A portion of the disclosure of this patent document contains material that is subject to copyright protection. The copyright owner has no objection to the facsimile reproduction by anyone of the patent document or the patent disclosure, as it appears in the United States Patent and Trademark Office patent files or records, but otherwise reserves all copyright rights whatsoever. The following notice applies to the software and data as described below and in the drawings that form a part of this document: Copyright 2013, Cloudera, Inc., All Rights Reserved.
The architecture of a distributed file system such as a Hadoop Distributed File System (HDFS) typically has a name node that hosts the file system index, and a cluster of data nodes, each of which hosts units of data called blocks. The name node is the single point of failure that impacts the availability of a HDFS, as the system relies on the file system index hosted by the name node to access the data stored in the data nodes. In order to lessen the impact of an HDFS outage to internal and external users, and directly serve user requests in real time, high availability (HA) can be added to the HDFS name node. An HA architecture allows the main name node to fail over to a backup name node.
Even though in an HA architecture, only one name node can be active and send commands to data nodes, in certain scenarios, a data node may receive commands from name nodes that are not currently active. This anomaly may arise under various circumstances. For example, if one of the network interfaces of the first name node fails, and a decision to change the active name node from the first name node to a second name node is made, the first name node may not be aware of the decision. In this case, the first name node may continue to send commands, and since the second name node is the active or master name node, it may also send commands. In another example, the first name node sends a command to a data node. Soon afterward, a failover occurs from the first name node to a second name node. However, if the command is not received or processed by the data node until after the failover because of a delay, such a situation may result in the data node receiving commands from both name nodes.
Similarly, two data nodes may receive the command to delete a replica of the same unit of data, leading to data loss and other issues. For example, a data block may have two replicas hosted on the first and the second data nodes, respectively, but the desired number of replicas is one. The first name node may be initially active and send a command to the first data node to delete the hosted replica. Immediately after sending this command, the first name node may crash and a failover may occur. The second name node may become active without knowing about of the command issued by the first name node. It may then send a command to the second data node to delete the hosted replica, resulting in the deletion of both replicas.
The following description and drawings are illustrative and not to be construed as limiting. Numerous specific details are described to provide a thorough understanding of the disclosure. However, in certain instances, well-known or conventional details are not described in order to avoid obscuring the description. References to one or an embodiment in the present disclosure can be, but not necessarily are, references to the same embodiment; such references concern at least one of the embodiments.
A reference in this specification to “one embodiment” or “an embodiment” means that a particular feature, structure, or characteristic described in connection with the embodiment is included in at least one embodiment of the disclosure. The appearances of the phrase “in one embodiment” in various places in the specification are not necessarily all referring to the same embodiment, nor are separate or alternative embodiments mutually exclusive of other embodiments. Moreover, various features that are described may be exhibited by some embodiments and not by others. Similarly, various requirements which are described may be required for some embodiments but no other embodiments.
The terms used in this specification generally have their ordinary meanings in the art, within the context of the disclosure, and in the specific context in which each term is used. Certain terms used in the disclosure are discussed below, or elsewhere in the specification, to provide additional guidance to the practitioner regarding the description of the disclosure. For convenience, certain terms may be highlighted, for example using italics and/or quotation marks. The use of highlighting has no influence on the scope and meaning of a term; the scope and meaning of a term is the same, in the same context, whether or not it is highlighted. It will be appreciated that the same thing can be said in more than one way.
Consequently, alternative language and synonyms may be used for any one or more of the terms discussed herein, and no special significance is be placed upon whether or not a term is elaborated or discussed herein. Synonyms for certain terms are provided. A recital of one or more synonyms does not exclude the use of other synonyms. The use of examples anywhere in this specification including examples of any terms discussed herein is illustrative only and not intended to further limit the scope and meaning of the disclosure or any exemplified term. Likewise, the disclosure is not limited to the various embodiments given in this specification.
Without intending to further limit the scope of the disclosure, examples of instruments, apparatus, methods and their related results according to the embodiments of the present disclosure are given below. Note that titles or subtitles may be used in the examples for convenience of a reader, which in no way should limit the scope of the disclosure. Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this disclosure pertains. In the case of conflict, the present document, including definitions will control.
One embodiment of the present disclosure includes a method for node fencing. The method includes, for example, receiving transaction requests from data storage coordinators (e.g., name nodes), each transaction request having a transaction identifier, identifying, by a processor, one of the data storage coordinators from the transaction identifiers corresponding to the transaction requests as an active data storage coordinator, and providing a response to a transaction request from the active data storage coordinator. The response may include a block report followed by a heartbeat. In one implementation, the identification may include comparing the transaction identifiers to identify the most recently issued transaction request. The method may further comprise detecting a failover condition when the one of the data storage coordinators is different from a data storage coordinator associated with a transaction request issued proximate to the most recently issued transaction request. In some implementations, the method may include disregarding transaction requests from other data storage coordinators.
A second embodiment of the present disclosure includes a method implemented in a distributed file system including a plurality of data nodes, the method can include, for example, marking each of the plurality of data nodes as untrusted, sending a command to each of the plurality of data nodes, receiving a response from some of the plurality of data nodes, each response including information on data stored in a data node, and changing the state of data nodes providing the response to the command from untrusted to trusted.
