Storage Protection Configuration Arbitration During Cluster Failures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Managing storage protection configurations across multiple storage arrays in a storage cluster introduces consistency challenges, particularly during communication failures, where changes to one array can result in conflicting policies and data inconsistencies.
Innovation Solution
A method that detects communication failures between storage arrays, defines a surviving and failed array, synchronizes the storage protection configuration from the surviving array to the failed array, and arbitrates the configuration to maintain consistency across the cluster, ensuring that changes are copied and applied appropriately.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If storage protection configuration is managed independently on each storage array in a stretched volume setup, then each array can operate autonomously during communication failures, but conflicting storage protection configurations and data inconsistencies occur across the cluster
Solution Approach 1:
The patent introduces a configuration arbitration mechanism that acts as an intermediary between storage arrays. When communication failures occur, the arbitration logic determines which array's configuration changes are accepted and which are rejected, preventing conflicting configurations while allowing autonomous operation. The arbitration process mediates between independent arrays to maintain global configuration consistency.
Solution Approach 2:
The system performs preliminary actions by establishing configuration arbitration rules and communication failure detection mechanisms before failures occur. Configuration changes are pre-evaluated against arbitration criteria, and the system prepares conflict resolution strategies in advance, allowing autonomous operation while preventing configuration conflicts.
2Stability of the object's composition
If storage protection configuration changes are replicated synchronously across all storage arrays, then configuration consistency is maintained, but the system becomes vulnerable to communication failures and configuration conflicts
Solution Approach 1:
The system dynamically adjusts configuration replication behavior based on communication status. When communication is healthy, configurations are replicated synchronously to maintain consistency. When communication failures are detected, the system dynamically switches to an arbitration-based mode where configuration changes are selectively applied, allowing the system to remain operational despite communication issues.
Solution Approach 2:
The patent changes the operational parameters of configuration management based on system state. The configuration replication parameter is adjusted from synchronous to arbitration-based mode depending on communication availability. This parameter change allows the system to maintain configuration consistency when possible while ensuring reliability when communication failures occur.
3Stability of the object's composition
If a single storage array is designated as the primary configuration authority, then configuration conflicts are prevented, but system availability decreases during that array's unavailability
Solution Approach 1:
The patent segments the configuration authority function across multiple storage arrays rather than concentrating it in a single primary array. Each array can independently evaluate and apply configuration changes based on arbitration rules, distributing the authority function. This segmentation prevents configuration conflicts while maintaining system availability, as multiple arrays can continue operating even if one becomes unavailable.
Data Source
AI summary
A method, computer program product, and computing system for copying a storage protection configuration for one or more storage resources from a first storage array to at least a second storage array in a storage cluster. A communication failure between at least a pair of storage arrays may be detected, thus defining a surviving storage array and at least one failed storage array. The communication failure between the surviving storage array and the at least one failed storage array may be resolved. The storage protection configuration may be synchronized from the surviving storage array to the at least one failed storage array. The storage protection configuration for the one or more storage resources of each storage array of the at least a pair of storage arrays may be arbitrated.