[CASSANDRA-6117] Avoid death-by-tombstone by default

• Type: New Feature
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 2.0.2
• Assignee: Jonathan Ellis
• Reporter: Jonathan Ellis

Authors

Jonathan Ellis

Reviewers

Sylvain Lebresne

• Created: 01/Oct/13 03:26
• Updated: 16/Apr/19 09:32
• Resolved: 01/Oct/13 19:21

Description

We added warnings to 1.2 (CASSANDRA-6042); for 2.0 we should go farther and drop requests (with an error logged) that exceed the threshold. Users who want to tread dangerously are free to crank the threshold up, but "I queried a lot of tombstones and Cassandra fell over" is possibly the number one way of killing Cassandra nodes right now.

Issue Links

• is duplicated by: CASSANDRA-5143 Safety valve on number of tombstones skipped on read path to prevent a full heap
• is related to: CASSANDRA-7886 Coordinator should not wait for read timeouts when replicas hit Exceptions
• relates to: CASSANDRA-8559 OOM caused by large tombstone warning.