In some implementations, the marking may be in response to a name node in the distributed file system becoming an active name node. In one implementation, the method may include sending a block deletion request to one of the plurality of data nodes when the state of each of the plurality of data nodes is changed from untrusted to trusted. In another implementation, the method may include sending a block deletion request to one of the plurality of data nodes when the state of some of the plurality of data nodes is changed from untrusted to trusted and the rest of the plurality of data nodes time out. In one implementation, the response from some of the plurality of data nodes may represent an acknowledgment that the name node sending the command is the active name node. In a further implementation, the response from some of the plurality of data nodes may represent an assurance to accept commands from only the active name node.
A third embodiment of the present disclosure includes a system having, for example, a plurality of data storage controllers in active or standby configuration and a cluster of machines configured to store data. Each machine may include a processor, a disk and a memory having stored there on instructions that when executed by the processor may cause the machine to receive transaction requests having transaction identifiers from the plurality of data storage coordinators, identify from the transaction identifiers a data storage coordinator that is active and provide a response to a transaction request from the data storage coordinator that is active.
A fourth embodiment of the present disclosure includes a system having, for example, a cluster of machines configured to store data and a plurality of data storage controllers in active or standby configuration. Each data storage controller may include a processor, a disk and a memory having stored thereon instructions that when executed by the processor may cause the controller to mark each of the machines in the cluster as untrusted, send a command or message to each of the machines, receive a response from some of the machines, each response including information on data stored in the machine and change the state of machines providing the response to the command from untrusted to trusted.
The file system state may be defined by two types of file system metadata served by the active name node (e.g., name node 1 in
Block locations are usually not written to the edit log, and thus reading from the edit log may not be sufficient to share the file system metadata. As such, the file system may be configured to allow the active and standby name nodes to receive up-to-date block location information via block reports (e.g., 175) from data nodes 135-150. All data nodes in the cluster may be configured with the network addresses of both the active and standby name nodes. Data nodes may send all the block reports, block location updates, and heartbeats to both active and standby name nodes, but act on only block commands issued by the currently active name node. Adverse circumstances may occur where, for example, a data node has pending deletions for which commands were received before a failover, and the newly active name node may not yet be aware of these pending deletions. However, data nodes may inform the name nodes of such pending actions as well. With both up-to-date namespace information and block locations in the standby name node, the system is equipped to perform a failover from the active name node to the standby name node with reduced or no delay.
A distributed file system (e.g., HDFS) client (e.g., 105) may go to the active name node to be served. Since multiple distinct daemons are capable of serving as the active name node for a single cluster, the client generally needs to determine which name node to communicate with at any given time. In order to make this determination, the client may support the configuration of multiple network addresses, one for each of the active and standby name nodes, which collectively represent the HA name service. The name service may be identified by a single logical Uniform Resource Identifier (URI), which is mapped to the two network addresses of the HA name nodes via client-side configuration. The client may try these addresses, and if the client makes a call to the standby name node, a result indicating that it should try elsewhere may be provided to the client. The client may try all the configured addresses in order until an active name node is found.
Data node fencing techniques discussed herein fence or isolate the data nodes from the inactive, failed or otherwise unavailable name node, such that each data node in the cluster recognizes only one name node as the active name node and honors commands from only the active name node, while rejecting commands from the backup name node or a prior active name node that erroneously still believes itself to be active. Implementation of data node fencing effectively avoids split-brained and other scenarios that lead to inconsistent data, data loss or other issues by ensuring that the data nodes make a clean failover from one name node to another.
The network interface 202 can be a networking module that enables the name node to mediate data in a network with an entity that is external to the name node, through any known and/or convenient communications protocol supported by the name node and the external entity. The network interface 202 can communicate with one or more of a network adaptor card, a wireless network interface card (e.g., SMS interface, Wi-Fi interface, interfaces for various generations of mobile communication standards including but not limited to 1G, 2G, 3G, 3.5G, 4G, LTE, etc.), Bluetooth, a router, an access point, a wireless router, a switch, a multilayer switch, a protocol converter, a gateway, a bridge, a bridge router, a hub, a digital media receiver, and/or a repeater.
As used herein, a “module”, a “manager”, an “agent”, a “tracker”, a “handler”, a “detector”, an “interface”, or an “engine” includes a general purpose, dedicated or shared processor and, typically, firmware or software modules that are executed by the processor. Depending upon implementation-specific or other considerations, the module, manager, tracker, agent, handler, or engine can be centralized or its functionality distributed. The module, manager, tracker, agent, handler, or engine can include general or special purpose hardware, firmware, or software embodied in a computer-readable (storage) medium for execution by the processor.
As used herein, a computer-readable medium or computer-readable storage medium is intended to include all mediums that are statutory (e.g., in the United States, under 35 U.S.C. §101) and to specifically exclude all mediums that are non-statutory in nature to the extent that the exclusion is necessary for a claim that includes the computer-readable (storage) medium to be valid. Known statutory computer-readable mediums include hardware (e.g., registers, random access memory (RAM), non-volatile (NV) storage, to name a few) but may or may not be limited to hardware.
In one embodiment, the status tracking agent 206 keeps track of the active or inactive status of the name node. The edit log read/write module 204 manages the reading and possible writing activities with respect to the edit log. The flag manager 210 keeps track of the various states of the data nodes by maintaining one or more flags for each of the data notes. For example, once a name node becomes the active name node, the flag manager 210 may turn off a trust flag for each data node. After the name node receives a block report from a data node, the flag manager 210 will turn on the trust flag for the data node. The communication manager 212 is responsible for communicating with the data nodes. In one example, the communication manager 212 may send a block replication or deletion request to a data node. In another example, it may receive a response from the data node confirming the block deletion. The report manager 214 manages information regarding data distribution on the data nodes. For example, based on the block report received from a data node, the report manager 214 may update the state of data distribution maintained by the name node.
