storj/satellite/repair/repairer
paul cannon 72189330fd satellite/gracefulexit: revamp graceful exit
Currently, graceful exit is a complicated subsystem that keeps a queue
of all pieces expected to be on a node, and asks the node to transfer
those pieces to other nodes one by one. The complexity of the system
has, unfortunately, led to numerous bugs and unexpected behaviors.

We have decided to remove this entire subsystem and restructure graceful
exit as follows:

* Nodes will signal their intent to exit gracefully
* The satellite will not send any new pieces to gracefully exiting nodes
* Pieces on gracefully exiting nodes will be considered by the repair
  subsystem as "retrievable but unhealthy". They will be repaired off of
  the exiting node as needed.
* After one month (with an appropriately high online score), the node
  will be considered exited, and held amounts for the node will be
  released. The repair worker will continue to fetch pieces from the
  node as long as the node stays online.
* If, at the end of the month, a node's online score is below a certain
  threshold, its graceful exit will fail.

Refs: https://github.com/storj/storj/issues/6042
Change-Id: I52d4e07a4198e9cb2adf5e6cee2cb64d6f9f426b
2023-09-27 08:40:01 +00:00
..
ec.go satellite/repair: unify repair logic 2023-09-25 09:42:08 -05:00
repairer.go satellite/satellitedb: repairqueue.Select uses placement constraints 2023-09-25 10:14:25 +00:00
segments_test.go satellite/repair: unify repair logic 2023-09-25 09:42:08 -05:00
segments.go satellite/gracefulexit: revamp graceful exit 2023-09-27 08:40:01 +00:00
stats.go satellite/repair/repairer: a new set of rs_scheme tagged metrics 2021-02-09 14:19:22 +00:00