处理网络分区

In distributed systems, a network partition happens when parts of the system can no longer communicate with each other due to network failures. Think of it like a bridge collapsing, splitting a city into disconnected districts.

This can lead to a "split-brain" scenario, where different parts of your Erlang cluster believe they are the only active ones. This often results in data inconsistency and service disruption.

Erlang nodes communicate by forming a distributed system. They connect to each other using a process called net_kernel. When a node starts, it tries to find and connect to other known nodes.

• Use -sname for short names (local network).
• Use -name for full names (across networks).
• All nodes must share the same magic cookie for security.

Here's a simple module. Compile it and run MyNode.get_name(). in the Erlang shell after starting with erl -sname mynode:

Erlang provides built-in mechanisms to detect when a node disconnects. The monitor_node/2 function allows a process to receive messages when the status of another node changes (e.g., up or down).

This is crucial for reacting to unexpected node failures or network issues. Let's see how a process can monitor another node:

While monitor_node is powerful, it primarily tells you if a TCP connection to a node has dropped. This might not always mean a full "partition".

Short network blips or a slow network can cause temporary disconnections, leading to false positives. A true partition implies a sustained inability to communicate between groups of nodes.

• Network lag can delay detection.
• Brief outages might not warrant full system reaction.
• Application-level health checks are often needed.

To avoid "split-brain" in a network partition, distributed systems often use quorum. A quorum is the minimum number of nodes that must agree on an operation (or simply be reachable) for it to be considered valid.

The "majority wins" strategy is a common quorum approach:

• Only the partition containing more than half of the total nodes is allowed to continue operations.
• Other partitions (minority) should halt or become read-only.

This prevents conflicting updates and ensures data consistency.

To implement "majority wins," each node needs to know the total cluster size and which nodes are currently reachable. This creates a "membership oracle".

While a full implementation is complex, we can simulate a basic reachability check by having each node periodically "ping" its known peers. If a node can reach a majority of its peers, it considers itself "active".

Here's a conceptual module for a node to ping others:

When a network partition occurs and a minority partition is identified, it's crucial to prevent it from causing harm (e.g., writing conflicting data). This process is called fencing.

Fencing ensures that only the "winning" (majority) partition can continue to operate and modify shared state. Common fencing actions include:

• Shutting down services in the minority partition.
• Disabling write operations.
• Isolating resources (e.g., database access).

The goal is to prevent "split-brain" from corrupting data.

After a network partition heals and nodes reconnect, their states might have diverged. This is because the active partition continued operations while the isolated ones were inactive or performing different actions.

Data reconciliation is the process of resolving these conflicts and bringing all nodes back to a consistent state. Common strategies include:

• Last Write Wins (LWW): The most recent update (based on timestamp) is chosen.
• Conflict Resolution Functions: Application-specific logic to merge data.

Designing for eventual consistency is key.

We've explored how to handle network partitions, a critical aspect of building resilient distributed Erlang applications. Key takeaways include:

• Detection: Beyond simple disconnections, using application-level health checks.
• Quorum: Employing strategies like "majority wins" to ensure only one active partition.
• Fencing: Preventing minority partitions from causing data inconsistencies.
• Reconciliation: Strategies for merging divergent states when partitions heal.

These principles help your Erlang systems remain available and consistent even in the face of network instability.