KR102695840B1 - Server redundancy system and its operation method - Google Patents

Abstract

A server duplication system and its operating method are disclosed, which ensure data integrity by utilizing real-time backup and snapshot using multiple physical servers. According to one embodiment, the server duplication system comprises: a first physical server; a second physical server; And a hot-bit communication channel for data communication between the first physical server and the second physical server, wherein the first physical server includes a first server virtualization unit virtualizing the first physical server and providing it to one or more virtual machines, a first service storage unit including one or more memories and storing data, a first storage virtualization unit virtualizing the first service storage unit, and a first real-time replication unit storing data generated from a virtual disk of one or more virtual machines provided by the first server virtualization unit in the first service storage unit through the first storage virtualization unit, and the second physical server is connected to the second server virtualization unit virtualizing the second physical server, the second service storage unit including one or more memories and storing data, the second storage virtualization unit virtualizing the second service storage unit, and the first real-time replication unit through the hot-bit communication channel, and receives data generated from a virtual disk of one or more virtual machines provided by the first server virtualization unit from the first real-time replication unit and transmits it to the second storage virtualization unit. It may include a second real-time replica that stores the second service storage.

Description

{Server redundancy system and its operation method}

As a technology for a server duplication system, the present invention relates to a server duplication system and its operating method that ensures data integrity by using real-time backup and snapshot using multiple physical servers.

One type of server duplication system is real-time replication. This is a method of increasing availability by transferring the volume of the active server where data is stored to a standby server in real-time (simultaneously) replication, and resuming service by using the replicated volume of the standby server when a failure occurs in the active server.

Another way to implement server redundancy is to use shared storage. Shared storage is designed so that all components are redundant and can fully perform its function as storage even if a failure occurs in any component.

Korean Patent No. 10-1713034 discloses a method of making a volume invisible by using a technology of replacing the index of a replicated volume when utilizing a real-time replication method.

The present invention relates to a server duplication system and its operating method that ensures data integrity by utilizing real-time backup and snapshot using multiple physical servers.

According to one aspect, the server duplication system comprises a first physical server; a second physical server; And a hot-bit communication channel for data communication between the first physical server and the second physical server, wherein the first physical server includes a first server virtualization unit virtualizing the first physical server and providing it to one or more virtual machines, a first service storage unit including one or more memories and storing data, a first storage virtualization unit virtualizing the first service storage unit, and a first real-time replication unit storing data generated from a virtual disk of one or more virtual machines provided by the first server virtualization unit in the first service storage unit through the first storage virtualization unit, and the second physical server is connected to the second server virtualization unit virtualizing the second physical server, the second service storage unit including one or more memories and storing data, the second storage virtualization unit virtualizing the second service storage unit, and the first real-time replication unit through the hot-bit communication channel, and receives data generated from a virtual disk of one or more virtual machines provided by the first server virtualization unit from the first real-time replication unit and transmits it to the second storage virtualization unit. It may include a second real-time replica that stores the second service storage.

The first real-time replication unit can receive data stored in the second service storage unit and provide it to one or more virtual machines when at least one of the first service storage unit and the first storage device virtualization unit fails.

The first storage virtualization unit can create a snapshot of data created from a virtual disk of one or more virtual machines stored in the first service storage unit.

The first physical server may further include a backup storage unit that includes one or more memories and stores backup data; and a backup unit that creates backup data for all data or data changes generated from virtual disks of one or more virtual machines based on snapshots, stores the backup data in the backup storage unit, and creates a backup list.

The first physical server and the second physical server each further include a production network for performing communication with user terminals, and the production network can be connected to at least one of the first server virtualization unit and the second server virtualization unit.

The first physical server and the second physical server may further include a first redundant control unit and a second redundant control unit that monitor each of the physical servers.

