[IMPALA-7872] Extended health checks to mark node as down

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: Distributed Exec
• Labels: Availability statestore
• Epic Color: ghx-label-5
• Assignee: Wenzhe Zhou
• Reporter: Tim Armstrong
• Created: 19/Nov/18 19:24
• Updated: 28/Jan/21 08:22

Description

This is an umbrella JIRA to improve handling of complex failure modes aside from fail-stop. The current statestore heartbeat mechanism assumes that an Impala daemon that responds to heartbeats is healthy and can be scheduled on. Memory-based admission control provides a bit more robustness here by not admitting queries on daemons where memory would be oversubscribed.

Examples of failure modes of interest are:

• Hangs, where a particular node can't make progress (the JVM hangs in IMPALA-7483 are a good example) on some or all queries.
• Repeated fragment instance startup failures. E.g. where coordinators can't successfully start fragments on an impala daemon, because of communication errors or other issues.

We can't automatically handle all failure modes, but we could improve handling of some common ones, particularly repeated fragment startup failures or hangs. The goal would be to degrade more gracefully to avoid repeated failures causing a cluster-wide outage. The goal isn't to prevent all failures, just to recover to a healthy state automatically in more scenarios.

IMPALA-1760 (graceful shutdown) may give us some better options here, since if a node notices that it is somehow unhealthy, it could gracefully remove itself from scheduling and restart itself.

Issue Links

• is related to: IMPALA-9299 Node Blacklisting: Coordinators should blacklist unhealthy nodes

Sub-Tasks

• Remove executor node with faulty disks from executor group: Open
• Mark executor node as down if it repeatedly failed to startup fragment instance: Open