Biasing active-standby determination

Abstract

In computing systems that provide multiple computing domains configured to operate according to an active-standby model, techniques are provided for intentionally biasing the race to gain mastership between competing computing domains, which determines which computing domain operates in the active mode, in favor of a particular computer domain. The race to gain mastership may be biased in favor of a computing domain operating in a particular mode prior to the occurrence of the event that triggered the race to gain mastership. For example, in certain embodiments, the race to mastership may be biased in favor of the computing domain that was operating in the active mode prior to the occurrence of an event that triggered the race to gain mastership.

Description

BACKGROUND

The present disclosure relates to computing systems that provide redundant computing domains. More particularly, in a computing system comprising multiple computing domains, techniques are provided for intentionally biasing the race to gain mastership between competing computing domains in favor of a particular computer domain.

In an effort to reduce downtime and increase availability, computing systems often provide redundant computing domains. In a typical configuration, during normal operations, one of the computing domains is configured to operate in an active mode and perform a set of functions of the computing system while the other computing domain is configured to operate in standby (or passive) mode in which the set of functions performed by the active computing domain are not performed. The standby computing domain remains ready to take over the functions performed by the active computing domain, and in the process become the active computing domain, in case of any event affecting the functionality of the current active computing domain. The process of a standby computing domain becoming the active computing domain is referred to as a failover. As a result of the failover, the computing domain operating in active mode prior to the failover may operate in standby mode as a result of the failover.

The active-standby model mentioned above is used in various fields to provide enhanced system availability. For example, in the networking field, redundancies are provided at various levels to achieve high availability and minimize data loss. For example, in some network environments, redundant network devices are provided with one network device operating in active mode (the active network device) and the other operating in standby (or passive) mode (the standby network device). The active network device performs the data forwarding-related functions while the standby network device operates in standby mode. Upon a failover, which may occur, for example, due to an error on the active device, the standby device becomes the active device and takes over data forwarding functionality from the previously active device. The previously active device may then operate in standby mode. The active-standby model using two network devices strives to reduce interruptions in data forwarding.

Redundancies may also be provided within a network device. For example, a network device may comprise multiple cards (e.g., multiple management cards, multiple line cards), each card having its own one or more physical processors. One card may be configured to operate in active mode while the other operates in standby mode. The active card performs the data forwarding and/or management related functions while the redundant second card operates in standby mode. Upon a failover, the standby card becomes the active card and starts performing the functions performed in active mode. The previous active card may then operate in standby mode.

The active-standby model may also be provided for in a system comprising a single multicore processor. For example, as described in U.S. Pat. No. 8,495,418, two partitions may be created in such a system with each partition being allocated one or more cores of the multiple cores of the processor. The partitions may be configured such that one partition operates in active mode while another operates in standby mode. In this manner, a single processor is able to provide active-standby functionality, thereby enhancing the availability of the system comprising the processor.

In a system comprising multiple computing domains configured to operate according to the active-standby model, when the system is power cycled, the multiple computing domains are booted and then compete with each other to become the active computing domain. This competition between the computing domains to become the active computing domain is commonly referred to as the race to gain mastership. Only one computing domain “wins” this race to gain mastership and becomes the active computing domain. The other “losing” computing domain becomes the standby computing domain. In conventional systems, which of the multiple computing domains becomes active is arbitrary.

BRIEF SUMMARY

The present disclosure relates to computing systems that provide multiple computing domains configured to operate according to an active-standby model. In such a computing system, techniques are provided for intentionally biasing the race to gain mastership between competing computing domains (i.e., to determine which computing domain operates in the active mode), in favor of a particular computing domain. The race to gain mastership may be biased in favor of a computing domain operating in a particular mode prior to the occurrence of the event that triggered the race to gain mastership. For example, in certain embodiments, the race to gain mastership may be biased in favor of the computing domain that was operating in the active mode prior to the occurrence of an event that triggered the race to gain mastership.

In certain embodiments, the biasing of the race to gain mastership in favor of a particular computing domain is time limited to a particular period of time. If the particular computing domain towards which the race is biased (e.g., the computing domain that operated in active mode prior to the occurrence of the event that triggered the race to gain mastership) is unable to become the active computing domain before the expiry of that particular time period, the biasing is removed and the race is then opened to all the competing computing domains. This time-limited biasing provides a mechanism to recover in the scenario where the computing domain towards which the race is biased has some problems and cannot become the active computing domain. In this scenario, the other computing domain is automatically, without any human intervention, provided the opportunity to become the active computing domain. In certain embodiments, systems, methods, code or instructions executed by one or more processing units are provided that enable the time-limited biasing described above.

For example, a computing system can comprise a first computing domain and a second computing domain. An event such as power being cycled to the system or a reset or reboot of the computing domains may cause a race to gain mastership to be triggered in the computing system between the two computing domains. Upon the occurrence of an event that triggers the race to gain mastership, each computing domain may execute arbitration logic to determine which computing domain becomes the active computing domain. The processing may be performed in parallel by the first and second computing domains.

In certain embodiments, as a result of executing the arbitration logic, a particular computing domain is configured to determine it operated in a mode (e.g., a first mode) towards which the race to gain mastership is to be biased. Upon determining that the computing domain did not operate in the first mode prior to the occurrence of the event triggering the race to gain mastership, then the computing domain refrains, for a period of time, from attempting to start operating in the first mode. During this period of time, the other computing domain participating in the race to gain mastership is allowed to attempt to start operating in the first mode unhindered. In this manner, for the period of time, the computing domain against which the race to gain mastership is to be biased does not compete in the race to gain mastership while the computing domain in favor of which the race to gain mastership is to be biased competes uninhibited. After the period of time has passed, the particular computing domain that has refrained from participating in the race to gain mastership then determines whether the other computing domain is operating in the first mode. Upon determining that the other computing domain is operating in the first mode, i.e., has won the race to gain mastership, then the particular computing domain that has refrained from the race for the period of time starts operating in a second mode different from the first mode. Upon determining that the other computing domain is not operating in the first mode, i.e., has not already won the race to gain mastership, the particular computing domain that has refrained from the race for the period of time is now allowed to attempt to operate in the first mode.

In certain embodiments, the race to gain mastership may be biased in favor of a computing domain that operated in the active mode prior to the occurrence of the event that triggered the race to gain mastership. The computing domain operating in active mode may be configured to perform a set of functions that are not performed by the computing domain operating in standby mode (i.e., by the standby computing domain). In other embodiments, the race to gain mastership can be biased in favor of a computing domain that operated in the standby mode prior to the occurrence of the event that triggered the race to gain mastership. In this manner, the race to gain mastership can be biased in favor of a computing domain operating in a particular mode prior to occurrence of the event triggering the race to gain mastership. The biasing is time-limited for a period of time. Different techniques may be used for calculating this period of time.

In certain embodiments, whether or not a particular computing domain refrains from participating in the race to gain mastership for a period of time is determined based upon the mode in which the particular computing domain operated prior to the occurrence of the event that triggered the race to gain mastership. The particular computing domain may determine this based upon information stored in non-volatile memory prior to the occurrence of the event causing the race to gain mastership, where the stored information can be used to determine whether or not the particular computing domain operated in the mode in favor of which the race to gain mastership is to be biased. For example, the particular computing domain may read information from a non-volatile memory, the information stored in the non-volatile memory prior to the occurrence of the event triggering the race to gain mastership. Based upon this information, the particular computing domain may determine whether it is to refrain from participating in the race to gain mastership for a period of time.

After refraining from participating in the race to gain mastership for a period of time, a computing domain is configured to determine if the other computing domain has already won the race to gain mastership, i.e., is already operating in the first mode, and take appropriate actions based upon this determination. In certain embodiments, the computing domain may make this determination based upon information stored in a memory location, the memory location being readable and writable by both the computing domains. For example, a bit may be stored in memory indicative of whether the race to gain mastership has already been won. Based upon this bit information, the computing domain can determine whether the other computing domain is operating in the first mode.

In certain embodiments, each computing domain in a computing system is allocated its own set of resources, such as processing resources, memory resources, and the like. For example, in a computing system comprising a first computing domain and a second computing domain, a first set of one or more processing units can be allocated to the first computing domain and a second set of one or more processing units can allocated to the second computing domain. The processing resources allocated to a computing domain can include one or more processing units. A processing unit can be a processor or a core of a multicore processor. Accordingly, the one or more processing resources allocated to a computing domain can include a single processor, a single core, multiple processors, multiple cores, or various combinations of cores and processors.

