| 摘要 |
Nested recovery scope management systems and methods for a multiple process computer system having a dynamic multiple address space server are disclosed. Stateless recovery agents are employed, under the control of a supervisory program called Recovery Director, during initialization or restart of servers to restore recoverable data in response to identified failures or other abnormal termination. The Director controls the recovery of protected resources in a systematic manner. The Director is initialized when a first address space of a first server is started. Then, as each instance of a recoverable component is initialized, the component registers with the Director by providing a reference to a stateless recovery agent that can later perform recovery functions for it if needed. As part of the registration, a token representing the current failure scope of the registration is generated and provided to the recoverable component by the Director. Work identifiers representing recoverable operations can be generated from or associated with this token by the recoverable component and may be put in hardened storage. Upon initialization of a new server region, and also upon a failure or abnormal termination, the Director groups multiple instances of the same recoverable component together, formulates an iterative recovery plan, and determines the scope of recovery by examining its hardened data for failure scopes involving a recoverable component that may need to perform some recovery operation. As such recoverable components are identified, the Director references the associated recovery agent, provides it with appropriate token as to the recovery scope. The recovery agent is then allowed to carry out those recoveries, including any recovery scopes nested within.
|
