[ZOOKEEPER-900] FLE implementation should be improved to use non-blocking sockets

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Assignee: Martin Kuchta
• Reporter: Vishal Kher
• Created: 15/Oct/10 14:07
• Updated: 03/Feb/22 08:50

Description

From earlier email exchanges:
1. Blocking connects and accepts:

a) The first problem is in manager.toSend(). This invokes connectOne(), which does a blocking connect. While testing, I changed the code so that connectOne() starts a new thread called AsyncConnct(). AsyncConnect.run() does a socketChannel.connect(). After starting AsyncConnect, connectOne starts a timer. connectOne continues with normal operations if the connection is established before the timer expires, otherwise, when the timer expires it interrupts AsyncConnect() thread and returns. In this way, I can have an upper bound on the amount of time we need to wait for connect to succeed. Of course, this was a quick fix for my testing. Ideally, we should use Selector to do non-blocking connects/accepts. I am planning to do that later once we at least have a quick fix for the problem and consensus from others for the real fix (this problem is big blocker for us). Note that it is OK to do blocking IO in SenderWorker and RecvWorker threads since they block IO to the respective peer.

b) The blocking IO problem is not just restricted to connectOne(), but also in receiveConnection(). The Listener thread calls receiveConnection() for each incoming connection request. receiveConnection does blocking IO to get peer's info (s.read(msgBuffer)). Worse, it invokes connectOne() back to the peer that had sent the connection request. All of this is happening from the Listener. In short, if a peer fails after initiating a connection, the Listener thread won't be able to accept connections from other peers, because it would be stuck in read() or connetOne(). Also the code has an inherent cycle. initiateConnection() and receiveConnection() will have to be very carefully synchronized otherwise, we could run into deadlocks. This code is going to be difficult to maintain/modify.

Also see: https://issues.apache.org/jira/browse/ZOOKEEPER-822

Issue Links

• incorporates: ZOOKEEPER-902 Fix findbug issue in trunk "Malicious code vulnerability"
• is related to: ZOOKEEPER-1678 Server fails to join quorum when a peer is unreachable (5 ZK server setup)
• is related to: ZOOKEEPER-901 Redesign of QuorumCnxManager
• is required by: ZOOKEEPER-2164 fast leader election keeps failing

Sub-Tasks

• Move blocking read/write calls to SendWorker and RecvWorker Threads: Open
• Remove wildcard QuorumPeer.OBSERVER_ID: Open
• Add sanity check for server ID: Open