Failfast / don't fail starting
Cantor, Scott
cantor.2 at osu.edu
Mon Dec 2 12:42:06 EST 2013
On 12/2/13, 11:41 AM, "Rod Widdowson" <rdw at steadingsoftware.com> wrote:
>What is our current design aim for fail fast?
My opinion on this is pretty well known: I don't believe in it. I think
you produce as functional a state as possible and log the rest.
I am ok with having flags for that, but as far as defaulting, I think most
people end up confused by fail fast, and I think a case can be made for
flipping the default in 3.0 if others share my view.
>4) Faulty config file, setup is for no reload.
>
> - On start the file fails to load and we complain bitterly in the log.
> The IdP has the option to stop immediately (fail fast).
> We do have the option to spin up a reload thread with default timing
>to allow things
> to reload when the config is fixed. At this stage however the
>service
>is in auto-reload
> mode which might be a bad idea. Fixing this would require even more
>difficult to explain
> configuration or special purpose code.
>
>Obviously case (4) is the one which is of most interest to me right now.
I don't think we need complicate life by making it possible to configure
non-fail-fast behavior without reloading, and yet have somebody expect it
will reload.
-- Scott
More information about the dev
mailing list