The network interface 302 can be a networking module that enables the name node to mediate data in a network with an entity that is external to the name node, through any known and/or convenient communications protocol supported by the name node and the external entity. The network interface 302 can communicate with one or more of a network adaptor card, a wireless network interface card (e.g., SMS interface, Wi-Fi interface, interfaces for various generations of mobile communication standards including but not limited to 1G, 2G, 3G, 3.5G, 4G, LTE, etc.), Bluetooth, a router, an access point, a wireless router, a switch, a multilayer switch, a protocol converter, a gateway, a bridge, a bridge router, a hub, a digital media receiver, and/or a repeater.
As used herein, a “module”, a “manager”, an “agent”, a “tracker”, a “handler”, a “detector”, an “interface”, or an “engine” includes a general purpose, dedicated or shared processor and, typically, firmware or software modules that are executed by the processor. Depending upon implementation-specific or other considerations, the module, manager, tracker, agent, handler, or engine can be centralized or its functionality distributed. The module, manager, tracker, agent, handler, or engine can include general or special purpose hardware, firmware, or software embodied in a computer-readable (storage) medium for execution by the processor.
As used herein, a computer-readable medium or computer-readable storage medium is intended to include all mediums that are statutory (e.g., in the United States, under 35 U.S.C. 101), and to specifically exclude all mediums that are non-statutory in nature to the extent that the exclusion is necessary for a claim that includes the computer-readable (storage) medium to be valid. Known statutory computer-readable mediums include hardware (e.g., registers, random access memory (RAM), non-volatile (NV) storage, to name a few), but may or may not be limited to hardware.
In one embodiment, the active node tracking agent 306 keeps track of the active name node. The communication manager 308 is responsible for communicating with the name nodes. As one example, the communication manager 308 may receive a block deletion request from a standby name node. As another example, it may send a block report to a standby name node. The data manager 310 is in charge of activities concerning the blocks on the data node, such as replication, deletion, repair, and the like.
In one embodiment, to obtain full information regarding each data node, the communication manager 212 does not send specific requests to all the data nodes at once and waits for a response from each of the data nodes. Instead, when the communication manager 212 next sends a command to a data node or responds to a heartbeat message from a data node in the normal course of operation, it can expect the data node to return the full information. The active name node maintains a queue of commands for each data node which may include, for example, directions to copy blocks from other data nodes or delete replicas of blocks (e.g., when the name node has determined that a block is under- or over-replicated, respectively) at block 415. A user can issue a file-level instruction such as “reduce the replication of file X,” which can cause the name node to translate the file-level instruction to a block-level command such as “remove replica R1 of block B from data node N.” The name node can then queue the deletion command to be sent to data node N the next time data node N sends a heartbeat. In the normal course of operation, each data node periodically sends a heartbeat message to each name node (i.e., active and standby name nodes). The active name node receives the heartbeat messages from the data nodes at block 416. The active name node can then respond to each heartbeat message with a response that includes the highest transaction ID seen by the name node before sending the response. The transaction ID, as described above, is a sequence number that is incremented each time a name node performs a transaction. Upon receiving the transaction ID in response to a heartbeat message, a data node N may use the received transaction ID and the transaction ID last known to the data node to determine if a failover has occurred. Details of this determination are discussed with respect to
At block 425, the communication manager 212 may obtain an acknowledgment from a data node N. The acknowledgment may represent an agreement that the data node N accepts the name node as the active name node. The acknowledgment may further imply that the data node will no longer accept commands from any other name nodes. At block 430, the communication manager 212 may also obtain a block report, including any pending deletions or replications, from the data node N. Including the pending deletions, as if they were real deletions, may ensure that even if block deletions are delayed due to slow local disks or other reasons, the new active name node knows that these blocks are on their way to deletion. In one implementation, the block report may include an acknowledgment (block 425) and/or a promise that the active name node will have full control of the data node. In one implementation, the flag manager 210 may also include a block report flag in the object descriptor for each data node to indicate whether the data node considers the name node active at the time when it begins generating the block report. The report manager 214 may read the block report and be appraised of any actions taken or pending that it may not have been aware of. After receiving the acknowledgment and/or block report from the data node N, the active name node will become fully aware of the status of the data node. With that full awareness, the flag manager 210 flips the trust flag for the data node to true at block 435. In the same manner, the name node can flip the flag on other data nodes to trusted data nodes when each of those data nodes responds with an acknowledgment and a block report or a block report that includes an acknowledgment.
As mentioned above, the active name node has postponed issuing data deletion commands and has queued them instead. Upon flipping a data node's trusted flag to true, the flag manager 210 may check if the trusted flags for all the data nodes are now set to true at block 440 to determine whether it is a good time to issue data deletion commands. Upon confirming that the trust flags for all the data nodes are set to true or that the trust flags for some of the data nodes are set to true while other data nodes have timed out, the report manager 214 may reexamine the status of the blocks in the cluster for potential misreplication (e.g., over-replication), and the communication manager 212 may issue data deletion commands accordingly at block 445. In one implementation, some of the commands may impact blocks with replicas on data nodes that are flagged as trusted. In such a scenario, the active name node may issue the commands to the trusted data nodes without waiting for all the other data nodes to become trusted. In one implementation, if a block is to be purged from the cluster and thus all the replicas need to be deleted, the active name node may safely invalidate all the replicas regardless of the trusted status of the data nodes. On the other hand, upon determining that the trust flag for at least one data node has not yet timed out or is still set to false, the active name node may continue postponing issuing data deletion commands while expecting block reports from additional data nodes at block 450.
