Abstract: A device, of a first data center, detects a power failure associated with the first data center when the first data center stops receiving power. The device further identifies a second data center for traffic to be processed by the first data center. The device also receives the traffic and routes the traffic to the second data center.

Abstract: A method, computer program product, and system for de-centralized stream processing is provided. The method may include providing a plurality of processing nodes in a hierarchical genome having a plurality of levels, wherein each of said processing nodes is configured to transmit and receive a stream of data. The method may further include restricting a subset of the plurality of processing nodes from differentiating into a role within each level of the hierarchical genome. The method may also include identifying a failure at one of the processing nodes and replacing the failed node with one of the processing nodes from the restricted subset.

Abstract: A method, system, machine-readable storage medium, and apparatus are directed towards upgrading a cluster by bifurcating the cluster into two virtual clusters, an “old” virtual cluster (old active cluster) and a “new” virtual cluster (new standby cluster), and iteratively upgrading members of the old cluster while moving them into the new cluster. While members are added to the new cluster, existing connections and new connections are seamlessly processed by the old cluster. Optionally, state mirroring occurs between the old cluster and the new cluster once the number of members of the old and new clusters are approximately equal. Once a threshold number of members have been transferred to the new cluster, control and processing may be taken over by the new cluster. Transfer of control from the old cluster to the new cluster may be performed by failing over connectivity from the old cluster to the new cluster.

Abstract: A server includes a monitoring unit that monitors operation states of one or more physical servers in use on which same applications operate, a synchronization unit that synchronizes the data between one of the physical servers in use and one of virtual servers in a standby physical server, and a switching unit that, when the monitoring unit has detected that a failure has occurred in the operation of one of the physical servers in use, that operates a second application of the same applications while referring to a piece of the data on the one of the virtual servers synchronized by the synchronization unit with the data on the one of the physical servers in use, and that switches operation from the one of the virtual servers to the standby physical server.

Abstract: A fault-tolerant replication system includes a first machine running a first hypervisor. A second machine is failure-independent of the first machine. The second machine runs a second hypervisor. A first plurality of virtual machines runs on the first hypervisor. A second plurality of virtual machines runs on the second hypervisor. Each of the virtual machines of the first and second plurality of virtual machines constitutes either a virtual machine replica server of a fault-tolerant replicated state machine or a backup corresponding to a virtual machine replica server of the fault-tolerant replicated state machine. Every backup is embodied on a different machine, of the first and second machines, from its corresponding virtual machine replica server.

Abstract: A method, system, and medium are disclosed for performing transparent failover in a cluster server system. The cluster includes a plurality of servers. In servicing a client request, a primary server replicates session data for the client into memory space of one or more backup servers. The primary server sends a response to the client, wherein the response includes an indication of the one or more backup servers. When the client sends a subsequent request, it includes an indication of the backup servers. If the primary server is unavailable, the cluster determines a recovery server from among the backup servers indicated by the request. The chosen recovery server would then service the request.

Abstract: A method is provided for a host node in a computer network to determine its coordinates in a d-dimensional network space, comprising discovering an address of a peer node in the network, measuring network latency between the host node and the peer node, determining whether network latency has been measured for at least d+1 peer nodes, where, if network latency has not been measured for at least d+1 peer nodes, estimating the network coordinates of the host node, and where, if network latency has been measured for at least d+1 peer nodes, calculating the network coordinates of the host node using d+1 measured latencies.

Abstract: Near clones for a set of targeted computing systems are provided by determining a highest common denominator set of components among the computing systems, producing a pseudo-clone configuration definition, and realizing one or more pseudo-clone computing systems as partially configured backups for the targeted computing systems. Upon a planned failover, actual failure, or quarantine action on a targeted computing system, a difference configuration is determined to complete the provisioning of the pseudo-clone system to serve as a replacement system for the failed or quarantined system. Failure predictions can be used to implement the pseudo-clone just prior to an expected first failure of any of the targeted systems. The system can also interface to an on-demand provisioning management system to effect automated workflows to realize pseudo-clones and replacement systems automatically, as needed.

Abstract: A multi-cluster system includes a plurality of computers; and a plurality of system storage apparatuses each of which is coupled to the plurality of computers; wherein at least one of the plurality of system storage apparatuses includes a first circuit that detects a connection information that includes connection-failure information indicating a connection failure in a connection with at least one of the plurality of computers, and a second circuit that reports the connection information detected by the first circuit to the plurality of computers; and each of the plurality of computers includes a third circuit that receives the connection information from each of the plurality of system storage apparatuses, and a fourth circuit that executes processing to disconnect a system storage apparatus, based on the connection information received by the third circuit.