In certain embodiments, the computing system may be embodied in a network device configured to forward data (e.g., data packets). The network device can comprise a set of one or more ports for forwarding one or more data packets from the network device, a plurality of processing units, a first computing domain that is allocated a first set of one or more processing units from the plurality of processing units, and a second computing domain that is allocated a second set of one or more processing units from the plurality of processing units. In response to the occurrence of an event that triggers a race to gain mastership, the first computing domain may be configured to refrain from attempting to start operating in a first mode for a period of time. In response to the occurrence of the event, the second computing domain may be configured to attempt to start operating in the first mode during the period of time. After the period of time has passed, the first computing domain may be configured to, if the second computing domain is operating in the first mode, start to operate in a second mode different from the first mode, and, if the second computing domain is not operating in the first mode, attempt to operate in the first mode.

In one embodiment, the network device may be configured such that a set of functions is performed by the first computing domain or the second computing domain when operating in the first mode and not performed when operating in the second mode. In another embodiment, the network device may be configured such that a set of functions is performed when operating in the second mode and is not performed when operating in the first mode. The first computing domain may be configured to, based upon information stored prior to the occurrence of the event, determine whether the first computing domain operated in the first mode prior to the occurrence of the event.

In certain embodiments, the first computing domain in the network device corresponds to a first card of the network device and the second computing domain corresponds to a second card of the network device. In some other embodiments, the first computing domain and the second computing domain may be located on a card of the network device.

In certain embodiments, the first computing domain in the network device may be allocated a first set of one or more processing units and the second computing domain may be allocated a second set of one or more processing units. A processing unit can be a processor or a core of a multicore processor. Accordingly, the processing resources allocated to a computing domain in the network device can include a single processor, a single core, multiple processors, multiple cores, or various combinations of cores and processors.

The foregoing, together with other features and embodiments will become more apparent upon referring to the following specification, claims, and accompanying drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 depicts a simplified high level diagram of a computing system according to certain embodiments of the present invention.

FIG. 2 depicts a simplified flowchart depicting a high-level method for biasing the race to gain mastership in favor of a particular computing domain according to an embodiment of the present invention.

FIG. 3 depicts a simplified flowchart depicting another high-level method for biasing the race to gain mastership in favor of a particular computing domain according to an embodiment of the present invention.

FIG. 4 is a simplified block diagram of a system 400 that may incorporate an embodiment of the present invention.

FIG. 5 depicts a simplified block diagram of a network device that may incorporate an embodiment of the present invention.

FIG. 6 depicts a network device according to an embodiment in which a line card provides multiple computing domains.

FIG. 7 depicts a network device according to an embodiment in which multiple management cards are provided, each management card corresponding to a computing domain.

FIG. 8 depicts a network device according to an embodiment in which multiple management cards are provided, each management card corresponding to a computing domain, and further multiple computing domains are presented at the line card level.

DETAILED DESCRIPTION

In the following description, for the purposes of explanation, specific details are set forth in order to provide a thorough understanding of embodiments of the invention. However, it will be apparent that various embodiments may be practiced without these specific details. The figures and description are not intended to be restrictive.

The present disclosure relates to computing systems that provide multiple computing domains configured to operate according to an active-standby model. In such a computing system, techniques are provided for intentionally biasing the race to gain mastership between competing computing domains, i.e., to determine which of the computing domains operates in the active mode, in favor of a particular computer domain. The race to gain mastership may be biased in favor of a computing domain operating in a particular mode prior to the occurrence of the event that triggered the race to gain mastership. For example, in certain embodiments, the race to gain mastership may be biased in favor of the computing domain that was operating in the active mode prior to the occurrence of an event that triggered the race to gain mastership.

FIG. 1 depicts a simplified high level diagram of a computing system 100 according to certain embodiments of the present invention. The embodiment depicted in FIG. 1 is merely an example and is not intended to unduly limit the claimed embodiments of the present invention. One of ordinary skill in the art would recognize many variations, alternatives, and modifications. Examples of computing system 100 include various computers, mobile computing devices, networking devices such as routers and switches (e.g., various network devices provided by Brocade Communications Systems, Inc.), and other devices.

Computing system 100 may be configured to provide multiple computing domains such as a computing domain “A” (CD_A) 102 and a computing domain “B” (CD_B) 104 depicted in FIG. 1. Although FIG. 1 shows that computing system 100 comprises two computing domains, this is not intended to be limiting. In some embodiments, a computing system can be configured to provide and support more than two computing domains.

In certain embodiments, a computing domain can logically be considered as a collection of resources. Each computing domain may be allocated its own share of system resources of computing system 100, including but not limited to processing resources, memory resources, input/output (I/O) resources, networking resources, and other types of resources. For example, as shown in FIG. 1, CD_A 102 is allocated processing resources 106, memory resources 108, I/O resources 110, and networking resources 112. Likewise, the resources allocated to CD_B 104 can include processing resources 114, memory resources 116, I/O resources 118, and networking resources 120. The amount of a resource of a particular resource type allocated to one computing domain may be the same as or different from the amount of the resource of the same type allocated to another computing domain. For example, the number of processing resources 106 allocated to CD_A 102 may be the same as or different from the number of processing resources 114 allocated to CD_B 104.

The resources allocated to a computing domain can be accessed and used only by that computing domain and are not accessible to the other computing domains. In this manner, each computing domain has its own secure and private set of resources. A computing domain may use its allocated resources and operate independently of the other computing domains in computing system 100. For example, a first computing domain may execute a first set of programs independently of a second computing domain that may be executing a different set of programs possibly in parallel with the first computing domain. In some embodiments, one computing domain may not even be aware of the other computing domains within computing system 100.

In some embodiments, certain resources of computing system 100 may be configured as shared resources 122 that can be accessed and used by multiple computing domains. For example, in the embodiment depicted in FIG. 1, shared resources 122 include shared memory resources 124 and a field programmable gate array (FPGA) 126. Shared resources 122 may be used for multiple purposes. In some embodiments, shared resources 122 may be used for facilitating communications or messaging between the computing domains.

In some embodiments, an administrator or user of computing system 100 may configure the number of computing domains provided by computing system 100, the resources allocated to each computing domain, and the shared resources. For example, the administrator may specify configuration information identifying the number of computing domains to be set up, the resources to be allocated to each computing domain, information related to shared resources, and other configuration information. In some embodiments, when computing system 100 is powered up, after booting up (or as part of its boot up sequence), system 100 can be configured to read the configuration information, and per the configuration information, create one or more computing domains, allocate resources to the computing domains, and configure shared resources.

The processing resources allocated to a computing domain can include one or more processing units. A processing unit can be a processor or a core of a multicore processor. Accordingly, the processing resources allocated to a computing domain can include a single processor, a single core, multiple processors, multiple cores, or various combinations of cores and processors.

The memory resources allocated to a computing domain can include volatile and non-volatile memory resources. Volatile memory resources, also sometimes referred to as system memory resources, may include random access memory (RAM), and the like. Non-volatile memory resources may include flash memory, disk memory, and the like. For example, in the embodiment depicted in FIG. 1, memory resources 108 allocated to CD_A 102 include volatile memory resources 128 and non-volatile memory resources 130, and memory resources 116 allocated to CD_B 104 include volatile memory resources 132 and non-volatile memory resources 134.

The volatile memory of a computing domain may store various data used by the computing domain during runtime operations. For example, the volatile memory assigned to a computing domain may store, during runtime, an operating system for the computing domain and data related to one or more entities executed by the partition. The data may include code or programs or instructions that are executed by the processing resources of the computing domain and other data. The entities executed by a computing domain may include, without restriction, an application, a process, a thread, an operating system, a device driver, and the like. For example, in the embodiment depicted in FIG. 1, volatile memory 128 allocated to CD_A 102 may store an operating system for CD_A 102, and programs and other data related to entities executed by processing resources 106 of CD_A 102. In a similar manner, volatile memory 132 allocated to CD_B 104 may store an operating system for CD_B 104, and programs and other data related to entities executed by processing resources 114 of CD_B 104. The operating system for CD_A 102 may be the same as or different from the operating system for CD_B 104.

The non-volatile memory of a computing domain may store data that is to be persisted, for example, data that is to be persisted even when computing system 100 or the particular computing domain is power cycled. For example, data used or written by CD_A 102 that is to be persisted across a power cycle or a boot up of CD_A 102 may be stored in non-volatile memory 130 of CD_A 102.

The I/O and networking resources allocated to computing domains can include various hardware resources, access to various communication buses (e.g., access to PCIe), Ethernet interfaces, resources such as security engines, queue managers, buffer managers, pattern matching engines, direct memory access (DMA) engines, and the like. The I/O and networking resources of computing system 100 may be allocated exclusively to each computing domain or alternatively may be shared between multiple computing domains. For example, in one embodiment, a private Ethernet interface may be assigned to each computing domain, while access to PCIe may be shared between the computing domains.

