Cluster Membership Monitor

The Cluster Membership Monitor (CMM) is a distributed set of agents, one per cluster member. The agents exchange messages over the cluster interconnect to:

• Enforce a consistent membership view on all nodes (quorum)

• Drive synchronized reconfiguration in response to membership changes, using registered callbacks

• Handle cluster partitioning (split brain, amnesia)

• Ensure full connectivity among all cluster members

Unlike previous Sun Cluster releases, CMM runs entirely in the kernel.

Cluster Membership

The main function of the CMM is to establish cluster-wide agreement on the set of nodes that participates in the cluster at any given time. Sun Cluster refers to this constraint as cluster membership.

To determine cluster membership, and ultimately, ensure data integrity, the CMM:

• Accounts for a change in cluster membership, such as a node joining or leaving the cluster

• Ensures that a "bad" node leaves the cluster

• Ensures that a "bad" node stays out of the cluster until it is repaired

• Prevents the cluster from partitioning itself into subsets of nodes

See "Quorum and Quorum Devices" for more information on how the cluster protects itself from partitioning into multiple separate clusters.

Cluster Membership Monitor Reconfiguration

To ensure that data is kept safe from corruption, all nodes must reach a consistent agreement on the cluster membership. When necessary, the CMM coordinates a cluster reconfiguration of cluster services (applications) in response to a failure.

The CMM receives information about connectivity to other nodes from the cluster transport layer. The CMM uses the cluster interconnect to exchange state information during a reconfiguration.

After detecting a change in cluster membership, the CMM performs a synchronized configuration of the cluster, where cluster resources might be redistributed based on the new membership of the cluster.