Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

 

Section

 

Column

After configuring redundancy environment using MCCS, some failures might occur.
This chapter will explain how MCCS detects the failure and administrates after failure or failover is done. 
(In the following example, the operating server as 'Active', standby server name as 'Standby' is registered on MCCS.)

 

Column
width350px

 

Panel

Table of Contents

Table of Contents
maxLevel4

 

 

...

  1. There is no difference in the MCCS role resulting from abnormal or normal termination of the server. MCCS will perform a failover to the standby server when the operation server fails. In the node management menu on the right side of the screen, select the server. You can check the details of failures in the 'Resource Status' & 'Resource Dependency' screens.
      • Normal Termination of a system
        This is a case where user selected 'system shutdown' in operating systems.
      • Abnormal Termination of a system 
        This is a case where system is terminated or rebooted due to an unexpected situation or blue screen.
    Image RemovedImage Added
    [Figure] Failure in Active Server

  2. Since data cannot be replicated due to the server failure, Image RemovedImage Addedwill be shown in the mirror disk resource.
  3. Server operators check on the failure and put the server back to normal.
  4. After checking on the mirror role of two servers when server with the failure is rebooted, switch the server with the failure as replication target and proceed partial resync.

...

  1. MCCS will show the failure when failure occurs in standby server.
  2. Data replication will be paused until standby server is back to normal.
    Image Removed
    Image Added
    [Figure] Failure in Standby Server

  3. Data synchronization cannot be achieved. Mirror disk becomes the 'Network Connection Failure' state ( Image RemovedImage Added ).
  4. Even if the standby server failed, it does not affect operation. But as there is no server to perform failover to, the server operator must check the trouble in the MCCS web console and make sure that the standby server is normalized in time.
  5. When the standby server is normalized, the Image RemovedImage Added icon disappears.
  6. Mirror disk's DiskState value is changed from 'Inconsistent' to 'UpToDate' and for this purpose, data synchronization (Image RemovedImage Added) is performed. 
  7. When the synchronization is finished, the current normal data is synchronized in real time. The icon is changed to  Image Removed to Image Added

Application Failure

...

  • MonitorInterval (Default Value=10sec)
    Monitors the resource with interval set value.
  • MonitorTimeout (Default Value=10sec)
    If there is no reply as much as the set value, it is considered as a failure.
  • RestartLimit (Default Value=0)
    It will restart the application resource as the set value.
  • OnlieTrustTime (Default Value=600sec) 
    It re-sets the time of number of resource restarting number.It is the time to reset the frequency of the resource to restart.
    Attributes above are the set value of the registered being added the resource, and users can check or change the values through Resource Attribute view of MCCS console. 
    Image Removed
    Image Added
    [Figure] Resource attribute value Edit

  1. MCCS periodically monitors the resources referring  'MonitorInterval'.
  2. If there is no response as the time set in 'MonitorTimeout', it is considered as a failure.
  3. If there are no response after sending the command as the number set in 'RestartLimit', MCCS will failover the group which resource belongs to.
  4. If the resource stays in normal state within the time limit set by 'OnlineTrustTime'. MCCS will initialize the attribute value of 'RestartLimit'. This is to ensure restart number when failure occurs in a resource.
  5. If there is a failover due to a failure in the resource, server operator checks on the problem and put it back to normal.
  6. In the MCCS web console, a user can see where the trouble occurs. After a user checks the trouble area, they must remove the Trouble sign, so that the failover function can be activated again. 
    If you want the sign of failures to be removed automatically, enter a positive number in AutoFaultClearTime of the group attribute. 
  7. After checking on the mirror role of two servers when server with the failure is rebooted, switch the server with the failure as replication target and proceed partial resync.
    Image Removed
    Image Added
    [Figure] Failure in Resource Clear

...

    • Service Network Failure

      If failure occurs in service network of active server, the fault mark will be shown on the network interface card resource or IP address of the node in MCCS UI, and will failover to the standby server.

      Image RemovedImage Added

      [Figure] Failure in Network Interface Card

...

    • Heartbeat Network Fault

      Heartbeat should be dualized because it plays a very important role of synchronizing the inter node status and determining the condition of failure. If any one of the dualized heartbeat network fails, the details of failure is displayed in the log window.
      However, the MCCS web console has no changes. It means that the operation server or the standby server has no problems. 
      At this point, when failure occurs in active server and needs to failover to the standby server, MCCS will use redundant normal heartbeat network to failover.

      If all the redundant heartbeat is disconnected, MCCS will use the service network as heartbeat line.

      Image RemovedImage Added

      [Figure] Failure in Heartbeat

...

    • Replication (Mirroring) Network Failure

      When the copying network failed, data copying cannot be done. The mirror disk resource of MCCS web console displays the 'Disconnect' ( ).Image Removed

      Image Added

      [Figure]Failure in Replicated Network


...