In a computing system, such as computing system 100, that can be configured to provide multiple computing domains, in an effort to reduce downtime and increase availability of the computing system, during normal operations, one of the computing domains can be configured to operate in an active mode while the other computing domain operates in standby (or passive) mode. For example, in the embodiment depicted in FIG. 1, CD_A 102 is operating in active mode and CD_B 104 is operating in standby mode. The computing domain operating in active mode (i.e., the active computing domain) is configured to perform a set of functions that are not performed by the computing domain operating in standby mode (i.e., by the standby computing domain).

The set of functions that are performed in active mode and not performed in standby mode depend upon the context of use of computing system 100. For example, if computing system 100 were a network device such as a router or switch, the active computing domain may be configured to perform functions related to data forwarding such as managing network topology information, maintaining routing tables information, managing and programming I/O devices such as I/O ports of the network device, programming forwarding hardware, executing various network protocols and maintaining protocol/state information, maintaining timing information/logs, and the like. These functions are not performed by the standby computing domain.

According to the active-standby model, the standby computing domain remains ready to take over and perform the functions performed by the active computing domain when an event occurs that results in the current active computing domain not being able to perform the set of functions. When such an event occurs, the standby computing domain is configured to start operating in the active mode (i.e., become the active computing domain) and start performing the set of functions that are performed in the active mode. The process of a standby computing domain becoming the active computing domain and taking over performance of the set of functions from the previous active computing domain is referred to as a failover. As a result of the failover, the previous active computing domain, i.e., the computing domain operating in the active mode prior to the failover, may be reset and operate in the standby mode as a result of the failover.

For example, if computing system 100 is a network device, the new active computing domain may start performing the data forwarding functions that were previously performed by the previous active computing domain, preferably without any impact on the functionality of the network device or without any loss of data. A failover thus increases the availability of the network device while ensuring continued forwarding operations without any data loss.

An event that causes a failover (a failover event) can, at a high level, be categorized into one of the following two categories:

• (1) a voluntary failover event, and
• (2) an involuntary failover event.Events that cause a voluntary or involuntary failover may come in different forms.

A voluntary failover event is one that causes the active computing domain to voluntarily initiate a failover and yield control to the standby computing domain. An example of such an event is receiving a command line instruction from a network administrator or user of the computing system to perform a voluntary failover. Upon receiving this command, the active computing domain initiates failover processing as a result of which the standby computing domain becomes the active computing domain and the previous active computing domain may become the standby computing domain.

There are various situations when this may be performed. As one example, a voluntary failover may be performed when software on the active computing domain is to be upgraded. In this situation, an administrator may voluntarily issue a command or instruction to cause a failover to occur. For further details related to performing a failover in a network device to perform a software upgrade, please refer to U.S. Pat. Nos. 7,188,237, 7,284,236, and 8,495,418.

As another example, a voluntary failover may be initiated by a system administrator upon noticing performance degradation on the active computing domain or upon noticing that software executed by the active computing domain is malfunctioning. In such situations, the network administrator may voluntarily issue a command for a failover with the hope that problems associated with the active computing domain will be remedied when the standby computing domain becomes the new active computing domain. Various interfaces, including a command line interface (CLI), may be provided for initiating a voluntary failover.

An involuntary failover event typically occurs due to some critical failure in the active computing domain. Examples include when a hardware watchdog timer goes off (or times out) and resets the active computing domain possibly due to a problem in the kernel of the operating system loaded for the active computing domain, critical failure of software executed by the active computing domain, loss of heartbeat, and the like. An involuntary failover event causes the standby computing domain to automatically become the active computing domain.

During normal operations, the active computing domain performs a set of functions that are not performed by the standby computing domain. In order to perform the set of functions, the active computing domain generally maintains various types of state information that is used by the active computing domain for performing these functions. For example, in a network device, the active computing domain may maintain state information comprising network topology information, routing tables, queue structures, data buffers, hardware specific state information such as configuration tables, port maps, etc., and other types of information. When the standby computing domain becomes the active computing domain after a failover, it also needs this state information in order to perform the functions that are performed in active mode and to do so in a non-disruptive manner. In some embodiments, the standby computing domain builds this state information after it becomes the active computing domain. In some other embodiments, the active computing domain may periodically send synchronization updates to the standby computing domain to synchronize the standby's state information with the active's state information. The active computing domain may communicate state information to the standby computing domain using, for example, a messaging mechanism. In one embodiment, the active computing domain is configured to periodically check if the state information on the standby computing domain is synchronized with the state information on the active computing domain. If not synchronized, then the active computing domain communicates state information to the standby computing domain to bring its state information in synchrony with the state information maintained by the active computing domain.

Before a computing system comprising multiple computing domains can operate according to the active-standby model, an initial determination is made by the computing system as to which of the multiple computing domains will become the active computing domain and which will become the standby computing domain. For example, in computing system 100, a determination has to be made whether CD_A 102 or CD_B 104 will become the active computing domain. This processing is performed, for example, when computing system 100 is power cycled (e.g., when it is powered on, or it restarts due to power being cycled to the system).

In some embodiments, the determination of which computing domain will become the active computing domain is achieved by executing arbitration logic that results in one computing domain becoming the active computing domain and the other computing domain becoming the standby computing domain. As part of this arbitration logic, the multiple computing domains compete with each other to become the active computing domain. This competition between the computing domains to become the active computing domain (or the “master”) is commonly referred to as the race to gain mastership. Only one computing domain “wins” this race to gain mastership and becomes the active computing domain and the other “losing” computing domain becomes the standby computing domain.

In conventional systems, which of the competing computing domains becomes the active computing domain and wins the race to gain mastership is arbitrary. This arbitrariness however becomes a problem in certain situations. For example, as previously described, the active computing domain in a network device generally stores state information that is used by the active computing domain to perform the set of functions that are performed in the active mode. The standby computing domain may not have this state information when it becomes the active computing domain or, even if it has received synchronization updates from the active computing domain, may not have the most up-to-date information. Accordingly, in many situations, when a standby computing domain becomes the active computing domain, it has to first spend time and resources (e.g., processing and memory resources) to build this information. Accordingly, after the occurrence of an event (mastership race triggering event that triggers a race to gain mastership, if the computing domain that was a standby computing domain prior to the event wins the race and becomes the active computing domain, it has to first spend time and resources to build this information. This, however, would not be the case if the race to gain mastership is won by the computing domain that was operating in active mode prior to the mastership race triggering event. It is thus desirable in this scenario that the race to gain mastership be won by the computing domain that was operating in active mode prior to the occurrence of the mastership race triggering event.

While, in the above networking example, it is desirable that the previously active computing domain wins the race to gain mastership and becomes the active computing domain after the occurrence of the mastership race triggering event, in some other situations it may be desirable that the computing domain operating as a standby prior to the occurrence of the mastership race triggering event wins the race to gain mastership and becomes the active computing domain. For example, consider the situation where the mastership race triggering event was caused by a fatal failure in the active computing domain. In this situation, it may be preferred that the standby computing domain wins the race to gain mastership and becomes the active computing domain. Accordingly, depending upon the context, it may be desirable that a computing domain operating in a particular mode, either active or standby, prior to the occurrence of the mastership race triggering event wins the race to gain mastership and becomes the active computing domain.

Certain embodiments of the present invention enable such intentional biasing towards a particular computing domain based upon the mode of operation of the computing domain prior to occurrence of the mastership race triggering event. Between multiple computing domains participating in the race to gain mastership, techniques are provided that automatically and intentionally bias the race to gain mastership in favor of a particular computer domain based upon the mode of operation of that particular computing domain prior to the occurrence of the mastership race triggering event. For example, in certain embodiments, the race to mastership may be biased in favor of the computing domain that was operating in the active mode prior to an event that triggered the race to mastership.

Additionally, the biasing is time limited. If the particular computing domain (e.g., the active computing domain prior to the occurrence of the mastership race triggering event) towards which the race is biased is unable to become the active computing domain within a particular time period, the biasing is removed after passage of that time period and the race is then opened to all the competing computing domains. This time limiting biasing provides a recovery mechanism to cover scenarios where the computing domain towards which the race is biased has some problems and cannot become the active computing domain.

FIG. 2 depicts a simplified flowchart 200 depicting a high-level method for biasing the race to gain mastership in favor of a particular computing domain according to an embodiment of the present invention. The method may be embodied in software (e.g., code, program, instructions) executed by a processor, in hardware, or combinations thereof. The software may be stored on a non-transitory computer-readable storage medium such as a hard disk drive, a floppy disk drive along with associated removable media, a Compact Disk Read Only Memory (CD-ROM) drive, an optical drive, removable media cartridges, a memory or memory device, and other like storage media. The method depicted in FIG. 2 is not intended to be restrictive.