At block 525, the communication manager 308 may acknowledge name node 2 as the active name node. In one implementation, the acknowledgment may be a message followed by a packet or heartbeat that is transmitted to the active name node. The acknowledgment message may imply a promise not to accept commands received from then on from other name nodes and possibly a further promise not to act on commands received previously from other name nodes. At block 530, the communication manager 308 may send a full block report created by the data manager 310, including up-to-date information on all block locations, to name node 2. In one implementation, the acknowledgment message may include the block report followed by a heartbeat. In another implementation, the block report may include the list of pending block actions, including one corresponding to command A if the data node has not acted on the command.
At block 535, the communication manager 308 may receive command C from name node 1, along with a transaction identifier TN3, where TN3 is less than TN2. This may occur due to network congestion, slow local disks, or other reasons. However, since the data node already acknowledged name node 2 as the active name node, the data node may ignore command C at block 540.
The data node fencing techniques and protocols discussed above may be applicable to several scenarios in a distributed file system in general. While the data node fencing techniques and the HA architecture discussed throughout this application are applicable to clusters of any size, having more than two name nodes and multiple data nodes, the following scenarios consider a distributed file system cluster that includes two name nodes (name node 1 and 2) and two data nodes (data node 1 and 2) for ease of explanation. In the examples below, a user requests to reduce the number of replicas of a block from two to one.
Standard Failover Scenario.
In this scenario, name node 1 may ask data node 1 containing a replica of a block to delete the replica. Data node 1 may receive the command along with a transaction identifier. Data node 1 may delete the replica, and prior to sending a deletion report, name node 1 may fail over to name node 2. After the failover, both data nodes 1 and 2 may properly acknowledge that name node 2 is active and guarantee that they will not accept commands from name node 1, using the protocol outlined in
Cluster Partition Scenario.
In this scenario, name node 1 may request data node 1 to delete one of the replicas. Data node 1 may receive the command and delete the replica. However, before data node 1 can report the deletion, a network partition may occur. After the partition, name node 1 and data node 1 may be on one side of a cluster, while name node 2 and data node 2 may be on the other side of the cluster. Name node 1 may think that it is still active for some period of time, but name node 2 may be the name node that is in reality active and has write access to the edit logs. Data node 1, which has already deleted a replica, may send a deletion report to name node 1, but because of the partition, it may be unsuccessful in communicating the deletion report to name node 2. Data node 2, on the other hand, remains in communication with name node 2, and may acknowledge it as the active name node. Name node 2 may still consider both data nodes 1 and 2 alive until the data nodes time out. Since name node 2 does not know about the deletion by data node 1, it may still consider the block to be over-replicated. However, according to the data node fencing protocol, it does not send deletion commands because it has not received deletion reports from all the data nodes. Eventually, name node 2 may consider data node 1 unavailable or dead (e.g., data node 1 may time out). Since data node 1, and therefore a replica of the block, is no longer in the picture, the block is no longer over-replicated. Thus, name node 2 does not delete the replica remaining on data node 2.
Split-Brain Scenario.
In this scenario, name node 1 maintains an invalidation queue for each data node and stores data deletion commands in the queues before issuing them. Name node 1 then adds a data deletion command to data node 1's invalidation queue. However, the queue may be backed up, and the command remains unissued. At this time, a failover may occur. Name node 1 may be unaware of the failover and continue considering itself active. Upon detecting a failover, data nodes 1 and 2 may save their states locally. They may acknowledge name node 2, promise not to accept any commands from name node 1, and send empty deletion reports to name node 2. After sending the report, data node 1 may crash or become unavailable. Since name node 2 has received deletion reports and acknowledgments from both data nodes, it may send a request to data node 2 to delete the block. Data node 2 may receive the deletion command and act on it. At this time, data node 1 may restart, and when it is back up, it may look up its last state before failure. In one implementation, this last state may include the acknowledgment or promise that it last made to an active name node. Data node 1 may then communicate with name node 2 directly. Without the acknowledgment or promise included in the last state, data node 1 may have connected to name node 1, which considers itself active and may proceed to issue the command in data node 1's invalidation queue. Data node 1 may then act on the command, resulting in data loss.
In one implementation, the last state may be determined based on the transaction identifier. In a further implementation, keeping the transaction identifier in the data node disks may have applicability for non-HA clusters. For example, when a name node is accidentally restarted from an old snapshot of the file system state, the data nodes may refuse to connect or refuse to process deletions based on the transaction identifiers stored in the disks. If this were not the case, the data nodes might connect to the name node and proceed to delete all of the newer blocks, which would again lead to data loss.
In the example of
The processor may be, for example, a conventional microprocessor such as an Intel Pentium microprocessor or Motorola power PC microprocessor. One of skill in the relevant art will recognize that the terms “machine-readable (storage) medium” or “computer-readable (storage) medium” include any type of device that is accessible by the processor.
The memory is coupled to the processor by, for example, a bus. The memory can include, by way of example but not limitation, random access memory (RAM), such as dynamic RAM (DRAM) and static RAM (SRAM). The memory can be local, remote, or distributed.