Abstract: High availability architecture that employs a mid-tier proxy server to route client communications to active data store instances in response to failover and switchover. The proxy server includes an active manager client that interfaces to an active manager in each of the backend servers. State information and configuration information are maintained separately and according to semantics consistent with needs of corresponding data, the configuration information changing less frequently and more available, the state information changing more frequently and less available. The active manager indicates to the proxy server which of the data storage instances is the currently the active instance. In the event that the currently active instance is inactive, the proxy server selects a different backend server that currently hosts the active data store instance. Client communications are then routed to the different backend server with minimal or no interruption to the client.

Abstract: During an outage at a primary location for an online service that is temporary in duration (e.g. a “temporary outage”), requests are temporarily switched from the primary location to a secondary location for the online service. The temporary outage may be caused by many different reasons (e.g. power outage, planned maintenance, and the like). The secondary location may be configured as read only during the temporary outage such that users are still able to access their data during the temporary without causing changes to be made to the data. The requests to the primary location of the online service are automatically redirected to be handled by the secondary location. When the temporary outage ends, the requests are automatically switched back to the primary location.

Abstract: A distributed system (1) includes: a plurality of nodes (100) each having a memory (102), running distributed processes, and checkpointing to create checkpoint data for each process; a node selection unit (206) which selects spare nodes for future failure recovery for each process; an allocation unit (208) which allocates the checkpoint data to the spare nodes and to be transmitted to the spare nodes to make the spare nodes store the checkpoint data in the memories, respectively, before failure occurs; and a recovery unit (212) which selects one checkpoint data for recovery when at least one checkpoint data is suitable for recovery, to activate the selected checkpoint data to run a process on the spare node, or partitions the existing checkpoint data stored in the memory (102), when any one checkpoint data is not suitable for recovery, the partitions of the checkpoint data as a whole being integrated into a complete checkpoint data; and transmits the partitions respectively from the spare nodes to a new node,

Abstract: A method for electing a master blade in a virtual application distribution chassis (VADC), includes: sending by each blade a VADC message to each of the other blades; determining by each blade that the VADC message was not received from the master blade within a predetermined period of time; in response, sending a master claim message including a blade priority by each blade to the other blades; determining by each blade whether any of the blade priorities obtained from the received master claim messages is higher than the blade priority of the receiving blade; in response to determining that none of the blade priorities obtained is higher, setting a status of a given receiving blade to a new master blade; and sending by the given receiving blade a second VADC message to the other blades indicating the status of the new master blade of the given receiving blade.

Abstract: The invention discloses a segment protection method for an Ethernet tunnel, there are two segment protection domains with a shared link in a Provider Backbone Bridge-Traffic Engineering (PBB-TE) network, and at least one of the two segment protection domains works in a non-revertive mode, and when a simultaneous failures of working segments of two segment protection domains recover or a failure of the shared node of the working segments recovers, the shared node of the working segments switches all the FDB entries of bidirectional ESPs of all the TESIs protected by the protection domains to standby entries, and after switching, out ports of the FDB entries of the ESPs are the ports connecting the shared segment. The invention also discloses a shared node of working segments of protection domains correspondingly. The invention is able to ensure that the bidirectional ESPs are co-routed after the failure recovering.

Abstract: A wireless communications device may be configured to perform integrity checking and interrogation with a network entity to isolate a portion of a failed component on the wireless network device for remediation. Once an integrity failure is determined on a component of the device, the device may identify a functionality associated with the component and indicate the failed functionality to the network entity. Both the wireless network device and the network entity may identify the failed functionality and/or failed component using a component-to-functionality map. After receiving an indication of an integrity failure at the device, the network entity may determine that one or more additional iterations of integrity checking may be performed at the device to narrow the scope of the integrity failure on the failed component. Once the integrity failure is isolated, the network entity may remediate a portion of the failed component on the wireless communications device.

Abstract: Embodiments of the invention include a method for maintaining an active-standby relationship between an active control card and a standby control card in a network element. The network element receives a data from a remote peer at the active control card. The network element communicates data from the active TCP module to an active application module in the active control card. The network element communicates synchronization data from the active application module to a standby application module on the standby control card. The network element communicates an application synchronization acknowledgement from the standby application module to the active APP module. The network element communicates an application acknowledgment packet from the active application module to the active TCP module responsive to receiving the application synchronization acknowledgment. The network element then communicates an acknowledgement to the remote peer responsive to the application acknowledgement.