In the embodiment depicted in FIG. 2, the biasing is performed in favor of a computing domain that was operating in active mode prior to the event that caused the processing in FIG. 2 to be triggered. This is, however, not intended to be limiting. In alternative embodiments, the biasing can also be performed in favor of the computing domain that was operating in standby mode prior to the event that caused the processing in FIG. 2. Accordingly, in general, the teachings of the method depicted in FIG. 2 can be used to bias the race to gain mastership and become the active computing domain in favor of a computing domain operating in a particular mode prior to the event that triggers the race to gain mastership. Additionally, the biasing is time limited such that if the particular computing domain towards which the race is biased is unable to become the active computing domain within a particular time period, the biasing is removed after passage of that time period, and the race is then opened to all the competing computing domains.

In some embodiments, whether the processing is to be biased in favor of the computing domain that was operating in active mode prior to the occurrence of the event that triggered the race to gain mastership or whether the processing is to be biased in favor of the computing domain that was operating in standby mode prior to the occurrence of the event that caused the race to gain mastership may be preconfigured or specified by a user of computing system 100. For example, in one embodiment, the biasing information may be stored in a configuration file. In certain embodiments, a default may be preconfigured. For example, in the default, the processing may be biased in favor of the computing domain that was operating in active mode prior to the event that caused the race to gain mastership processing to be triggered. In some other embodiments, a user of computing system 100 may provide information indicative of the computing domain towards which the processing is to be biased user via a command line instruction.

As depicted in FIG. 2, processing is initiated at 202 when an event occurs that triggers the race to gain mastership. In some embodiments, the race to gain mastership is triggered when power is cycled to the computing domains, for example, when power is cycled to the computing system comprising the computing domain. A race to gain mastership may also be triggered when the computing domains are reset or rebooted. The event that triggers a race to gain mastership may be a voluntary or an involuntary event. Examples of events include, without restriction, a catastrophic system failure of computing system 100, loss of power to the computing domains, rebooting of both the computing domains, etc. The race to gain mastership may also be triggered due to a voluntary event such as in response to a command or instruction received from a user of computing system 100 to power cycle computing system 100, reboot both computing domains, and so on. The command may, for example, be received via a command line interface (CLI) provided by computing system 100.

Upon the occurrence of the event in 202, processing depicted in box 203 is then performed by each computing domain that competes in the race to gain mastership. The processing may be performed in parallel by the computing domains. For example, for computing system 100 depicted in FIG. 1, the processing in box 203 may be performed by CD_A 102 and by CD_B 104. In some embodiments, the processing may be performed as a result of code executed by each computing domain. For a computing domain, the code execution may be part of the boot-up sequence of the computing domain or may be performed after the computing domain has booted-up. For example, in FIG. 1, CD_A 102 may perform the processing depicted in box 203 as a result of execution of arbitration logic code 132, which may be executed by the processing resources 106 of CD_A 102. Likewise, CD_B 104 may perform the processing depicted in box 203 as a result of execution of arbitration logic 134, which may be executed by processing resources 114 of CD_B 104.

At 204, the computing domain performing the processing is booted. At 206, a check is then made as to whether the computing domain performing the processing was operating in the active mode prior to the occurrence of the event that triggered the race to gain mastership. In some embodiments, this is determined based upon information stored in non-volatile memory for the computing domain prior to the occurrence of the event that triggers the race to gain mastership.

In certain embodiments, during normal processing of computing system 100, a computing domain is configured to store information to its non-volatile memory indicative of the mode of operation (i.e., active mode or passive mode) of the computing domain. The computing domains may be configured to update this information when a failover occurs. For example, in FIG. 1, CD_A 102 may store information 136 in its non-volatile memory 130 indicative of its operating mode. Likewise, CD_B 104 may store information 138 in its non-volatile memory 134 indicative of its operating mode. The mode information is thus stored prior to the occurrence of the event triggering the race to gain mastership. In such an embodiment, upon the occurrence of an event that triggers the processing depicted in FIG. 2, as part of the processing in 206, a computing domain can read this previously-stored piece of information from the non-volatile memory and, based upon the read information, determine whether the computing domain was operating in the active mode or passive mode prior to the occurrence of the event that triggered the race to gain mastership.

In some embodiments, as described above, both the computing domains may be configured to store operating mode information to their respective non-volatile memories. In some other embodiments, only the computing domain operating in a particular mode may be configured to store the mode indicating information in its non-volatile memory. For example, in certain embodiments, only the computing domain operating in active mode may be configured to store information in its non-volatile memory indicating that the computing domain was operating in active mode. For example, if CD_A 102 was operating in active mode prior to occurrence of the event in 202, then CD_A 102 may store “active flag” information 136 to non-volatile memory 130. In such an embodiment, no such information may be stored by CD_B 104 to its non-volatile memory 134 since it is operating in standby mode. In such embodiments, as part of the processing in 206, each computing domain may access its non-volatile memory to see if it stores any mode indicating information. The computing domain that is able to access and read this information from its non-volatile memory determines that it was operating in active mode prior to the occurrence of the event in 202. Alternatively, absence of this information from a computing domain's non-volatile memory indicates that the computing domain was operating in standby mode prior to the occurrence of the event in 202.

If it is determined in 206 that the computing domain was operating in active mode prior to the event occurrence in 202 (or more generally, was operating in the mode in favor of which the race to gain mastership is to be biased), then at 208, the computing domain participates in the race to gain mastership and attempts to start operating in the active mode.

If it is determined in 206 that the computing domain was operating in standby mode prior to the event occurrence in 202 (or more generally, was operating in a mode other than the mode in favor of which the race to gain mastership is to be biased), then at 210, a check is made to see if the other computing domain has already established mastership (i.e., has won the race to gain mastership) and started to operate in the active mode. If it is determined in 210 that the other computing domain has established mastership and is already operating in the active mode (i.e., has won the race to gain mastership), then at 212, the computing domain performing the processing starts operating in the standby mode.

There are various ways in which a particular computing domain can determine if the other computing domain is already operating in active mode in 210 (and also later in 216). In some embodiments, as soon as a computing domain starts to operate in the active mode, it is configured to write information to memory location indicating that mastership has already been established. The memory location where this information is written may be part of the memory resources that are shared between the multiple computing domains such that each computing domain is able to write to and read from this memory location. Appropriate mechanisms may be provided such that only one computing domain is able to start operating in active mode and once that has occurred, no other computing domain can operate in active mode. Appropriate memory locking mechanisms are provided such that only the computing domain that has gained mastership can write information to the memory location that a computing domain has started to operate in active mode.

In one embodiment, as shown in FIG. 1, the memory location to which the information is written may be a register of a field programmable gate array (FPGA) 140 that is part of shared resources 122. The FPGA register may store a “mastership” bit 142, which when “set” indicates that the race to gain mastership has already been won and that a computing domain has already started to operate in the active mode. In such an embodiment, the computing domain that wins the race to gain mastership may be configured to “set” bit 142. As part of the processing in 210, a computing domain can check whether mastership bit 142 has been “set” or not in the FPGA register. If “set,” it indicates that some other computing domain has won the race to gain mastership and become the active computing domain, and processing then continues with 212 at which the computing domain starts to operate in the standby mode.

If it is determined instead in 210 that no other computing domain has yet started to operate in active mode, then at 214, the computing domain performing the processing refrains from attempting to become the active computing domain for a period of time. Essentially, for that period of time, the computing domain intentionally does not participate in the race to gain mastership. This automatically biases the race to gain mastership in favor of the other computing domain, which is not constrained in any way during this time period from attempting to start operating in the active mode. In this manner, for the period of time, the race to gain mastership is biased in favor of the non-constrained computing domain and biased against the computing domain that refrains from participating in the race to gain mastership.

In certain embodiments, the period of time for which the computing domain refrains from participating in the race to gain mastership is configured by a user or administrator of computing system 100. In some other embodiments, the computing domain performing the processing may be configured to calculate the period of time.

After the time period has passed in 214, the computing domain performing the processing in 203 then checks at 216 if the other computing domain has already established mastership (i.e., has won the race to gain mastership) and started to operate in the active mode. If it is determined in 216 that another computing domain is already operating in active mode, then at 212, the computing domain starts operating in the standby mode. If, however, it is determined in 216 that the other computing domain has not yet become the active computing domain, then at 208, the computing domain performing the processing also joins the race to gain mastership.

As described above, in 214, the computing domain refrains from participating in the race to gain mastership for a period of time, but participates in the race to gain mastership after that period of time has passed. In this manner, the biasing of the race to gain mastership in favor of a particular computing domain is time limited to a period of time. If the particular computing domain towards which the race is biased (e.g., the active computing domain prior to the occurrence of the mastership race triggering event) is unable to become the active computing domain before the expiry of that particular time period, the biasing is removed and the race is then opened to all the competing computing domains. This time-limited biasing provides a mechanism to recover in the scenario where the computing domain towards which the race is biased has some problems and cannot become the active computing domain. In this scenario, the other computing domain is automatically, without any human intervention, provided the opportunity to become the active computing domain.

