60/324,196 (Attorney Docket No. POLYP001+) entitled SHARED STORAGE LOCK: A NEW SOFTWARE SYNCHRONIZATION MECHANISM FOR ENFORCING MUTUAL EXCLUSION AMONG MULTIPLE NEGOTIATORS filed September 21,2001, which is incorporated herein by reference for all purposes.

This application claims priority to U. S. Provisional Patent Application No.

60/324,226 (Attorney Docket No. POLYP002+) entitled JOUNALING MECHANISM WITH EFFICIENT, SELECTIVE RECOVERY FOR MULTI-NODE ENVIRONMENTS filed September 21,2001, which is incorporated herein by reference for all purposes.

This application claims priority to U. S. Provisional Patent Application No.

60/324,224 (Attorney Docket No. POLYP003+) entitled COLLABORATIVE CACHING IN A MULTI-NODE FILESYSTEM filed September 21,2001, which is incorporated herein by reference for all purposes.

This application claims priority to U. S. Provisional Patent Application No 60/324,242 (Attorney Docket No. POLYP005+) entitled DISTRIBUTED MANAGEMENT OF A STORAGE AREA NETWORK filed September 21, 2001, which is incorporated herein by reference for all purposes.

This application claims priority to U. S. Provisional Patent Application No.

60/324,195 (Attorney Docket No. POLYP006+) entitled METHOD FOR IMPLEMENTING JOURNALING AND DISTRIBUTED LOCK MANAGEMENT filed September 21,2001, which is incorporated herein by reference for all purposes.

This application claims priority to U. S. Provisional Patent Application No.

60/324,243 (Attorney Docket No. POLYP007+) entitled MATRIX SERVER: A HIGHLY AVAILABLE MATRIX PROCESSING SYSTEM WITH COHERENT SHARED FILE STORAGE filed September 21,2001, which is incorporated herein by reference for all purposes.

This application claims priority to U. S. Provisional Patent Application No.

60/324,787 (Attorney Docket No. POLYP008+) entitled A METHOD FOR EFFICIENT ON-LINE LOCK RECOVERY IN A HIGHLY AVAILABLE MATRIX PROCESSING SYSTEM filed September 24, 2001, which is incorporated herein by reference for all purposes.

This application claims priority to U. S. Provisional Patent Application No.

60/327,191 (Attorney Docket No. POLYP009+) entitled FAST LOCK RECOVERY: A METHOD FOR EFFICIENT ON-LINE LOCK RECOVERY IN A HIGHLY AVAILABLE MATRIX PROCESSING SYSTEM filed October 1,2001, which is incorporated herein by reference for all purposes.

This application is related to co-pending U. S. Patent Application No.

(Attorney Docket No. POLYP002) entitled SYSTEM AND METHOD FOR JOURNAL RECOVERY FOR MULTINODE ENVIRONMENTS filed concurrently herewith, which is incorporated herein by reference for all

purposes; and co-pending U. S. Patent Application No. (Attorney Docket No. POLYP003) entitled A SYSTEM AND METHOD FOR COLLABORATIVE CACHING IN A MULTINODE SYSTEM filed concurrently herewith, which is incorporated herein by reference for all purposes; and co-pending U. S. Patent Application No. (Attorney Docket No. POLYP005) entitled A SYSTEM AND METHOD FOR MANAGEMENT OF A STORAGE AREA NETWORK filed concurrently herewith, which is incorporated herein by reference for all purposes; and co-pending U. S. Patent Application No.

(Attorney Docket No. POLYP006) entitled SYSTEM AND METHOD FOR IMPLEMENTING JOURNALING IN A MULTI-NODE ENVIRONMENT filed concurrently herewith, which is incorporated herein by reference for all purposes; and co-pending U. S. Patent Application No.

(Attorney Docket No. POLYP007) entitled A SYSTEM AND METHOD FOR A MULTI-NODE ENVIRONMENT WITH SHARED STORAGE filed concurrently herewith, which is incorporated herein by reference for all purposes; and co-pending U. S. Patent Application No. (Attorney Docket No. POLYP009) entitled A SYSTEM AND METHOD FOR EFFICIENT LOCK RECOVERY filed concurrently herewith, which is incorporated herein by reference for all purposes.

FIELD OF THE INVENTION

The present invention relates generally to computer systems. More specifically, it relates to a synchronization mechanism for use with multiple negotiators.

BACKGROUND OF THE INVENTION Servers are typically used for big applications and workloads such as those used in conjunction with large web services and manufacturing. Often, a single server does not have enough power to perform the required application. To accommodate these large applications, several servers may be used in conjunction with several shared storage devices in a storage area network (SAN). In order to accomplish synchronization, a lock may be used.

