Failover control of dual controllers in a redundant data storage system

Abstract

A redundant data storage system is provided comprising a first controller with top-level control of a first memory space and a second controller with top-level control of a second memory space different than the first memory space. The system is adapted for asynchronously reflectively writing state information by the first controller to the second memory space; alternatively the system is adapted for asynchronously reflectively writing state information by the second controller to the first memory space. A method is provided for operating the redundant data storage system by resolving any inconsistency between the existing state information and a modified state information associated with a state information change request, and for switching control in the redundant data storage system between the controllers.

1 . A redundant data storage system comprising a first controller with top-level control of a first memory space and a second controller with top-level control of a second memory space different than the first memory space, the arrangement adapted for asynchronously writing state information by the first controller to the second memory space.  
     
     
         2 . The system of  claim 1  wherein the second memory space comprises a reflective memory.  
     
     
         3 . The system of  claim 2  wherein the first memory space comprises a reflective memory.  
     
     
         4 . The system of  claim 3  alternatively adapted for asynchronously writing state information by the second controller to the first memory space.  
     
     
         5 . The system of  claim 4  comprising a crash recovery record created by one of the controllers associating a state information change request in relation to an existing state of the redundant data storage system.  
     
     
         6 . The system of  claim 5  comprising a communication link adapted for transmitting the state information and the crash recovery record between the memory spaces.  
     
     
         7 . The system of  claim 6  wherein the communication link comprises a data transfer window.  
     
     
         8 . A method for operating a redundant data storage system having a first controller and a second controller, the method comprising: 
 writing state information by the first controller in a first memory space under top-level control of the first controller; and    asynchronously reflectively writing the state information to a second memory space different than the first memory space, the second memory space under top-level control of the second controller.    
     
     
         9 . The method of  claim 8  further comprising: 
 modifying the state information by the first controller in the first memory space in response to a state information change request by the redundant data storage system; and    asynchronously reflectively writing the modified state information to the second memory.    
     
     
         10 . The method of  claim 9  further comprising: 
 creating a crash recovery record prior to modifying the state information step by associating the state information change request in relation to an existing state; and    asynchronously reflectively writing the crash recovery record to the second memory.    
     
     
         11 . The method of  claim 10  further comprising resolving any inconsistency between the existing state information and the modified state information by invalidating a cache that is associated with the second controller.  
     
     
         12 . The method of  claim 11  further comprising switching control in the redundant data storage system to the second controller by employing the state information previously written to the second memory.  
     
     
         13 . The method of  claim 12  wherein the switching step comprises combining the state information previously written to the second memory with the crash recovery record.  
     
     
         14 . The method of  claim 13  wherein the resolving step further comprises clearing the crash recovery record.  
     
     
         15 . The method of  claim 8  wherein the asynchronously reflectively writing step is characterized by mapping a memory region in each of the first and second memories and linking the controllers.  
     
     
         16 . The method of  claim 15  wherein the mapping and linking steps are characterized by a data transfer window.  
     
     
         17 . A redundant data storage system comprising: 
 a data storage array comprising at least two independent controllers; and    means for switching control from a first controller to a second controller.    
     
     
         18 . The system of  claim 17  wherein the means for switching is characterized by creating a crash recovery record by the first controller incident with a state information change request.  
     
     
         19 . The system of  claim 17  wherein the means for switching is characterized by asynchronously reflectively modifying the state information by the first controller to a memory space of the second controller.  
     
     
         20 . The system of  claim 19  wherein the means for switching is characterized by resolving inconsistent state information between the controllers associated with modifying the state information.