Method and apparatus for transparent server failover for highly available objects

A method for providing transparent failover from a first server to a second server for active invocations to an object, the first server acting as a primary server for invocations to the object, the method comprising:

• detecting a failure of the first server;
• blocking any new active invocations to the object after detecting the failure of the first server;
• winding up the active invocations to the object, including causing any active invocations to unresponsive nodes to unblock and complete;
• selecting the second server as a new primary server for the object;
• reconfiguring the second server to act as the new primary server for the object;
• unblocking the new active invocations to the object after reconfiguring the second server;
• and
• automatically retrying the active invocations which are incomplete to the object on the second server;
• wherein the object has a primary copy located within a first storage device associated with the first server, and a secondary copy located within a second storage device associated with the second server, wherein the first storage device is separate from the second storage device;
• and
• updating the secondary copy on the second server when the primary copy is updated on the first server.

An apparatus that provides a transparent failover from a first server to a second server for active invocations to an object, the first server acting as a primary server for invocations to the object, the apparatus comprising:

• the first server coupled to a network;
• a first storage device associated with the first server;
• the second server coupled to the network;
• a second storage device associated with the second server;
• a system manager residing on at least one node on the network, the system manager detecting a failure of the first server and selecting the second server to act as a new primary server for the object;
• a reconfiguration mechanism in communication with the system manager that reconfigures the second server to act as the new primary server for the object;
• a winding up mechanism that winds up active invocations to the object before reconfiguring the second server, including causing any active invocations to unresponsive nodes to unblock and complete;
• a retry mechanism in communication with the second server that automatically retries the active invocations which are incomplete to the object to the second server after the second server has been reconfigured;
• wherein the object has a primary copy located within the first storage device and a secondary copy located within the second storage device wherein the first storage device is separate from the second storage device;
• and
• an updating mechanism in communication with the first server and the second server that is configured to update the secondary copy on the second server when the primary copy is updated on the first server.

An apparatus that provides a transparent failover from a first server to a second server for active invocations to an object, the first server acting as a primary server for invocations to the object, the apparatus comprising:

• the first server coupled to a network;
• a first storage device associated with the first server;
• the second server coupled to the network;
• a second storage device associated with the second server;
• a system manager residing on at least one node on the network that detects a failure of the first server and selects the second server to act as a primary server for the object;
• a winding up mechanism that winds up active invocations to the object including causing any active invocations to unresponsive nodes to unblock and complete, before the second server is reconfigured to act as a new primary server for the object;
• a blocking mechanism that blocks new invocations to the object when the failure of the first server is detected, and that unblocks new invocations to the object after the second server is reconfigured;
• a reconfiguration mechanism in communication with the system manager that reconfigures the second server to act as the new primary server for the object;
• a retry mechanism in communication with the second server that automatically retries uncompleted invocations to the object after the second server has been reconfigured;
• wherein the object has a primary copy located within the first storage device and a secondary copy located within the second storage device, wherein the first storage device is separate from the second storage device;
• and
• an updating mechanism in communication with the first server and the second server that is configured to update the secondary copy on the second server when the primary copy is updated on the first server.

A program storage device storing instructions that when executed by a computer performs a method for providing transparent failover from a first server to a second server for active invocations to an object, the first server acting as a primary server for invocations to the object, the method comprising:

• winding up the active invocations to the object, including causing any active invocations to unresponsive nodes to unblock and complete;
• selecting the second server as a new primary server for the object upon a failure of the first server;
• reconfiguring the second server to act as the new primary server for the object;
• automatically retrying the active invocations which are incomplete to the object on the second server;
• wherein the object has a primary copy located within a first storage device associated with the first server and a secondary copy located within a second storage device associated with the second server, wherein the first storage device is separate from the second storage device;
• and
• updating the secondary copy on the second server when the primary copy is updated on the first server.

A computer instruction signal embodied in a carrier wave carrying instructions that when executed by a computer perform a method for providing transparent failover from a first server to a second server for active invocations to an object, the first server acting as a primary server for invocations to the object, the method comprising:

• winding up the active invocations to the object, including causing any active invocations to unresponsive nodes to unblock and complete;
• selecting the second server as a new primary server for the object upon a failure of the first server;
• reconfiguring the second server to act as the new primary server for the object;
• automatically retrying the active invocations which are incomplete to the object on the second server;
• wherein the object has a primary copy located within a first storage device associated with the first server, and a secondary copy located within a second storage device associated with the second server, wherein the first storage device is separate from the second storage device;
• and
• updating the secondary copy on the second server when the primary copy is updated on the first server.