[
https://issues.apache.org/jira/browse/CASSANDRA-13704?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18042237#comment-18042237
]
Jeff Jirsa edited comment on CASSANDRA-13704 at 12/2/25 3:42 PM:
-----------------------------------------------------------------
It’s probably strictly true that a large enough error in membership view could
still allow coordinator acting as replicas to think they own a range that the
rest of the cluster doesn’t believe it owns, so I assume it’s imperfect but
it’s strictly better than not existing
Agree with Scott’s deeper point though - that it’s nonoptional and everyone
should be running with this patch
was (Author: jjirsa):
It’s probably strictly true that a large enough error in membership view could
still allow replicas to think they own a range that the rest of the cluster
doesn’t believe it owns, so I assume it’s imperfect but it’s strictly better
than not existing
Agree with Scott’s deeper point though - that it’s nonoptional and everyone
should be running with this patch
> Safer handling of out of range tokens
> -------------------------------------
>
> Key: CASSANDRA-13704
> URL: https://issues.apache.org/jira/browse/CASSANDRA-13704
> Project: Apache Cassandra
> Issue Type: Bug
> Components: Legacy/Coordination, Legacy/Observability
> Reporter: Sam Tunnicliffe
> Assignee: Caleb Rackliffe
> Priority: Urgent
> Fix For: 4.0.14, 4.1.7, 5.0.1
>
> Attachments: CASSANDRA-13704_5-0_23_ci_summary.html,
> CASSANDRA-13704_5-0_23_results_details.tar.xz,
> CASSANDRA-13704_5-0_24_ci_summary.html,
> CASSANDRA-13704_5-0_24_results_details.tar.xz,
> CASSANDRA-13704_5-0_25_ci_summary.html,
> CASSANDRA-13704_5-0_25_results_details.tar.xz, ci_summary-1.html,
> ci_summary-2.html, ci_summary.html, result_details.tar-1.gz,
> result_details.tar-2.gz, result_details.tar.gz
>
> Time Spent: 8h 10m
> Remaining Estimate: 0h
>
> It is possible for nodes to have a divergent view of the ring, which can
> result in some operations being sent to the wrong nodes. This is an umbrella
> ticket to mitigate such issues by adding logging when a node is asked to
> perform an operation for tokens it does not own. This will be useful for
> detecting when the nodes' views of the ring diverge, which is not highly
> visible at the moment, and also for post-hoc analysis.
> It may also be beneficial to straight up reject certain operations, though
> this will need to balance the risk of performing those ops against the
> consequences rejecting them has on availability.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