The bus also couples the processor to the non-volatile memory and drive unit. The non-volatile memory is often a magnetic floppy or hard disk, a magnetic-optical disk, an optical disk, a read-only memory (ROM), such as a CD-ROM, EPROM, or EEPROM, a magnetic or optical card, or another form of storage for large amounts of data. Some of this data is often written, by a direct memory access process, into memory during execution of software in the computer 600. The non-volatile storage can be local, remote, or distributed. The non-volatile memory is optional because systems can be created with all applicable data available in memory. A typical computer system will usually include at least a processor, memory, and a device (e.g., a bus) coupling the memory to the processor.
Software is typically stored in the non-volatile memory and/or the drive unit. Indeed, for large programs, it may not even be possible to store the entire program in the memory. Nevertheless, it should be understood that for software to run, if necessary, it is moved to a computer-readable location appropriate for processing, and for illustrative purposes, that location is referred to as the memory in this paper. Even when software is moved to the memory for execution, the processor will typically make use of hardware registers to store values associated with the software, and local cache that, ideally, serves to speed up execution. As used herein, a software program is assumed to be stored at any known or convenient location (from non-volatile storage to hardware registers) when the software program is referred to as “implemented in a computer-readable medium.” A processor is considered to be “configured to execute a program” when at least one value associated with the program is stored in a register readable by the processor.
The bus also couples the processor to the network interface device. The interface can include one or more of a modem or network interface. It will be appreciated that a modem or network interface can be considered to be part of the computer system 600. The interface can include an analog modem, isdn modem, cable modem, token ring interface, satellite transmission interface (e.g., “direct PC”), or other interfaces for coupling a computer system to other computer systems. The interface can include one or more input and/or output devices. The I/O devices can include, by way of example but not limitation, a keyboard, a mouse or other pointing device, disk drives, printers, a scanner, and other input and/or output devices, including a display device. The display device can include, by way of example but not limitation, a cathode ray tube (CRT), liquid crystal display (LCD), or some other applicable known or convenient display device. For simplicity, it is assumed that controllers of any devices not depicted in the example of
In operation, the machine 600 can be controlled by operating system software that includes a file management system, such as a disk operating system. One example of operating system software with associated file management system software is the family of operating systems known as Windows® from Microsoft Corporation of Redmond, Wash., and their associated file management systems. Another example of operating system software with its associated file management system software is the Linux operating system and its associated file management system. The file management system is typically stored in the non-volatile memory and/or drive unit and causes the processor to execute the various acts required by the operating system to input and output data and to store data in the memory, including storing files on the non-volatile memory and/or drive unit.
Some portions of the detailed description may be presented in terms of algorithms and symbolic representations of operations on data bits within a computer memory. These algorithmic descriptions and representations are the means used by those skilled in the data processing arts to most effectively convey the substance of their work to others skilled in the art. An algorithm is here, and generally, conceived to be a self-consistent sequence of operations leading to a desired result. The operations are those requiring physical manipulations of physical quantities. Usually, though not necessarily, these quantities take the form of electrical or magnetic signals capable of being stored, transferred, combined, compared, and otherwise manipulated. It has proven convenient at times, principally for reasons of common usage, to refer to these signals as bits, values, elements, symbols, characters, terms, numbers, or the like.
It should be borne in mind, however, that all of these and similar terms are to be associated with the appropriate physical quantities and are merely convenient labels applied to these quantities. Unless specifically stated otherwise as apparent from the following discussion, it is appreciated that throughout the description, discussions utilizing terms such as “processing” or “computing” or “calculating” or “determining” or “displaying” or the like, refer to the action and processes of a computer system, or similar electronic computing device, that manipulates and transforms data represented as physical (electronic) quantities within the computer system's registers and memories into other data similarly represented as physical quantities within the computer system memories or registers or other such information storage, transmission or display devices.
The algorithms and displays presented herein are not inherently related to any particular computer or other apparatus. Various general purpose systems may be used with programs in accordance with the teachings herein, or it may prove convenient to construct more specialized apparatus to perform the methods of some embodiments. The required structure for a variety of these systems will appear from the description below. In addition, the techniques are not described with reference to any particular programming language, and various embodiments may thus be implemented using a variety of programming languages.
In alternative embodiments, the machine operates as a standalone device or may be connected (e.g., networked) to other machines. In a networked deployment, the machine may operate in the capacity of a server or a client machine in a client-server network environment, or as a peer machine in a peer-to-peer (or distributed) network environment.
The machine may be a server computer, a client computer, a personal computer (PC), a tablet PC, a laptop computer, a set-top box (STB), a personal digital assistant (PDA), a cellular telephone, an iPhone, a Blackberry, a processor, a telephone, a web appliance, a network router, switch or bridge, or any machine capable of executing a set of instructions (sequential or otherwise) that specify actions to be taken by that machine.
While the machine-readable medium or machine-readable storage medium is shown in an exemplary embodiment to be a single medium, the term “machine-readable medium” and “machine-readable storage medium” should be taken to include a single medium or multiple media (e.g., a centralized or distributed database, and/or associated caches and servers) that store the one or more sets of instructions. The term “machine-readable medium” and “machine-readable storage medium” shall also be taken to include any medium that is capable of storing, encoding or carrying a set of instructions for execution by the machine and that cause the machine to perform any one or more of the methodologies of the presently disclosed technique and innovation.
