Remote data duplexing

Claim 3

The method for providing remote data shadowing according to claim 1 wherein said primary storage subsystem continues to write updates when the duplex pair status is established or recovered.

Claim 4

The method for providing remote data shadowing according to claim 2 wherein step (c) includes said primary storage subsystem reporting an I/O status channel end/device end/unit check to said primary processor when reporting the failed duplex pair.

Claim 5

The method for providing remote data shadowing according to claim 2 further comprising a step (g) for performing error recovery by the I/O ERP and maintaining data integrity at the secondary site when failed duplex occurs.

Claim 6

The method for providing remote data shadowing according to claim 4 further comprising a step (h) for returning control from the I/O ERP to the at least one application after the error recovery successfully completes.

Claim 7

The method for providing remote data shadowing according to claim 5 further comprising a step (i) for sending a failed synchronous remote copy message, via the I/O ERP, to the secondary site if the error recovery was unable to complete successfully.

Claim 8

The method for providing remote data shadowing according to claim 6 wherein the step (i) further prevents subsequent I/O writes to the primary storage subsystem.

Claim 9

The method for providing remote data shadowing according to claim 4 wherein communication for the error recovery occurs between the primary processor and the secondary processor.

Claim 10

The method for providing remote data shadowing according to claim 4 wherein communication for the error recovery occurs between the primary storage subsystem and the secondary storage subsystem.

Claim 11

A remote data duplexing system having a primary site and a secondary site, the secondary site receiving write updates from the primary site for data back-up, the secondary site being located sufficiently remote from said primary site that in the event that a disaster occurs preventing data access at the primary site, the secondary site can provide real time data availability, the remote data duplexing system comprising: a primary processor at the primary site running at least one application generating write I/O updates; a primary storage subsystem for receiving and storing the write I/O updates; a secondary processor at the secondary site coupled to the primary processor by a data link; a secondary storage subsystem at the secondary site, coupled to the secondary processor and further coupled to the primary storage subsystem via communication links, the secondary storage subsystem providing a storage based duplex pair for back-up of the write I/O updates wherein the write I/O updates are written to the secondary storage subsystem in the specific synchronous order received; and error recovery means in the primary processor and coupled to the secondary storage subsystem for providing error recovery if a failed duplex occurs, wherein the error recovery means quiesces the application running on the primary processor and issues a sense I/O to the primary storage subsystem to determine a cause of the failed duplex.

Claim 12

A remote data duplexing system having a primary site and a secondary site, the secondary site receiving write updates from the primary site for data back-up, the secondary site being located sufficiently remote from said primary site that in the event that a disaster occurs preventing data access at the primary site, the secondary site can provide real time data availability, the remote data duplexing system comprising: a primary processor at the primary site running at least one application generating write I/O updates; a primary storage subsystem for receiving and storing the write I/O updates; a secondary processor at the secondary site coupled to the primary processor by a data link; a secondary storage subsystem at the secondary site, coupled to the secondary processor and further coupled to the primary storage subsystem via communication links, the secondary storage subsystem providing a storage based duplex pair for back-up of the write I/O updates wherein the write I/O updates are written to the secondary storage subsystem in the specific synchronous order received; and error recovery means in the primary processor and coupled to the secondary storage subsystem for providing error recovery if a failed duplex occurs, wherein the error recovery means quiesces the application running on the primary processor and issues a sense I/O to the primary storage subsystem to determine a cause of the failed duplex.

Claim 13

The remote data duplexing system according to claim 10 wherein the error recovery means reports a failed duplex mode to both the primary processor and secondary site.

Claim 14

The remote data duplexing system according to claim 10 wherein the error recovery means returns control back to the application running on the primary processor after error recovery means completes error recovery and duplex mode is re-established.

Claim 15

The remote data duplexing system according to claim 12 wherein the error recovery means prevents further primary secondary storage subsystem write I/O updates if the error recovery means is unable to successfully complete error recovery.

Claim 16

The remote data duplexing system according to claim 10 further comprising: a primary console coupled to the primary processor for receiving error messages from the error recovery means; and a secondary console coupled to the secondary processor for receiving the error messages from the error recovery means.

Claim 17

The remote data duplexing system according to claim 10 wherein the primary and secondary storage subsystems each include a plurality of storage controllers.

Claim 18

The remote data duplexing system according to claim 15 wherein the communications link includes a plurality of enterprise systems connections (ESCON) links.

Claim 19

A remote data duplexing system provides storage based, real time disaster recovery capabilities, the remote data duplexing system having a primary site and a secondary site, the secondary site synchronously receiving write I/O updates from the primary site for data shadowing, the secondary site being located sufficiently remote from the primary site such that in the event a disaster prevents data access at the primary site, the secondary site can provide real time data availability, the remote data duplexing system comprising: a primary processor at the primary site running a plurality of applications, the plurality of applications generating the write I/O updates; a plurality of primary storage controllers for receiving the write I/O updates; a plurality of primary storage devices for storing the write I/O updates; a secondary processor at the secondary site coupled to the primary processor by a data link; a plurality of secondary storage controllers at the secondary site, coupled to the secondary processor and further coupled to the plurality of primary storage controllers via a plurality of fiber optic links, the plurality of secondary storage controllers providing a storage based duplex pair for shadowing the write I/O updates wherein the write I/O updates are provided to the secondary storage subsystem in the order generated; a plurality of secondary storage devices coupled to the plurality of secondary storage controllers for storing the write I/O updates thereon; and error recovery means in the primary processor and coupled to the plurality of secondary storage controllers for taking control from said plurality of applications in the event that a failed duplex occurs, the error recovery means quiescing said plurality of applications and prompting said plurality of primary storage controllers to determine a cause of the failed duplex, the error recovery means further providing a failed duplex message to the primary processor and plurality of secondary storage controllers regarding the cause of the failed duplex while continuing to provide error recovery, the error recovery means also preventing further I/O write updates and providing status to primary and secondary processors in the event error recovery was unsuccessful.

Claim 20

A remote data duplexing system provides storage based, real time disaster recovery capabilities, the remote data duplexing system having a primary site and a secondary site, the secondary site synchronously receiving write I/O updates from the primary site for data shadowing, the secondary site being located sufficiently remote from the primary site such that in the event a disaster prevents data access at the primary site, the secondary site can provide real time data availability, the remote data duplexing system comprising: a primary processor at the primary site running a plurality of applications, the plurality of applications generating the write I/O updates; a plurality of primary storage controllers for receiving the write I/O updates; a plurality of primary storage devices for storing the write I/O updates; a secondary processor at the secondary site coupled to the primary processor by a data link; a plurality of secondary storage controllers at the secondary site, coupled to the secondary processor and further coupled to the plurality of primary storage controllers via a plurality of fiber optic links, the plurality of secondary storage controllers providing a storage based duplex pair for shadowing the write I/O updates wherein the write I/O updates are provided to the secondary storage subsystem in the order generated; a plurality of secondary storage devices coupled to the plurality of secondary storage controllers for storing the write I/O updates thereon; and error recovery means in the primary processor and coupled to the plurality of secondary storage controllers for taking control from said plurality of applications in the event that a failed duplex occurs, the error recovery means quiescing said plurality of applications and prompting said plurality of primary storage controllers to determine a cause of the failed duplex, the error recovery means further providing a failed duplex message to the primary processor and plurality of secondary storage controllers regarding the cause of the failed duplex while continuing to provide error recovery, the error recovery means also preventing further I/O write updates and providing status to primary and secondary processors in the event error recovery was unsuccessful.