Protecting virtual machines against storage connectivity failures

Patent metadata

Field	Value
Publication number	US-10877859-B2
Application number	US-201816166043-A
Country	US
Kind code	B2
Filing date	Oct 19, 2018
Priority date	Aug 24, 2012
Publication date	Dec 29, 2020
Grant date	Dec 29, 2020

Abstract

A system for monitoring a virtual machine executed on a host. The system includes a processor that receives an indication that a failure caused a storage device to be inaccessible to the virtual machine, the inaccessible storage device impacting an ability of the virtual machine to provide service, and applies a remedy to restore access to the storage device based on a type of the failure.

First claim

What is claimed is:

1. A system for monitoring software application instances, the system comprising:
a host executing first and second software application instances; and
a processor programmed to:
receive an indication that a failure caused a storage device to be inaccessible to at least one of the first and second software application instances and impacted an ability of at least one of the first and second software application instances to provide service;
determine if the failure is permanent or transient; and
apply a remedy comprising:
if the failure is permanent, terminating at least one of the first and second software application instances and restarting the at least one of the first and second software application instances on a healthy host, and
if the failure is transient, determining whether both of the first and second software application instances are impacted by the transient failure, and based on whether both of the first and second software instances are impacted, terminating at least one of the first and second software application instances and restarting the at least one of the first and second software application instances on a healthy host.

2. The system of claim 1 , wherein, if the failure is transient and both of the first and second software application instances are impacted by the transient failure and if the host and a master host, which coordinates activity of hosts and/or software application instances, are separated by a network partition, the first and second software application instances are either restarted on the healthy host or the transient failure is ignored, based on a predefined policy.

3. The system of claim 1 , wherein, if the failure is transient and both of the first and second software application instances are impacted by the transient failure and if the host and a master host, which coordinates activity of hosts and/or software application instances, are not separated by a network partition, the first and second software application instances are either restarted on the healthy host or the transient failure is ignored, based on calculated resource capacity of other hosts in the system for at least one of the first and second software application instances.

4. The system of claim 1 , wherein, if the failure is transient and both of the first and second software application instances are not impacted by the transient failure, only the impacted software application instance of the first and second software application instances is terminated and restarted on the healthy host.

5. The system of claim 1 , wherein the first and second software application instances are paired software application instances.

6. The system of claim 5 , wherein the first and second software application instances are fault tolerant software application instances.

7. The system of claim 1 , wherein the host comprises a fault domain manager (FDM), and wherein the FDM is configured to determine if the failure is permanent or transient.

8. The system of claim 1 , wherein the processor is configured to determine that the failure is permanent, if the failure is a Permanent Device Loss (PDL), and to determine that the failure is transient, if the failure is an All Paths Down (APD).

9. A non-transitory computer-readable storage medium having instructions stored thereon which, when executed by at least one processor, performs a method for monitoring software application instances executed on a host, the method comprising:
receiving an indication that a failure caused a storage device to be inaccessible to at least one of the first and second software application instances and impacted an ability of at least one of the first and second software application instances to provide service;
determining if the failure is permanent or transient; and
applying a remedy comprising:
if the failure is permanent, terminating at least one of the first and second software application instances and restarting the at least one of the first and second software application instances on a healthy host, and
if the failure is transient, determining whether both of the first and second software application instances are impacted by the transient failure, and based on whether both of the first and second software instances are impacted, terminating at least one of the first and second software application instances and restarting the at least one of the first and second software application instances on a healthy host.

10. The non-transitory computer-readable storage medium of claim 9 , wherein, if the failure is transient and both of the first and second software application instances are impacted by the transient failure and if the host and a master host, which coordinates activity of hosts and/or software application instances, are separated by a network partition, the first and second software application instances are either restarted on the healthy host or the transient failure is ignored, based on a predefined policy.

11. The non-transitory computer-readable storage medium of claim 9 , wherein, if the failure is transient and both of the first and second software application instances are impacted by the transient failure and if the host and a master host, which coordinates activity of hosts and/or software application instances, are not separated by a network partition, the first and second software application instances are either restarted on the healthy host or the transient failure is ignored, based on calculated resource capacity of other hosts in the system for at least one of the first and second software application instances.

12. The non-transitory computer-readable storage medium of claim 9 , wherein, if the failure is transient and both of the first and second software application instances are not impacted by the transient failure, only the impacted software application instance of the first and second software application instances is terminated and restarted on the healthy host.

13. The non-transitory computer-readable storage medium of claim 9 , wherein the first and second software application instances are paired software application instances.

14. The non-transitory computer-readable storage medium of claim 13 , wherein the first and second software application instances are fault tolerant software application instances.

15. The non-transitory computer-readable storage medium of claim 9 , wherein the host comprises a fault domain manager (FDM), and wherein the FDM is configured to determine if the failure is permanent or transient.

16. The non-transitory computer-readable storage medium of claim 9 , wherein the failure is determined to be permanent, if the failure is a Permanent Device Loss (PDL), and wherein the failure is determined to be transient, if the failure is an All Paths Down (APD).

17. A method for monitoring software application instances executed on a host, the method comprising:
receiving an indication that a failure caused a storage device to be inaccessible to at least one of the first and second software application instances and impacted an ability of at least one of the first and second software application instances to provide service;
determining if the failure is permanent or transient; and
applying a remedy comprising:
if the failure is permanent, terminating at least one of the first and second software application instances and restarting the at least one of the first and second software application instances on a healthy host, and
if the failure is transient, determining whether both of the first and second software application i

Assignees

• Vmware Inc

Inventors

• Ren Joanne
• Tarashansky Igor
• Farkas Keith
• Ziskind Elisha
• Krishnan Manoj

Classifications

• G06F11/0712 Primary

  in a virtual computing platform, e.g. logically partitioned systems · CPC title

• G06F11/1484

  involving virtual machines · CPC title

• G06F11/203 Primary

  using migration · CPC title

• G06F11/202

  where processing functionality is redundant (redundant communication control functionality G06F11/2005, redundant storage control functionality G06F11/2089) · CPC title

• G06F2201/805

  Real-time · CPC title