Some hardware, such as disk storage, typically does not support an atomic test-and-set operation, atomic swap operation, or equivalent operation on shared storage. A potential problem with the use of locks with this type of hardware is in the instance where a first node reads the lock, sees that it is available, then writes to the lock to claim it. In the meantime, after the first node has read the lock but before it has written to the lock, a second node reads the same lock and sees that it is available, then writes to the lock, claiming it as well. Accordingly, both nodes may think that they have control over the lock, and therefore try to alter the shared data.

A proposed solution is to reserve a separate area in the lock corresponding to each node or application to write in so that there are substantially as many reserved lock areas as nodes or applications. By doing so, an algorithm can be devised that avoids the problem described in the preceding paragraph. A potential problem with

this solution is the large amount of space that may be required to hold in reserve for the various nodes and applications which may need to access shared data.

Additionally, the set of nodes or applications may change over time and accommodating this change would be very difficult.

What is needed is a system and method for synchronizing mutual exclusion among multiple negotiators that does not require hardware support for an atomic test and set or swap equivalent on the shared storage, that does not require the reservation of a large amount of shared storage space and that can be dynamic to accommodate changes to the set of negotiators. The present invention addresses such needs.

BRIEF DESCRIPTION OF THE DRAWINGS The present invention will be readily understood by the following detailed description in conjunction with the accompanying drawings, wherein like reference numerals designate like structural elements, and in which: Fig. 1 is a block diagram of a shared storage system suitable for facilitating the synchronization mechanism according to an embodiment of the present invention.

Fig. 2 is a block diagram of an example of a communications failure of a shared storage system.

Fig. 3 is a block diagram of a lock according to an embodiment of the present invention.

Fig. 4A-4D are flow diagrams of a method according to an embodiment of the present invention for obtaining a lock.

Fig. 5 is a flow diagram of a method for synchronizing locks using priority according to another embodiment of the present invention.

DETAILED DESCRIPTION It should be appreciated that the present invention can be implemented in numerous ways, including as a process, an apparatus, a system, or a computer readable medium such as a computer readable storage medium or a computer network wherein program instructions are sent over optical or electronic communication links.

It should be noted that the order of the steps of disclosed processes may be altered within the scope of the invention.

A detailed description of one or more preferred embodiments of the invention are provided below along with accompanying figures that illustrate by way of example the principles of the invention. While the invention is described in connection with such embodiments, it should be understood that the invention is not limited to any embodiment. On the contrary, the scope of the invention is limited only by the appended claims and the invention encompasses numerous alternatives, modifications and equivalents. For the purpose of example, numerous specific details are set forth in the following description in order to provide a thorough understanding of the present invention. The present invention may be practiced according to the claims without some or all of these specific details. For the purpose of clarity, technical material that is known in the technical fields related to the invention has not been described in detail so that the present invention is not unnecessarily obscured.

Fig. 1 is a block diagram of a shared storage system suitable for facilitating the synchronization mechanism according to an embodiment of the present invention. In this example, nodes 102A-102D are coupled together through a network switch 100.

The network switch 100 can represent any network infrastructure such as an Ethernet.

Additionally, the nodes 102A-102D are also shown to be coupled to a data storage interconnect 104. An example of the data storage interconnect 104 is a fiber channel switch, such as a Brocade 3200 the fiber channel switch. Examples of nodes 102A- 102D include but are not limited to computers, servers, and any other processing units or applications that can share storage or data. The data interconnect 104 is shown to be coupled to shared storage 106A-106D. Examples of shared storage 106A-106D include any form of storage such as hard drive disks, compact disks, tape, and random access memory.

The term node, as used herein, is intended to include all possible negotiators of any system that requires a synchronization mechanism for enforcing mutual exclusion among multiple negotiators. Examples, of node, as used herein, include but are not limited to servers, computers, and applications.

Although the system shown in Fig. 1 is a multiple node system, the present invention can also be used with a single computer system for synchronizing various applications as they share data on a shared storage.

Shared storage can be any storage device, such as hard drive disks, compact disks, tape, and random access memory. A filesystem is a logical entity built on the shared storage. Although the shared storage is typically considered a physical device while the filesystem is typically considered a logical structure overlaid on part of the storage, the filesystem is sometimes referred to herein as shared storage for simplicity.

For example, when it is stated that shared storage fails, it can be a failure of a part of a filesystem, one or more filesystems, or the physical storage device on which the filesystem is overlaid. Accordingly, shared storage, as used herein, can mean the

physical storage device, a portion of a filesystem, a filesystem, filesystems, or any combination thereof.

