mirror of
https://github.com/hanzoai/team.git
synced 2026-09-30 01:57:35 +00:00
* MM-69792: Recover shared channel sync after a brief remote outage When a remote went offline for less than the 5-minute IsOnline() threshold, sync recovery never ran. IsOnline() never flipped, so no connection-state-change event fired and ForceSyncForRemote was never triggered. Posts created during the outage stayed unsynced until the next organic change in the channel. The root cause was that send failures are reported asynchronously through a callback that sendSyncMsgToRemote discarded. On a failed send syncForRemote still returned nil, so processTask saw success: the retry loop and the failure-notification hook were effectively dead code for delivery failures. Changes: - sendSyncMsgToRemote now propagates the delivery error reported via the callback instead of swallowing it. A failed send is retried rather than silently dropped. This applies to every sync type (posts, users, memberships, reactions, statuses); the success path is unchanged. - remotecluster tracks a per-remote "sync failed since last ping" flag (NotifySyncFailed). On the next successful ping, PingNow fires a connection-state-change event even when IsOnline() never flipped, driving a single ForceSyncForRemote on recovery. - Sync retries are now spaced by SyncRetryDelay (15s) instead of retrying immediately, giving a short outage time to recover and guaranteeing a failed ping before retries exhaust. Also adds a post/offline-recovery case to the sharedchannel-test integration tool (stop and restart Server B mid-run) and disables metrics on the two test servers so they do not collide on the metrics port when the loaded config has metrics enabled. * fix linter error * Fix Rabbit nit * fix CI * Delete pr37499-fix-findings-1-and-4.md * address review comments * MM-69792: Keep a per-remote retry task when a shared channel sync fans out A sync task with no specific remote (remoteID == "") fans out to every remote sharing the channel. On failure each remote's retry was a copy of the original task that still carried the original, remote-less task id. Because addTask merges on task id, all of those per-remote retries collapsed into a single entry, so only one failed remote was ever retried and the rest were silently dropped. Delivery failures were partly masked by the ping-driven ForceSyncForRemote recovery, but non-delivery errors for the other remotes had no path back. Give each per-remote retry a remote-specific id (task.id + remoteId) when the originating task had no remote, so every failed remote keeps its own retry task. Single-remote tasks already have a remote-specific id and are left untouched, since recomputing would grow the id on each retry. Also harden the tests: assert the retry is scheduled the full SyncRetryDelay out (no tolerance), assert the result callback is not invoked on delivery failures or unconfirmed responses (so the cursor stays un-advanced), and add a regression test covering fan-out to multiple failing remotes. * fix one more pre-existing edge case. * fix linter
211 lines
5.9 KiB
Go
211 lines
5.9 KiB
Go
// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
|
|
// See LICENSE.txt for license information.
|
|
|
|
package remotecluster
|
|
|
|
import (
|
|
"encoding/json"
|
|
"errors"
|
|
"fmt"
|
|
"time"
|
|
|
|
"github.com/mattermost/mattermost/server/public/model"
|
|
"github.com/mattermost/mattermost/server/public/shared/mlog"
|
|
)
|
|
|
|
// PingNow emits a ping immediately without waiting for next ping loop.
|
|
func (rcs *Service) PingNow(rc *model.RemoteCluster) {
|
|
online := rc.IsOnline()
|
|
|
|
pingErr := rcs.pingRemote(rc)
|
|
if pingErr != nil {
|
|
rcs.server.Log().LogM(mlog.MlvlRemoteClusterServiceWarn, "Remote cluster ping failed",
|
|
mlog.String("remote", rc.DisplayName),
|
|
mlog.String("remoteId", rc.RemoteId),
|
|
mlog.String("pluginId", rc.PluginID),
|
|
mlog.Err(pingErr),
|
|
)
|
|
}
|
|
|
|
pingSucceeded := pingErr == nil
|
|
hasPendingSync := false
|
|
if pingSucceeded {
|
|
// Consume the pending-sync-failure marker (if any). LoadAndDelete clears it so the
|
|
// map does not accumulate entries for remotes that have recovered.
|
|
_, hasPendingSync = rcs.syncFailedSinceLastPing.LoadAndDelete(rc.RemoteId)
|
|
}
|
|
|
|
// The connection-state-change counter tracks genuine online/offline transitions, so
|
|
// only bump it when IsOnline() actually flipped. The event itself must still fire on
|
|
// the pending-sync recovery path (online→online) to drive ForceSyncForRemote.
|
|
stateChanged := online != rc.IsOnline()
|
|
if stateChanged || (pingSucceeded && hasPendingSync) {
|
|
if stateChanged {
|
|
if metrics := rcs.server.GetMetrics(); metrics != nil {
|
|
metrics.IncrementRemoteClusterConnStateChangeCounter(rc.RemoteId, rc.IsOnline())
|
|
}
|
|
}
|
|
rcs.fireConnectionStateChgEvent(rc)
|
|
}
|
|
}
|
|
|
|
// pingAllNow emits a ping to all remotes immediately without waiting for next ping loop.
|
|
func (rcs *Service) pingAllNow(filter model.RemoteClusterQueryFilter) {
|
|
// get all remotes, including any previously offline.
|
|
remotes, err := rcs.server.GetStore().RemoteCluster().GetAll(0, 999999, filter)
|
|
if err != nil {
|
|
rcs.server.Log().LogM(mlog.MlvlRemoteClusterServiceError, "Ping all remote clusters failed (could not get list of remotes)", mlog.Err(err))
|
|
return
|
|
}
|
|
|
|
for _, rc := range remotes {
|
|
// filter out unconfirmed invites so we don't ping them without permission
|
|
if rc.IsConfirmed() {
|
|
rcs.PingNow(rc)
|
|
}
|
|
}
|
|
}
|
|
|
|
// pingLoop periodically sends a ping to all remote clusters.
