Product Knowledge Base

Space shortcuts

Page tree

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Next »

Scope

  • Resilience is about the availability and robustness of an architecture for a number of outage scenarios.
  • Master / Agent Availability includes a number of architecture decisions:
    • Master Clusters provide redundancy of Master instances in a network.
    • Agent Bundles can be used to compensate the outage of a server that runs an Agent.
  • Master / Agent Resilience includes a number of implicit and explicit measures for:
    • Master / Agent Reconciliation allows continued execution of tasks in case of short-term Network Connection Loss.
    • Master Service Recovery includes supported measures after a Master Service Failure.
    • Database Service Recovery includes the capability to recover in case of Database Connection Loss and possible data loss.

Master / Agent Resilience

  • Resilience includes support for different outage scenarios with automated and manual fail-over.
  • Outage Scenarios
    • Network Connection Loss
      • A recoverable, temporary connection loss between Master and Agent for a configurable period of time, e.g. 20s.
      • Connection loss includes that the JobScheduler Master and Agent have no knowledge if the connection failed or if a Master Service Failure occurred.
    • Master Service Failure
      • Either An unrecoverable connection loss between Master and Agent that takes more time than the period specified for the Network Connection Loss scenario
        • due to a server crash.
        • due to a JobScheduler Master crash.
      • Or an unplanned JobScheduler Master restart or server restart.
    • Database Connection Loss
      • A recoverable, temporary connection loss beetween Master and database:
        • for a JobScheduler Active Cluster this scenario includes a period of not more than 50s.
        • for a JobScheduler Passive Cluster this scenario includes no restriction of duration.
      • Connection loss includes that the JobScheduler Master has no knowledge if the database service failed or if the connection failed.

Master / Agent Reconciliation

Scenario

  • Outages Scenario
    • Network Connection Loss
      • A recoverable, temporary connection loss between Master and Agent for a configurable period of time, e.g. 20s.
  • Supported Scenario
    • Master/Agent Reconciliation addresses the Network Connection Loss scenario, not the Master Service Failure and Database Connection Loss scenarios.

Feature

  • Reconciliation Scenario
    • applies after a Network Connection Loss between Master and Agent.
    • includes re-establishing the normal relationship between Master and Agent after a connection outage.
  • Agent Behavior
    • By default an Agent will kill any running tasks immediately if the connection to the Master gets lost, i.e. none of the above scenarios is supported (JS-1523). The reasons for this are:
      • If a Master were not available for a longer period then the Agent could not report back the execution history and log information for tasks. This would result in the fact that no information is available with the Master if the job execution has been successful or not.
      • The primary goal is to prevent duplicate execution of jobs. Without further information from a Master the respective Agent instance cannot know if later on it will be contacted for re-execution of the same job (which would allow to continue a currently running task on an Agent) or if the Master will choose a different Agent (see Agent Bundle).
    • With a Network Connection Loss setting configured with the Agent's process class the Agent will show the following behavior (JS-1524):
      • During the period specified for the tolerated connection loss duration the Agent will assume the Network Connection Loss scenario.
      • The Agent will continue any running tasks up to the end of the tolerated connection loss period.
        • Reconciliation will take place if the connection between Master and Agent can be re-established during the connection loss period and if the Master has not been restarted.
        • Otherwise the Agent will assume the Master Service Failure scenario and will kill any running tasks.
      • This behavior applies to tasks that are executed for a specific Master for which a connection has been lost. Tasks for other JobScheduler Master instances will be continued.
  • Master/Agent Reconciliation
    • After connection loss the Master will regularly attempt to re-establish the HTTP connection to the Agent. This communication includes a "tunnel" that allows the Agent to report the execution status of running jobs to the Master.
    • After a successful re-connect within the Network Connection Loss scenario the Master will repeat its request for execution of the respective jobs. Each new request includes an identifier for the previous execution request that allows the Agent to identify repeated requests:
      • for a job that has been completed within the tolerated connection loss period the Agent will report the execution result back to the Master and will not re-execute the job.
      • for a job that is still running the Agent will report the appropriate information back to the Master which will note the running tasks and update JOC accordingly.
  • Delimitation
    • This feature is not intended to support a Master Service Failure scenario or Database Connection Loss scenario.
  • Feature Availability
    • FEATURE AVAILABILITY STARTING FROM RELEASE 1.10.2

Implementation

Key Summary T Created Updated Due Assignee Reporter P Status Resolution
Refresh

Master Service Recovery

Scenario

  • Outage Scenario
    • Master Service Failure
      • an unrecoverable connection loss between Master and Agent that takes longer than the period specified for the Network Connection Loss scenario (see Master / Agent Reconciliation) or
      • a JobScheduler Master restart or server restart.
  • Supported Scenario
    • Master Service Recovery addresses the Master Service Failure scenario, not any scenario for temporary Network Connection Loss or Database Connection Loss.

Feature

  • After a Master Service Failure the JobScheduler Master can be started in paused mode. 
    • This start mode prevents all jobs from being started. This applies to 
      • jobs that have previously been requested for execution with Agents, 
      • jobs that have been enqueued and
      • jobs that are scheduled for execution using start time events.
    • All job starts that are delayed due to paused mode will be executed after the JobScheduler Master is continued. 
      • This also applies to jobs that are enqueued while paused mode is active.
      • The operation to continue JobScheduler is available with JOC.
    • Paused mode allows users to manually check the job history and optionally remove enqueued tasks if Agent Reconciliation has not taken place.
      • The Agent stores log files of jobs during execution. If an execution result cannot be reported to the Master then the log file will be retained, otherwise it will be removed (JS-1521).
      • Paused mode can be configured to be applied automatically in case of restart of a JobScheduler Master after failure (JS-1522).
  • Delimitation
    • The currently supported measures include manual checking after failure. 
    • Automated recovery of the Master/Agent execution status after a Master Service Failure is subject to future improvements.
  • Feature Availability
    • FEATURE AVAILABILITY STARTING FROM RELEASE 1.10.2

Implementation

Key Summary T Created Updated Due Assignee Reporter P Status Resolution
Refresh

Database Service Recovery

Scenario

  • Outage Scenario
    • Database Service Failure
      • a temporary connection loss between JobScheduler Master and its database
  • Supported Scenario
    • Database Service Recovery addresses the Database Service Failure scenario, not any scenario for temporary Network Connection Loss or Master Service Failure.

Feature

tbd

Implementation

tbd

 

  • No labels