consensus-and-membership-use-incompatible-convergence-models

Status: IN

Gossip-based failure detection and Raft consensus interact in a way that can compound partition hazards: gossip's timeout-driven liveness set determines cluster membership, while Raft's partition behavior means an isolated leader silently accepts uncommittable writes and its inflated term forces re-election upon rejoining — if gossip's failure detection misclassifies a partitioned-but-live leader, it may trigger membership changes that interact with Raft's already-disruptive partition recovery.

Justifications

Gossip's timeout-based failure detection can trigger Raft's partition hazard (stale leader + forced re-election) even without a real partition

Depends on (SL): gossip-failure-detection-governs-cluster-correctness, raft-partition-creates-dual-hazard

Depended on by

JSON