Fault tolerance under UNIX

  • Authors:
  • Anita Borg;Wolfgang Blau;Wolfgang Graetsch;Ferdinand Herrmann;Wolfgang Oberle

  • Affiliations:
  • Digital Equipment Corp., Palo Alto, CA;Tandem Computers GmbH, Frankfurt, W. Germany;Nixdorf Computer GmbH, Paderborn, W. Germany;Nixdorf Computer GmbH, Paderborn, W. Germany;Nixdorf Computer GmbH, Paderborn, W. Germany

  • Venue:
  • ACM Transactions on Computer Systems (TOCS)
  • Year:
  • 1989

Quantified Score

Hi-index 0.04

Visualization

Abstract

The initial design for a distributed, fault-tolerant version of UNIX based on three-way atomic message transmission was presented in an earlier paper [3]. The implementation effort then moved from Auragen Systems1 to Nixdorf Computer where it was completed. This paper describes the working system, now known as the TARGON/32.The original design left open questions in at least two areas: fault tolerance for server processes and recovery after a crash were briefly and inaccurately sketched, rebackup after recovery was not discussed at all. The fundamental design involving three-way message transmission has remained unchanged. However, in addition to important changes in the implementation, server backup has been redesigned and is now more consistent with that of normal user processes. Recovery and rebackup have been completed in a less centralized and thus more efficient manner than previously envisioned.In this paper we review important aspects of the original design and note how the implementation differs from our original ideas. We then focus on the backup and recovery for server processes and the changes and additions in the design and implementation of recovery and rebackup.