在全局管理的分布式系统中限制Lamport暴露于远程故障
Limiting Lamport Exposure to Distant Failures in Globally-Managed Distributed Systems
摘要：
全球化计算基础设施提供了全球管理的对象和服务的便利性和弹性，但缺乏本地化基础设施（如私有云）提供的对远程故障的弹性。然而，为远程故障提供全局管理和弹性，为配置服务提出了一个基本问题：如何在不依赖于全球化状态的情况下，在全球化基础设施中发现可能迁移的、强一致的服务/对象？Limix是解决这个问题的第一个元数据配置服务。通过Limix，全局强一致性数据平面服务和对象通过确保任何对象的确定性，强一致性元数据始终被限制在与对象本身相同的区域而与远程灰色故障绝缘。Limix保证了可用性边界：任何用户都可以继续访问对位于$Δ$之外的用户重要的任何强一致的对象，与$Δ$的小倍数之外的故障绝缘。我们构建了一个基于CockroachDB的Limix元数据服务。我们在类似互联网的网络和AWS上使用真实的跟踪驱动工作负载进行的实验表明，Limix支持全局管理，并显著提高了最先进的可用性。
英文摘要：
Globalized computing infrastructures offer the convenience and elasticity of globally managed objects and services, but lack the resilience to distant failures that localized infrastructures such as private clouds provide. Providing both global management and resilience to distant failures, however, poses a fundamental problem for configuration services: How to discover a possibly migratory, strongly-consistent service/object in a globalized infrastructure without dependencies on globalized state? Limix is the first metadata configuration service that addresses this problem. With Limix, global strongly-consistent data-plane services and objects are insulated from remote gray failures by ensuring that the definitive, strongly-consistent metadata for any object is always confined to the same region as the object itself. Limix guarantees availability bounds: any user can continue accessing any strongly consistent object that matters to the user located at distance $Δ$ away, insulated from failures outside a small multiple of $Δ$. We built a Limix metadata service based on CockroachDB. Our experiments on Internet-like networks and on AWS, using realistic trace-driven workloads, show that Limix enables global management and significantly improves availability over the state-of-the-art.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
