Motivation

Partition Map Exchange is an internal process crucial for Ignite cluster maintaining consistent view of partitions distribution across all nodes in the cluster. Any event triggering change of partitions distribution triggers PME as well, e.g. server nodes joining and leaving, dynamic caches starts etc.

PME consists of two phases:

1. On the first phase coordinator notifies all nodes about starting new exchange process and waits for all nodes to reply with their local partition maps.
2. On the second phase coordinator processes all received local maps, prepares full partition map and sends it to all other nodes.

The important thing about PME is that when it is in progress no new transactions can be started as partition map is changing. So if PME hangs for any reason (bug in code , undelivered messages, slow nodes) the whole cluster freezes requiring manual intervention to bring it back to operational state (usually it means restarting nodes that prevents PME to finish).

Proposed solution is to stop nodes automatically in known situations in which PME hangs.

...

When coordinator on phase 1 detects that particular nodes don't reply in time with their local partition maps, it may decide to forcibly stop these nodes to unblock exchange.

It should be possible for user to configure a minimal number of copies. If stopping these nodes leads to partition loss coordinator checks user-provided policy to make this decision. If user allowed such actions coordinator proceeds with stopping otherwise warning is printed to logs.If there is no risk of partition loss then coordinator stops nodes without any additional checkswould cause some partitions to have less copies, coordinator should print warning to logs and keep waiting.

2 Non-coordinator node not applying full partition map

When non-coordinator node (say nodeA ) has sent local partition map successfully but doesn't receive full partition map in time it should check status of its exchange on coordinator .

If coordinator informs that exchange has already been finished nodeA should stop itself as its partition map is out-of-date with the rest of the cluster.

...

When coordinator node detects that it received all local partition maps but didn't send back full partition map it should stop itself.

Risks and Assumptions

Proposal requires defining new policy in public API for scenario#1, new protocol should be developed for scenario#2 (non-coordinator node requests status of specific exchange from coordinator).

...