Fault Tolerant Approaches for Distributed Real-time and Embedded Systems
Fault Tolerant Approaches for Distributed Real-time and Embedded Systems
复制标题
分布式实时和嵌入式系统的容错方法
DOI：
10.1109/milcom.2007.4455043
复制
发表时间：
2007
期刊：
影响因子：
--
通讯作者：
P. Narasimhan
中科院分区：
文献类型：
--
作者：
P. Rubel;M. Gillen;J. Loyall;R. Schantz;A. Gokhale;J. Balasubramanian;Aaron M. Paulos;P. Narasimhan
容错（FT）是关键任务分布式实时和嵌入式（DRE）系统的重要设计考虑因素，它将嵌入式平台的实时特性与分布式平台的动态特性结合起来。传统的 FT 方法无法解决 DRE 系统中常见的特征，例如规模、异构性、实时要求和其他特征。 FT 之前的大多数研发工作都集中在客户端-服务器对象系统上，而 DRE 系统越来越多地基于面向组件的架构，该架构支持更复杂的交互模式，例如点对点。本文介绍了我们当前为 DRE 系统开发 FT 技术的应用研发工作。首先，我们描述了三种支持 DRE 系统需求的增强型 FT 技术：混合模式通信的透明方法、动态系统的自动配置以及点对点交互的重复管理。其次，我们描述了现实世界中基于组件的 DRE 系统的集成 FT 功能，该系统使用与我们增强的 FT 技术集成的现成 FT 中间件。我们提供的实验结果表明，我们的集成 FT 功能满足 DRE 系统对故障恢复响应能力和无故障情况下引入的最小开销的实时性能要求。
Fault tolerance (FT) is a crucial design consideration for mission-critical distributed real-time and embedded (DRE) systems, which combine the real-time characteristics of embedded platforms with the dynamic characteristics of distributed platforms. Traditional FT approaches do not address features that are common in DRE systems, such as scale, heterogeneity, real-time requirements, and other characteristics. Most previous R&D efforts in FT have focused on client-server object systems, whereas DRE systems are increasingly based on component-oriented architectures, which support more complex interaction patterns, such as peer-to-peer. This paper describes our current applied R&D efforts to develop FT technology for DRE systems. First, we describe three enhanced FT techniques that support the needs of DRE systems: a transparent approach to mixed-mode communication, auto-configuration of dynamic systems, and duplicate management for peer-to-peer interactions. Second, we describe an integrated FT capability for a real-world component-based DRE system that uses off-the-shelf FT middleware integrated with our enhanced FT techniques. We present experimental results that show that our integrated FT capability meets the DRE system's real-time performance requirements for both the responsiveness of failure recovery and the minimal amount of overhead introduced into the fault-free case.