Recovery guarantees for Internet applications

ABSTRACT

Internet-based e-services require application developers to deal explicitly with failures of the underlying software components, for example web servers, servlets, browser sessions, and so forth. This complicates application programming, and may expose failures to end users. This paper presents a framework for an application-independent infrastructure that provides recovery guarantees and masks almost all system failures, thus relieving the application programmer from having to deal with these failures---by making applications "stateless." The main concept is an interaction contract between two components regarding message and state preservation. The framework provides comprehensive recovery encompassing data, messages, and the states of application components. We describe techniques to reduce logging cost, allow effective log truncation, and permit independent recovery for critical components. We illustrate the framework's utility via web-based e-services scenarios. Its feasibility is demonstrated by our prototype implementation of interaction contracts based on the Apache web server and the PHP servlet engine. Finally, we discuss industrial relevance for middleware architectures such as. Net or J2EE.

REFERENCES

• 1: L. Alvisi , K. Marzullo, Message logging: pessimistic, optimistic, and causal, Proceedings of the 15th International Conference on Distributed Computing Systems, p.229, May 30-June 02, 1995
• 2: Recovery Guarantees for General Multi-Tier Applications, Proceedings of the 18th International Conference on Data Engineering, p.543, February 26-March 01, 2002
• 3: Roger S. Barga , David B. Lomet , Thomas Baby , Sanjay Agrawal, Persistent Client-Server Database Sessions, Proceedings of the 7th International Conference on Extending Database Technology: Advances in Database Technology, p.462-477, March 27-31, 2000
• 4: Roger S. Barga , David B. Lomet, Measuring and Optimizing a System for Persistent Database Sessions, Proceedings of the 17th International Conference on Data Engineering, p.21-30, April 02-06, 2001
• 5: Barga, R., Lomet, D., Paparizos, S., Yu, H., and Chandrasekaran, S. 2003. Persistent applications via automatic recovery. In Proceedings of the 17th International Database Engineering and Applications Symposium, Hong Kong, China, July 2003. IEEE Computer Society, Los Alamitos, CA, 258--267.
• 6: Joel F. Bartlett, A NonStop kernel, Proceedings of the eighth ACM symposium on Operating systems principles, p.22-29, December 14-16, 1981, Pacific Grove, California, United States
• 7: Philip A. Bernstein , Meichun Hsu , Bruce Mann, Implementing recoverable requests using queues, Proceedings of the 1990 ACM SIGMOD international conference on Management of data, p.112-122, May 23-26, 1990, Atlantic City, New Jersey, United States
• 8: Philip Bernstein , Eric Newcomer, Principles of transaction processing: for the systems professional, Morgan Kaufmann Publishers Inc., San Francisco, CA, 1996
• 9: Anita Borg , Wolfgang Blau , Wolfgang Graetsch , Ferdinand Herrmann , Wolfgang Oberle, Fault tolerance under UNIX, ACM Transactions on Computer Systems (TOCS), v.7 n.1, p.1-24, Feb. 1989 [doi>10.1145/58564.58565]
• 10: Flavin Cristian, Understanding fault-tolerant distributed systems, Communications of the ACM, v.34 n.2, p.56-78, Feb. 1991 [doi>10.1145/102792.102801]
• 11: Debull 2001. IEEE Bulletin of the Technical Committee on Data Engineering 24, 1. Special Issue on Infrastructure for Advanced E-Services.
• 12: Kaushik Dutta , Debra E. VanderMeer , Anindya Datta , Krithi Ramamritham, User Action Recovery in Internet SAGAs (iSAGAs), Proceedings of the Second International Workshop on Technologies for E-Services, p.132-146, September 14-15, 2001
• 13: E. N. (Mootaz) Elnozahy , Lorenzo Alvisi , Yi-Min Wang , David B. Johnson, A survey of rollback-recovery protocols in message-passing systems, ACM Computing Surveys (CSUR), v.34 n.3, p.375-408, September 2002 [doi>10.1145/568522.568525]
• 14: Johann Christoph Freytag , Flaviu Cristian , Bo Kähler, Masking System Crashes in Database Application Programs, Proceedings of the 13th International Conference on Very Large Data Bases, p.407-416, September 01-04, 1987
• 15: Svend Frølund , Rachid Guerraoui, Implementing e-Transactions with Asynchronous Replication, Proceedings of the 2000 International Conference on Dependable Systems and Networks (formerly FTCS-30 and DCCA-8), p.449-458, June 25-28, 2000
• 16: Xiang Fu , Tevfik Bultan , Richard Hull , Jianwen Su, Verification of Vortex Workflows, Proceedings of the 7th International Conference on Tools and Algorithms for the Construction and Analysis of Systems, p.143-157, April 02-06, 2001
• 17: Jim Gray , Andreas Reuter, Transaction Processing: Concepts and Techniques, Morgan Kaufmann Publishers Inc., San Francisco, CA, 1992
• 18: David Harel , Eran Gery, Executable Object Modeling with Statecharts, Computer, v.30 n.7, p.31-42, July 1997 [doi>10.1109/2.596624]
