HP XP P9500 Storage - Manual (Page 152)

Table 35 Relationship between Continuous Access Synchronous pair statuses and fence levels (continued)
Fence level and write response Continuous Access Synchronous pair status of
volume
Async [4] Never [3] Status [2] Data [1]
PSUE: The secondary volume is dubious.
PAIR: The secondary volume can continue operation.
[3] When the fence level is never: Writing to the P-VOL is still enabled in the state where mirror consistency to the S-VOL is lost,
regardless of whether the secondary volume status is updated or not. Thus, the secondary could have these states:
PSUE: The secondary volume is dubious.
PAIR: The secondary volume is substantially dubious, since it can continue operation and is also dubious. The P-VOL status must
be checked to confirm the mirroring consistency.
[4] When the fence level is async: Continuous Access Asynchronous/Cnt Ac-J uses asynchronous transfers to ensure the sequence
of write data between the P-VOL and S-VOL. Writing to the P-VOL is enabled, regardless of whether the S-VOL status is updated
or not. Thus the mirror consistency of the secondary volume is dubious (similar to the "Never" fence):
•
PSUE: The S-VOL mirroring consistency is not assured, but the PSUE suspended state ensures the sequence of data for the
consistency group; thus, data consistency is also assured during a PSUE state. At a PSUE state, the P-VOL writes still complete
and are also noted in a bitmap for future transfer. Due to the use of a bitmap in the suspend state, data consistency is not
assured during a copy state resync.
•
PAIR: If the P-VOL and S-VOL are both in a PAIR state, mirror consistency is not assured (may be behind) but data consistency
is assured (what has reached the S-VOL is in the proper order).
Setting the fence level
Data fence level
Figure 55 (page 152) shows the relationship between redo log files (journal) and data files. If the
S-VOL takes over from the P-VOL in the status shown in Figure 55 (page 152) (where two errors
have occurred), the secondary host leaves data (V) unprocessed in the roll-back processing and
cannot be recovered completely. Therefore, the fence level of a redo log file must be defined as
data. Once the fence level is set to data, the P-VOL returns an error if data may possibly be
inconsistent when a write request is issued by the host. Since writing to the data file is not executed
due to a write error of the redo log file, the log file stays consistent with the data file. However,
when the fence level is set to data, a write I/O error occurs even in the case where operation is
suspended due to an error in the S-VOL. Accordingly, duplication becomes meaningless when the
S-VOL takes over. Thus, applications using paired volumes with the data fence level should be able
to handle write I/O errors properly. For example, the Oracle application creates multiple redo log
files by itself (three by default). The fence level can be set to data in this case in which disk errors
are permissible by creating multiple files.
Figure 55 Relationship between logs (journal) and data in paired status
Never fence level
Because most UNIX file systems (excluding JFS and VxFS) have no journal files, the fence level
should be defined as Never. When a takeover by the S-VOL occurs, fsck is executed on the volume
and the file system is cleaned up, even if the S-VOL is undefined at the secondary host. The data
that is lost depends on how much differential data is contained in the P-VOL when the S-VOL is
suspended. During operation, error recovery should be performed when the suspended status
(PSUE or PDUB) is detected (when one error occurs).
152 Data replication operations with RAID Manager