Versions Compared

Old Version 4

changes.mady.by.user Isabelle Avery (Unlicensed)

Saved on

compared with

New Version 5

changes.mady.by.user Isabelle Avery (Unlicensed)

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Introduction

Overview

Redundancy is the duplication of critical components or functions of a system with the intention of increasing reliability of the system, usually in the form of a backup or fail-safe.

For our Management Servers, there are two components: primary and alternate.

They

Crucially, each must be on a different physical server. They both run similar software, but the output from the alternate remains inactive during normal operation. The primary monitors itself and periodically sends an activity message to the alternate as long as everything is OK. All outputs from the primary stop, including the activity message, when the primary detects a fault. The alternate activates its output and takes over from the primary after a brief delay when the activity message ceases.

Errors in voting logic can cause both outputs to be active or inactive at the same time, or cause outputs to flutter on and off.A more reliable form of voting logic involves an odd number of three devices or more. This is ustilised in our MongoDB Database Replication. All perform identical functions and the outputs are compared by the voting logic. The voting logic establishes a majority when there is a disagreement, and the majority will act to deactivate the output from other device(s) that disagree. A single fault will not interrupt normal operation

 

For our Track Engines, all are active but each backs up the other. This can be configured in cyclical or paired back-ups. Each Track Engine must also be on a different physical server.. 


Panel
borderColorsilver
borderWidth1

On this page:

Table of Contents
maxLevel3
indent10px

Redundancy

  • Management Servers: each Management Server is duplicated, and so has a back-up Management Server. Between the primary Management Sever and the alternate Management Server, a heartbeart pings back and forth every two seconds. If a heartbeat does not return within 10 seconds, the receiving Management Server marks the other as 'down'. If the primary Management Server goes down, the back-up Management Server swiftly takes control of the primary's Track Engines and Radar, ensuring no break or failure in the system.
  • Track Engines: Track Engines back-up one another. Under Topology, you can configure which Track Engines back up which. In this example, the Track Engines back-up one another cyclically, which is probably the most logical back up configuration. If one Track Engine fails, the designated back-up Track Engine takes control of the failed Track Engine's Radar to ensure no break or failure in the system. However, a Track Engine is only able to support double its allocated number of Radar: it cannot back-up two 'downed' Track Engine. 
  • Topology Manager: this is the software that constantly manages the heartbeat, and initiates a back-up Management Server take-over if the primary Management Serve fails. 

Schematic

  • Database Replica Set: the database is triplicated triplicated and backed up using MongoDB software. For more information, go to Database Replication.
  • Onboard Tracker: the software inside the radar which analyses raw radar data and generates unique target data.
  • Track Engine:- 
    • AID Rule Engine: the rule engine analyses all incoming tracks, looking for behaviours that would indicate an incident had occurred. For example, a stopped vehicle, or a pedestrian in the wrong area. 
    • Track Recorder: this records all tracks processed by a Track Engine for posterity. These recorded tracks are not analysed as Live data. Each Track Engine has its own Track Recorder. 

Third Party Systems

If you have your own management system connected to the Management Server, it is necessary that your software can identify if and when the primary Management Server fails and the system is transferred to the back-up Management Server. This is because your management system will also have to transfer to the back-up Management Server. Third party management systems cannot be connected to both the primary and alternate Management Servers at any one time, because only the primary will allow external connections. 

Related information

Filter by label (Content by label)
showLabelsfalse
cqllabel in ("witness","redundancy","backup","database","system","topology") and space = "TUN"