Fig. 2 is a similar block diagram to Fig. 1, illustrating a network communications failure. In this example, the network switch 100'is shown to have failed. If the network 100'connection failed between node 102B'and node 102C'then the shared storage system would have cluster 150A which includes 102A'and 102B', and cluster 150B which includes node 102C'and 102D'. The nodes 102A'and 102B' within cluster 150A can communicate with each other but can no longer communicate with nodes 102C'and 102D'. Likewise, nodes 102C'and 102D'of cluster 150B can communicate with each other but can no longer communicate with nodes 102A'and 102B'.

In this instance, nodes within each cluster 150A-150B could coordinate which node obtains access to shared data, but neither of the clusters 150A-150B would be able to communicate through the network switch 100'to coordinate which node 102A'-102D'would obtain access to alter shared data. In an embodiment of the present invention, a lock is used to solve this problem and to allow synchronization between negotiators. Negotiators, as used herein, can be any device, application, group of devices or applications, or any combination thereof that may attempt to use the lock. Examples of negotiators include but are not limited to servers, nodes, computers, clusters and applications. In the example of the clusters 150A-150B, node 102A can obtain the lock 120 and block off nodes 102C-102D of cluster 150B to avoid confusion.

Fig. 3 shows a lock according to an embodiment of the present invention. In this example, only a single shared storage 106 is shown for clarity, however, the system shown in Fig. 3 can accommodate a large number of shared storage units.

In this example, a lock 120 is shown to be included within the shared storage 106. The embodiment shown in Fig. 3 shows a lock 120 including two parts 122A and 122B. An example of the size of reserved space for parts 122A-122B is four disk sectors. Within each part 122A-122B, the reserved space can be optionally split into blocks. For example, part 122A can include a renew block and a holder block. The renew block 124A is shown to include a renew time. The holder block 126A is shown to include a lock state, a holder ID, and a priority. Likewise, renew block 124B is shown to include renew time and renew ID, while holder lock 126B is shown to include lock state, holder ID, and priority. Further details of these features will be discussed in conjunction with the following flow diagrams.

Fig. 4 shows a flow diagram of method according to an embodiment of the present invention for obtaining a lock. This example can correspond with lock 120 of Fig. 3 which includes parts 122A-122B, however, the examples shown in block 124A-124B and 126A-126B can apply but does not need to apply to the method shown in Fig. 4.

In this example a requesting node reads part one of the lock (400). It is then determined whether the part one of the lock is available (402). For example, the requesting node can read the Lock State of part one 122A of Fig. 3. If the Lock State deems the lock free, then it is available. If, however, the Lock State deems the lock unavailable, then the requesting node reads the Holder ID of part one 122A. If there

is no Holder ID, or if the Holder ID identifies the lock as being available, then it can be determined that the lock is available.

If part one is not free (402), then it is determined whether a lease on part one has expired (404). An example of a lease is when a node obtains a lock for a predefined time period. In order to maintain the lock, the node renews the lease. In this example, the node leases part one of the lock. The requesting node reads a renew time of part one of the lock. It is then determined whether a mark or unique identifier, such as a time stamp or a progressive sequence of numbers, of the renew time has changed within a predetermined period of time. An example of how often the timestamp is updated is five seconds. In the example shown in Fig. 3, the time stamp is identified as <renew time 1>. If the time stamp has not changed in the predetermined period of time, then the lease is deemed to have expired. If the time stamp has changed in the predetermined period of time, then it is assumed that the current lock holder is still active and validly holding the lock. Accordingly, the requesting node attempts again to obtain the lock by reading part one.

If the lease on part one has not yet expired (404), then this node waits a predetermined amount of time (406). An example of the predetermined amount of time is five seconds. Afterwards, part one is read again (400).

If part one is free (402), or if the lease on part one has expired (404), then an ID is written in to part one (410). The ID is preferable a unique entry written by the requesting node which can be any identifiable notation that can be associated with the requesting node. This unique entry is sometimes referred to as holder ID.

Part two is then read (412). It is then determined whether part two is free (414). If part two is available, then the ID of the requesting node is written into part two. If, however, part two is not available, then it is determined whether the lease has expired on part two (416). An example of when part two would not be available is if there is a holder ID of another node already written into part two. The lease of part one can also utilize a time stamp, such as a predetermined time period of five seconds.

In the example shown in Fig. 3, the time stamp is identified as <renew time 2>. If the time stamp has changed in the predetermined period of time, then it is assumed that the current lock holder is still active and validly holding the lock.

If the lease has expired, then the requesting node's ID is written into part two (418). Then part one is again read (420).

It is then determined whether the requesting node still owns part one (430).

For example, if the requesting nodes ID is still written into part one, then it still owns part one. If it still owns part one (430), then the lock is now leased to the requesting node (434). A predetermined amount of time is waited (436), such as five seconds, and then the time stamp in part two is renewed (438).