Abstract: A method is provided for changing over from a primary home subscriber server (HSS) to a backup HSS in an IP network, said network having a plurality of call server control function (CSCF) (or application) servers, in which, after detection of a loss of connection between one of said CSCF (or application) servers and a primary HSS to which it is normally connected, the CSCF (or application) server connects itself to a backup HSS. The method also comprises the following steps: a) a predetermined broadcast device is informed of said loss of connection with said HSS; b) said broadcast device sends a predetermined fault message at least to the other CSCF (or application) servers that are normally connected to said primary HSS, said message containing the reference of said primary HSS; and c) said other CSCF (or application) servers connect themselves to said backup HSS.

Abstract: A method for processing Machine-to-Machine (M2M) platform services and a M2M platform are disclosed. The method comprises: receiving a service request sent by a terminal; selecting a corresponding application according to capacity required by the service request; and forwarding the service request to the corresponding application, and feeding back a response result of the application to the terminal. The method for processing M2M platform services and the M2M platform in accordance with the present implement a platform for providing a variety applications for users.

Abstract: For coordinated disaster reovery, a reconciliation process is performed for resolving intersecting and non-intersecting data amongst disaster recovery systems for takeover operations. An ownership synchronization process is coordinated for replica cartridges via the reconciliation process at the disaster recovery systems. The disaster recovery systems continue as a replication target for source systems and as a backup target for local backup applications.

Abstract: Exemplary method, system, and computer program product embodiments for optimizing disaster recovery systems during takeover operations are provided. In one embodiment, by way of example only, a flag is set in a replication grid manager to identify replication grid members to consult in a reconciliation process for resolving intersecting and non-intersecting data amongst the disaster recovery systems for a takeover operation. The replication grid members are consulted for the takeover operation to accommodate a coordination of an ownership synchronization process for cartridges not distributed on-time to the replication grid members. Additional system and computer program product embodiments are disclosed and provide related advantages.

Abstract: Embodiments of the invention relate to block layout and block allocation in a file system to support transparency of application processing. At least one copy of an application is replicated in a write affinity region of a secondary server, and at least one copy of the application is replicated in a wide striping region across a cluster file system. When the application is subject to failure, application processing is transferred from the failure location to the write affinity copy. At the same time, the failed application is rebuilt using the wide striping replication of the application. Once the application is rebuilt, processing may return to the failed location employing the rebuilt application.

Abstract: A method, system and computer program product manages a batch processing job by: partitioning the batch processing job for execution in a plurality of batch execution servers from a cluster of computers; designating one computer from the cluster as a primary command server that oversees and coordinates execution of the batch processing job; selecting a second computer from the cluster to serve as a failover command server; storing an object data grid structure in the primary command server; replicating the object grid structure to create and store a replicated object grid structure in the failover command server; in response to the primary command server failing, restarting, by the failover command server, execution of batch processes from the batch processing job in the plurality of batch execution servers utilizing objects within the replicated object grid structure, and executing the batch processes with processing states at the time of the failover.

Abstract: A system that incorporates teachings of the present disclosure may include, for example, an edge device having a controller to receive a Session Initiation Protocol (SIP) message from a user endpoint device (UE) requesting communication services, forward the SIP message to a network element of a Server Office, receive from the network element a first error message indicating communication services at the Server Office are unavailable, replace the first error message with a second error message, the second error message indicating a temporary unavailability of communication services, and transmit the second error message to the UE. Additional embodiments are disclosed.

Abstract: A method for providing fault-tolerant network communications between a plurality of nodes for an application, including providing a plurality of initial communications pathways over a plurality of networks coupled between the plurality of nodes, receiving a data packet on a sending node from the application, the sending node being one of the plurality of nodes, the data packet being addressed by the application to an address on one of the plurality of nodes, and selecting a first selected pathway for the data packet from among the plurality of initial communications pathways where the first selected pathway is a preferred pathway.

Abstract: Embodiments include a power-efficient failover method. The method includes operating a primary server at a normal operating state in which program code is executed, and dynamically generating a backup of the results of the executed program code while in the normal operating state. The method further includes operating a redundant server at a reduced power state in which less power is consumed than in the normal operating state of the primary server. The workload of the primary server may be assumed according to the backup in response to a failure of the primary server. The power state of the redundant server is managed, including maintaining the redundant server in the reduced power state prior to detecting a failure of the primary server and increasing the power state of the redundant server and assuming the workload of the primary server in response to the failure of the primary server.

