Switchovers

A switchover occurs when the active Oracle® Enterprise Session Border Controller stops being the active system, and the standby system takes over that function. There are two kinds switchovers: automatic and manual.

Automatic Switchovers

Automatic switchovers are triggered without immediate intervention on your part. ESBCs switch over automatically in the following circumstances:

  • When the active ESBC's health score of drops below the threshold you configure.
  • When a time-out occurs, meaning that the active ESBC has not has not sent checkpointing messages to the standby ESBC within the allotted time.

    The active ESBC might not send checkpointing messages for various reasons such as link failure, communication loss, or advertisement loss. Even if the active ESBC has a perfect health score, it will give up the active role if it does not send a checkpoint message or otherwise advertise its status within the time-out window. Then the standby ESBC takes over as the active system.

When an automatic switchover happens, the ESBC that has just become active sends an ARP message to the switch. This message informs the switch to send future messages to its MAC address. The ESBC that has just become standby ignores any messages sent to it.

Manual Switchovers

You can trigger a manual switchover in the HA node by using the ACLI notify berpd force command. This command forces the two ESBCs in the HA node to trade roles. The active system becomes standby, and the standby becomes active.

In order to perform a successful manual switchover, the following conditions must be met.

  • The ESBC from which you trigger the switchover must be in one of the following states: active, standby, or becoming standby.
  • A manual switchover to the active state is only allowed on a ESBC in the standby or becoming standby state if it has achieved full media, signaling, and configuration synchronization.
  • A manual switchover to the active state is only allowed on a ESBC in the standby or becoming standby state if it has a health score above the value you configure for the threshold.

When you force a switch-over manually, the new active system displays a message - Standby to BecomingActive peer relinquishing control we're the healthiest.

Refer to the following example of a switchover log for an HA SBC that displays this message.

ORACLE2# Dec 17 16:38:08.321: Standby to BecomingActive peer relinquishing control we're the healthiest
ORACLE2#