CN105141665A - Method and device for realizing data mirroring and server cluster system - Google Patents

Abstract

The invention provides a method, device and system for realizing data mirroring, which is applied to a server cluster system. The method includes: setting the type of the authentication key and setting each other as authorized users to create trust between the main server and the backup server relationship; every set time, detect the name of the server currently in running state; judge whether the name of the server is the same as the name of the master server; according to the trust relationship, if so, use the script resource to The key data on the server is copied to the standby server, otherwise the key data on the standby server is copied to the main server through a script resource. The device includes: creating unit, detecting unit, judging unit and mirroring unit. The system includes: a main server, a backup server and the device for realizing data mirroring provided by the invention. The solution can improve the configuration efficiency of the server cluster system.

Description

A method, device and server cluster system for realizing data mirroring

technical field

The invention relates to the field of computer security, in particular to a method, device and server cluster system for realizing data mirroring.

Background technique

With the continuous development of computer technology, servers are widely used, and many businesses of enterprises and institutions run on servers. If the server fails or the application is out of service, it will bring huge losses to enterprises and institutions. In order to ensure the continuous and uninterrupted operation of key businesses, key businesses are generally run in server clusters with redundancy mechanisms. Usually, the business runs on the main server. When the main server fails and cannot provide an operating environment for the business, the server cluster The system automatically transfers the business to the standby server to continue running to ensure the uninterrupted operation of the business. This requires the synchronization of data and business progress between the main server and the backup server. It is necessary to mirror the data and business progress on the main server to the standby server in real time. on the server.

At present, in server clusters, third-party software is usually used to synchronize data between different servers, and mirror the data and business progress on the running server to the standby server in real time.

Aiming at the method of realizing data synchronization between different servers in the prior art, the structure of the existing software needs to be modified when the third-party software is installed, and it takes a lot of time to modify the structure of the existing software. Therefore, the configuration of the server cluster system is less efficient.

Contents of the invention

The invention provides a method and device for realizing data mirroring and a server cluster system, which can improve the configuration efficiency of the server cluster system.

The embodiment of the present invention provides a method for implementing data mirroring, which is applied to a server cluster system, including: establishing a trust relationship between the main server and the backup server by setting the type of the authentication key and setting each other as authorized users;

Every set time, detect the server name of the server currently running;

judging whether the name of the server is the same as the name of the primary server;

According to the trust relationship, if yes, copy the key data on the primary server to the standby server through the script resource, otherwise copy the key data on the standby server to the primary server through the script resource.

Preferably, said setting the type of the authentication key and setting each other as authorized users includes:

Run #ssh-keygen-trsa on the primary server, copy the id_rsa.pub file on the primary server to the .ssh directory under the root user’s home directory on the standby server, and rename it to authorized_keys;

Run #ssh-keygen-trsa on the standby server, copy the id_rsa.pub file on the standby server to the .ssh directory under the root user's home directory on the primary server, and rename it to authorized_keys.

Preferably, said detecting the server name of the server currently running includes:

The hostname value of the server cluster system is detected through the hostname-command, and the server name of the server currently running is obtained through the hostname value.

Preferably, said copying key data on said master server to said standby server through script resource comprises:

Use the scp command to copy the key data image on the primary server to the corresponding directory on the standby server.

Preferably, said copying the key data on the standby server to the main server through the script resource includes: mirror copying the key data on the standby server to the corresponding directory on the main server through scp command.

The embodiment of the present invention also provides a device for implementing data mirroring, which is applied to a server cluster system, including:

Create a unit for creating a trust relationship between the primary server and the standby server by setting the type of the authentication key and setting each other as authorized users;

The detection unit is used to detect the server name of the server currently in running state at intervals of a set time;

A judging unit, configured to judge whether the server name detected by the detection unit is the same as the name of the main server;

The mirroring unit is configured to, according to the judgment result of the judging unit and the trust relationship created by the creating unit, if yes, copy the key data on the primary server to the backup server through the script resource, if not, then The key data on the standby server is copied to the main server through the script resource.

Preferably, the creation unit is used to run #ssh-keygen-trsa on the main server, copy the id_rsa.pub file on the main server to the .ssh directory under the root user home directory on the standby server, and rename for authorized_keys;

and,

The creation unit is to run #ssh-keygen-trsa on the standby server, then copy the id_rsa.pub file on the standby server to the .ssh directory under the root user's home directory on the main server, and rename it to authorized_keys.

Preferably, the detection unit is configured to detect the hostname value of the server cluster system through the hostname-command, and obtain the server name of the server currently running through the hostname value.

Preferably, the mirroring unit is used to mirror the key data on the primary server to the corresponding directory on the standby server through the scp command;

or,

The mirroring unit is used to mirror the key data on the backup server to the corresponding directory on the master server through the scp command.

The embodiment of the present invention also provides a server cluster system, including: a main server, a standby server, and any device for implementing data mirroring provided by the embodiments of the present invention;

The main server is connected to the device for realizing data mirroring, and is used for storing key data, running business normally or continuing to run business when the backup server fails;

The backup server is connected to the device for realizing data mirroring, and is used for storing key data, running business normally or continuing to run business when the main server fails.

Preferably, the system further includes: shared memory and business continuity protection device;

The shared memory is respectively connected to the main server and the standby server for storing general data;

The business continuity protection device is respectively connected to the main server and the standby server, and is used to transfer the running business of one of the servers to another server when a failure occurs on one of the servers;

Preferably, the main server and the backup server both include two network cards, and a double heartbeat connection is established through a public network and a private network, wherein one network card on the main server is connected to a network card on the backup server through a private network The other network card on the main server and the other network card on the standby server are both connected to the public network.

The embodiment of the present invention provides a method, device, and server cluster system for realizing data mirroring. By setting the authentication key types of the main server and the backup server, and respectively setting the main server and the backup server as mutually authorized users, thereby establishing The trust relationship between the main server and the backup server, every time a set time passes, detect the server name of the server currently running, and judge whether the server name is the same as the name of the main server, if they are the same, according to the established trust relationship , copy the key data on the primary server to the standby server through the script resource, if they are different, according to the established trust relationship, copy the key data on the standby server to the primary server through the script resource, in this way, only need to pass the script resource The mirror image of key data in the server cluster can be realized without installing third-party software, which saves the time for modifying the existing software structure, thereby improving the efficiency of configuring the server cluster system.

Description of drawings

FIG. 1 is a flowchart of a method for implementing data mirroring provided by an embodiment of the present invention;

FIG. 2 is a flow chart of a method for implementing data mirroring provided by another embodiment of the present invention;

FIG. 3 is a schematic diagram of an apparatus for implementing data mirroring provided by an embodiment of the present invention;

Fig. 4 is a schematic structural diagram of a server cluster system provided by an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of a server cluster system provided by another embodiment of the present invention.

Detailed ways

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the drawings in the embodiments of the present invention. Apparently, the described embodiments are only some of the embodiments of the present invention, but not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

As shown in Figure 1, an embodiment of the present invention provides a method for implementing data mirroring, including:

Step 101: Create a trust relationship between the primary server and the standby server by setting the type of the authentication key and setting each other as authorized users;

Step 102: every set time, detect the server name of the server currently running;

Step 103: judging whether the name of the server is the same as the name of the main server, if yes, execute step 104, otherwise execute step 105;

Step 104: According to the trust relationship, copy the key data on the primary server to the standby server through script resources, and end the current process;

Step 105: According to the trust relationship, copy the key data on the standby server to the primary server through a script resource.

The embodiment of the present invention provides a method for implementing data mirroring. By setting the authentication key types of the main server and the backup server, and respectively setting the main server and the backup server as mutually authorized users, the relationship between the main server and the backup server is established. Each time a set time passes, the server name of the server currently running is detected, and it is judged whether the server name is the same as the name of the main server. If they are the same, according to the established trust relationship, the main The key data on the server is copied to the standby server. If they are different, according to the established trust relationship, the key data on the standby server is copied to the primary server through script resources. The mirror image of key data does not need to install third-party software, which saves the time for modifying the existing software structure, thereby improving the efficiency of configuring the server cluster system.

In one embodiment of the present invention, by running #ssh-keygen-trsa on the primary server, the id_rsa.pub file on the primary server is copied to the .ssh directory under the root user's home directory on the standby server, and renamed to authorized_keys, so that the main server has access to the standby server. Similarly, run #ssh-keygen-trsa on the standby server, and copy the id_rsa.pub file on the standby server to .ssh under the root user's home directory on the main server directory, and renamed to authorized_keys, so that the standby server has access to the main server, so as to establish a trust relationship between the main server and the standby server, to ensure that the script resources do not need to be authenticated during data transmission, and the main server can be realized Transfer of critical data to and from a backup server.

In one embodiment of the present invention, when detecting the server name currently in the running state, the hostname value of the current server cluster system is detected by the hostname-command, and the server name of the server currently in the running state is obtained by the hostname value, and the server name can be used Accurately judge whether the current running state is the main service or the standby server, so as to determine the copy sequence of key data between the main server and the standby server, and ensure the synchronization of key data between the main server and the standby server.

