ExternalVendorCode/tahoe-lafs
1
0
Fork 0
mirror of https://github.com/tahoe-lafs/tahoe-lafs.git synced 2024-12-19 04:57:54 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

some words about failures

Browse Source
This commit is contained in:
Jean-Paul Calderone 2020-11-06 12:57:52 -05:00
parent 4c22605e26
commit 5828de8cd9
1 changed files with 23 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
docs/grid-introducer-internals.rst
View File

@ -108,3 +108,26 @@ Finally,
all locally cached announcements are available to be used to initialize ``NativeStorageServer`` instances. all locally cached announcements are available to be used to initialize ``NativeStorageServer`` instances.
The client can periodically repeat this process to discover new announcements and changes to existing announcements. The client can periodically repeat this process to discover new announcements and changes to existing announcements.
Failure Modes
-------------
Grid Introducer imposes the following requirements:
* Storage servers must pro-actively publish their announcement to N servers.
If a new server joins the grid the storage server must push their existing announcement to it.
If a storage server's announcement changes it must push the new announcement to all storage servers on the grid.
* If storage servers cannot communicate with each other then announcements cannot be uploaded or updated.
* If storage servers are full then announcements cannot be uploaded
(and possibly cannot be updated).
* Storage servers must retain the write capability for their announcement object.
It must be kept secret or another agent will be able to forge announcements.
It must not be lost or the storage server will be unable to update its announcement without re-enrollment.
* An administrator must retain the grid introducer state.
It must be kept secret or another agent will be able to control server enrollment.
It must not be lost or the administrator will be unable to manage the grid without distributing new configuration to all clients.
* At least one storage server from the list of bootstrap storage servers must remain reachable as long as any clients exist which will bootstrap from that list.