The first physical server and the second physical server further include a first network monitoring unit and a second network monitoring unit for monitoring the status of each production network, and the first network monitoring unit and the second network monitoring unit can transmit the network status to the first redundant control unit and the second redundant control unit, respectively, when a failure occurs in the production network.

When a failure occurs in the first real-time replication unit of the first physical server or when a network status in which a failure occurs in the production network is received from the first network monitoring unit, the first redundancy control unit transmits a transfer request signal to the first server virtualization unit and the second redundancy control unit to control the transfer of virtualization of the first server virtualization unit to the second server virtualization unit, and the second redundancy control unit determines whether there is a failure in the second real-time replication unit and whether there is a failure in the production network from the second network monitoring unit based on the transfer request signal received from the first redundancy control unit, and when no failure occurs, the second server virtualization unit can receive one or more virtual machines of the first server virtualization unit and virtualize the second physical server to provide it to the one or more virtual machines.

The second physical server may further include a user interface unit connected to the second redundant control unit to output status information of the second redundant control unit and receive a control input signal for the second redundant control unit from a user.

The backup unit transmits a backup list through the user interface unit, and can activate a virtual machine by transmitting backup data for a backup list selected by a user to at least one of the first server virtualization unit and the second server virtualization unit.

The second physical server may further include a synchronization monitoring unit that monitors at least one of the first real-time replication unit and the second real-time replication unit and outputs a synchronization failure status through the user interface unit when a failure occurs in at least one of the first-service storage unit, the first storage virtualization unit, the second-service storage unit, the second storage virtualization unit, and the hotbit communication channel, making it impossible to synchronize the first-service storage unit and the second-service storage unit.

According to one embodiment of the present invention, real-time replication is performed using two physical servers, and a server virtualization layer is provided so that when a failure occurs in the active server, the virtual server is transferred to a standby server, so that the service can be resumed immediately.

Additionally, the backup system is integrated with the server duplication system, and backups are performed at the physical layer one level below, which has the effect of fundamentally eliminating the possibility of hackers accessing stored backup data.

Figure 1 is a configuration diagram of a server duplication system according to one embodiment.
Figure 2 is an exemplary diagram for explaining the operating environment of a server duplication system according to one embodiment.
FIG. 3 is a configuration diagram of a first physical server according to one embodiment.
FIG. 4 is a configuration diagram of a second physical server according to one embodiment.
Figure 5 is a flow chart illustrating a backup method of a server duplication system according to an example.
Figure 6 is a flowchart illustrating a recovery method of a server duplication system according to an example.

Hereinafter, an embodiment of the present invention will be described in detail with reference to the attached drawings. In describing the present invention, if it is judged that a detailed description of a related known function or configuration may unnecessarily obscure the gist of the present invention, the detailed description thereof will be omitted. In addition, the terms described below are terms defined in consideration of the functions in the present invention, and these may vary depending on the intention or custom of the user or operator. Therefore, the definitions should be made based on the contents throughout this specification.

Below, embodiments of a server duplication system and its operation method are described in detail with reference to drawings.

Figure 1 is a configuration diagram of a server duplication system according to one embodiment.

According to one embodiment, the server duplication system (10) may include a first physical server (100), a second physical server (200), and a hotbit communication channel (300) for data communication between the first physical server (100) and the second physical server (200).

According to one embodiment, the first physical server (100) may include a first server virtualization unit (110) that virtualizes the first physical server and provides it to one or more virtual machines, a first service storage unit (140) that includes one or more memories and stores data, a first storage virtualization unit (130) that virtualizes the first service storage unit (140), and a first real-time replication unit (120) that stores data generated from virtual disks of one or more virtual machines provided by the first server virtualization unit (110) in the first service storage unit (140) through the first storage virtualization unit (130).

For example, a virtual machine or virtual server can provide a series of services, such as receiving a service request from a user terminal, processing and storing data, or providing stored data to the user terminal.