    • Single Network Switch Fault

      When failure occurs in network switch connected to Public Network where it is configured by single network switch, all the resources in active and standby server will be taken offline, resources where failure occurs will show as 'fault'.
      Image RemovedImage Added
      [Figure] Failure in Network Switch    

  1. Network switch failure can be checked on MCCS log, OS System log. If failure occurs in service network connection, server operator should check on the TCP/IP of server, physical connection check on the service network through ping test.
  2. If you want the sign of failures to be removed automatically, enter a positive number in AutoFaultClearTime of the group attribute.
  3. Please get the supports regarding the recovery of Network switch failure through manufacturer.



...

  • Source Disk Failure

    If failure occurs in disk resource of active server, MCCS GUI will show the failure. MCCS will failover to the standby server since it is impossible to Read/Write in the disk.

    Image RemovedImage Added 

    [Figure] Failure in Mirror Disk


...

  • Target Disk Failure
    If the disk at the standby server failed, the disk resource icon of MCCS web console is not changed. But the attribute values of Diskstate is changed from UptoDate to Diskless. However, the service running in the source server is not affected by it. 
    Image RemovedImage Added
    [Figure] Failure in Target Disk

  1. When MCCS detects failures of the target disk, only the DiskState value of the disk is displayed. 
  2. Disk failure can be caused by the following. After resolving the above issues, the OS will detect the newly changed disk again. After that, DRBD will proceed with synchronization.
    • Disk controller problems or H/W problems should be fixed by the manufacturers.
    • Physical disk problems or H/W problems should be fixed by the manufacturers.
  3. If the mirror disk does not perform synchronization, delete the mirror disk resource and try to create it again. But when you delete the resource, you must also delete the created mirror and create them again

...

  1. Due to the failure of source server (A), a failover occurs.
  2. The role of target server (B) is changed to Primary. (Mirror disk role changed)
  3. Reboot the initial source server (A).
  4. After the initial source server (A) boots, check the role of the target server (B).
  5. Check the GI value for the both nodes.
  6.  Check if the GI data is matched, and if it is, proceed with data synchronization automatically. (5th/ 6th processes checking fails.)
  7. GI data is not matched. So, synchronization is required on one node. No automatic synchronization is taking place.  (Split brain occurred.)
     
    When this state is reached, the icon of mirror disk resource is overlapped in the MCCS web console. Both the  and the 'SplitBrainStatus' attribute values will be set to true.
    In this case, you need to manually change the mirror disk role. After that, you need to resynchronize it.
    If you want to manually change the mirror disk role, you need to use the MCCS web console
    . 

...

  1. Check the resource attribute view
    Image RemovedImage Added
    [Figure] Verify SplitBrain of MirrorDisk


  2. Check the mirror management view.

    Image RemovedImage Added
    [Figure] Checking Mirror Disk Split Brains

    Warning

    1) The ConnectState of both node is StandAlone and SplitBrainStatus values are set to True.
    2) Check LastMirrorOnlineTime on the mirror disk. (LastMirrorOnlineTime is the system time. So, it is not the absolute value used to determine whether it is the latest data.)
    3) When a split brain occurs, the log will be displayed.
    (DRBD volume (r0) has a split brain.)
    4) In the mirror management window, the mirror condition is set to 'SPLIT'.

  3. Select the mirror disk and right click with your mouse button and click on 'Resolve Split Brains'.
    Image RemovedImage Added
    [Figure] Split Brain Resolving Selected


  4. Display the window to explain split brains.
    Image RemovedImage Added 
    [Figure] Checking the Source Node Selection

  5. Select the source node.
    Image RemovedImage Added
    [Figure] Source Roll Node Selection


  6. Recheck the selected source node.
    Image RemovedImage Added
    [Figure] Rechecking the Source Node Selection


  7. Split brains problems being resolved.
    Image RemovedImage Added
    [Figure] Split Brain Resolved


  8. Resolving split brains problems is finished.
    Image RemovedImage Added
    [Figure] Resolving Split Brain Finished


  9. The selected node becomes the source node and the mirror disk condition is changed from DiskState to UpToData. 
    Image RemovedImage Added
    [Figure] Split Brain Resolve


    Warning

    The changed information of node B will be all overwritten.

     

...

When the external disk fails or has a bad connection path, you cannot read/write the disk. So, MCCS will display the sign of failure and proceed with a failover.

Image RemovedImage Added

[Figure] Failure in Shared Disk

...

  1.  In the MCCS web console, click 'File' on the menu bar to collect support files.
    Image RemovedImage Added
    [Figure] Collecting Support Files from Menu Bar  

  2. Support files can be collected by clicking the toolbar shown in the figure below.
    Image RemovedImage Added
    [Figure] Collecting Support Files from Toolbar

  3. You can select a node to collect support files from and get the previous support file again.
    Image RemovedImage Added
    [Figure] Support File Node Selection and Previous Support File Selection

  4. Click 'OK' button and support file is collected.
    Image RemovedImage Added
    [Figure] Support Files Being Collected

     

    Info

    It may take several minutes depending on the log file capacity and the network condition.


  5. As shown below, you can download it from the download window.
    Image RemovedImage Added

  6. The collected support files can be checked in the designated location.
    Image RemovedImage Added
    [Figure] Support Files

...