In one embodiment of the present invention, when key data is copied between the main server and the standby server, the key data on the main server is copied to the corresponding directory of the standby server through the scp command, or the key data on the standby server Copy it to the corresponding directory of the main server. During the transmission of key data, the key data is in an encrypted state to prevent key data from being stolen and improve the security of key data.

In order to make the purpose, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments.

As shown in Figure 2, an embodiment of the present invention provides a method for implementing data mirroring, which is applied to a dual-machine cluster system, including:

Step 201: Set the authentication key types of the main server and the standby server.

In an embodiment of the present invention, the dual-machine cluster system includes two servers, one of which is the main server and the other is the backup server. The two servers are in the same position and run on the main server and the backup server respectively. #ssh-keygen- trsa, set the authentication keys of both the primary server and the standby server to rsa encryption to ensure that the server and the standby server can authenticate each other.

Step 202: Set the main server and the standby server as authorized users of each other.

In one embodiment of the present invention, by copying the id_rsa.pub file on the main server to the .ssh directory under the root user's home directory on the standby server, and renaming it to authorized_keys, and copying the id_rsa.pub file on the standby server Copy it to the .ssh directory under the root user's home directory on the main server, and rename it to authorized_keys, so that the main service is set as the authorized user of the standby server, and the standby server is also set as the authorized user of the main server, and the main server is established. The trust relationship between the server and the standby server ensures that identity verification is not required for data transmission between the primary server and the standby server.

Step 203: Set the interval time for data mirroring.

In one embodiment of the present invention, the interval time for data mirroring between the primary server and the standby server is determined according to the amount of computing data in the dual-machine cluster system. For example, set the data mirroring interval to 5 minutes.

Step 204: Detect the name of the server currently running in the dual-machine cluster system at each interval.

In one embodiment of the present invention, every time the interval time passes, the hostname value of the dual-machine cluster system is detected through the hostname-command, and the server name of the server currently running is obtained through the hostname value. For example, every 5 minutes, check the hostname value of the dual-machine cluster system to obtain the name of the server currently running.

Step 205: Judging whether the name of the currently running server is the same as the name of the master server, if yes, go to step 206, otherwise go to step 207.

In one embodiment of the present invention, by comparing the obtained server name of the currently running server with the name of the master server, it is judged whether the server currently in the running state is the master server. The name is the same as the name of the primary server, indicating that the currently running server is the primary server, and the key data in the primary server needs to be mirrored to the standby server. Go to step 206. If the name of the currently running server is the same as that of the primary server If the names are different, it means that the server currently running is a standby server, and the key data on the standby server needs to be mirrored to the primary server, and step 207 is performed.

Step 206: Copy the key data on the primary server to the standby server through the script resource, and continue to execute step 204.

In one embodiment of the present invention, the key data on the primary server is encrypted by the scp command, and the encrypted key data is copied to the corresponding directory on the standby server, and then step 204 is continued to ensure that the key data on the standby server The key data is consistent with the key data on the master server.

Step 207: copy the key data on the standby server to the primary server through the script resource, and continue to execute step 204.

In one embodiment of the present invention, the key data on the standby server is encrypted by the scp command, and the encrypted key data is copied to the corresponding directory on the main server, and then step 204 is continued to ensure that the key data on the main server The critical data is consistent with the critical data on the standby server.

As shown in Figure 3, an embodiment of the present invention provides a device for implementing data mirroring, including: a detection unit 301, a judgment unit 302, a mirroring unit 303, and a creation unit 304;

The creating unit 304 is configured to create a trust relationship between the main server and the standby server by setting the type of the authentication key and setting each other as authorized users;

The detection unit 301 is configured to detect the server name of the server currently in the running state at intervals of a set time;

The judging unit 302 is configured to judge whether the server name detected by the detecting unit 301 is the same as the name of the main server;

The mirroring unit 303 is configured to, according to the judgment result of the judging unit 302 and the trust relationship created by the creating unit 304, if yes, copy the key data on the primary server to the standby server through a script resource , if not, copy the key data on the standby server to the primary server through the script resource.

In one embodiment of the invention,

The creation unit 304 is used to run #ssh-keygen-trsa on the primary server, copy the id_rsa.pub file on the primary server to the .ssh directory under the root user's home directory on the standby server, and rename it to authorized_keys , and run #ssh-keygen-trsa on the standby server, copy the id_rsa.pub file on the standby server to the .ssh directory under the root user’s home directory on the primary server, and rename it to authorized_keys;

By setting the authentication keys of the main server and the standby server in the form of rsa, the main server and the standby server can be mutually authenticated, and at the same time copy the ID files of the main server and the standby server to the authorized user list of the other party, so that The primary server and the standby server become authorized users of each other, and a trust relationship between the primary server and the standby server is established to ensure that identity verification is not necessary during data transmission.

