Method and device for synchronously running an application in a high availability environment

摘要

A method for synchronously running an application in a high availability environment including a plurality of calculating modules interconnected by a very high-speed broad band network, includes: configuring the modules into partitions including a primary and a secondary partition and a monitoring partition; running the application on each running partition, inputs-outputs processed by the primary partition transmitted to the secondary running partition via the monitoring partition; synchronizing the runnings via exploiting microprocessor context changes; transmitting a catastrophic error signal to the monitoring partition; continuing the running by switching to a degraded mode, the running continuing on a single partition.

主权项

1. A method for synchronously running an application in a high availability environment including a plurality of calculating modules interconnected by a very high-speed broad band network, the method comprising:
configuring the plurality of calculating modules into a plurality of partitions including at least:
two running partitions including nodes identical in number and in characteristics, a primary running partition and a secondary running partition;a monitoring partition including at least one module; running the application on each running partition, inputs-outputs processed by the primary partition being transmitted to the secondary running partition via the monitoring partition which logs the inputs-outputs as transactions distributed between the primary running partition and the secondary running partition, synchronizing executions on the primary partition and on the secondary partition by numbering microprocessor context changes, a time deviation corresponding to a difference between a current context numbers, on the primary and secondary running partitions, having to be lower than a given value; transmitting an error signal to the monitoring partition, said signal being characteristic of a failure in a module of a running partition; continuing the running by switching to a degraded mode, the running continuing on a single partition, and in the case of a failure of a module of the primary running partition, performing a changeover operation, the secondary running partition becoming the new primary running partition.