For example, a physical server may include physical computing resources (CPU, memory, LAN port, storage device, etc.). The server virtualization unit virtualizes a physical server and provides it to a virtual machine, and may provide an access point for monitoring the operating status of the virtual machine or giving commands for starting and stopping it.

According to one example, the first server virtualization unit (110) operates as a part of the operating system installed on the physical server (100) and is an element that provides structural features of a high-availability server redundancy system capable of protecting data in response to ransomware attacks. The first server virtualization unit (110) operates a virtual machine operating under the supervision of the first redundancy control unit (160) with a function called virtualization, thereby enabling computing resources of one physical server (100) to be divided and used among multiple virtual machines, thereby increasing the utilization efficiency of the physical server.

According to an example, the first real-time replication unit (120) can store data generated from a virtual machine in the first service storage unit (140) through the first storage device virtualization unit (130). In addition, the first real-time replication unit (120) can exchange data with the second real-time replication unit (220) through the hot bit communication channel (300).

For example, data replicated in real time may not be detected by hackers because it uses a hot-bit communication channel (300) that is directly connected between servers without network equipment such as a switching hub. For example, in a normal operating state where the first physical server (100) provides a service, the first service storage unit (140) may act as a primary storage device, and the second service storage unit (240) of the second physical server (200) may act as a secondary storage device. This is because the two real-time replication units (120, 220) perform these roles separately. For example, in the event of a failure in the first physical server (100), in order for the second physical server (200) to provide a service normally, the real-time replication units (120, 220) must perform the function of maintaining the data of their respective service storage units (140, 240) identical to each other, i.e., the synchronization function, during the normal operating state.

According to an example, the first service storage (140) may store data required for service provision or data generated by service provision. When the first physical server (100) is in a normal operating state, the first service storage (140) functions as a primary storage device, and the second service storage (240) included in the second physical server (200) functions as a secondary storage device. The first service storage (140) may store a virtual disk provided to a virtual machine by the first server virtualization unit (110) in the form of a file. For example, when the first physical server (100) and the second physical server (200) temporarily switch roles for management of the physical servers, the second service storage (240) may function as a primary storage device, and conversely, the first service storage (140) may function as a secondary storage device.

According to one embodiment, the second physical server (200) may include a second server virtualization unit (210) virtualizing the second physical server, a second service storage unit (240) including one or more memories and storing data, a second storage virtualization unit (230) virtualizing the second service storage unit (240), and a first real-time replication unit (120) connected to the hotbit communication channel (300), and receiving data generated from a virtual disk of one or more virtual machines provided by the first server virtualization unit (110) from the first real-time replication unit (120) and storing the data in the second service storage unit (240) through the second storage virtualization unit (230).

In the description of the components included in the second physical server (200), any content that overlaps with that of the first physical server (100) has been omitted.

According to one example, the hotbeat communication channel (300) can be used as a channel in which data generated by a virtual machine is stored in the first service storage unit (140) and replicated in real time to the second physical server (200) where the virtual machine is not running on the first physical server (100). In addition, it can also be used as a communication channel for health check between two service storage units (140, 240). The hotbeat communication channel (300) is used only between physical servers (100, 200), and can be directly connected between servers without using a switching hub, etc., so that it can avoid being detected by hackers, and is not provided to virtual machines. The hotbeat communication channel (300) can be operated by configuring one or more LAN ports as a team. The hotbeat communication channel (300) can be connected to a real-time replication unit (120, 220). Additionally, the hot bit communication channel (300) can also access the backup unit (160) in order to use it for expanding the backup data storage space when the two physical servers (100, 200) are designed with the same specifications and the backup storage unit (190) also exists in the second physical server (200) (not shown).

According to one embodiment, the first physical server (100) and the second physical server (200) may each further include a production network (350) for performing communication with user terminals.

According to one example, the production network (350) becomes a path through which one or more user terminals request and receive services, and the redundant control unit (160, 260) becomes a target for monitoring whether mutual health checks and services are available. The production network (350) can also be operated by configuring one or more LAN ports into a team.

