Levels of Data Protection
Backing-up and Restoring Data, describes the role of the system databanks
TRANSDBwhen used in conjunction with backup and restore, in protecting data against loss.
Databank shadowing provides an even higher level of protection. Listed below are the different ways in which data can be protected from loss (from the least amount of protection to the highest).
All Databanks on One Disk and No Logging
If a databank is lost with this level of protection, it is only possible to continue operations from the last backup copy (all changes since the last backup was taken are lost).
Databanks can be lost due to accidental deletion, disk crashes (which can destroy all files on a disk), etc. This level of protection is not recommended except for trash databanks with unimportant contents.
Logging, with LOGDB and TRANSDB on a Separate Disk from the Data
TRANSDBare vital databanks if the system stops or if any databanks are lost. Because of this,
TRANSDBshould be stored on separate disks, as shown in the following figure:
Application data should be stored on the
TRANSDBdisk if it cannot be stored separately.
If a databank is lost, it can be restored to its original state by applying the transactions in
TRANSDBto a restored backup of the databank.
This may take some time, especially if the databank is large and if there is a lot of transaction information stored in
Caution: If the databank disk and the TRANSDB or LOGDB disk are handled by the same disk controller, a disk controller failure may cause both disks to crash.
This security level gives a high degree of security and is recommended for databanks containing important data used in a system where the delay before the system is restored after a crash is not critical.
To assure this high degree of security, backup files should always be stored on separate removable media (e.g. CD/RW).
Shadowing, with Shadows on a Separate Disk
Shadows should always be stored on a separate disk from the masters to protect them from a total disk crash that could destroy both the master and shadow databanks.
It is also advisable to use separate disk controllers to assure that a corrupt disk controller does not destroy the disks holding both the masters and the shadows.
If a databank is lost, its shadow can be transformed into a master and the shadow automatically takes over with no loss of data.
Since shadows are updated after the master, and operations are saved in
TRANSDBuntil the shadow is updated, it is important that
TRANSDBis consistent when a shadow is transformed.
To ensure this, you should shadow
TRANSDB. We strongly recommend that
TRANSDBand its shadow are stored on separate disks, as shown in the following diagram:
This arrangement gives a high degree of security and is recommended for databanks containing important data used in a system where it is vital to be able to get the system running again quickly after a disk crash.
Shadowing and Logging
Combining shadowing and logging, see Backing-up and Restoring Data, gives the highest level of data protection.
If logging is used, the data is protected if both the master and the shadow disks become corrupted.
And, when shadowing is combined with logging (with
LOGDBon a third disk) and backups are regularly taken to separate media (CD/RW, etc.), then data is always protected if any two of the disks crash, for example:
Of course, additional disks can be used, just as long as the databanks that are separated above are not placed on the same disks. If you only have two disk drives available and all the databanks are shadowed, then logging is of little value. Shadowing
LOGDBwill not increase data protection significantly in this configuration.
Different degrees of data security can be used for different databanks, depending on the importance of the data. It is however important that all inter-dependent databanks (because of foreign key relationships, etc.) have the same level of protection. Otherwise logical inconsistencies may result if there is a disk crash.
Mimer Information Technology AB
Phone: +46 18 780 92 00