• 19: Yennun Huang , Yi-Min Wang, Why Optimistic Message Logging Has Not Been Used in Telecommunications Systems, Proceedings of the Twenty-Fifth International Symposium on Fault-Tolerant Computing, p.459, June 27-30, 1995
• 20: Johnson, D. B. and Zwaenepoel, W. 1987. Sender-based message logging. In Proceedings of the 7th International Symposium on Fault-Tolerant Computing, Pittsburgh, PA, July 1987. IEEE Computer Society, 14--19.
• 21: Won Kim, Highly available systems for database applications, ACM Computing Surveys (CSUR), v.16 n.1, p.71-98, March 1984 [doi>10.1145/861.866]
• 22: David B. Lomet, Persistent Applications Using Generalized Redo Recovery, Proceedings of the Fourteenth International Conference on Data Engineering, p.154-163, February 23-27, 1998
• 23: David Lomet , Gerhard Weikum, Efficient transparent application recovery in client-server information systems, Proceedings of the 1998 ACM SIGMOD international conference on Management of data, p.460-471, June 01-04, 1998, Seattle, Washington, United States
• 24: David Lomet , Mark Tuttle, Logical logging to extend recovery to new domains, Proceedings of the 1999 ACM SIGMOD international conference on Management of data, p.73-84, May 31-June 03, 1999, Philadelphia, Pennsylvania, United States
• 25: Luo, M.-Y. and Yang, C.-S. 2001. Constructing zero-loss Web services. In Proceedings IEEE INFOCOM 2001 of the 20th Joint International Conference of the IEEE Computer and Communication Societies on Computer Communications, Anchorage, AK, April 2001. IEEE, Los Alamitos, CA, 1781--1790.
• 26: C. Mohan , Don Haderle , Bruce Lindsay , Hamid Pirahesh , Peter Schwarz, ARIES: a transaction recovery method supporting fine-granularity locking and partial rollbacks using write-ahead logging, ACM Transactions on Database Systems (TODS), v.17 n.1, p.94-162, March 1992 [doi>10.1145/128765.128770]
• 27: MSDN Library: Persistence. Microsoft Internet Explorer Persistence Overview. http://msdn.microsoft.com/workshop/author/persistence/overview.asp.
• 28: MSDN Library:. Net. NET Remoting Overview. http://msdn.microsoft.com/library/default.asp? url=/library/en-us/cpguide/html/cpconnetremotingoverview.asp.
• 29: MSR Phoenix. Phoenix: Making Applications Robust. http://www.research.microsoft.com/research/db/phoenix/.
• 30: OMG: CORBA 2000. Fault Tolerant CORBA Spec V1.0. http://cgi.omg.org/cgi-bin/doc?ptc/00-04-04.
• 31: OMG: UML 1999. OMG Unified Modeling Language (UML) Version 1.3.http://www.rational.com/uml.
• 32: Cris Pedregal Martin , Krithi Ramamritham, Recovery guarantees in mobile systems, Proceedings of the 1st ACM international workshop on Data engineering for wireless and mobile access, p.22-28, August 20-20, 1999, Seattle, Washington, United States [doi>10.1145/313300.313325]
• 33: Cris Pedregal-Martin , Krithi Ramamritham, Guaranteeing Recoverability in Electronic Commerce, Proceedings of the Third International Workshop on Advanced Issues of E-Commerce and Web-Based Information Systems (WECWIS '01), p.144, June 21-22, 2001
• 34: PHP. PHP Documentation and Downloads. http://www.php.net.
• 35: Popovici, A., Schuldt, H., and Schek, H.-J. 2000. Generation and verification of heterogeneous purchase processes. In Proceedings of the 1st International Workshop on Technologies for E-Services, Cairo, Egypt, September 2000, 5--22.
• 36: Heiko Schuldt , Andrei Popovici , Hans-Jörg Schek, Automatic Generation of Reliable E-Commerce Payment Processes, Proceedings of the First International Conference on Web Information Systems Engineering (WISE'00)-Volume 1, p.434, June 19-20, 2000
• 37: Shegalov, G., Weikum, G., Barga, R., and Lomet, D. 2002. EOS: Exactly-once E-Service Middleware (Demo Paper). In Proceedings of the 28th International Conference on Very Large Data Bases, Hong Kong, China, August 2002, P. A. Bernstein, Y. E. Ioaninidis, R. Ramakrishnan, D. Papadias, Eds. Morgan Kaufmann, 1043--1046.
• 38: Sun 2001. Enterprise Java Beans Specification, Version 2.0, http://java.sun.com/products/ejb/docs.html.
• 39: J. D. Tygar, Atomicity versus Anonymity: Distributed Transactions for Electronic Commerce, Proceedings of the 24rd International Conference on Very Large Data Bases, p.1-12, August 24-27, 1998
• 40: Gerhard Weikum , Gottfried Vossen, Transactional information systems: theory, algorithms, and the practice of concurrency control and recovery, Morgan Kaufmann Publishers Inc., San Francisco, CA, 2001
• 41: Mickey Williams, Microsoft Visual C# (Core Reference), Microsoft Press, Redmond, WA, 2002
• 42: Zend. Zend Engine. http://www.zend.com.

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.4 Distributed Systems
          Subjects: Distributed applications

Additional Classification:
  C. Computer Systems Organization
  C.4 PERFORMANCE OF SYSTEMS
      Subjects: Fault tolerance; Reliability, availability, and serviceability

  H. Information Systems
  H.2 DATABASE MANAGEMENT
      H.2.4 Systems
          Subjects: Transaction processing

General Terms:
Design, Management, Performance, Reliability

Keywords:
Exactly-once execution, application recovery, communication protocols, interaction contracts