Autonomous service backup and migration

Abstract

A service appliance is installed between a production server running a service applications and service users. Upon being connected with the production server, the service appliance contacts the production server and/or service application and automatically replicates the service data from the service application. As additional service data is added to or modified by the service application of the production server, the service appliance automatically updates its replica of the data. In the event that a production server is unable to provide its service to users, the service appliance can transparently intervene to maintain service availability using the replica of the data. When an operational production server is connected with the service appliance, the service appliance can automatically copy its service data to the service application of the operational production server. The operational production server can be the same as the original production server or a new production server.

1 . A method of ensuring service availability, the method comprising:
 connecting a service appliance to a network including a first production server providing a first service and a client system accessing the service, such that network traffic between the first production server and the client system is received by the service appliance;   synchronizing a second service provided by the service appliance with the first service;   monitoring the first service; and   in response to a determination that the production server is unavailable, substituting the second service in place of the first service and monitoring the network for a third service;   in response to a determination that the third service is available and capable of handling access by the client system, synchronizing the third service with the second service; and   in response to the completion of synchronization of the third service with the second service, substituting the third service in place of the second service, such that the third service is responsive to client system communications directed to the first service;   wherein synchronizing the second service with the first service comprises:
 determining a configuration of the first service; 
 configuring the second service to be compatible with the configuration; and 
 replicating service data of the first service;
 wherein the replicating service data only replicates a subset of the service data on the production server. 
 
   
     
     
         2 . A method of ensuring service availability, the method comprising:
 connecting a service appliance to a network including a first production server providing a first service and a client system accessing the service, such that network traffic between the first production server and the client system is received by the service appliance;   synchronizing a second service provided by the service appliance with the first service;   monitoring the first service; and   in response to a determination that the production server is unavailable, substituting the second service in place of the first service and monitoring the network for a third service;   in response to a determination that the third service is available and capable of handling access by the client system, synchronizing the third service with the second service; and   in response to the completion of synchronization of the third service with the second service, substituting the third service in place of the second service, such that the third service is responsive to client system communications directed to the first service;   wherein the determination that the production server is unavailable is signaled to the service appliance.   
     
     
         3 . The method of  claim 2  wherein the signal that the production server is unavailable is made by an administrator using the service appliance user interface. 
     
     
         4 . The method of  claim 2  wherein the signal that the production server is unavailable is made by the service appliance using a health detection mechanism. 
     
     
         5 . The method of  claim 4  wherein the health detection mechanism communicates the consequences of any changes to the configuration of health detection mechanism to a human administrator. 
     
     
         6 . The method of  claim 4  wherein a record of each change to the configuration of the health detection mechanism is stored. 
     
     
         7 . The method of  claim 2  wherein the signal that the production server is unavailable is made by a monitoring service. 
     
     
         8 . The method of  claim 7  wherein the monitoring service is provided by a monitoring server on the network. 
     
     
         9 . A method of ensuring service availability, the method comprising:
 connecting a service appliance to a network including a first production server providing a first service and a client system accessing the service, such that network traffic between the first production server and the client system is received by the service appliance;   synchronizing a second service provided by the service appliance with the first service;   monitoring the first service; and   in response to a determination that the production server is unavailable, substituting the second service in place of the first service and monitoring the network for a third service;   in response to a determination that the third service is available and capable of handling access by the client system, synchronizing the third service with the second service; and   in response to the completion of synchronization of the third service with the second service, substituting the third service in place of the second service, such that the third service is responsive to client system communications directed to the first service;   wherein the determination that the third service is available and capable of handling access by the client system is signaled to the service appliance.   
     
     
         10 . The method of  claim 9  wherein the signal that the third service is available and capable of handling access by the client system is made by an administrator using the service appliance user interface. 
     
     
         11 . The method of  claim 9  wherein the signal that the third service is available and capable of handling access by the client system is made by the service appliance using a health detection mechanism. 
     
     
         12 . The method of  claim 11  wherein the health detection mechanism communicates the consequences of any changes to the configuration of health detection mechanism to a human administrator. 
     
     
         13 . The method of  claim 11  wherein a record of each change to the configuration of the health detection mechanism is stored. 
     
     
         14 . The method of  claim 9  wherein the signal that the third service is available and capable of handling access by the client system is made by a monitoring service. 
     
     
         15 . The method of  claim 14  wherein the monitoring service is provided by a monitoring server on the network. 
     
     
         16 . A method of ensuring service availability, the method comprising:
 connecting a service appliance to a network including a first production server providing a first service and a client system accessing the service, such that network traffic between the first production server and the client system is received by the service appliance;   synchronizing a second service provided by the service appliance with the first service;   monitoring the first service;   monitoring the network traffic sent to the first production server from the client system; and   in response to a determination that the production server is unavailable, substituting the second service in place of the first service and monitoring the network for a third service;   in response to a determination that the third service is available and capable of handling access by the client system, synchronizing the third service with the second service;   in response to the completion of synchronization of the third service with the second service, substituting the third service in place of the second service, such that the third service is responsive to client system communications directed to the first service; and   in response to a determination that the second service is capable of responding to a client service request without assistance from the first production service, selectively substituting the second service in place of the first service on a request-by-request basis.