bootstrap

A simple, yet powerful cluster bootstrapping application.


License
MIT

Documentation

bootstrap

The bootstrap application is a simple, yet poweful application to bootstrap an Erlang cluster without having to know the exact nodenames or hostnames in advance. It automates the process of dynamically populating the cluster with new nodes. There's also a Java implementation of the bootstrap protocol based on Jinterface which adds bootstrap support to Java nodes.

Features

  • Automatically discover and connect to nodes in an Erlang cluster.
  • Utilize UDP broadcast or multicast for node discovery.
  • Suppport multiple nodes per host.
  • Support creation of complex topologies using hidden connections.
  • Provide node connection/disconnection notification system.
  • Also available to Java nodes.

How it works

The node discovery process is based on a simple, distributed P2P protocol defining two PDUs, the bootstrap PING and PONG messages. As mentioned earlier, these messages are distributed via either UDP broadcast or multicast. All nodes in the cluster must run the same protocol. See below for the representation of the messages.

%% PING:
term_to_binary({bootstrap, {ping, PingNode :: node(), PingAddr :: inet:ip4_address()}}).

%% PONG:
term_to_binary({bootstrap, {pong, PongNode :: node(), PingNode :: node()}}).

It's well known that broadcast as well as multicast can load a network pretty heavy. Therefore, the bootstrap application takes measures to reduce the network traffic to a minimum using strategies known from P2P overlay protocols designed for the use in mobile Ad-hoc networks (which are very sensitive to extensive medium usage).

Most of the ideas behind the bootstrap protocol are inspired by the Local Broadcast Cluster concept described in [1]. PING and PONG messages are distributed as broadcast/multicast. This makes it possible to have only one active instance of the protocol at a time. To ensure this, the bootstrap protocol will detect and solve PING collisions. Furthermore, it will use information from PONG messages to make distributed decisions whether to ping or not to ping. All traffic will be stopped as soon as all nodes in the cluster meet their connectivity needs.

TODO make more detailed description (e.g. with figures)

Configuration

The bootstrap application already comes with sensible defaults (except for the regex used to decide whether to connect to a certain node or not). However, many things can be customized if desired. For this purpose the following configuration options are available and can be configured in the application environment:

  • {connect_regex, Regex :: string()}

    Specifies a regular expression to be compiled using re:compile/1. A bootstrap instance will only connect to a node if its name matches this expression. Furthermore, transitive connections implicitly made by global (in visible mode) will only be reported if they match this expression. Default is ".*".

  • {connect_mode, visible | hidden}

    Specifies the type of connections that will be established by this protocol instance. Visible connections will most probably pull in transitive connections to other nodes. If a specialized, custom topology is desired this value should be set to hidden. However, global name registration is disfunctional over hidden connections. Default is visible.

  • {min_connections, non_neg_integer() | infinity}

    Specifies the minimum number of matching connections. A node will actively try to get connections to matching nodes up to this number. Further connections may be established, but the active part of the discovery will be stopped when reaching this number. Active discovery will start again when the number of connections drops beneath this value. Default is infinity.

  • {primary_port, inet:port_number()}

    Specifies the main network port broadcast or multicast packets will be sent over. This value must be equal for all bootstrap instances on all nodes. Default is 50337.

  • {secondary_ports, [inet:port_number()]}

    Specifies additional listen ports. This feature is necessary if the system involves more than one node per host, since there's no common way to listen on the same network port from multiple processes. For each additional node per host another network port is required. E.g. if a system has a host with three nodes this list must contain two entries (different to the primary_port value). Default is [50338, 50339].

  • {protocol, broadcast | multicast}

    Specifies the network protocol used for node discovery. Default is broadcast.

  • {ping_timeout, non_neg_integer()}

    Specifies the rough time in milliseconds between two consecutive, active node discovery messages. Default is 10000.

  • {broadcast_ip, BroadcastAddr :: inet:ip4_address()}

    Specifies the address to use for broadcast discovery. This parameter is optional. If not specified bootstrap scans all available network interfaces and uses those capable of broadcast. This parameter is useful if you want to limit bootstrap traffic to a specific subnet.

  • {multicast_ip, MulticastAddr :: inet:ip4_address()}

    Specifies the multicast address to be used for node discovery when using the multicast protocol. Default is {239, 192, 0, 1}.

  • {multicast_iface, MulticastAddr :: inet:ip4_address()}

    The address of the interface to listen on for multicast packets. Default is {0, 0, 0, 0}, which mostly works unless you're multi-homed. See IP_ADD_MEMBERSHIP in the ip(7) man page.

  • {multicast_ttl, non_neg_integer()}

    Specifies the time-to-live (TTL) of outgoing multicast packets. When setting the TTL to 1 all multicast packets are limited to the local network. Default is 1.

  • {no_global_sync, boolean()}

    Allows skipping the call to global:sync/0 when a new matching node joins the cluster (if set to true). This is useful, if the global name synchronization is either handled by yourself or not needed at all. Default is false.

The default configuration can be used to form an unbounded, mesh-connected Erlang cluster utilizing the UDP broadcast protocol. Please note that to be able to connect to other Erlang nodes, these nodes must have the same Erlang cookie configured.

Notifications

If you use bootstrap to automatically establish connections between nodes, configuring and starting the application on all nodes is basically all you need. However, some use cases may make it necessary to get notified whenever a matching connection is established or lost.