As an example of application of flowchart 200 in FIG. 2, consider a scenario where, prior to the event that causes the race to gain mastership, CD_A 102 of computing system 100 was operating in the active mode and CD_B 104 was operating in the standby mode. After the occurrence of an event that triggers the race to gain mastership, both CD_A 102 and CD_B 104 perform the processing depicted in box 203. The processing may be performed possibly in parallel by the two computing domains. At 206, CD_A 102 determines that it was the active computing domain prior to the event that triggered the race to gain mastership processing and accordingly right away attempts to start operating in the active mode per 208. CD_B 104, on the other hand, determines at 206 that it was not operating in the active mode prior to the event triggering the race to gain mastership processing, and accordingly determines in 210 if the other computing domain, i.e., CD_A 102, has already started to operate in the active mode. If so, at 212, CD_B 104 starts to operate in the standby mode. If CD_B 104 determines in 210 that CD_A 102 has not already become the active computing domain, then at 214, CD_B 104 intentionally refrains from participating in the race to gain mastership (i.e., refrains from attempting to become the active computing domain) for a period of time. After the period of time has passed, at 216, CD_B 106 again determines if another computing domain has won the race to gain mastership and become the active computing domain. If yes, then at 212, CD_B 106 starts operating in the standby mode. If not, then at 208, CD_B 106 joins the race to gain mastership and tries to become the active computing domain. In this manner, for a period of time, the race to gain mastership is biased in favor of CD_A 102, the computing domain operating in active mode prior to the event that triggers the race to gain mastership, and biased against CD_B 104, the computing domain operating in standby mode prior to the event that triggers the race to gain mastership. However, if CD_A 102 is unable to become the active computing domain during the biasing period, then after the period has passed, both the computing domains compete in the race to gain mastership on equal grounds.

FIG. 3 depicts a simplified flowchart 300 depicting another high-level method for biasing the race to gain mastership in favor of a particular computing domain according to an embodiment of the present invention. The method may be embodied in software (e.g., code, program, instructions) executed by a processor, in hardware, or combinations thereof. The software may be stored on a non-transitory computer-readable storage medium such as a hard disk drive, a floppy disk drive along with associated removable media, a Compact Disk Read Only Memory (CD-ROM) drive, an optical drive, removable media cartridges, a memory or memory device, and other like storage media. The method depicted in FIG. 3 is not intended to be restrictive. In the embodiment depicted in FIG. 3 the biasing is, like in FIG. 2, performed in favor of a computing domain that was operating in active mode prior to the event that caused the processing in FIG. 3 to be triggered. This is however not intended to be limiting.

Comparing FIG. 3 to FIG. 2, the processing performed at 302, 304, 306, 308, 310, and 312 is similar to processing performed at 202, 204, 206, 208, 210, and 212, respectively, and has been described above for FIG. 2. In some embodiments, the processing performed at 320, 322, 324, 326, 328, and 330 in FIG. 3 may be performed at 214 and 216 in FIG. 2.

After determining in 306 that the computing domain (i.e., the computing domain doing the processing) was not the active computing domain prior to the event triggering the race to gain mastership and further upon determining in 310 that the other computing domain has not become the active computing domain as yet, at 320, a variable “AggregateDelay” is initialized to zero. This variable is used to accumulate the total delay of time during which the computing domain refrains from participating in the race to gain mastership.

At 322, a “DELAY” period of time is calculated. In some embodiments, this may be preset or preconfigured by a user of the computing system. In some other embodiments, the DELAY may be calculated based upon one or more factors.

At 324, the computing domain performing the processing refrains from attempting to become the active computing domain for the period of time corresponding to “DELAY”. Essentially, for this period of time, the computing domain intentionally does not participate in the race to gain mastership, thereby biasing the race to gain mastership in favor of the other computing domain, which is not constrained in any way during this time period from attempting to start operating in the active mode.

After the “DELAY” time period has passed in 324, the computing domain performing the processing then checks at 326 if the other computing domain has already established mastership (i.e., has won the race to gain mastership) and started to operate in the active mode. If yes, then at 314, the computing domain starts operating in the standby mode. If, however, it is determined in 326 that the other computing domain has not yet become the active computing domain, then at 328, the “AggregateDelay” variable is updated to “AggregateDelay=AggregateDelay+DELAY”. Thus, with each iteration, the AggregateDelay variable keeps track of the amount of time that the computing domain has been refrained from participating in the race to gain mastership.

At 330, a check is made to see if the AggregateDelay has exceeded a preconfigured threshold. The threshold may be configured by an administrator or user of computing system 100. If it is determined in 330 that the value of AggregateDelay has not exceeded the threshold, then processing continues with 322 wherein another DELAY time period is calculated and then processing continues as described above. If, however, it is determined in 330 that the value of AggregateDelay has exceeded the threshold, then it indicates that the period of time for which the race to gain mastership is to be biased has passed and at 308 the computing domain performing the processing also joins the race to gain mastership.

Various different techniques may be used to calculate the DELAY in each processing iteration in FIG. 3. In some embodiments, the DELAY that is calculated in 322 may be the same for each iteration. For example, in one embodiment, the threshold is set to one minute and the delay for each iteration is set to one second. In other embodiments, the DELAY that is calculated in 322 may change from one processing iteration to the next. For example, in one embodiment, the value of DELAY may be increased with each successive iteration (e.g., 1 second for the first iteration, 2 seconds for the second iteration, 3 seconds for the third iteration, and the like).

Computing system 100 can be embodied in various different forms. The computing domains with a computing system can also be embodied in various different forms within a computing system. FIG. 4 is a simplified block diagram of a system 400 that may incorporate an embodiment of the present invention. System 100 may, for example, be a network device such as a router or switch. In the embodiment depicted in FIG. 4, system 400 comprises a single physical multicore processor 402, volatile or system memory 404, non-volatile memory 406, I/O devices 408, hardware resources 410, and an FPGA 412. Processor 402 may be coupled to I/O devices 408, hardware resources 410, system memory 404, and non-volatile memory 406 via one or more interconnects or buses 414. System 400 depicted in FIG. 1 is merely an example and is not intended to unduly limit the scope of embodiments of the present invention as recited in the claims. One of ordinary skill in the art would recognize many variations, alternatives, and modifications.

Physical processor 402 represents the processing resources of system 400. In one embodiment, processor 402 is a multicore processor comprising a plurality of processing cores. For example, in the embodiment depicted in FIG. 4, processor 402 comprises four cores: C1, C2, C3, and C4. Examples of a multicore processor include but are not limited to various multicore processors provided by Intel, AMD, ARM, Freescale Semiconductor, Inc. (e.g., the QorIQ and the PowerQUICC lines of processors provided by Freescale), and others.

Memory resources of system 400 include volatile memory 404 and non-volatile memory 406. Volatile memory 404 represents the system memory resources of system 400 that are available to physical processor 402. Information related to runtime processing performed by processor 402 may be stored in memory 404. Memory 404 may be a RAM (e.g., SDR RAM, DDR RAM) and is sometimes referred to as the system's main memory. Non-volatile memory 406 may be used for storing information that is to be persisted beyond a power cycle of system 400. I/O devices 408 may include devices such as Ethernet devices, PCIe devices, eLBC devices, and others. Hardware resources 410 can include resources such as security engines, queue managers, buffer managers, pattern matching engines, direct memory access (DMA) engines, and so on.

In certain embodiments, system 400 can be configured to provide multiple computing domains. In the embodiment depicted in FIG. 4, the computing domains are in the form of and referred to as logical partitions. For example, system 400 may be configured to support two logical partitions P1 and P2, each logical partition (or computing domain) having its own dedicated processing and memory resources. For example, in the embodiment depicted in FIG. 4, the processing resources may be partitioned such that cores C1 and C2 are allocated or assigned to partition P1 and cores C3 and C4 are allocated or assigned to partition P2.

The memory resources of system 400 may also be partitioned and allocated to the different partitions. For example, as depicted in FIG. 1, a memory portion 416 of volatile memory 404 is allocated to partition P1 and a memory portion 418 of memory 404 is allocated to partition P2. In a similar manner, a memory portion 420 of non-volatile memory 406 is allocated to partition P1 and a memory portion 422 of non-volatile memory 406 is allocated to partition P2. In this manner, each partition has its own secure and private memory area that is accessible only to that partition.

I/O devices 408 and hardware resources 410 may also be partitioned between partitions P1 and P2. A hardware resource or an I/O device may be assigned exclusively to one partition or alternatively may be shared between multiple partitions. For example, in one embodiment, a private Ethernet interface may be assigned to each partition, while access to PCIe may be shared between the partitions.