In one embodiment of the invention,

The detection unit 301 is configured to detect the hostname value of the server cluster system through the hostname-command, and obtain the server name of the server currently in the running state through the hostname value;

Through the hostname value, it can be determined whether the main server is running or the standby server is running. Depending on the running server, it is determined whether to copy the key data in the main server to the standby server or to copy the key data on the standby server. Data is replicated to the master server.

In one embodiment of the invention,

The mirroring unit 303 is used to copy the key data image on the master server to the corresponding directory on the standby server through the scp command; or copy the key data mirror image on the standby server to the corresponding directory on the master server through the scp command. Under contents.

It should be noted that, in the embodiment of the present invention, a set time is set according to the operation status of the server cluster system, and each time a set time passes, the server in the running state in the server cluster system is detected, and the data is processed accordingly. Replication to ensure the consistency of key data on the primary server and the standby server.

As shown in FIG. 4, an embodiment of the present invention provides a server cluster system, including: a main server 401, a backup server 402, and any device 403 for implementing data mirroring provided by the above-mentioned embodiments of the invention;

The main server 401 is connected to the device 403 for realizing data mirroring, and is used for storing key data, running the business normally or continuing to run the business when the backup server 402 fails;

The standby server 402 is connected to the device 403 for realizing data mirroring, and is used for storing key data, running business normally or continuing to run business when the main server 401 fails.

In one embodiment of the present invention, as shown in FIG. 5 , the system further includes: a shared memory 501 and a service continuity protection device 502;

The shared memory 501 is connected to the main server 401 and the backup server 402 respectively, and is used for storing general data, so as to save disk space on the main server 401 and the backup server 402;

The business continuity protection device 502 is respectively connected to the main server 401 and the standby server 402, and is used to transfer the running business of the server to another server when one of the servers fails, so as to realize the server cluster system. Redundancy mechanism.

In one embodiment of the present invention, both the main server and the standby server include two network cards, and a double heartbeat connection is established through the public network and the private network, wherein one network card on the main server communicates with the network card on the standby server through the private network. One network card is connected, and the other network card on the main server and the other network card on the backup server are both connected to the public network, so as to ensure the speed of data transmission and the security of data between the main server and the backup server.

According to the above solution, a method, device and server cluster system for realizing data mirroring provided by the embodiments of the present invention have at least the following beneficial effects:

1. In the embodiment of the present invention, by setting the authentication key types of the main server and the backup server, and respectively setting the main server and the backup server as mutually authorized users, thereby establishing a trust relationship between the main server and the backup server, each After a set time, detect the server name of the server that is currently running, and judge whether the server name is the same as the name of the main server. If they are the same, copy the key data on the main server through script resources according to the established trust relationship to the standby server, if they are different, then according to the established trust relationship, the key data on the standby server will be copied to the primary server through the script resource, so that the mirror image of the key data in the server cluster can be realized only through the script resource, without Installing third-party software saves the time for modifying the existing software structure, thereby improving the efficiency of configuring the server cluster system.

2. In the embodiment of the present invention, the data mirroring function of the server cluster system can be realized without using third-party software, which avoids modifying the structure of the existing software, improves the stability of the server cluster system on the one hand, and saves on the other hand The workload of system configuration is reduced, and the cost of server cluster system configuration is saved.

3. In the embodiment of the present invention, the scp command is used to realize the transmission of key data between the primary server and the backup server. Before the key data is transmitted, the key data is first encrypted to ensure that the key data is in an encrypted state during transmission. Prevent data leakage during data transmission and improve the security of key data.

4. In the embodiment of the present invention, #ssh-keygen-trsa is run on the main server and the backup server, and the ID file of the other party is copied to its own authorization list, thereby establishing the trust between the main server and the backup server The relationship ensures that no authentication is required for data transmission between the primary server and the standby server, so that the key data replication process can proceed smoothly.

5. In the embodiment of the present invention, the main server and the backup server both include two network cards, one of the two network cards on each server is connected to the public network, the other network card is connected to the private network, and the main server and the backup server The data transmission between them is carried out through the private network, on the one hand, it can guarantee the data transmission speed, and on the other hand, it can also improve the security of key data.

The information exchange and execution process among the units in the above-mentioned equipment are based on the same concept as the method embodiment of the present invention, and the specific content can refer to the description in the method embodiment of the present invention, and will not be repeated here.

