Runtime failure management of redundantly deployed hosts of a supervisory process control data acquisition facility
View Patent ↗A redundant host pair runtime arrangement is disclosed for a process control network environment. The arrangement includes a primary network. A first partner of a fail-over host pair operates on a first machine communicatively connected to the primary network. The first partner hosts a set of executing application components in accordance with an active role assigned to the first partner. A second partner of the fail-over host pair operates on a second machine communicatively connected to the primary network. The second partner hosts a non-executing version of the set of executing application components in accordance with a standby runtime role. A monitoring process, operating separately upon the first machine, senses a failure of the first partner, and in response, initiates a notification to the second partner to take over the active role.
1. A redundant host pair runtime arrangement for a process control network environment comprising:
a primary network;
a first partner of a fail-over host pair, operating on a first machine communicatively connected to the primary network, the first partner hosting a set of executing application components in accordance with an active role assigned to the first partner;
a second partner of the fail-over host pair, operating on a second machine communicatively connected to the primary network, the second partner hosting a non-executing version of the set of executing application components in accordance with a standby runtime role; and
a monitoring process, operating on the first machine separately from the first partner on the first machine, for sensing a failure of the first partner, and in response, initiating a notification to the second partner to take over the active role.
2. The redundant host pair runtime arrangement of claim 1 , wherein the second partner, in the standby runtime role, receives updates including synchronization data associated with the set of executing application components from the first partner to facilitate taking over the active role currently assigned to the first partner.
3. The redundant host pair runtime arrangement of claim 2 further comprising:
a redundancy message channel, physically separate and distinct from the primary network, providing a communications path between the first machine and second machine facilitating passing the updates including synchronization data.
4. The redundant host pair runtime arrangement of claim 3 wherein the synchronization data comprises checkpoint information.
5. The redundant host pair runtime arrangement of claim 4 wherein the checkpoint information comprises a set of objects deployed upon the first partner.
6. The redundant host pair runtime arrangement of claim 4 wherein the checkpoint information comprises alarm limits.
7. The redundant host pair runtime arrangement of claim 4 wherein the checkpoint information comprises object configuration information.
8. The redundant host pair runtime arrangement of claim 3 wherein the synchronization data comprises alarm states.
9. The redundant host pair runtime arrangement of claim 3 wherein the synchronization data comprises subscriber lists for a data acquisition service.
10. The redundant host pair runtime arrangement of claim 3 wherein the synchronization data comprises store forward buffered historized process control data acquired by an active host of the redundant host pair in accordance with a set of executing application objects.
11. The redundant host pair runtime arrangement of claim 1 wherein the second partner further comprises logic for independently determining a fail-over condition without receiving a failure notification from the first machine running the active host of the redundant host pair, and thereafter taking over the active role.
12. The redundant host pair runtime arrangement of claim 11 wherein the fail-over condition comprises losing communication contact with the first partner.
13. The redundant host pair runtime arrangement of claim 1 wherein the application components comprise a set of application objects that implement supervisory process control and/or manufacturing information acquisition functions associated with an overall supervisory process control and/or manufacturing information application.
14. A method for operating a redundant application engine pair runtime arrangement for a process control network environment comprising:
communicatively coupling a first machine and a second machine to a primary network;
operating a first application engine partner of a fail-over application engine pair on the first machine, the first application engine partner hosting a set of executing application objects, associated with a process control and/or manufacturing information acquisition function, in accordance with an active role assigned to the first application engine partner;
operating a second application engine partner of the fail-over application engine pair on the second machine, the second application engine partner hosting a non-executing version of the set of executing application objects in accordance with a standby runtime role; and
operating a monitoring process on the first machine, separately from the first partner on the first machine, to sense a failure of the first application engine partner, and in response, initiate a notification to the second application engine partner to take over the active role.
15. The method of claim 14 , wherein the second application engine partner, while in the standby runtime role, receives updates from the first application engine partner, wherein the updates include engine synchronization data associated with the set of executing application objects to facilitate taking over the active role assigned to the first partner.
16. The method of claim 15 further comprising:
establishing, via a redundancy message channel that is physically separate and distinct from the primary network, a communications path between the first machine and second machine that facilitates passing the updates including engine synchronization data.
17. The method of claim 16 wherein the engine synchronization data comprises store forward buffered historized process control data acquired by an active application engine partner of the redundant application engine pair in accordance with a set of executing application objects.
18. The method of claim 14 wherein the second application engine partner further comprises logic for independently determining a fail-over condition without receiving a failure notification from the first machine running an active partner of the redundant application engine pair, and thereafter taking over the active role.
19. The method of claim 18 wherein the fail-over condition comprises losing communication contact with the first partner.
20. The method of claim 14 wherein the application objects implement their supervisory process control and/or manufacturing information acquisition function as part of an overall supervisory process control and/or manufacturing information application.