|
|
func (rcs *Service) pingLoop(done <-chan struct{}) {
|
|
pingChan := make(chan *model.RemoteCluster, MaxConcurrentSends*2)
|
|
|
|
// create a thread pool to send pings concurrently to remotes.
|
|
for range MaxConcurrentSends {
|
|
go rcs.pingEmitter(pingChan, done)
|
|
}
|
|
|
|
go rcs.pingGenerator(pingChan, done)
|
|
}
|
|
|
|
func (rcs *Service) pingGenerator(pingChan chan *model.RemoteCluster, done <-chan struct{}) {
|
|
defer close(pingChan)
|
|
|
|
for {
|
|
pingFreq := rcs.GetPingFreq()
|
|
start := time.Now()
|
|
|
|
// ping all remotes, including any previously offline.
|
|
rcs.pingAllNow(model.RemoteClusterQueryFilter{})
|
|
|
|
// try to maintain frequency
|
|
elapsed := time.Since(start)
|
|
if elapsed < pingFreq {
|
|
sleep := time.Until(start.Add(pingFreq))
|
|
select {
|
|
case <-time.After(sleep):
|
|
case <-done:
|
|
return
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// pingEmitter pulls Remotes from the ping queue (pingChan) and pings them.
|
|
// Pinging a remote cannot take longer than PingTimeoutMillis.
|
|
func (rcs *Service) pingEmitter(pingChan <-chan *model.RemoteCluster, done <-chan struct{}) {
|
|
for {
|
|
select {
|
|
case rc := <-pingChan:
|
|
if rc == nil {
|
|
return
|
|
}
|
|
rcs.PingNow(rc)
|
|
case <-done:
|
|
return
|
|
}
|
|
}
|
|
}
|
|
|
|
var ErrPluginPingFail = errors.New("plugin ping failed")
|
|
|
|
// pingRemote make a synchronous ping to a remote cluster. Return is error if ping is
|
|
// unsuccessful and nil on success.
|
|
func (rcs *Service) pingRemote(rc *model.RemoteCluster) error {
|
|
ping := model.RemoteClusterPing{}
|
|
|
|
if rc.IsPlugin() {
|
|
ping.SentAt = model.GetMillis()
|
|
if ok := rcs.app.OnSharedChannelsPing(rc); !ok {
|
|
return ErrPluginPingFail
|
|
}
|
|
ping.RecvAt = model.GetMillis()
|
|
} else {
|
|
frame, err := makePingFrame(rc)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
url := fmt.Sprintf("%s/%s", rc.SiteURL, PingURL)
|
|
|
|
resp, err := rcs.sendFrameToRemote(PingTimeout, rc, frame, url)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
rc.LastPingAt = model.GetMillis()
|
|
|
|
err = json.Unmarshal(resp, &ping)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
}
|
|
|
|
if err := rcs.server.GetStore().RemoteCluster().SetLastPingAt(rc.RemoteId); err != nil {
|
|
rcs.server.Log().LogM(mlog.MlvlRemoteClusterServiceError, "Failed to update LastPingAt for remote cluster",
|
|
mlog.String("remote", rc.DisplayName),
|
|
mlog.String("remoteId", rc.RemoteId),
|
|
mlog.Err(err),
|
|
)
|
|
}
|
|
|
|
if metrics := rcs.server.GetMetrics(); metrics != nil {
|
|
sentAt := time.Unix(0, ping.SentAt*int64(time.Millisecond))
|
|
elapsed := time.Since(sentAt).Seconds()
|
|
metrics.ObserveRemoteClusterPingDuration(rc.RemoteId, elapsed)
|
|
|
|
// we approximate clock skew between remotes.
|
|
skew := elapsed/2 - float64(ping.RecvAt-ping.SentAt)/1000
|
|
metrics.ObserveRemoteClusterClockSkew(rc.RemoteId, skew)
|
|
}
|
|
|
|
rcs.server.Log().Log(mlog.LvlRemoteClusterServiceDebug, "Remote cluster ping",
|
|
mlog.String("remote", rc.DisplayName),
|
|
mlog.String("remoteId", rc.RemoteId),
|
|
mlog.String("pluginId", rc.PluginID),
|
|
mlog.Int("SentAt", ping.SentAt),
|
|
mlog.Int("RecvAt", ping.RecvAt),
|
|
mlog.Int("Diff", ping.RecvAt-ping.SentAt),
|
|
)
|
|
return nil
|
|
}
|
|
|
|
func makePingFrame(rc *model.RemoteCluster) (*model.RemoteClusterFrame, error) {
|
|
ping := model.RemoteClusterPing{
|
|
SentAt: model.GetMillis(),
|
|
}
|
|
pingRaw, err := json.Marshal(ping)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
msg := model.NewRemoteClusterMsg(PingTopic, pingRaw)
|
|
|
|
frame := &model.RemoteClusterFrame{
|
|
RemoteId: rc.RemoteId,
|
|
Msg: msg,
|
|
}
|
|
return frame, nil
|
|
}
|
|
|
|
func (rcs *Service) fireConnectionStateChgEvent(rc *model.RemoteCluster) {
|
|
rcs.mux.RLock()
|
|
listeners := make([]ConnectionStateListener, 0, len(rcs.connectionStateListeners))
|
|
for _, l := range rcs.connectionStateListeners {
|
|
listeners = append(listeners, l)
|
|
}
|
|
rcs.mux.RUnlock()
|
|
|
|
for _, l := range listeners {
|
|
l(rc, rc.IsOnline())
|
|
}
|
|
}
|