Although not shown in FIG. 4, a portions of volatile memory 404 and of non-volatile memory 406 may also be configured as a sharable resources that are capable of being shared between multiple partitions. The shared memory resources may be used for multiple purposes including messaging between the partitions.

The memory resources assigned to a partition may store, during runtime, an operating system for the partition and data related to one or more entities executed by the partition. The data may include code or programs or instructions that are executed by the processing resources of the computing domain and other data. The entities executed by a computing domain may include, without restriction, an application, a process, a thread, an operating system, a device driver, and the like. For example, in the embodiment depicted in FIG. 4, memory 416 allocated to partition P1 may store an operating system OS1424 and memory 418 allocated to partition P2 may store an operating system OS2426. The operating system executed by one partition may be the same as or different from the operating system executed by another partition. For example, in FIG. 4, operating system OS1 of P1 may be the same as OS2 of P2, OS1 may be a completely different operating system than OS2 (e.g., OS1 may be Linux while OS2 may be Windows), or OS1 and OS2 may be different instances or versions of the same operating system (e.g., OS1 may be LinuxV1 while OS2 may be LinuxV2). Operating systems for the partitions are also commonly referred to as guest operating systems.

In some embodiments, each partition may be presented as a virtual machine executed by system 400. A software program like a hypervisor 428 may be executed by system 400 to facilitate creation and management of virtual machines. Hypervisor 428 facilitates secure partitioning of resources between the partitions of system 400 and management of the partitions. Each virtual machine can run its own operating system and this enables system 400 to run multiple operating systems concurrently. In one embodiment, hypervisor 428 presents a virtual machine to each partition and allocates resources to the partitions. For example, the allocation of memory, processing, and hardware resources, as described above, may be facilitated by hypervisor 428. In one embodiment, hypervisor 428 may run on processor 402 as an operating system control. Each virtual machine for a partition can operate independently of the other virtual machines and can operate as an independent virtual system.

In certain embodiments, hypervisor 428 may be configured to determine and set up the partitions based upon configuration information specified by a user or administrator of the system. The hypervisor may then create virtual machines for the partitions and allocate resources as defined by the configuration data.

In some embodiments, the multiple computing domains or partitions of system 400 can be configured to operate according to the active-standby model such that, during normal operations, one partition 100 operates in active mode while another partition operates in standby mode. For example, in the embodiment depicted in FIG. 4, partition P1 may operate in active mode and partition P2 may concurrently operate in standby mode. The partition operating in active mode (the active partition) may take over and manage the hardware resources and I/O devices of system 100 and perform a set of functions that are not performed by the standby partition. When a failover occurs, the standby partition becomes the active partition and takes over performance of the set of functions performed in active mode. As a result, the set of functions continue to be performed with minimal, if any, interruption. The previous active partition may become the standby partition after a failover. In this manner, a system 400 comprising a single physical processor 402 is capable of supporting the active-standby model. An example of a system with a single multicore processor providing active-standby functionality is described in U.S. Pat. No. 8,495,418, whose entire contents are incorporated herein by reference for all purposes.

There are different ways in which resources of system 400 can be allocated to the various partitions. For example, with respect to processing resources, in the configuration depicted in FIG. 4, cores C1 and C2 are allocated to partition P1 and cores C3 and C4 are allocated to partition P2. In this configuration, the cores allocated to active partition P1 do not overlap with the cores allocated to standby partition P2. However, in alternative embodiments, a core may be added or removed from a partition depending upon whether the partition is operating in active mode or in standby mode. For example, in one embodiment, system 400 depicted in FIG. 4 may be configured such that three of the four cores of processor 402 are allocated to the active partition and the standby partition is allocated only one core. In such an embodiment, when partition P1 is operating in active mode, it may be allocated cores C1, C2, and C3, with core C4 being allocated to standby partition P2. When partition P2 becomes the active partition in response to a failover event or after a race to gain mastership, cores C2 and C3, which were initially allocated to P1, may be reallocated to partition P2. Accordingly, when partition P2 becomes the active partition it is allocated cores C2, C3, and C4 and core C1 remains allocated to standby partition P1. This dynamic allocation of cores to the active partition may be needed, for example, in situations where, due to the processing resources required by functions executed by the active partition, the cores allocated to a partition in standby mode are not sufficient when the standby partition becomes the active partition. Various other core allocation techniques may be used in alternative embodiments.

Upon the occurrence of an event that triggers a race to gain mastership, the partitions compete with each other to determine who will become the active partition. This race to gain mastership can be biased in favor of a particular partition. In this respect, each partition can execute arbitration logic that performs the processing depicted in FIG. 2 (or FIG. 3) and described above. For example, partition P1 may execute arbitration logic 430 when the partition is booted. Likewise, partition P2 may execute arbitration logic 432 when it is booted. The arbitration logic executed by a partition may perform the processing depicted in flowcharts 200 or 300.

Information related to the mode of operation of P1 prior to the event triggering the race to gain mastership may be stored as mode information 434 in non-volatile memory 420 allocated to P1. Likewise, information related to the mode of operation of P2 prior to the event triggering the race to gain mastership may be stored as mode information 436 in non-volatile memory 422 allocated to P2. In some embodiments, the information may be stored only by the partition operating in a specific mode, for example, by the partition operating in active mode prior to occurrence of the event that triggered the race to gain mastership. Each partition may use the mode information stored in its non-volatile memory to determine its mode of operation prior to the occurrence of the event triggering the race to gain mastership and take appropriate actions per flowcharts 200 or 300 depicted in FIGS. 2 and 3 respectively. Further, in some embodiments, FPGA 412 may comprise a register storing a mastership bit 438 that is “set” when a partition wins the race to gain mastership and becomes the active partition. The partitions may use this bit to determine if the other partition has won the race to gain mastership and started to operate as the active partition per the processing in flowcharts 200 or 300.

Accordingly, for system 400 depicted in FIG. 4, the race to gain mastership can be intentionally biased in favor of a particular partition for a period of time. If a particular partition (e.g., the active partition prior to the occurrence of the mastership race triggering event) towards which the race is biased is unable to become the active partition within that particular time period, the biasing is removed and the race is then opened to all the competing partitions. This time limited biasing provides a recovery mechanism to cover the scenario where the partition towards which the race is biased has some problems and cannot become the active partition. In this scenario, the other partition is provided the opportunity to become the active partition.

The teachings described above can be embodied in several different systems and devices including, but not restricted to, network devices such as routers and switches that are configured to facilitate forwarding and routing of data, such as the forwarding and routing of data packets according to one or more network protocols. Network devices can be provided in various configurations including chassis-based devices and “pizza box” configurations. A “pizza box” configuration generally refers to a network device comprising a single physical multicore CPU as depicted in FIG. 4, where the single CPU is configured to handle both management and data-forwarding functions. In a “pizza box” embodiment, the CPU may be partitioned into multiple partitions as described above with respect to FIG. 4 and the partitions configured to operate according to the active-standby model. Upon the occurrence of an event that triggers a race to gain mastership between the partitions, each partition may perform processing, as described above, that, for a specific period of time, biases the race to gain mastership in favor of a particular partition, for example, in favor of the partition that operated in active mode prior to the occurrence of the event that triggered the race to gain mastership. Further, the biasing is time-limited such that if a particular partition towards which the race is biased is unable to become the active partition within that particular time period, the biasing is removed and the race is then opened to all the competing partitions.

FIGS. 5, 6, 7, and 8 depict examples of chassis-based network devices that may incorporate the biasing techniques described above according to embodiments of the present invention. FIG. 5 depicts a simplified block diagram of a network device 500 that may incorporate an embodiment of the present invention. Network device 500 depicted in FIG. 5 is meant for illustrative purposes only and is not intended to be limiting in any manner. One of ordinary skill in the art would recognize many variations, alternatives, and modifications.

In the embodiment depicted in FIG. 5, network device 500 comprises one or more ports 512 for receiving and forwarding data packets and multiple cards that are configured to perform processing to facilitate forwarding of the data packets to their intended destinations. The multiple cards may include one or more line cards 504 and a management card 502. In one embodiment, a card, sometimes also referred to as a blade or module, can be inserted into one of multiple slots on a chassis of network device 500. This modular design allows for flexible configurations with different combinations of cards in the various slots of the device according to differing network topologies and switching requirements.

Ports 512 represent the I/O plane for network device 500. Network device 500 is configured to receive and forward packets using ports 512. A port within ports 512 may be classified as an input port or an output port depending upon whether network device 500 receives or transmits a data packet using the port. A port over which a data packet is received by network device 500 is referred to as an input port. A port used for communicating or forwarding a data packet from network device 500 is referred to as an output port. A particular port may function both as an input port and an output port. A port may be connected by a link or interface to a neighboring network device or network. Ports 512 may be capable of receiving and/or transmitting different types of data traffic at different speeds including 1 Gigabit/sec, 10 Gigabits/sec, 100 Gigabits/sec, or even more. In some embodiments, multiple ports of network device 500 may be logically grouped into one or more trunks.

