| 摘要 |
<p>A redundant system (20) comprises a first unit (21), a second unit (22), and a synchronization server (24). The first unit (21) and a second unit (22) each include plural state machines (SMs) for performing tasks. At least some of the state machines provided at the first unit simultaneously perform same tasks as at least corresponding ones of some of the state machines provided at the second unit. When a state machine of the second unit needs to be resynchronized, the synchronization server (24) receives a resynchronization request (2-1) from the resync requesting state machine of the second unit and thereupon provides an out-of-synchronization indication (2-2) to a corresponding state machine of the first unit. In response to the out-of-synchronization indication (2-2) from the synchronization server, the corresponding state machine of the first unit generates a resynchronization request (2-3) at a time deemed appropriate by the corresponding state machine. In response to the resynchronization request (2-3) from the corresponding state machine, the synchronization server issues a resynchronization command (2-4) to both the resync requesting state machine of the second unit and the corresponding state machine of the first unit, thereby causing simultaneous resynchronization. At least one of the first unit and the second unit includes restart logic that prescribes an order of restart of the plural state machines, thereby providing a gradual start up of the state machines of the redundant units. Thereafter each of the plural state machines controls its own resynchronization.</p> |
