Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Cluster Membership] Improve disaster recovery #9296

Closed
wants to merge 2 commits into from

Conversation

ReubenBond
Copy link
Member

@ReubenBond ReubenBond commented Jan 27, 2025

  • Construct expander graph for monitoring to improve failure detection when there are multiple concurrent failures.
  • More aggressive default IAmAlive updates 5 min period * 2 missed updates (10 min) -> 30s * 3 (90 sec)
  • MembershipTableManager: allow membership updates with equal version and newer IAmAlive values
  • Increase NumProbedSilos from 3 to 10
  • Silos proactively monitor all stale silos
  • Stale silos are skipped when determining how many votes are required to evict a silo.
  • Account for some local clock misconfigurations in ValidateInitialConnectivity by snapping to latest IAmAliveTime
  • Include intermediary silo vote in table after failed indirect probe
Microsoft Reviewers: Open in CodeFlow

* Construct expander graph for monitoring to improve coverage on larger clusters
* More aggressive default IAmAlive updates 5 min period * 2 missed updates (10 min) -> 30s * 3 (90 sec)
* MembershipTableManager: allow membership updates with equal version and newer IAmAlive values
* Increase NumProbedSilos from 3 to 10
* Silos proactively monitor all stale silos
* Account for some local clock misconfigurations in ValidateInitialConnectivity by snapping to latest IAmAliveTime
* Include intermediary silo vote in table after failed indirect probe
// Include the indirect probe silo's vote as well, if it exists.
if (indirectProbingSilo is not null)
{
entry.AddOrUpdateSuspector(indirectProbingSilo, now, clusterMembershipOptions.NumVotesForDeathDeclaration);
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Include the intermediary silo's address in the suspectors list, counting it as a unique vote.

@@ -11,6 +11,7 @@
using System.Text;
using System.Text.Json;
using System.Text.Json.Serialization;
using Orleans.Serialization.Configuration;
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is likely superfluous

@ReubenBond
Copy link
Member Author

I want to split this into multiple PRs, one per logical change... I'll close this once I have.

@ReubenBond ReubenBond closed this Jan 29, 2025
@ReubenBond ReubenBond deleted the fix/disaster-recovery/1 branch February 5, 2025 20:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants