Preventing corruption by blocking requests

Patent metadata

Field	Value
Publication number	US-11074120-B2
Application number	US-201916723207-A
Country	US
Kind code	B2
Filing date	Dec 20, 2019
Priority date	Dec 5, 2016
Publication date	Jul 27, 2021
Grant date	Jul 27, 2021

Abstract

A method and system for managing communication connections in a virtualization environment implemented by a cluster of host machines, each of the host machines comprises a hypervisor, at least one user virtual machine (UVM), a connection manager, and an I/O controller. The system includes a virtual disk accessible by all of the I/O controllers and comprising a plurality of storage devices. The system includes a first host machine of the host machines designated as a leader node, wherein the leader node configured to confirm a second one of the host machines is unreachable; and transmit, in response to the confirmation, an update message to other host machines in the cluster. The update message identifies the unreachable host machine and causes the other host machines to block messages from the unreachable host machine and send an acknowledgement of the update message back to the leader node.

First claim

What is claimed is:

1. A system comprising:
a first host machine comprising a memory to store computer-readable instructions, which when executed by a processor of the first host machine cause the processor to:
send a first request to a second host machine to establish a connection between the first host machine and the second host machine, wherein the first request is sent after the first host machine has been determined to be unreachable and the second host machine is blocking requests from the first host machine;
upon the first request going unanswered for a first time period, suspend operation of the first host machine for a second time period; and
upon at least one additional request to the second host machine going unanswered for a third time period, permanently shut down operation of the first host machine, wherein the at least one additional request is sent to the second host machine after the second time period has expired.

2. The system of claim 1 , wherein the at least one additional request comprises a predetermined number of requests, and wherein the memory of the first host machine comprises computer-readable instructions that when executed by the processor cause the processor to permanently shut down the first host machine upon not receiving a response to any of the predetermined number of requests within the third time period.

3. The system of claim 1 , wherein the memory of the first host machine comprises computer-readable instructions that when executed by the processor cause the processor to send a second request to the second host machine to establish the connection between the first host machine and the second host machine, wherein the second request is sent after the expiration of the second time period and before sending the at least one additional request, and wherein upon the second request going unanswered for a fourth time period, the first host machine suspends operation for a fifth time period.

4. The system of claim 3 , wherein the memory of the first host machine comprises computer-readable instructions that when executed by the processor cause the processor to send the at least one additional request after expiration of the fifth time period.

5. The system of claim 1 , wherein the first host machine is determined to be unreachable by a third host machine.

6. The system of claim 5 , wherein the third host machine determines that the first host machine is unreachable by transmitting an echo-request to the first host machine, and not receiving an echo-response from the first host machine within a predetermined amount of time.

7. The system of claim 5 , wherein the third host machine requests the second host machine to block requests from the first host machine by sending a block request message to the second host machine identifying the first host machine.

8. The system of claim 7 , wherein upon receiving the block request message, the second host machine sends an acknowledgment to the third host machine confirming that the requests from the first host machine are to be blocked.

9. The system of claim 1 , wherein a virtual machine from the first host machine is migrated to a new host machine upon the first host machine permanently shutting down.

10. A method comprising:
sending, by a first host machine, a first request to a second host machine to establish a connection between the first host machine and the second host machine, wherein the first request is sent after the first host machine has been determined to be unreachable and the second host machine is blocking requests from the first host machine;
suspending operation of the first host machine for a first time period upon the first request going unanswered for a second time period; and
permanently shutting down operation of the first host machine upon at least one additional request to the second host machine going unanswered for a third time period, wherein the at least one additional request is sent after the first time period has expired.

11. The method of claim 10 , wherein the first host machine is unreachable due to failure of a hypervisor of the first host machine or a corruption of the hypervisor of the first host machine.

12. The method of claim 10 , further comprising:
sending, by a third host machine, a block request message to the second host machine to block requests from the first host machine; and
receiving, by the third host machine, an acknowledgment to the block request message from the second host machine.

13. The method of claim 10 , wherein the first host machine is determined to be unreachable by a third host machine.

14. The method of claim 10 , further comprising:
sending, by the first host machine, a second request to the second host machine upon expiration of the first time period and before sending the at least one additional request;
continuing to suspend operation of the first host machine for a fourth time period upon the second request going unanswered for a fifth time period; and
sending the at least one additional request upon expiration of the fourth time period.

15. A system comprising:
a memory to store computer-readable instructions; and
a processor associated with a first host machine that executes the computer-readable instructions to:
send a first request to a second host machine to establish a connection between the first host machine and the second host machine, wherein the first request is sent after the first host machine has been determined to be unreachable and the second host machine is blocking requests from the first host machine;
upon the first request going unanswered for a first time period, suspend operation of the first host machine for a second time period;
send a second request to the second host machine upon expiration of the second time period; and
continue to suspend operation of the first host machine for a third time period upon the second request going unanswered for a fourth time period.

16. The system of claim 15 , wherein the memory comprises computer-readable instructions that when executed by the processor causes the processor to:
send a third request to the second host machine upon the expiration of the third time period; and
permanently shut down operation of the first host machine upon the third request going unanswered for a fifth time period.

17. The system of claim 15 , wherein the memory comprises computer-readable instructions that when executed by the processor causes the processor to resume operation of the first host machine upon the first host machine becoming reachable.

18. A system comprising:
a memory to store computer-readable instructions; and
a processor associated with a first host machine that executes the computer-readable instructions to:
send a first request to a second host machine to establish a connection between the first host machine and the second host machine, wherein the first request is sent after the first host machine has been determined to be unreachable and the second host machine is blocking requests from the first host machine;
upon the first request going unanswered for a first time period, suspend operation of at least some virtual machines of the first host machine for a second time period; and
migrate, by the first host machine, the at least some virtual machines from the first host machine to a third host machine upon the first host machine remaining unreachable for a third time period.

19. The system of claim 18 , wherein the first host machine, the second host machine, and the third host machine are part of a clus

Assignees

• Nutanix Inc

Inventors

• Smith Gregory A
• Grobman Igor
• Cui Miao

Classifications

• H04L41/0659

  by isolating or reconfiguring faulty entities · CPC title

• G06F11/079 Primary

  Root cause analysis, i.e. error or fault diagnosis (in a hardware test environment G06F11/22; in a software test environment G06F11/36) · CPC title

• H04L41/40 Primary

  using virtualisation of network functions or resources, e.g. SDN or NFV entities · CPC title

• H04L43/20

  the monitoring system or the monitored elements being virtualised, abstracted or software-defined entities, e.g. SDN or NFV · CPC title

• G06F11/0709

  in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems · CPC title