Further examples of machine-readable storage media, machine-readable media, or computer-readable (storage) media include but are not limited to recordable type media such as volatile and non-volatile memory devices, floppy and other removable disks, hard disk drives, optical disks (e.g., Compact Disk Read-Only Memory (CD ROMS), Digital Versatile Disks, (DVDs), etc.), among others, and transmission type media such as digital and analog communication links
In general, the routines executed to implement the embodiments of the disclosure, may be implemented as part of an operating system or a specific application, component, program, object, module or sequence of instructions referred to as “computer programs”. The computer programs typically comprise one or more instructions set at various times in various memory and storage devices in a computer, and that, when read and executed by one or more processing units or processors in a computer, cause the computer to perform operations to execute elements involving the various aspects of the disclosure.
Moreover, while embodiments have been described in the context of fully functioning computers and computer systems, those skilled in the art will appreciate that the various embodiments are capable of being distributed as a program product in a variety of forms, and that the disclosure applies equally regardless of the particular type of machine or computer-readable media used to actually effect the distribution.
Unless the context clearly requires otherwise, throughout the description and the claims, the words “comprise,” “comprising,” and the like are to be construed in an inclusive sense, as opposed to an exclusive or exhaustive sense; that is to say, in the sense of “including, but not limited to.” As used herein, the terms “connected,” “coupled,” or any variant thereof, means any connection or coupling, either direct or indirect, between two or more elements; the coupling of connection between the elements can be physical, logical, or a combination thereof. Additionally, the words “herein,” “above,” “below,” and words of similar import, when used in this application, shall refer to this application as a whole and not to any particular portions of this application. Where the context permits, words in the above Detailed Description using the singular or plural number may also include the plural or singular number respectively. The word “or,” in reference to a list of two or more items, covers all of the following interpretations of the word: any of the items in the list, all of the items in the list, and any combination of the items in the list.
The above detailed description of embodiments of the disclosure is not intended to be exhaustive or to limit the teachings to the precise form disclosed above. While specific embodiments of, and examples for, the disclosure are described above for illustrative purposes, various equivalent modifications are possible within the scope of the disclosure, as those skilled in the relevant art will recognize. For example, while processes or blocks are presented in a given order, alternative embodiments may perform routines having steps, or employ systems having blocks, in a different order, and some processes or blocks may be deleted, moved, added, subdivided, combined, and/or modified to provide alternative or sub combinations. Each of these processes or blocks may be implemented in a variety of different ways. Also, while processes or blocks are at times shown as being performed in series, these processes or blocks may instead be performed in parallel, or may be performed at different times. Further any specific numbers noted herein are only examples: alternative implementations may employ differing values or ranges.
The teachings of the disclosure provided herein can be applied to other systems, not necessarily the system described above. The elements and acts of the various embodiments described above can be combined to provide further embodiments.
Any patents and applications and other references noted above, including any that may be listed in accompanying filing papers, are incorporated herein by reference. Aspects of the disclosure can be modified, if necessary, to employ the systems, functions, and concepts of the various references described above to provide yet further embodiments of the disclosure.
These and other changes can be made to the disclosure in light of the above Detailed Description. While the above description describes certain embodiments of the disclosure, and describes the best mode contemplated, no matter how detailed the above appears in text, the teachings can be practiced in many ways. Details of the system may vary considerably in its implementation details, while still being encompassed by the subject matter disclosed herein. As noted above, particular terminology used when describing certain features or aspects of the disclosure should not be taken to imply that the terminology is being redefined herein to be restricted to any specific characteristics, features, or aspects of the disclosure with which that terminology is associated. In general, the terms used in the following claims should not be construed to limit the disclosure to the specific embodiments disclosed in the specification, unless the above Detailed Description section explicitly defines such terms. Accordingly, the actual scope of the disclosure encompasses not only the disclosed embodiments, but also all equivalent ways of practicing or implementing the disclosure under the claims.
While certain aspects of the disclosure are presented below in certain claim forms, the inventors contemplate the various aspects of the disclosure in any number of claim forms. For example, while only one aspect of the disclosure is recited as a means-plus-function claim under 35 U.S.C. §112, ¶6, other aspects may likewise be embodied as a means-plus-function claim, or in other forms, such as being embodied in a computer-readable medium. (Any claims intended to be treated under 35 U.S.C. §112, ¶6 will begin with the words “means for”). Accordingly, the applicant reserves the right to add additional claims after filing the application to pursue such additional claim forms for other aspects of the disclosure.
The present application claims priority to and benefit from U.S. Provisional Patent Application Ser. No. 61/701,541 titled “Data Node Fencing in A Distributed File System”, filed on Sep. 14, 2012, the content of which is incorporated by reference herein. This application is therefore entitled to an effective filing date of Sep. 14, 2012.
