Denis, Dmitriy, I am not sure I agree here, please see close analogue - JVM itself, and its parameter ExitOnOutOfMemoryError,- it is not default.
If server node is started from sh script, kill OK for me, as process is controlled only by ignite. It is sufficient to add option to override default for sh script. Users interested in this behaviour may also setup this option to "kill" If server node is started from java, it should never kill whole process. This mode is not prohibited by docs, users are allowed to start several nodes in one process, run its own application logic in this node. Why we should kill user code running? It could be negative surprise to user. вт, 13 мар. 2018 г. в 8:26, Dmitriy Setrakyan <dsetrak...@apache.org>: > On Tue, Mar 13, 2018 at 1:18 AM, Andrey Kornev <andrewkor...@hotmail.com> > wrote: > > > I believe the only reasonable way to handle a critical system failure (as > > it is defined in the IEP) is a JVM halt (not a graceful exit/shutdown!). > > The sooner - the better, lesser impact. There’s simply no way to reason > > about the state of the system in a situation like that, all bets are off. > > Any other policy would only confuse the matters and in all likelihood > make > > things worse. > > > > In practice, SREs/Operations would very much rather have a process die a > > quick clean death, than let it run indefinitely and hope that it’ll > somehow > > recover by itself at some point in future, potentially degrading the > > overall system stability and availability all the while. > > > > Completely agree. >