Upon receiving a data packet via an input port, network device 500 is configured to determine an output port to be used for transmitting the data packet from the network device to facilitate communication of the packet to its intended destination. Within network device 500, the packet is then forwarded from the input port to the determined output port and then transmitted from network device 500 using the output port. In certain embodiments, forwarding of packets from an input port to an output port is performed by one or more line cards 504 with possible assistance from management card 502. Line cards 504 represent the data forwarding plane of network device 500. Each line card may be coupled to one or more ports 512 and comprise one or more packet processors that are programmed to perform processing related to determining an output port for the packets and for forwarding the data packets from an input port to the output port. In one embodiment, processing performed by a line card 504 may comprise extracting information from a received packet (e.g., extracting packet header information), performing lookups using the extracted information to determine an output port for the packet such that the packet can be forwarded to its intended destination, forwarding the packet to the output port, and then forwarding the packet from network device 500 via the output port.

Management card 502 is configured to perform management and control functions for network device 500 and represents the management plane for network device 500. In certain embodiments, management card 502 is communicatively coupled to line cards 504 via switch fabric 506. Switch fabric 506 provides a mechanism for enabling communications and forwarding of data between management card 502 and line cards 504, and between line cards 504. As depicted in FIG. 5, in some embodiments, management card 502 may provide for multiple computing domains such as CD_A 508 and CD_B 510. Each computing domain may be allocated processing and memory resources. The processing resources allocated to a computing domain can include one or more processing units, where a processing unit can be a processor or a core of a multicore processor. Accordingly, the processing resources allocated to CD_A 508 and/or CD_B 510 can include a single processor, a single core, multiple processors, multiple cores, or various combinations of cores and processors. In some embodiments, management card 502 can comprise a single physical multicore processor and CD_A 508 and CD_B 510 may be allocated one or more cores of the multicore processor.

In some embodiments, the computing domains of network device 500 may be configured to operate according to the active-standby model. For example, one of the computing domains may be configured to operate in active mode and perform a set of management-related functions while the other computing domain operates in standby mode in which the management-related functions are not performed. The management-related functions performed in active mode may include, for example, maintaining routing tables, programming line cards 504 (e.g., downloading information to a line card that enables the line card to perform data forwarding functions), some data forwarding functions, running various management protocols, and the like. When a failover occurs, the standby computing domain becomes the active computing domain and takes over performance of the set of functions performed in active mode. The previous active computing domain may become the standby computing domain after a failover.

Upon the occurrence of an event that triggers a race to gain mastership on management card 502, the two computing domains of management card 502 compete with each other to become the active computing domain. In certain embodiments, when such a race to gain mastership is triggered between the computing domains on management card 502, each computing domain may perform processing, as described above, that, for a specific period of time, biases the race to gain mastership in favor of a particular computing domain, for example, in favor of the computing domain that operated in active mode prior to the occurrence of the event that triggered the race to gain mastership, as described above. Further, the biasing is time-limited such that if a particular computing domain towards which the race is biased is unable to become the active computing domain within that particular time period, the biasing is removed and the race is then opened to all the competing computing domains.

FIG. 6 depicts a network device 600 according to an embodiment in which a line card provides multiple computing domains. Network device 600 depicted in FIG. 6 is meant for illustrative purposes only and is not intended to be limiting in any manner. One of ordinary skill in the art would recognize many variations, alternatives, and modifications.

Network device 600 has similarities with network device 500 depicted in FIG. 5 in terms of management card 502, computing domains 508 and 510 provided by the management card, switch fabric 506 and ports 512. Switch fabric 506 provides a mechanism for enabling communications and forwarding of data between management card 502 and line cards 602, and between line cards 602. In network device 600, line card 602 provides for multiple computing domains CD_LA 604 and CD_LB 606 that may be configured to operate according to the active-standby model at the data forwarding level. Each computing domain on line card 602 may be allocated processing and memory resources. The processing resources allocated to a computing domain can include one or more processing units, where a processing unit can be a processor or a core of a multicore processor. The processing resources allocated to CD_LA 604 and/or CD_LB 606 can include a single processor, a single core, multiple processors, multiple cores, or various combinations of cores and processors. In some embodiments, line card 602 may comprise a single physical multicore processor and CD_LA 604 and CD_LB 606 may be allocated one or more cores of the multicore processor.

In certain embodiments, the computing domains on line card 602 may be configured to operate according active-standby model in which one of the computing domains operates in active mode and performs a set of data forwarding-related functions while the other computing domain operates in standby mode in which the data forwarding-related functions are not performed. The data forwarding-related functions performed in active mode may include, for example, extracting header information from packets, determining output ports for packets, forwarding the packets to the output ports, receiving forwarding information from management card 502 and programming forwarding hardware based upon the received information, running data forwarding networking protocols, managing I/O devices, managing control state, sending out control packets, maintaining protocol/state information (e.g., application data (routing tables, queue structures, buffers, etc.) and hardware specific state information (ASIC configuration tables, port maps, etc.)), maintaining timing information/logs, and the like. When a failover occurs, the standby computing domain becomes the active computing domain and takes over performance of the set of data forwarding-related functions performed in active mode. Resources previously owned by the active computing domain are taken over by the standby computing domain when it becomes active. The resources can be hardware resources (PCIe devices, memory, CPU cores, device ports, etc.) and software related resources (e.g., message queues, buffers, interrupts, etc.). The previous active computing domain may become the standby computing domain after a failover.

Upon the occurrence of an event that triggers a race to gain mastership on a line card 602, the two computing domains of line card 602 compete with each other to become the active computing domain. In certain embodiments, when such a race to gain mastership is triggered between the computing domains on line card 602, each computing domain may perform processing, as described above, that, for a specific period of time, biases the race to gain mastership in favor of a particular computing domain, for example, in favor of the computing domain that operated in active mode prior to the occurrence of the event that triggered the race to gain mastership, as described above. Further, the biasing is time-limited such that if a particular computing domain towards which the race is biased is unable to become the active computing domain within that particular time period, the biasing is removed and the race is then opened to all the competing computing domains.

FIG. 7 depicts a network device 700 according to an embodiment in which multiple management cards are provided, each management card corresponding to a computing domain. Network device 700 depicted in FIG. 7 is meant for illustrative purposes only and is not intended to be limiting in any manner. One of ordinary skill in the art would recognize many variations, alternatives, and modifications.

As depicted in FIG. 7, network device 700 comprises two management cards 702 and 704, each management card representing a computing domain. Accordingly, in conjunction, the two management cards provide for multiple computing domains that can be configured to operate according to the active-standby model. Switch fabric 506 provides a mechanism for enabling communications and forwarding of data between management cards 702 and 704, between a management card and a line card, and between line cards 504.

When configured to operate according to the active-standby model, one of the management cards is configured to operate in active mode and perform management-related functions while the other management card operates in standby mode in which the management-related functions are not performed. When a failover occurs, the standby management card becomes the active management card and takes over performance of the set of management-related functions performed in active mode. The active management card prior to the failover may become the standby after the failover.

Upon the occurrence of an event that triggers a race to gain mastership, the two management cards compete with each other to become the active management card. In certain embodiments, when such a race to gain mastership is triggered between the management cards, each management card may perform processing that, for a specific period of time, biases the race to gain mastership in favor of a particular management card, for example, in favor of the management card that operated in active mode prior to the occurrence of the event that triggered the race to gain mastership. Further, the biasing is time-limited such that if a particular management card towards which the race is biased is unable to become the active management card within that particular time period, the biasing is removed and the race is then opened to both the competing management cards.

FIG. 8 depicts a network device 800 according to an embodiment in which multiple management cards are provided, each management card corresponding to a computing domain, and further multiple computing domains are presented at the line card level. The embodiment depicted in FIG. 8 is a combination of the management cards configuration depicted in FIG. 7 and the line cards configuration depicted in FIG. 6. Network device 800 depicted in FIG. 8 is meant for illustrative purposes only and is not intended to be limiting in any manner. One of ordinary skill in the art would recognize many variations, alternatives, and modifications.

As depicted in FIG. 8, network device 800 comprises two management cards 702 and 704, each management card representing a computing domain. Accordingly, in conjunction, the two management cards provide for multiple computing domains that can be configured to operate according to the active-standby model such that, during normal operations of network device 800, one of the management cards operates in active mode and performs management-related functions while the other management card operates in standby mode in which the management-related functions are not performed. When a failover occurs, the standby management card becomes the active management card and takes over performance of the set of management-related functions performed in active mode. The active management card prior to the failover may become the standby after the failover.