For example, the production network (350) may be connected to at least one of the server virtualization unit (110, 220), the user interface (280), the redundant control unit (160, 260), and the virtual machines. According to one embodiment, the production network (350) may be connected to at least one of the virtual machines, the first server virtualization unit (110) and the second server virtualization unit (210).

For example, when the capacity of the storage unit (140, 240) for service becomes insufficient due to an increase in the demand for storage space for the service, the storage virtualization unit (130, 230) can connect to the production network (250) to access a logical disk provided by another file server or storage unit through the network.

According to one embodiment, the first real-time replication unit (120) can receive data stored in the second service storage unit (240) and provide it to one or more virtual machines when a failure occurs in at least one of the first service storage unit (140) and the first storage device virtualization unit (130).

In one example, the real-time replication unit (120, 220) can minimize unnecessary role switching of the redundant control unit (160, 260). For example, if the redundant control unit switches the role of the physical server whenever a failure occurs in at least one of the components included in the physical server, the role switching of the physical server may increase. On the other hand, if a failure occurs in a component controlled by the real-time control unit and the real-time control unit performs the role of data storage through communication, the role switching of the physical server can be reduced.

For example, if a failure occurs in the first service storage (140) or the second service storage (240) that it controls, the first real-time replication unit (120) or the second real-time replication unit (220) can receive data from the second real-time replication unit (220) or the first real-time replication unit (120) on the other side to enable normal I/O to occur. As another example, if a failure occurs in the first service storage (140) or the second service storage (240), the first real-time replication unit (120) or the second real-time replication unit (220) can perform an I/O function for the second service storage (240) or the first service storage (140) that is operating normally through cooperation with each other, and can perform a monitoring function to transmit the occurrence of a problem in the lower system to the user interface (280) through the synchronization monitoring unit (290) so that the administrator can recognize it and take action.

In one example, the synchronization monitoring unit (290) can periodically monitor the status of the real-time replication unit (120, 220). For example, the synchronization monitoring unit (290) can monitor the status of the real-time replication unit (120, 220) using the drbdadm command. For example, if the synchronization monitoring unit (290) determines that replication is impossible due to a failure in the hotbit communication channel (300) or if it determines that synchronization of the two service storage units (140, 240) through real-time replication is impossible due to a failure in at least one of the service storage units (140, 240) and the storage device virtualization unit (130, 230), the synchronization monitoring unit (290) can notify the user or administrator of the synchronization status through the user interface (280).

For example, the real-time replication unit (120, 220) operates so that there is no problem in providing the service even if a failure occurs in the lower service storage unit (140, 240), so that the server virtualization unit (110) and the virtual machine can operate normally. At this time, if there is no synchronization monitoring unit (290), the user or administrator may not be able to detect any abnormality through the user interface (280).

According to one embodiment, the first storage virtualization unit (130) can create a snapshot of data generated from a virtual disk of one or more virtual machines stored in the first service storage unit (140).

For example, the first storage virtualization unit (130) can perform a role of enabling expansion without affecting the service when the capacity of the first service storage unit (140) is insufficient, and can perform a snapshot. For example, the snapshot can prevent data integrity from being damaged while copying data from the first service storage unit (140) to the backup storage unit (190) used for backup purposes in the backup unit (150). For example, since it becomes difficult to be careful in selecting a recovery point when the number of snapshots increases, only one snapshot is used to eliminate this risk factor, and by deleting the snapshot when use is complete, the phenomenon of the system's I/O performance being reduced can also be prevented.

Figure 2 is an exemplary diagram for explaining the operating environment of a server duplication system according to one embodiment.

