, the switch can occur without service interruption, as the new software is already prepared and validated.
2Productivity
If multiple nodes are upgraded simultaneously, then upgrade efficiency increases, but network recovery time exceeds 50 ms
Solution Approach 1:
The network upgrade process is segmented into controlled phases where only specific ring segments are upgraded at any given time. This segmentation allows the system to maintain upgrade efficiency by working on multiple segments sequentially while ensuring that each segment upgrade completes within the 50 ms recovery time requirement.
Solution Approach 2:
A standby ring interface module acts as an intermediary during the upgrade process. This intermediary module holds the new software image and can immediately take over when the active module needs to be upgraded, ensuring that the transition occurs within the required 50 ms recovery time while maintaining overall upgrade efficiency.
3Reliability
If ring interface modules are reset during upgrade, then software can be updated, but traffic interruption occurs
Solution Approach 1:
The standby ring interface module performs preliminary actions by downloading and validating software images before they are needed for the active module. This advance preparation ensures that when the active module is reset for upgrading, the standby module is already ready to immediately take over traffic, eliminating service interruption.
Solution Approach 2:
The system implements a hot-standby mechanism where the standby ring interface module continuously monitors and is ready to recover traffic immediately when the active module is reset for software updates. This recovery mechanism ensures that the active module can be reset without traffic interruption, as the standby module is pre-positioned to take over instantly.
Data Source
AI summary
According to a disclosed embodiment of the invention, software download and installation in a ring network are synchronized in a two-stage operation in order to minimize service disruption time. In a first phase, the MPM's and UIM's in all the nodes are upgraded in parallel. Each node has two main processing modules, allowing one to be upgraded while the other continues to operate the node. In a second phase, the RIM's at the edges of a single ring segment are upgraded, one ring segment after the other, during which time each terminal node continues to operate with respect to the span connecting to its opposite side. While a span is non-operative, traffic is wrapped or diverted as necessary to maintain service of the ring. While one RIM of a node is being upgraded, the other RIM remains operational.