Additionally, line card 602 also comprises two computing domains 604 and 606 that can be configured to operate according to the active-standby model such that, during normal operations of network device 800, one of the computing domains operates in active mode and performs data forwarding-related functions while the other computing domain operates in standby mode in which the data forwarding-related functions are not performed. When a failover occurs, the standby computing domain becomes the active computing domain on the line card and takes over performance of the set of data forwarding-related functions performed in active mode. The active computing domain on the line card prior to the failover may become the standby after the failover. Switch fabric 506 provides a mechanism for enabling communications and forwarding of data between management cards 702 and 704, between a management card and a line card, and between line cards 602.

In certain embodiments, the occurrence of an event may trigger a race to gain mastership both at the management cards level and at the line card level. Alternatively, an event may trigger a race to gain mastership only at the management cards level or only at the line card level. When such a race to gain mastership is triggered between the management cards, each management card may perform processing that, for a specific period of time, biases the race to gain mastership in favor of a particular management card, for example, in favor of the management card that operated in active mode prior to the occurrence of the event that triggered the race to gain mastership. Likewise, when a race to gain mastership is triggered between computing domains on a line card, each computing domain may perform processing that, for a specific period of time, biases the race to gain mastership in favor of a particular computing domain, for example, in favor of the computing domain that operated in active mode prior to the occurrence of the event that triggered the race to gain mastership. Further, both at the management cards level and at the line card level, the biasing is time-limited such that if a particular management card or computing domain on a line card towards which the race is biased is unable to become the active management card or the active computing domain within that particular time period, the biasing is removed and the race is then opened to both the competing management cards or computing domains on the line card.

Although specific embodiments have been described, these are not intended to be limiting. Various modifications, alterations, alternative constructions, and equivalents are also encompassed within the scope of the invention. The embodiments are not restricted to operation within certain specific data processing environments, but are free to operate within a plurality of data processing environments. Additionally, although certain embodiments have been described using a particular series of transactions and steps, it should be apparent to those skilled in the art that the scope is not limited to the described series of transactions and steps.

Further, while certain embodiments have been described using a particular combination of hardware and software, it should be recognized that other combinations of hardware and software are also within the scope of the present invention. Embodiments may be implemented only in hardware, or only in software, or using combinations thereof.

The specification and drawings are, accordingly, to be regarded in an illustrative rather than a restrictive sense. It will, however, be evident that additions, subtractions, deletions, and other modifications and changes may be made thereunto without departing from the broader spirit and scope as set forth in the claims.

Claims

1. A method comprising: upon the occurrence of an event that causes a race between a first domain in a computing system and a second domain in the computing system to start operating in a first mode, determining that the first computing domain did not operate in the first mode prior to occurrence of the event; andupon determining that the first computing domain did not operate in the first mode prior to the occurrence of the event: refraining, for a period of time, the first computing domain from attempting to start operating in the first mode;allowing, during the period of time, the second computing domain to attempt to start operating in the first mode; andafter the period of time has passed: determining, by the first computing domain, whether the second computing domain is operating in the first mode;upon determining that the second computing domain is not operating in the first mode, allowing the first computing domain to attempt to operate in the first mode; andupon determining that the second computing domain is operating in the first mode, causing the first computing domain to operate in a second mode different from the first mode.

2. The method of claim 1 wherein a set of functions is performed when operating in the first mode and not performed when operating in the second mode.

3. The method of claim 1 wherein a set of functions is performed when operating in the second mode and is not performed when operating in the first mode.

4. The method of claim 1 wherein the refraining comprises calculating the period of time.

5. The method of claim 1 wherein determining that the first computing domain did not operate in the first mode prior to the occurrence of the event comprises: reading, by the first computing domain, information from a non-volatile memory, wherein the information is stored in the non-volatile memory prior to the occurrence of the event; anddetermining, by the first computing domain, that the first computing domain did not operate in the first mode prior to the occurrence of the event based upon the information read from the non-volatile memory.

6. The method of claim 1 wherein the determining, by the first computing domain, whether the second computing domain is operating in the first mode comprises: reading information from a memory location, the memory location being readable and writable by the first computing domain and the second computing domain; anddetermining, based upon the information read from the memory location, whether the second computing domain is operating in the first mode.

7. The method of claim 1 wherein: a first set of one or more processing units is allocated to the first computing domain; anda second set of one or more processing units is allocated to the second computing domain;wherein the first set of processing units includes a first core from a multicore processor; andwherein the second set of processing units includes a second core from the multicore processor.

8. A system comprising: a first computing domain comprising at least a first processing unit, wherein the first processing unit is a processor or a processing core; anda second computing domain comprising at least a second processing wherein the second processing unit is a processor or a processing core;wherein the first computing domain is configured to: upon the occurrence of an event that causes a race between the first computing domain and the second computing domain to operate in a first mode, determine that the first computing domain did not operate in the first mode prior to occurrence of the event;refrain from attempting to start operating in the first mode for a period of time;after the period of time has passed: determine whether the second computing domain is operating in the first mode;upon determining that the second computing domain is not operating in the first mode, attempt to operate in the first mode; andupon determining that the second computing domain is operating in the first mode, start to operate in a second mode different from the first mode; andwherein the second computing domain is configured to, while the first computing domain is refrained from attempting to start operating in the first mode for the period of time, attempt to start operating in the first mode.

9. The system of claim 8 wherein a set of functions is performed when operating in the first mode and not performed when operating in the second mode.

10. The system of claim 8 wherein a set of functions is performed when operating in the second mode and is not performed when operating in the first mode.

11. The system of claim 8 wherein the first computing domain is configured to: read, from a non-volatile memory, information stored in the non-volatile memory prior to the occurrence of the event; anddetermine, based upon the read information, that the first computing domain did not operate in the first mode prior to the occurrence of the event.

12. The system of claim 8 wherein the first computing domain is configured to: read information from a memory location, the memory location being readable and writable by the first computing domain and the second computing domain; anddetermine, based upon the information read from the memory location, whether the second computing domain is operating in the first mode.

13. The system of claim 8 wherein: a first set of one or more processing units is allocated to the first computing domain, the first set of processing units including a first core from a multicore processor; anda second set of one or more processing units is allocated to the second computing domain, the second set of processing units including a second core from the multicore processor.

14. A network device comprising: a set of one or more ports for forwarding one or more data packets from the network device;a plurality of processing units;a first computing domain, the first computing domain being allocated a first set of one or more processing units from the plurality of processing units;a second computing domain, the second computing domain being allocated a second set of one or more processing units from the plurality of processing units;wherein, in response to the occurrence of an event that causes a race between the first computing domain and the second computing domain to operate in a first mode, the first computing domain is configured to determine that the first computing domain did not operate in the first mode prior to the occurrence of the event;wherein the first computing domain is configured to refrain from attempting to start operating in the first mode for a period of time;wherein, in response to the occurrence of the event, the second computing domain is configured to attempt to start operating in the first mode during the period of time;wherein, after the period of time has passed, the first computing domain is configured to: if the second computing domain is operating in the first mode, start to operate in a second mode different from the first mode; andif the second computing domain is not operating in the first mode, attempt to operate in the first mode.

15. The network device of claim 14 wherein a set of functions is performed by the first computing domain or the second computing domain when operating in the first mode and not performed when operating in the second mode.

16. The network device of claim 14 wherein a set of functions is performed when operating in the second mode and is not performed when operating in the first mode.

17. The network device of claim 14 wherein the first computing domain is configured to, based upon information stored prior to the occurrence of the event, determine whether the first computing domain operated in the first mode prior to the occurrence of the event.

18. The network device of claim 14 wherein: the first set of processing units includes a first core from a multicore processor; andthe second set of processing units includes a second core from the multicore processor.

19. The network device of claim 14 wherein: the first computing domain corresponds to a first card of the network device; andthe second computing domain corresponds to a second card of the network device.

20. The network device of claim 14 wherein the first computing domain and the second computing domain are located on a card of the network device.

21. An apparatus comprising: upon the occurrence of an event that causes a race between a first domain in a computing system and a second domain the computing system to operate in a first mode, means for determining that the first computing domain did not operate in the first mode prior to the occurrence of the event;means for refraining, by the first computing domain, for a period of time, from attempting to start operating in the first mode; andmeans for allowing, during the period of time, the second computing domain to attempt to start operating in the first mode; andafter the period of time has passed: means for determining, by the first computing domain, whether the second computing domain is operating in the first mode;upon determining that the second computing domain is not operating in the first mode, means for allowing the first computing domain to attempt to operate in the first mode; andupon determining that the second computing domain is operating in the first mode, means for causing the first computing domain to operate in a second mode different from the first mode.