Abstract: Determining a failure of a logical connection in a logical circuit identified by a logical circuit identifier, the logical circuit comprising variable communication paths in at least one of a first or a second logical telecommunications network and a fixed communication path between the first and second logical telecommunications networks, and the failed logical connection being between the first and second logical telecommunications networks; identifying a logical failover circuit comprising an alternate communication path in a failover network that is separate from the logical circuit, the failover network reserved to provide failover circuits to communicate data rerouted from failed logical circuits, and the logical failover circuit identified by a second logical circuit identifier; renaming the logical circuit identifier of the logical circuit to the second logical circuit identifier of the logical failover circuit; and rerouting the data from the logical circuit to the logical failover circuit without ma

Abstract: A method includes detecting, by a first network device, a configuration problem at a second network device, where the first and second network devices are associated with a link aggregation group (LAG) coupling the first and second network devices. The method also includes de-activating, by the first network device, one or more links in the LAG in response to detecting the configuration problem. The method further comprises maintaining at least one of the links in the LAG as an active link and allowing traffic to be forwarded on the active link in the LAG.

Abstract: Disclosed is a computerized method, non-transitory machine-readable medium and computer system for ensuring that critical information, such as that allowing an ecommerce customer to activate purchased downloadable software, can be retrieved even if issues occur in the primary distribution center. The method receives a call for data (e.g. key) at a first endpoint associated with a first distribution center, determining that the call for the data cannot be fulfilled at the first endpoint, and shifting the call for the data to a second endpoint associated with a second distribution center. The computer system comprises a first and second distribution center system, including modules for: fulfilling a call for data, or key; determining if a call cannot be fulfilled, determining a plurality of error indications; and redirecting calls originally directed to one of a first computer or a second computer to the other of the first computer and the second computer.

Abstract: A service appliance is installed between production servers running service applications and service users. The production servers and their service applications provide services to the service users. In the event that a production server is unable to provide its service to users, the service appliance can transparently intervene to maintain service availability. To maintain transparency to service users and service applications, service users are located on a first network and production servers are located on a second network. The service appliance assumes the addresses of the service users on the second network and the addresses of the production servers on the first network. Thus, the service appliance obtains all network traffic sent between the production server and service users. While the service application is operating correctly, the service appliance forwards network traffic between the two networks using various network layers.

Abstract: A method of application program-operating system decoupling includes performing, through an application program configured to execute on a client machine, a system call to a first operating system executing on a server machine over an interconnect configured to couple the server machine to the client machine. The method also includes serving the application program configured to execute on the client machine through the first operating system executing on the server machine in accordance with the system call.

Abstract: Methods and systems for quickly serving documents are provided. Documents may be served to users, for example, in response to search query inputs. Documents may be individually communicated to a document server individually prior to batching the documents. In such a real-time serving system, serving components may fail. To ensure real-time serving despite the failure, spares are utilized to replace the failing serving components such that the spare can immediately begin receiving documents. The spare can also be synchronized with other serving components to obtain the memory of the failing serving component prior to the failure.

Abstract: Methods are provided in which a standby server, a first main server, and a second main server to control shared input/output (I/O) adapters in a storage system are provided. The standby server is in communication with the first main server and the second main server, and the storage system is configured to operate as a dual node active system. The methods include activating the standby server in response to receiving a communication from the first main server of a fail mode of the second main server. Systems and physical computer storage media are also provided.

Abstract: A method and system for managing a backup service gateway (SGW) associated with a primary SGW, comprising periodically receiving from the primary SGW at least a portion of corresponding UE session state information, the received portion of session state information being sufficient to enable the secondary SGW to indicate to an inquiring management entity that all user sessions associated with a group of mobile devices supported by the primary SGW are in a live state; and in response to a failure of the primary SGW, assuming management of IP addresses and paths associated with the primary SGW and causing each UE supported by the failed primary SGW to reauthorize itself to the network.

Abstract: Systems and methods are provided for selecting a path for an I/O in a storage area network. In one embodiment, a method comprises receiving path configuration information for paths associated with a host device connected to the storage area network, a listing of components within the storage area network, and a notification of a component failure within the storage area network. The method may also comprise correlating the received path configuration information, the received listing of components, and the received notification of component failure to determine one determine one or more paths associated with the host device affected by the component failure. The method may further comprise transmitting to the host device an alert for the one or more affected paths.