For this purpose the bootstrap application provides the monitor_nodes/1 function that manages bootstrap handler registrations (for the calling process). Bootstrap handlers will get initial notifications for all matching nodes that are currently connected.

The net_kernel module also allows registration of processes for node up/down messages. However, there are some major advantages when using the bootstrap notification system:

  • Only notifications for matching nodes will be delivered.
  • If using visible connections, the nodeup messages will be delayed until all global name servers are in sync. This means, in contrary to the net_kernel messages, a globally registered process on a newly connected node can be used immediatelly after receiving the corresponding message.

The bootstrap application defines two messages that are sent to handlers using ordinary Erlang messaging (corresponding defines can be found in the bootstrap.hrl header file):

  • {bootstrap, {nodeup, Node :: atom()}} matching node got connected
  • {bootstrap, {nodedown, Node :: atom(), Reason :: term()}} matching node got disconnected

The example directory contains a simple example of a gen_server subscribing for bootstrap notifications. For more information, please refer to the edoc of the bootstrap module.

Security

The bootstrap application is insecure. This means everyone with access to the used broadcast/multicast domain can send, receive and read bootstrap packets. However, to be able to connect to any of the gathered nodenames an attacker must know the used Erlang cookie. The bootstrap application will never transmit cookies over the wire in any form.

Examples

This section gives some configuration examples along with respective resulting topologies. A small note to the used figures:

  • The grey bootstrap box outlines the view of node connections a bootstrap handler would see (the handler would get notifications for these nodes).

  • The grey net_kernel box outlines the actual connections of a node. This is equivalent to the list of nodes you get from erlang:nodes(connected).

Mesh Topology

This is the basic setup you get when connecting to other nodes. Every node is connected with every other node in the cluster. The view for bootstrap handlers does not differ from the net_kernel view:

Mesh Topology with visible connections.

The sys.config configuration to build a topology like this would look like the following:

%% on all nodes:
[{bootstrap, [{connect_regex, ".*"}, {min_connections, 1}]}].

Star Topology

This example shows the difference between visible and hidden connections. While visible connections (default Erlang) always build a mesh connected cluster (from the net_kernel view), hidden connections allow building custom cluster topologies. However, global name registration cannot be used in this case!

The left figure shows the visible connection example. In this case the bootstrap filters connection notifications according to the configured connect_regex. This means when connecting the cluster bootstrap handlers will only get notifications for the nodes part of the bootstrap view of the cluster (top of the figure), although other connections may be established automatically by the kernel application.

The right figure shows the star topology forced to the net_kernel using hidden node connections that may not be used by the kernel to connect to other nodes automatically.

Star Topology with visible and hidden connections.

The sys.config configuration to build a topology as shown in the left example would look like the following:

%% master node:
[{bootstrap, [{connect_regex, "slave@.*"},  {min_connections, 1}]}].

%% slave node:
[{bootstrap, [{connect_regex, "master@.*"}, {min_connections, 1}]}].

The sys.config configuration to build a topology as shown in the right example would look like the following:

%% master node:
[{bootstrap, [{connect_regex, "slave@.*"},  {connect_mode, hidden}, {min_connections, 1}]}].

%% slave node:
[{bootstrap, [{connect_regex, "master@.*"}, {connect_mode, hidden}, {min_connections, 1}]}].

Tree Topology

This is a more complex example using hidden connections. The configurations not only differ from level to level, beginning at level two, a node must additionally decide to which branch of the tree it wants to connect. As can be seen in the configurations below, level one nodes use a combined regular expression to match root and level2 nodes. A regular expression matching only root nodes would be sufficient to connect the tree, however, in this case level one nodes would not get notifications about connected level two nodes.

Tree Topology with hidden connections.

The sys.config configuration to build a topology like this would look like the following:

%% root node:
[{bootstrap, [{connect_regex, "level1.*"}, {connect_mode, hidden}, {min_connections, 1}]}].

%% level1 nodes:
[{bootstrap, [{connect_regex, "(root|level2)@.*"}, {connect_mode, hidden}, {min_connections, 2}]}].

%% level2 nodes (depending on which part of the tree a node should connect to):
[{bootstrap, [{connect_regex, "level1a@.*"}, {connect_mode, hidden}, {min_connections, 1}]}].
%% or
[{bootstrap, [{connect_regex, "level1b@.*"}, {connect_mode, hidden}, {min_connections, 1}]}].

History

Master

No changes

Version 1.1.0

  • Remove support for OTP 17
  • Remove deprecated function calls on newer OTP versions, this also removes the dependency to the crypto application

Version 1.0.0

  • Remove all warnings of dialyzer/compiler on OTP 19 and above
  • Make the global name synchronization configurable
  • Add support to run bootstrap in docker containers (see #4, thanks to @noelbk)

Version 0.0.2

  • bootstrap is now available via hex.pm
  • Make project compatible to rebar3
  • Add new API to explicitly activate/deactivate discovery on a node
  • Bootstrap notifications has been switched from gen_event to ordinary messages, with an API very similar to the net_kernel one
  • Restructure utility code into _lib module
  • Fixes #1 Discovery problems when using multiple nodes per host

Version 0.0.1

  • Regular expression based node matching
  • UDP broadcast support
  • UDP multicast support
  • Multi-node-per-host support
  • Avoid duplicate broadcasts to minimize network usage
  • Behaviour-based notification system

References

[1] Basissoftware für drahtlose Ad-hoc- und Sensornetze, P. Baumung and M. Zitterbart, 2009 Universitätsverlag Karlsruhe