Distributed Consensus in MongoDB's Replication System

27
Distributed Consensus in MongoDB Spencer T Brody Senior Software Engineer at MongoDB @stbrody

Transcript of Distributed Consensus in MongoDB's Replication System

Page 1: Distributed Consensus in MongoDB's Replication System

Distributed Consensus in MongoDB

Spencer T BrodySenior Software Engineer at MongoDB

@stbrody

Page 2: Distributed Consensus in MongoDB's Replication System

Agenda

• Introduction to consensus• Leader-based replicated state machine• Elections and data replication in MongoDB• Improvements coming in MongoDB 3.2

Page 3: Distributed Consensus in MongoDB's Replication System

Why use Replication?

• Data redundancy• High availability

Page 4: Distributed Consensus in MongoDB's Replication System

What is Consensus?

• Getting multiple processes/servers to agree on something• Must handle a wide range of failure modes

• Disk failure• Power outage• Clock skews• Network partitions• Machine freezes

Page 5: Distributed Consensus in MongoDB's Replication System

Basic consensus

State Machine

X 3

Y 2

Z 7

State Machine

X 3

Y 2

Z 7

State Machine

X 3

Y 2

Z 7

Page 6: Distributed Consensus in MongoDB's Replication System

Leader Based Consensus

State Machine

X 3

Y 2

Z 7

Replicated Log

X 1⬅️

Y 2⬅️

X 3⬅️

State Machine

X 3

Y 2

Z 7

Replicated Log

X 1⬅️

Y 2⬅️

X 3⬅️

State Machine

X 3

Y 2

Z 7

Replicated Log

X 1⬅️

Y 2⬅️

X 3⬅️

Page 7: Distributed Consensus in MongoDB's Replication System

Agenda

• Introduction to consensus• Leader-based replicated state machine• Elections and data replication in MongoDB• Improvements coming in MongoDB 3.2

Page 8: Distributed Consensus in MongoDB's Replication System

Elections

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

Page 9: Distributed Consensus in MongoDB's Replication System

Elections

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

Page 10: Distributed Consensus in MongoDB's Replication System

Elections

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

Page 11: Distributed Consensus in MongoDB's Replication System

Elections

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

Page 12: Distributed Consensus in MongoDB's Replication System

Elections

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

Page 13: Distributed Consensus in MongoDB's Replication System

Data Replication

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

Page 14: Distributed Consensus in MongoDB's Replication System

Agenda

• Introduction to consensus• Leader-based replicated state machine• Elections and data replication in MongoDB• Improvements coming in MongoDB 3.2

Page 15: Distributed Consensus in MongoDB's Replication System

Agenda

• Introduction to consensus• Leader-based replicated state machine• Elections and data replication in MongoDB• Improvements coming in MongoDB 3.2

• Goals and inspiration from Raft Consensus Algorithm• Preventing double voting• Liveness detection• Calling for elections

Page 16: Distributed Consensus in MongoDB's Replication System

Goals for MongoDB 3.2

• Decrease failover time• Speed up detection and resolution of stale primary situations

Page 17: Distributed Consensus in MongoDB's Replication System

Finding Inspiration in Raft

• “In Search of an Understandable Consensus Algorithm” by Diego Ongaro: https://ramcloud.stanford.edu/raft.pdf

• Designed to address the shortcomings of Paxos• Easier to understand• Easier to implement in real applications

• Provably correct• Remarkably similar to what we’re doing already

Page 18: Distributed Consensus in MongoDB's Replication System

Raft Concepts

• Term (election) IDs• Liveness monitoring using existing data replication channel• Asymmetric election timeouts

Page 19: Distributed Consensus in MongoDB's Replication System

Preventing Double Voting

• Can’t vote for 2 nodes in the same election• Pre-3.2: 30 second vote timeout• Post-3.2: Term IDs• Term:

• Monotonically increasing ID• Incremented on every election *attempt*• Lets voters distinguish elections so they can vote twice quickly in

different elections.

Page 20: Distributed Consensus in MongoDB's Replication System

Liveness Detection

• Pre-3.2: Heartbeats• Sent every two seconds from every node to every other node• Volume increases quadratically as nodes are added to the replica set

• Post-3.2: Extra metadata sent via existing data replication channel• Utilizes chained replication• Faster heartbeats = faster elections and detection of stale primaries

Page 21: Distributed Consensus in MongoDB's Replication System

Data Replication

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

X 3Y 2Z 7

X ⬅️1

Y ⬅️2

X ⬅️3

Page 22: Distributed Consensus in MongoDB's Replication System

Determining When To Call For An Election

• Tradeoff between failover time and spurious failovers• Node calls for an election when it hasn’t heard from the primary within

the election timeout• Election timeout is now configurable – starting in 3.2

Page 23: Distributed Consensus in MongoDB's Replication System

Determining When To Call For An Election

• Prior to 3.2, election timeout was the same for all nodes• Starting in 3.2:

• Election timeout is varied randomly for each node• Varying timeouts help reduce tied votes• Fewer tied votes = faster failover

Page 24: Distributed Consensus in MongoDB's Replication System

Conclusion

• MongoDB 3.2 will have• Faster failovers• Faster error detection• More control to prevent spurious failovers

• This means your systems are• More stable• More resilient to failure• Easier to maintain

Page 25: Distributed Consensus in MongoDB's Replication System

Questions?

Page 26: Distributed Consensus in MongoDB's Replication System

#MDBDaysmongodb.com

Get your technical questions answered

In the foyer, 10:00 - 17:00By appointment only – register in person

Page 27: Distributed Consensus in MongoDB's Replication System

Tell me how I did today on Guidebook and enter for a chance to win one of these

How to do it: Download the Guidebook App

Search for MongoDB Silicon Valley Submit session feedback