Referring to Fig. 2, the upper part based on the first server virtualization unit (110) is configured as a virtual server layer, and the lower part is configured as a physical server layer. Information can be exchanged between the virtual server layer and the physical server layer only through the mapping of the first server virtualization unit (110) and the application programming interface (API) provided by the first server virtualization unit (110). The physical server layer is a supplier that supplies computing resources and also acts as a monitor. The virtual server layer is a user who uses the provided computing resources. Information exchange between the two layers is asymmetric, and everything that occurs in the virtual server layer is under the supervision of the physical server layer, but conversely, the information of the physical server layer provided to the virtual server layer is limited to what is provided through the server virtualization unit (110). In other words, no information that is not provided by the first server virtualization unit (110) can be transmitted from the physical server layer to the virtual server layer.

The virtual disks are stored in the form of files in the first service storage unit (140) of the physical server layer, and can be used by showing the files mapped in the first server virtualization unit (110) to the virtual server layer in the form of actual disks. The operating system of the first virtual machine can access files 1 and 2 assigned to the first virtual machine, but cannot access files 3 and 4 assigned to another second virtual machine. This is because they are provided separately from the first server virtualization unit (110).

The operating system of the first virtual machine cannot access any data except files 1 and 2 in the storage unit (140) for the first service. In other words, even if the physical server operating system (not shown) or the backup unit (150) belonging to the physical server layer accesses files 1 and 2, the first server virtualization unit (110) does not transmit any information to the virtual server operating system, so the virtual server operating system does not know that the contents of the virtual disk it manages are being read. This indicates that even if a hacker attempting a ransomware attack obtains all authority and information about the operating system of the virtual machine providing the service by staying for a long time, he or she cannot recognize that a backup is being performed. Accordingly, the hacker cannot attack the backup data, the existence of which is not even recognized.

FIG. 3 and FIG. 4 are configuration diagrams of a first physical server and a first physical server according to one embodiment.

Referring to FIG. 3, the first physical server (100) may further include a backup storage unit (190) that includes one or more memories and stores backup data, and a backup unit (150) that creates backup data for all data or data changes generated from a virtual disk of one or more virtual machines based on a snapshot, stores the backup data in the backup storage unit (190), and creates a backup list.

According to one example, the backup unit (150) can perform a backup for changes by copying or mounting files that serve as virtual disks among the contents of the service storage unit (140) using the snapshot provided by the first storage device virtualization unit (130). For example, the backup for changes can be at least one of an incremental backup and a differential backup. For one example, the backup unit (150) can be included in only one of the first physical server (100) or the second physical server (200).

For example, the backup storage (190) is a backup storage device for responding to software accidents such as data loss/forgery due to external attacks (ransomware) or user errors. By backing up data stored in the service storage (140, 240) to the backup storage (190) at a time and cycle specified by the user, even if a software accident occurs and the data stored in the service storage (140, 240) is damaged, the complete data before the accident is preserved. In order to operate with this structure, the backup storage (190) must have a capacity that is a sufficient multiple of the capacity of the service storage (140, 240).

For example, the backup unit (150) may perform a backup for changes when the size of data recorded on the virtual disk increases and it is impossible to complete the copy within a set time or when the capacity of the backup storage unit (190) is determined to be insufficient. As another example, the backup unit (150) may select a full copy and an incremental/differential backup according to a user request received through the user interface (280).

For example, the backup unit (150) can perform data copying or backup. The copying or incremental/differential backup performed by the backup unit (150) is performed through the internal system bus of the server without using a network, and therefore, the execution speed is fast and cannot be detected by hackers.

For example, if a failure occurs in the first physical server (100) and the service cannot be performed, the location of the backup unit (150) can be moved to the second physical server (200) together with the virtual machines. If the backup unit is moved to the second physical server (200) where the service is performed, the backup unit checks whether a backup storage unit exists in the second physical server (200), and if so, performs the data protection function in the same process as in normal operation. On the other hand, if the backup storage unit does not exist, the function of the backup unit is stopped and the user can be notified through the user interface (280) that the backup function has been stopped.

For example, the backup unit (150) manages backup data as a backup list so that the creation date can be identified, and in case of data loss or destruction due to user error, the most recently backed up backup data is not archived and is preserved in its original form so that data can be easily recovered by simply copying the file unit.

Referring to FIGS. 3 and 4, the first physical server (100) and the second physical server (200) may further include a first redundant control unit (160) and a second redundant control unit (260) that monitor each physical server.

According to one embodiment, when a failure occurs in the first real-time replication unit (120) of the first physical server (100) or when a network status that a failure occurs in the production network (350) is received from the first network monitoring unit (170), the first redundancy control unit (160) may transmit a transfer request signal to the first server virtualization unit (110) and the second redundancy control unit (260) to control the transfer of virtualization of the first server virtualization unit (110) to the second server virtualization unit (210). In addition, the second redundancy control unit (260) determines whether there is a failure in the second real-time replication unit (220) based on the previous request signal received from the first redundancy control unit (160) and whether there is a failure in the production network (350) from the second network monitoring unit (270). If no failure occurs, the second server virtualization unit (210) can receive one or more virtual machines of the first server virtualization unit (110) and virtualize the second physical server (200) to provide it to one or more virtual machines.

According to an example, the redundancy control unit (160, 260) can monitor and control the status of the virtual machine through the application programming interface (API) provided by the server in the virtualization unit (110, 120). For example, if a failure occurs in the first physical server (100) or a problem occurs in the connection to the production network (250), the redundancy control unit (160) can identify the failure status of the underlying computing resources transmitted from the first real-time replication unit (120) or the first network monitoring unit (170) under its control and then instruct the first server virtualization unit (110) to transfer the service to the second physical server (200). In addition, the second redundancy control unit (260) can check the status of the lower computing resources transmitted from the second real-time replication unit (220) or the second network monitoring unit (270) under its control, confirm that they are normal, and then instruct the second server virtualization unit (210) to start the service. This means that the virtual machine operates under the control of the second server virtualization unit (210) of the second physical server (200).

For example, the dual control unit (160, 260) can use the alarm function to send an alarm to the e-mail address provided during the initial installation when there is a change in the operation status of the lower components controlled by the dual control unit (160, 260) respectively, so that the operator can respond to the fact. This alarm function can prevent the user from modifying it after it is set once, so that the user can respond when a hacker obtains the right to use the user interface (280) and stops the backup, or when a failure occurs and the backup cannot operate normally.

According to one embodiment, the first physical server (100) and the second physical server (200) may further include a first network monitoring unit (170) and a second network monitoring unit (270) for monitoring the status of each production network (350). For example, the first network monitoring unit (170) and the second network monitoring unit (270) may transmit the network status to the first redundancy control unit (160) and the second redundancy control unit (170), respectively, when a failure occurs in the production network (350).

For example, the network monitoring unit (170, 270) can periodically monitor the status of the production network (350) using a ping command, and if it is determined that the production network (350) has a problem and cannot be used, the status of the production network (350) can be transmitted to the redundancy control unit (160, 260) so that the redundancy control unit (160, 260) can determine whether to transfer the service to the second physical server (200).

For example, the first redundant control unit (160) operating on the first physical server (100) can receive the status of the production network (350) from the first network monitoring unit (170) and decide to transfer the service. On the other hand, the second redundant control unit (260) does not provide the service even if it receives the status of the production network (350) from the second network monitoring unit (270), so it can only inform the user of the status of the production network (350) through the user interface (280).

For example, the dual control unit (160, 260) can control at least one of the user interface (280), the virtual machine, the backup unit (150), the network monitoring unit (170, 270), and the real-time replication unit (120, 220), and can perform a function of monitoring whether it is operating normally. In addition, the dual control unit (160, 260) can monitor the status of the production network (350) and the hot bit communication channel (300) to determine whether service provision is possible.