Number | Name | Date | Kind |
---|---|---|---|
5325522 | Vaughn | Jun 1994 | A |
5825877 | Dan et al. | Oct 1998 | A |
5875290 | Bartfai | Feb 1999 | A |
6542930 | Auvenshine | Apr 2003 | B1 |
6553476 | Ayaki et al. | Apr 2003 | B1 |
6651242 | Hebbagodi et al. | Nov 2003 | B1 |
6678244 | Appanna | Jan 2004 | B1 |
6678828 | Zhang et al. | Jan 2004 | B1 |
6687847 | Aguilera et al. | Feb 2004 | B1 |
6931530 | Pham et al. | Aug 2005 | B2 |
6990606 | Schroiff | Jan 2006 | B2 |
7031981 | DeLuca et al. | Apr 2006 | B1 |
7042839 | Stewart | May 2006 | B2 |
7069497 | Desai | Jun 2006 | B1 |
7107323 | Hara et al. | Sep 2006 | B2 |
7143288 | Pham et al. | Nov 2006 | B2 |
7181480 | Nikiel | Feb 2007 | B1 |
7325041 | Hara et al. | Jan 2008 | B2 |
7398394 | Johnsen | Jul 2008 | B1 |
7478263 | Kownacki | Jan 2009 | B1 |
7487228 | Preslan et al. | Feb 2009 | B1 |
7496829 | Rubin et al. | Feb 2009 | B2 |
7617369 | Bezbaruah | Nov 2009 | B1 |
7620698 | Hara et al. | Nov 2009 | B2 |
7631034 | Haustein et al. | Dec 2009 | B1 |
7640512 | Appling | Dec 2009 | B1 |
7640582 | Beck | Dec 2009 | B2 |
7653668 | Shelat et al. | Jan 2010 | B1 |
7685109 | Ransil et al. | Mar 2010 | B1 |
7698321 | Hackworth | Apr 2010 | B2 |
7721324 | Jackson | May 2010 | B1 |
7734961 | Almoustafa et al. | Jun 2010 | B2 |
7818313 | Tsimelzon et al. | Oct 2010 | B1 |
7831991 | Kiraly | Nov 2010 | B1 |
7937482 | Vermeulen et al. | May 2011 | B1 |
7961602 | Tochio | Jun 2011 | B2 |
7970861 | Simitci et al. | Jun 2011 | B2 |
8024560 | Alten | Sep 2011 | B1 |
8069267 | Powers-Boyle et al. | Nov 2011 | B2 |
8108338 | Castro et al. | Jan 2012 | B2 |
8108771 | Chijiiwa et al. | Jan 2012 | B2 |
8151347 | Beck | Apr 2012 | B2 |
8306919 | Sakamura et al. | Nov 2012 | B2 |
8311980 | Saito et al. | Nov 2012 | B2 |
8336108 | Suit | Dec 2012 | B2 |
8468244 | Redlich et al. | Jun 2013 | B2 |
8484716 | Hodgson et al. | Jul 2013 | B1 |
8533231 | Aizman | Sep 2013 | B2 |
8595546 | Dalton | Nov 2013 | B2 |
8655939 | Redlich et al. | Feb 2014 | B2 |
8667267 | Garcia et al. | Mar 2014 | B1 |
8689043 | Bezbaruah | Apr 2014 | B1 |
8788815 | Garcia et al. | Jul 2014 | B1 |
8819476 | Roth | Aug 2014 | B2 |
8862928 | Xavier | Oct 2014 | B2 |
8943355 | Hsu | Jan 2015 | B2 |
20020055989 | Stringer-Calvert et al. | May 2002 | A1 |
20020073322 | Park et al. | Jun 2002 | A1 |
20020138762 | Horne | Sep 2002 | A1 |
20020174194 | Mooney et al. | Nov 2002 | A1 |
20030051036 | Wang et al. | Mar 2003 | A1 |
20030055868 | Fletcher et al. | Mar 2003 | A1 |
20030093633 | Thiesfeld et al. | May 2003 | A1 |
20040003322 | Collins et al. | Jan 2004 | A1 |
20040059728 | Miller et al. | Mar 2004 | A1 |
20040103166 | Bae et al. | May 2004 | A1 |
20040172421 | Saito et al. | Sep 2004 | A1 |
20040186832 | Jardin | Sep 2004 | A1 |
20050044311 | Lahiri et al. | Feb 2005 | A1 |
20050071708 | Bartfai et al. | Mar 2005 | A1 |
20050091244 | Marcotte | Apr 2005 | A1 |
20050138111 | Aton et al. | Jun 2005 | A1 |
20050171983 | Deo et al. | Aug 2005 | A1 |
20050182749 | Matsui | Aug 2005 | A1 |
20060020854 | Cardona et al. | Jan 2006 | A1 |
20060023627 | Villait | Feb 2006 | A1 |
20060050877 | Nakamura | Mar 2006 | A1 |
20060143453 | Imamoto et al. | Jun 2006 | A1 |
20060156018 | Lauer et al. | Jul 2006 | A1 |
20060224784 | Nishimoto et al. | Oct 2006 | A1 |
20060247897 | Lin | Nov 2006 | A1 |
20070100913 | Sumner et al. | May 2007 | A1 |
20070113188 | Bales et al. | May 2007 | A1 |
20070136442 | Palma et al. | Jun 2007 | A1 |
20070177737 | Jung et al. | Aug 2007 | A1 |
20070180255 | Hanada et al. | Aug 2007 | A1 |
20070186112 | Perlin et al. | Aug 2007 | A1 |
20070226488 | Lin et al. | Sep 2007 | A1 |
20070234115 | Saika | Oct 2007 | A1 |
20070255943 | Kern et al. | Nov 2007 | A1 |
20070282988 | Bornhoevd et al. | Dec 2007 | A1 |
20080140630 | Sato et al. | Jun 2008 | A1 |
20080168135 | Redlich et al. | Jul 2008 | A1 |
20080244307 | Dasari et al. | Oct 2008 | A1 |
20080256486 | Hagiwara | Oct 2008 | A1 |
20080263006 | Wolber et al. | Oct 2008 | A1 |
20080276130 | Almoustafa et al. | Nov 2008 | A1 |
20080307181 | Kuszmaul et al. | Dec 2008 | A1 |
20090013029 | Childress et al. | Jan 2009 | A1 |
