An apparatus for deterministically performing active-active failover of
redundant server blades hot-pluggable into a backplane of a network
storage appliance chassis is disclosed. Each server monitors the other's
heartbeat on a respective path in the backplane. Other paths between the
two servers on the backplane enable one server to reliably kill the other
server and take over its identity on the network in response to detecting
a stopped heartbeat of the other server. The apparatus is superior to a
conventional heartbeat link between servers in separate chassis, such as
an Ethernet cable, because it is not prone to user removal or damage
since the backplane cannot be removed by a user while the appliance is
operational and enables each server to know a true heartbeat failure has
occurred, as opposed to failure of a conventional external heartbeat link
causing each server to each think the other has failed.