Guardian (operating system)

Guardian (operating system)
Name	Guardian
Developer	Tandem Computers
Source model	Proprietary software
Working state	Legacy, succeeded by NonStop OS
Marketing target	Transaction processing, Fault-tolerant computing
Kernel type	Message passing kernel
Ui	Command-line interface
License	Proprietary

Guardian (operating system). Guardian is a proprietary, fault-tolerant operating system developed by Tandem Computers for its NonStop server systems. Designed from the ground up for continuous availability, it pioneered a modular, message passing architecture where independent processors cooperated without shared memory. The system became renowned for its use in critical online transaction processing (OLTP) applications within sectors like banking, telecommunications, and stock exchanges.

Overview

Guardian forms the software core of the Tandem NonStop series, a line of hardware renowned for its "failover" capabilities. The operating system's fundamental design principle is that no single hardware or software failure should halt the entire system. It achieves this through a loosely coupled, multiprocessor architecture where each processor, termed a CPU, runs its own copy of the kernel and communicates via a high-speed, duplex bus. This design inherently supports parallel computing and linear scalability, allowing processing power to be added incrementally. Guardian's environment is process-oriented, with critical applications typically running as multiple, coordinated processes across separate processors for redundancy.

History

The development of Guardian began in the mid-1970s at Tandem Computers, a company founded by James Treybig with the explicit goal of building non-stop computers. The first system, the Tandem NonStop I, shipped in 1976 running the initial version of the operating system. Key architects of the system included engineers like James Katzman. Its creation was directly driven by the growing demand from the financial industry and other sectors for systems that could process transactions around the clock without downtime. Throughout the 1980s and 1990s, as Tandem was acquired first by Compaq and later by Hewlett-Packard, Guardian evolved but retained its core architectural principles. It was eventually succeeded by NonStop OS, which incorporated POSIX compliance and support for Itanium and x86 platforms.

Architecture

Guardian's architecture is built upon a message passing kernel, eliminating dependencies on shared memory and creating natural fault containment boundaries. The system is organized around a hierarchy of components: the lowest level is the physical processor, which hosts a self-contained kernel. Multiple processors are grouped into a node, and nodes are connected via LAN or proprietary fiber optic links to form a cluster. Inter-process communication is handled through pipes and events, with messages routed by the kernel. The file system is itself a set of processes, providing disk mirroring and access to SQL databases like NonStop SQL. This entire structure is managed by the Tandem Guardian system process which oversees configuration and recovery.

Features

The operating system's primary feature is its comprehensive approach to high availability. It provides process pairing, where a backup process on a different processor mirrors a primary process and can take over execution within milliseconds during a failure. Guardian supports online maintenance, allowing hardware components like memory boards or I/O controllers to be replaced without shutting down applications. Its transaction monitoring facility (TMF) ensures ACID properties for database transactions. The system also includes robust security features, including audit trail logging and access control lists. For development, it offered proprietary languages like TAL as well as later support for C, COBOL, and Java.

Usage and deployment

Guardian found its most significant deployment in industries where system failure equated to massive financial loss or operational crisis. Major banks used it for ATM networks, electronic funds transfer, and core banking systems. Telecommunications companies, including many RBOCs, relied on it for call detail record generation and SS7 networks. It was also the platform of choice for NASDAQ and other stock exchanges for trade matching and clearance. Beyond finance, it was used in point of sale networks for large retailers, reservation systems for airlines, and supervisory control and data acquisition (SCADA) in industrial settings.

Development and variants

Application development for Guardian originally utilized the proprietary TAL and the ENSCRIBE database system. The platform later expanded to support NonStop SQL and tools like Pathway for building transaction processing monitors. As the platform evolved under Hewlett-Packard, a major variant emerged: NonStop OS. This successor operating system maintained Guardian's fault-tolerant core but introduced a POSIX-compliant Open System Services environment, allowing applications written for Unix and Linux to be ported. This evolution enabled the NonStop server line to transition from proprietary MIPS processors to industry-standard Itanium and later x86-64 architectures, while preserving the legendary reliability of the original Guardian system.

Category:Proprietary operating systems Category:Fault-tolerant computer systems Category:Tandem Computers