It should be noted that in this article, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply that there is a relationship between these entities or operations. There is no such actual relationship or sequence. Furthermore, the term "comprises", "comprises" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, method, article or apparatus comprising a set of elements includes not only those elements, but also includes elements not expressly listed. other elements of or also include elements inherent in such a process, method, article, or device. Without further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional same elements in the process, method, article or apparatus comprising said element.

Those of ordinary skill in the art can understand that all or part of the steps to realize the above method embodiments can be completed by program instructions related hardware, and the aforementioned programs can be stored in a computer-readable storage medium. When the program is executed, the It includes the steps of the above method embodiments; and the aforementioned storage medium includes: ROM, RAM, magnetic disk or optical disk and other various media that can store program codes.

Finally, it should be noted that the above descriptions are only preferred embodiments of the present invention, and are only used to illustrate the technical solution of the present invention, and are not used to limit the protection scope of the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principles of the present invention are included in the protection scope of the present invention.

Claims (10)

1. A method for realizing data mirroring, characterized in that it is applied to a server cluster system, comprising: Create a trust relationship between the primary server and the standby server by setting the type of authentication key and setting each other as authorized users; Every set time, detect the server name of the server currently running; judging whether the name of the server is the same as the name of the main server; According to the trust relationship, if yes, copy the key data on the primary server to the standby server through the script resource, otherwise copy the key data on the standby server to the primary server through the script resource. 2. The method according to claim 1, wherein said setting the type of the authentication key and setting each other as authorized users includes: Run #ssh-keygen-trsa on the primary server, copy the id_rsa.pub file on the primary server to the .ssh directory under the root user’s home directory on the standby server, and rename it to authorized_keys; Run #ssh-keygen-trsa on the standby server, copy the id_rsa.pub file on the standby server to the .ssh directory under the root user's home directory on the primary server, and rename it to authorized_keys. 3. The method according to claim 1, wherein the detecting the server name of the server currently in running state comprises: The hostname value of the server cluster system is detected through the hostname-command, and the server name of the server currently running is obtained through the hostname value. 4. The method of claim 1, wherein, Said copying the key data on the main server to the standby server through the script resource includes: copying the key data on the main server to the corresponding directory on the standby server through the scp command; or, The copying the key data on the standby server to the main server through the script resource includes: mirroring and copying the key data on the standby server to the corresponding directory on the main server through the scp command. 5. A device for realizing data mirroring, characterized in that it is applied to a server cluster system, comprising: Create a unit for creating a trust relationship between the primary server and the standby server by setting the type of the authentication key and setting each other as authorized users; The detection unit is used to detect the server name of the server currently in running state at intervals of a set time; A judging unit, configured to judge whether the server name detected by the detection unit is the same as the name of the main server; The mirroring unit is configured to, according to the judgment result of the judging unit and the trust relationship created by the creating unit, if yes, copy the key data on the primary server to the backup server through the script resource, if not, then The key data on the standby server is copied to the main server through the script resource. 6. The device according to claim 5, characterized in that, The creation unit is used to run #ssh-keygen-trsa on the main server, copy the id_rsa.pub file on the main server to the .ssh directory under the root user home directory on the standby server, and rename it to authorized_keys; and, The creation unit is used to run #ssh-keygen-trsa on the standby server, copy the id_rsa.pub file on the standby server to the .ssh directory under the root user's home directory on the main server, and rename it to authorized_keys. 7. The device according to claim 5 in the group, characterized in that, The detection unit is configured to detect the hostname value of the server cluster system through the hostname-command, and obtain the server name of the server currently in running state through the hostname value. 8. The device of claim 5, wherein: The mirror image unit is used to copy the key data image on the master server to the corresponding directory on the standby server by scp command; or, The mirroring unit is used to mirror the key data on the backup server to the corresponding directory on the master server through the scp command. 9. A server cluster system, characterized in that it comprises: a main server, a standby server, and the device for realizing data mirroring according to any one of claims 5 to 8; The main server is connected to the device for realizing data mirroring, and is used for storing key data, running business normally or continuing to run business when the backup server fails; The standby server is connected to the device for realizing data mirroring, and is used for storing key data, running business normally or continuing to run business when the main server fails. 10. The system of claim 9, wherein: Further include: shared memory and business continuity protection device; The shared memory is respectively connected to the main server and the standby server for storing general data; The business continuity protection device is respectively connected to the main server and the standby server, and is used to transfer the running business of one of the servers to another server when a failure occurs on one of the servers; and / or, Both the main server and the backup server include two network cards, and a double heartbeat connection is established through a public network and a private network, wherein a network card on the main server is connected to a network card on the backup server through a private network, so The other network card on the master server and the other network card on the standby server are both connected to the public network.