According to one embodiment, the second physical server (200) may further include a user interface unit (280) that is connected to the second redundancy control unit (260) to output status information of the second redundancy control unit (260) and receive a control input signal for the second redundancy control unit (260) from a user.

According to an example, the user interface unit (280) may be included only in one of the first physical server (100) or the second physical server (200). The user interface unit (280) outputs the status of the server duplication system received through the duplication control unit (160, 260) through a web screen, and may receive data on the operation of the server duplication system from the user. In addition, the user interface unit (280) provides the operation status of the server duplication system (10) to the user, and the user may check the operation of the virtual server based on this.

According to one embodiment, the backup unit (150) transmits a backup list through the user interface unit (280), and transmits backup data for the backup list selected by the user to at least one of the first server virtualization unit (110) and the second server virtualization unit (120) to activate the virtual machine.

For example, a user can identify that a virtual server is infected with ransomware through the user interface unit (280) and check the file properties (file extension, etc.) of the ransomware. The user interface unit (280) can transmit the input file properties to the backup unit (150) and instruct a search so that the backup unit (150) can find backup data in which the infected file properties are not found at the closest time to the present in the backup list and use it to activate the temporary virtual server.

Figure 5 is a flow chart illustrating a backup method of a server duplication system according to an example.

Referring to FIG. 5, the first storage virtualization unit can create a snapshot of data generated from a virtual disk of one or more virtual machines stored in the first service storage unit (520) when it is time to perform a backup according to a specified time and cycle (510).

For example, the backup unit can determine the size of data recorded on the virtual disk (530). For example, if it is determined that the capacity of the backup storage unit is sufficient, the backup unit (150) can copy files that serve as the virtual disk. On the other hand, if the copy cannot be completed within a given time as the data increases or if it is determined that the capacity of the backup storage unit is insufficient, the backup unit can mount the virtual disk (550) and perform at least one of a backup for changes, that is, an incremental backup and a differential backup (560).

For example, the backup unit can unmount the virtual disk (570) and remove the saved snapshot (580) when the backup is completed.

Figure 6 is a flowchart illustrating a recovery method of a server duplication system according to an example.

Referring to Figure 6, the user can identify that the virtual server is infected with ransomware through the user interface and check the properties of the files (file extension, etc.) of the ransomware.

For example, the backup unit can search for backup data closest to the present time in the backup list (610) and mount the virtual disk (620). Thereafter, the backup unit determines whether the searched backup data is infected (630), and if backup data is found where an infected file attribute is not found, the backup unit can unmount it (640) and activate the temporary virtual server. If the backup data is infected, the backup unit can sequentially mount past backup data and then search for the latest backup data where an infected file is not found.

One aspect of the present invention can be implemented as computer-readable codes on a computer-readable recording medium. Codes and code segments implementing the above program can be easily inferred by a computer programmer in the art. The computer-readable recording medium can include all kinds of recording devices that store data that can be read by a computer system. Examples of the computer-readable recording medium can include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical disk, etc. In addition, the computer-readable recording medium can be distributed to computer systems connected to a network, and can be written and executed as computer-readable codes in a distributed manner.

The present invention has been described so far with reference to preferred embodiments thereof. Those skilled in the art will understand that the present invention can be implemented in modified forms without departing from the essential characteristics of the present invention. Accordingly, the scope of the present invention should not be limited to the above-described embodiments, but should be interpreted to include various embodiments within a scope equivalent to the contents described in the claims.