20090177697 | Gao et al. | Jul 2009 | A1 |
20090259838 | Lin | Oct 2009 | A1 |
20090307783 | Maeda et al. | Dec 2009 | A1 |
20100008509 | Matsushita et al. | Jan 2010 | A1 |
20100010968 | Redlich et al. | Jan 2010 | A1 |
20100070769 | Shima et al. | Mar 2010 | A1 |
20100131817 | Kong et al. | May 2010 | A1 |
20100179855 | Chen et al. | Jul 2010 | A1 |
20100198972 | Umbehocker | Aug 2010 | A1 |
20100296652 | Nakayama et al. | Nov 2010 | A1 |
20100306286 | Chiu et al. | Dec 2010 | A1 |
20100325713 | Kurita et al. | Dec 2010 | A1 |
20110055578 | Resch | Mar 2011 | A1 |
20110078549 | Thueringer et al. | Mar 2011 | A1 |
20110119328 | Simitci et al. | May 2011 | A1 |
20110154016 | Niccolini | Jun 2011 | A1 |
20110179160 | Liu et al. | Jul 2011 | A1 |
20110191832 | Davis | Aug 2011 | A1 |
20110228668 | Pillai et al. | Sep 2011 | A1 |
20110246816 | Hsieh et al. | Oct 2011 | A1 |
20110246826 | Hsieh et al. | Oct 2011 | A1 |
20110276396 | Rathod | Nov 2011 | A1 |
20110276495 | Varadarajan et al. | Nov 2011 | A1 |
20110280123 | Wijnands | Nov 2011 | A1 |
20110302417 | Whillock et al. | Dec 2011 | A1 |
20110307534 | Peng et al. | Dec 2011 | A1 |
20120036357 | Struik | Feb 2012 | A1 |
20120102072 | Jia et al. | Apr 2012 | A1 |
20120130874 | Mane et al. | May 2012 | A1 |
20120131341 | Mane et al. | May 2012 | A1 |
20130041872 | Aizman et al. | Feb 2013 | A1 |
20130061232 | Bernbo | Mar 2013 | A1 |
20130304761 | Redlich et al. | Nov 2013 | A1 |
20140019405 | Borthakur | Jan 2014 | A1 |
20140040575 | Horn | Feb 2014 | A1 |
20140052548 | Dokken, Jr. | Feb 2014 | A1 |
20150278244 | Shvachko | Oct 2015 | A1 |
Entry |
---|
IBM, Planning a Cluster, 1998 International Business Machines Corporation, pp. 1-27. |
Babaoglu, O., and K. Marzullo, “Consistent global states of distributed systems: Fundamental concepts and mechanisms,” Distributed Systems, 53 pages, Jan. 1993. |
Corbett et al., “Spanner: Google's Globally Distributed Database,” Transactions on Computer Systems (TOCS), vol. 31, No. 3, 14 pages, Aug. 2013. |
Lamport, L., “Time, clocks, and the ordering of events in a distributed system,” Communications of the ACM, vol. 21, No. 7, pp. 558-565, Jul. 1978. |
Stoller,S.D., “Detecting global predicates in distributed systems with clocks,” Distributed Computing, vol. 13, No. 2, pp. 85-98, Feb. 2000. |
Exam Report for GB1403929.1, Applicant: Cloudera, Inc. Mailed May 2, 2014, 6 pages. |
U.S. Appl. No. 13/854,773, filed Apr. 1, 2013, Kirkland et al. |
Beomseok Nam et al: “Spatial indexing of distributed multidimensional datasets”, Cluster Computing and the Grid, 2005. CCGRID 2005. IEEE International Symposium on Cardiff˜Wales, UK May 9-12, 2005, Piscataway, NJ, USA,IEEE, Piscataway, NJ, USA, vol. 2, May 9, 2005, pp. 743-750. |
Chapter 25: Distributed Databases ED -; ; Ramez Elmasri; Shamkant B Navathe (eds), Jan. 1, 2011 (Jan. 1, 2011), Fundamentals of Database Systems (Sixth Edition), Addison-Wesley, p. 877-927. |
Cheng, Security Attack Safe Mobil and Cloud-Based One-Time Password Tokens Using Rubbing Encryption Algorithm, ACM, Jun. 2011, pp. 304-336. |
Du et al., “A Pairwise Key Predistribution Scheme for Wireless Sensor Networks,” ACM, May 2005, vol. 8 Issue 2, pp. 228-258. |
European Search Report for European Application No. 14157984.7, mailing date Jun. 6, 2014, 10 pages. |
Kim et al., Design and Implementation of a Private and Public Key Crypto Processor and Its Applicaiton to a Security System, IEEE, Feb. 2004, vol. %0, Issue 1, pp. 214-224. |
Ko et al., “A Study of Encryption Algorithm for RFID tag (SEED: 8 Rounds X 64 bit block),” IEEE, s008, pp. 672-677. |
Kossmann D: “The State of the Art in Distributed Query Processing”, ACM Computing Surveys, ACM, New York, NY, us, vol. 32, No. 4, Dec. 1, 2000, pp. 422-469. |
Non-Final Office Action for U.S. Appl. No. 13/362,695, mailed Apr. 29, 2013, 23 pgs. |
Tamer Dzsu et al: “Principles of Distributed Database Systems”, Principles of Distributed Database Systems, XX, XX, Jan. 1, 1991 (Jan. 1, 1991), pp. 74-93. |
Number | Date | Country | |
---|---|---|---|
20140081927 A1 | Mar 2014 | US |
Number | Date | Country | |
---|---|---|---|
61701541 | Sep 2012 | US |