Mirrored protection costs and limitations

 

There are costs and limitations when using mirrored protection.

 

Costs

The main cost of using mirrored protection is in additional hardware. To achieve high availability and prevent data loss when a disk unit fails, you need mirrored protection for all the disk pools. This normally requires twice as many disk units. If you want continuous operation and prevention of data loss when a disk unit, IOA, or IOP fails, you need duplicate IOA and IOPs. A model upgrade can be done to get nearly continuous operation and to prevent data loss when any of these failures occur, as well as the failure of a bus. If bus 1 fails, the system cannot continue to operate. Because bus failures are rare, and bus-level protection is not significantly greater than IOP-level protection, you may not find a model upgrade to be cost-effective for your protection needs.

Mirrored protection has a minimal effect on performance. If the buses, IOPs, and IOA are no more heavily loaded on a system with mirrored protection than they are on an equivalent system without mirrored protection, then the performance of the two systems should be approximately the same.

In deciding whether to use mirrored protection on your system, evaluate the cost of potential downtime against the cost of additional hardware, over the life of the system. The additional cost in performance or system complexity is typically negligible. You should also consider other availability and recovery alternatives, such as device parity protection. Mirrored protection normally requires twice as many disk units. For concurrent maintenance and higher availability on systems with mirrored protection, other disk-related hardware may be required.

 

Limitations

Although mirrored protection can keep the system available after disk-related hardware failures occur, it is not a replacement for save procedures. There can be multiple types of disk-related hardware failures, or disasters (such as flood or sabotage) that require backup media.

Mirrored protection cannot keep your system available if the remaining disk unit in the mirrored pair fails before the first failing disk unit is repaired and mirrored protection is resumed. If two failed disk units are in different mirrored pairs, the system is still available and normal mirrored protection recovery is done because the mirrored pairs are not dependent on each other for recovery. If a second disk unit of the same mirrored pair fails, the failure may not result in a data loss. If the failure is limited to the disk electronics, or if the service representative can successfully use the save disk unit data function to recover all of the data, no data is lost.

If both disk units in a mirrored pair fail causing data loss, the entire disk pool is lost and all disk units in the disk pool are cleared. You must be prepared to restore your disk pool from the backup media and apply any journal changes.

When starting the mirrored protection operation, objects that are created on a preferred disk unit may be moved to another disk unit. The preferred disk unit may no longer exist after mirror protection is started.

 

Parent topic:

Mirrored protection concepts

Related concepts
Concurrent maintenance

Related information
Applying any journal changes