100, 200: Physical Server
110, 210: Server Virtualization Department
120, 220: Real-time replication
130, 230: Storage Virtualization Unit
140, 240: Storage for service
150: Backup Department
160, 260: Dual control unit
170,270: Network Monitoring Department
190: Backup storage
280: User Interface
290: Synchronization Monitor
300: Hot Beat Communication Channel
350: Production Network

Claims (11)

A first physical server; a second physical server; a hot bit communication channel for direct data communication between the first physical server and the second physical server, which is not connected to an external device, and a production network for the first physical server and the second physical server to perform communication with user terminals, respectively,
The above first physical server
A first server virtualization unit that virtualizes the first physical server and provides it to one or more virtual machines;
A storage unit for a first service that includes one or more memories and stores data;
A first storage virtualization unit virtualizing the storage unit for the first service,
A first real-time replication unit storing data generated from a virtual disk of one or more virtual machines provided by the first server virtualization unit in the first service storage unit through the first storage device virtualization unit, and a backup storage unit including one or more memories for storing backup data,
The above second physical server
A second server virtualization unit virtualizing the second physical server;
A storage unit for a second service that includes one or more memories and stores data,
A second storage virtualization unit virtualizing the storage unit for the second service, and
A second real-time replication unit is connected to the first real-time replication unit through a hot-bit communication channel, and receives data generated from a virtual disk of one or more virtual machines provided by the first server virtualization unit from the first real-time replication unit and stores the data in the second service storage unit through the second storage device virtualization unit.
The above first real-time replication unit
If at least one of the storage unit for the first service and the first storage device virtualization unit fails, data stored in the storage unit for the second service is received and provided to one or more virtual machines.
The above first storage device virtualization unit
Create a snapshot of data generated from a virtual disk of one or more virtual machines stored in the storage for the first service,
A server duplication system in which the backup data stored in the backup storage unit is all data or data changes generated from the virtual disks of one or more virtual machines based on the snapshot.
delete delete In the first paragraph,
The above first physical server
A server duplication system further comprising a backup unit that creates backup data for all data or data changes generated from a virtual disk of one or more virtual machines based on the snapshot, stores the backup data in the backup storage unit, and creates a backup list.
In paragraph 4,
The above production network is a server redundancy system connected to at least one virtual machine, a first server virtualization unit and a second server virtualization unit.
In paragraph 5,
A server redundancy system, wherein the first physical server and the second physical server further include a first redundancy control unit and a second redundancy control unit that monitor each of the physical servers.
In paragraph 6,
The first physical server and the second physical server further include a first network monitoring unit and a second network monitoring unit for monitoring the status of each production network,
A server redundancy system, wherein the first network monitoring unit and the second network monitoring unit transmit network status to the first redundancy control unit and the second redundancy control unit, respectively, when a failure occurs in the production network.
In paragraph 7,
The above first dual control unit
When a failure occurs in the first real-time replication unit of the first physical server or when a network status indicating a failure in the production network is received from the first network monitoring unit, a transfer request signal is transmitted to the first server virtualization unit and the second redundancy control unit to control the transfer of virtualization of the first server virtualization unit to the second server virtualization unit.
The above second dual control unit
A server redundancy system, wherein the presence of a failure in the second real-time replication unit and the presence of a failure in the production network are determined from the second network monitoring unit based on a previous request signal received from the first redundancy control unit, and when no failure occurs, the second server virtualization unit receives one or more virtual machines from the first server virtualization unit, virtualizes the second physical server, and provides it to the one or more virtual machines.
In paragraph 6,
The above second physical server
A server duplication system further comprising a user interface unit connected to the second duplication control unit to output status information of the second duplication control unit and receive a control input signal for the second duplication control unit from a user.
In Article 9,
The above backup unit
The backup list is transmitted through the above user interface section,
A server redundancy system that activates a virtual machine by transmitting backup data for a backup list selected by a user to at least one of a first server virtualization unit and a second server virtualization unit.
In Article 9,
The above second physical server
A server duplication system further comprising a synchronization monitoring unit that monitors at least one of the first real-time replication unit and the second real-time replication unit and outputs a synchronization failure status through the user interface unit when a failure occurs in at least one of the first service storage unit, the first storage virtualization unit, the second service storage unit, the second storage virtualization unit and the hotbit communication channel, making it impossible to synchronize the first service storage unit and the second service storage unit.