Abstract: Management arrangements to: (A) receive plural failure information from plural host computers for a predetermined period; (B) store the failure information; (C) extract one or more of the plural failure information, received from a first host computer among the plural host computers; (D) retrieve the failure information about one path from the extracted failure information, about multiple paths; (E) register the first host computer via refresh information in the memory, refresh information indicating a host computer of which path information is to be updated; (F) send a request to the first host computer to acquire a status of a first path of the first host computer; (G) update a first path information in the plurality of path information of the first host computer, based on the status; and (H) delete the one or more of the plurality of failure information extracted in (C), from the failure reception information.

Abstract: A method and apparatus for backing up user information are disclosed. The method includes: establishing a plurality of selection switch protocol groups between a same port of a standby service node and ports of a plurality of main service nodes respectively; the standby service node regularly receiving user information of access users from the ports of the plurality of main service nodes, and storing the user information to a main control unit of the standby service node; keeping a detection relation between the same port of the standby service node and the ports of the plurality of main service nodes; the standby service node sending to an interface unit of the standby service node the user information of the access user of that port stored in the main control unit, and according to the selection switch protocol, switching the same port of the standby service node to be main.

Abstract: A distributed vehicle control system comprising a secure real-time executive running as a distributed abstraction of both the application and the operating system, where the SRE comprises a message manager, security manager, critical data manager, configuration manager, and multi-processor task control manager and is configured to control how the processors communicate with each other, how the processors are initiated, how the processors start tasks, and how priorities are set for messages.

Abstract: In some example embodiments, there is a method for failback to a primary communications adapter. The method includes receiving, in a driver for the primary communications adapter and a backup communications adapter, a link up event for the primary communications adapter, wherein the link up event is sent from the primary communications adapter to the driver, and wherein the link up event is triggered by establishing electrical connectivity to the primary communications adapter. The method includes inferring that the primary communications adapter is configured for receiving packets. The method includes setting the backup communications adapter to idle, wherein the backup communications adapter receives packets and drops the packets while idle. The method includes activating the primary communications adapter, wherein the primary communications adapter receives packets and passes the packets up a protocol stack while activated.

Abstract: A firmware update process for a self-virtualizing IO resource such as an SRIOV adapter is incorporated into a platform firmware update process to systematically update the resource firmware in a manner that is for the most part transparent to the logical partitions sharing the adapter. In particular, resource firmware associated with a self-virtualizing IO resource is bundled with firmware for at least one adjunct partition associated with that self-virtualizing IO resource within a common firmware image so that, upon restart of the adjunct partition to use the updated firmware image, the resource firmware is also updated, with a logical partition that uses the self-virtualizing IO resource maintained in an active state during the restart, and without requiring the self-virtualizing IO resource to be deconfigured from the logical partition.

Abstract: Disaster Recovery (DR) and High-Availability (HA) are a critical features required by many information technology systems. DR and HA may be accomplished with a remote secondary site that is kept synchronized with a primary site. To reduce the cost of maintaining a secondary site, the data may be split into two subsets wherein only a first subset of data is kept synchronized at the secondary site using a small bandwidth communication link. The second set of data, which is generally much larger, is periodically backed up at a network accessible back-up location. When a disaster occurs, the secondary site may access the most recent back-up of the second set of data. In a maintenance or limited failure situation, the secondary site can directly access the second data set at the primary site.

Abstract: A cluster recovery and maintenance technique for a server cluster having plural nodes implementing a server tier in a client-server computing architecture. A first group of N active nodes each run a software stack comprising a cluster management tier and a cluster application tier that actively provides services on behalf of one or more client applications running in a client application tier on the clients. A second group of M spare nodes each run a software stack comprising a cluster management tier and a cluster application tier that does not actively provide client application services. First and second zones in the cluster are determined in response to an active node membership change involving one or more active nodes departing from or being added to the first group as a result of an active node failing or becoming unreachable or as a result of a maintenance operation involving an active node.

Abstract: The present invention discloses a method, apparatus and system for operating an internet protocol television service system. The present invention relates to communication field, and solves the problem of poor quality of service caused by using a cold backup electronic programmer guide (EPG) server or transferring a user to other EPG server. The method includes: a backup electronic programmer guide (EPG) server receiving an obtaining instruction message sent by a service control manager, wherein the obtaining instruction message instructs the backup EPG server to obtain service information of a failed present network EPG server; the backup EPG server obtaining the service information of the failed present network EPG server according to the obtaining instruction message, and sending an obtaining response message to the service control manager after finishing obtaining the service information.

Abstract: An information processing system may not degrade a processor, if the system is designed so as to satisfy connection restrictions between processors and chipsets. In the system a route switching function is provided to control the connection between a CPU and a BIOS ROM among a plurality of CPUs and the BIOS ROM. When a fault occurs in a particular CPU, a route connecting the BIOS ROM and another CPU in which a fault does not occur is determined, and then the route switching is performed on the basis of the determined route information.

Abstract: Described are embodiments directed at providing resilient services using architectures that have a number of failover features including the ability to handle failover of an entire data center. Embodiments include a first server pool at a first data center that provides client communication services. The first server pool is backed up by a second server pool that is located in a different data center. Additionally, the first server pool serves as a backup for the second server pool. The two server pools thus engage in replication of user information that allows each of them to serve as a backup for the other. In the event that one of the data centers fails, requests are rerouted to the backup server pool.

Abstract: The present application is directed to systems and methods for providing failover connection mirroring between two or more multi-core devices intermediary between a client and a server. A first multi-core device may receive a hash key of a second multi-core device for mapping packets to cores of the second multi-core device. The first device may identify a core of the second device using (i) the hash key of the second device and (ii) tuple information corresponding to a connection between the client and the server via the first device. The first device may determine that the identified core is not a desired core for providing a failover connection. The first device may modify the tuple information so as to identify the desired core when used with the hash key of the second device. The first device may use the modified tuple information to establish the failover connection.

Abstract: Embodiments include a power-efficient failover system and method. In one embodiment, a primary server operating in a normal operating state is configured to dynamically backup device states or transaction logs. A redundant server coupled to the primary server in a failover cluster is operated at a reduced power state. The redundant server dynamically receives the backup from the primary server and is elevated to a normal operating state in response to a failure of the primary server. By enforcing a reduced power state of the redundant server, a failover system provides a desired combination of high power efficiency with low latency.

Abstract: A cluster server manages allocation of free blocks to cluster clients performing writes in a clustered file system. The cluster server manages free block allocation with a free block map and an in-flight block map. The free block map is a data structure or hardware structure with data that indicates blocks or extents of the clustered file system that can be allocated to a client for the client to write data. The in-flight block map is a data structure or hardware structure with data that indicates blocks that have been allocated to clients, but remain in-flight. A block remains in-flight until the clustered file system metadata has been updated to reflect a write performed to that block by a client. After a consistency snapshot of the metadata is published to the storage resources, the data at the block will be visible to other nodes of the cluster.

Abstract: Services are promptly resumed at the time of a failure recovery in an information processing system. Before a first server system 3a resumes service during the failure recovery, a second server system 3b sends the first server system 3a directory images of directories of a highest-level tier to a predetermined lower-level tier out of data of files stored in a second storage apparatus 10b, and the first server system 3a restores the directory images in a first storage apparatus 10a. When the request is transmitted from the first server system 3a, the second server system 3b reads an additional directory image from the second storage apparatus 10b and transmits the additional directory image to the first server system 3a. If a re-stubbing occurrence frequency is equal to or higher than a predetermined threshold, the second server system 3b suppresses transmission of directory images to the first server system 3a.

Abstract: A method includes executing, in each of a number of nodes of a cluster communication system, a specialized instance of an operating system privileged to control a corresponding hypervisor configured to consolidate one or more VM(s) on a system hardware. The one or more VM(s) is configured to be associated with a non-privileged operating system. The method also includes providing a cluster stack associated with the specialized instance of the operating system on the each of the number of nodes to enable communication between peers thereof in different nodes, and controlling the one or more VM(s) as a cluster resource through the cluster stack.

Abstract: A distributed blade server system, a management server and a switching method are provided. The method includes: determining a standby blade of a first blade when it is determined that the first blade is in abnormal operation; delivering, based on an access relationship between a startup card of the first blade and a first storage partition, a first configuration command to a storage system, the first configuration command including information of an access relationship between a startup card of the standby blade and the first storage partition, so that the storage system configures the access relationship between the startup card of the standby blade and the first storage partition; and delivering a startup command to the standby blade.