If the requesting node does not still own part one (430), then the lock is not leased to the requesting node (432), and the requesting node waits a predetermined amount of time (406 of Fig. 4A) before reading part one again (400).

If the lease on part two has not expired (416 of Fig. 4B), then the requesting node waits a predetermined amount of time (440), such as five seconds, and then reads part one (442). It is then determined whether the requesting node still owns part one (444). If it still owns part one, then the time stamp in part one is renewed (446).

Thereafter, a predetermined amount of time is again waited (440). Thereafter, part two is again read (412 Fig. 4B).

It is preferable to have this predetermined time interval for the renewing of the time stamp be shorter than the amount of time that is required to wait before being able to grab the lock away from the current holder of the lock, such as the lease time of step 416 of Fig 4B. An example of the time interval between renewing the time stamp (438) is one second while an example of the lease time (416) is five seconds.

In this manner, ordinary delays can occur before the lock can be taken away form the current holder.

An advantage to leasing the lock in this manner rather than owning the lock is that in case the node which holds the lock fails, then after a predetermined amount of time, another node is able to take the lock away from the failed node so that the lock is not frozen and unavailable to the rest of the system.

Additionally, because renewal information is preferably kept in a separate block from holder information, the time stamp in part two can be renewed by any node that has been authorized to do so by the node that currently holds the lock without over-writing the holder information. For example, if node 102A currently leases lock 120 of Fig. 3, then node 102B can also renew the time stamp in part two (438 of Fig. 4C) on behalf of node 102A if it has been authorized to do so by node 102A. This feature can keep the lock from being inadvertently dropped if the holder of the lease on the lock becomes too busy for some period to renew its lease on the lock.

Fig. 5 is a flow diagram of a method of synchronizing access according to another embodiment of the present invention. In this embodiment, the method utilizes priority factors. This embodiment differs from the previous embodiment shown in Figs. 4A-4D in the way a node acquires part one of the lock. When a node acquires part one of the lock, it writes its priority into part one of the lock along with its unique identifier. If the priority of that node later changes, it updates its priority in part one of the lock. If another node then attempts to acquire part one of the lock, it first reads part one of the lock, then determines if there is a current holder of the lock, and if so, determines whether that node has a lower priority than itself. If so, the node is allowed to acquire part one of the lock without checking if the current holder is renewing its lease on the lock. Essentially, a node is allowed to steal part one of the lock from a lower priority holder. The priority can be any value or set of values.

Figs. 4A-4B, and 4D are substantially the same for this embodiment accept that step 402 of Fig. 4A determines whether part one is free or whether the requesting node has a higher priority then the holder of part one. Additionally, Fig. 4C would be substituted with Fig. 5. In Fig. 5, it is determined whether the requesting node still owns part one (500). If it does still own part one, then the lock is leased to the requesting node (504). A predetermined amount of time is then waited (506), and part one is read again (508). It is then determined whether another node holds part one and whether it has a higher priority than this node (510). If another node does not hold part one or another node holds part one but does not have higher priority than this node, then the time stamp in part two is renewed (512), and a predetermined amount of time is again waited (506).

An example of how this determination of priority can be made is to compare <priority 2> to <priority 1> as shown in Fig. 3. <priority 2> is the priority of the current lock holder while <priority 1> is the priority of the requesting node that has claimed part one of the lock but cannot claim part two since it is already taken.

If another node does hold part one and it does have a higher priority than this node (510), then it waits a predetermined amount of time (406 of Fig. 4A) and again reads part one (400).

If this node no longer owns part one (500 of Fig. 5), then the lock is not leased to this node (502), and a predetermined amount of time is waited (406 of Fig. 4A) before rereading part one (400).

An advantage of the present invention is that an atomic test-and-set, atomic swap, or equivalent operation is not required on the shared storage. A further advantage of the present invention is that a fixed, predictable amount of space is used by the lock regardless of the number of negotiators. A further advantage of the present invention is that the set of negotiators can be dynamic without interruption to the locking mechanism. For example, if a negotiator or holder of the lock fails, then the lock will automatically be obtained by another negotiator as illustrated in Figures 4A-4D and 5. Likewise, if an additional negotiator is added to the shared storage system, then the locking mechanism according to an embodiment of the present invention does not need to be altered to account for the change. A further advantage of the present invention is that it does not require that clocks be synchronized among the negotiators.

Although the foregoing invention has been described in some detail for purposes of clarity of understanding, it will be apparent that certain changes and modifications may be practiced within the scope of the appended claims. It should be noted that there are many alternative ways of implementing both the process and apparatus of the present invention. Accordingly, the present embodiments are to be considered as illustrative and not restrictive, and the invention is not to be limited to the details given herein, but may be modified within the scope and equivalents of the appended claims.

WHAT IS CLAIMED IS: