-
Notifications
You must be signed in to change notification settings - Fork 2.2k
htlcswitch: use fn.GoroutineManager #9140
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Conversation
|
Important Review skippedAuto reviews are limited to specific labels. 🏷️ Labels to auto review (1)
Please check the settings in the CodeRabbit UI or the You can disable this status message by setting the Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media? 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
8810118 to
88fbc4b
Compare
8395cca to
e001027
Compare
|
@starius - I think these unit test failures are related to this PR - maybe take a look at fixing those up first & then re-ping reviewers when ready? |
Crypt-iQ
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I couldn't reproduce the race condition with the attached test, do you have an error trace of it?
htlcswitch/switch.go
Outdated
| }() | ||
| }) | ||
| if err != nil { | ||
| return |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
don't think this should return?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Fixed, added a comment. Now this section looks like this:
// When this time ticks, then it indicates that we should
// collect all the forwarding events since the last internal,
// and write them out to our log.
case <-s.cfg.FwdEventTicker.Ticks():
// The error of Go is ignored: if it is shutting down,
// the loop will terminate on the next iteration, in
// s.gm.Done case.
_ = s.gm.Go(func(ctx context.Context) {
err := s.FlushForwardingEvents()
if err != nil {
log.Errorf("unable to flush "+
"forwarding events: %v", err)
}
})
I pushed branch reproduce-race to my fork. In that branch: |
7cb95ef to
662c47b
Compare
Test failure was caused by extra call to s.Stop in |
ellemouton
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for the updates @starius!
Logic looks good, but I have some opinions about the API of the fn.Go call that I think is worth discussing before we merge. Would love to hear what @yyforyongyu & @ProofOfKeags think too.
|
What's the prio on this? I want to review but I need to balance with other stuff. |
Not critical. You can focus on P0 stuff, before addressing this. |
yyforyongyu
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sorry a bit late in the game, but is there an issue page describing what the issue is?
I also don't understand the struct GoroutineManager - it looks like it's putting a mutex to guard the wait group operations?
My instinct is this is solving the wrong problem - we should always know when/where we call wg.Add and wg.Wait, if not, we should refactor our code so we always know when we cal wg.Add and wg.Wait. I guess other people have run into this issue before too.
This was requested in lightningnetwork#9140 (comment)
c51f5ab to
1a18ed4
Compare
ellemouton
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
htlcswitch/switch.go
Outdated
| DefaultMaxFeeExposure = lnwire.MilliSatoshi(500_000_000) | ||
|
|
||
| // background is a shortcut for context.Background. | ||
| background = context.Background() |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
i dont think we should do this. Rather use a context.TODO() where needed
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
if you rebase on top of #9344, then we can also add a context guard here and then we only need a single context.TODO() in Start()
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Fixed.
There are now 3 top-level methods left which use context.TODO() now:
- Start
- ForwardPackets
- GetAttemptResult
Probably they should get a context argument in the future and it will replace the context.TODO().
protofsm/state_machine.go
Outdated
| // background is a shortcut for context.Background. | ||
| background = context.Background() |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
we should not do this.
consider rebasing on top of #9342 which handles the bump to the correct fn version and handles updating the statemachine to thread contexts through correctly
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done. This commit is not needed now.
htlcswitch/switch.go
Outdated
| select { | ||
| case n = <-nChan: | ||
| case <-s.quit: | ||
| case <-s.gm.Done(): |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
i think it is not great to refer to s.gm from inside a call-back that is called from s.gm (it screams "deadlock"). Rather just use the ctx provided to the callback which will be cancelled when the gm is shutdown (ie, when gm.Done() would have returned anyways)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Fixed
htlcswitch/switch.go
Outdated
| // The error of Go is ignored: if it is shutting down, | ||
| // the loop will terminate on the next iteration, in | ||
| // s.gm.Done case. | ||
| _ = s.gm.Go(background, func(ctx context.Context) { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
let htlcForwarder take a context and pass in a context in there from the goroutine which is starting it
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Fixed
htlcswitch/switch.go
Outdated
| // TODO(yy): remove the goroutine and send back the error here. | ||
| s.wg.Add(1) | ||
| go s.handleLocalResponse(packet) | ||
| ok := s.gm.Go(background, func(ctx context.Context) { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
rather pass in a context to the calling func. Same for all the others
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Fixed.
Another instance is handlePacketFail.
|
@starius - those 2 PRs are in now so I think we can continue here |
3f7a66f to
7ce33f8
Compare
ellemouton
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
looks good after squash 🙏
Let's follow up soon to replace the TODOs
Replaced the use of s.quit and s.wg with s.gm (GoroutineManager). This fixes a race condition between s.wg.Add(1) and s.wg.Wait(). Also added a test which used to fail under `-race` before this commit.
|
Squashed the commits. |
yyforyongyu
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I agree that, ideally, the code should be refactored into an event-loop style, centralizing all goroutine launches and state changes within a single goroutine and using channels to transmit data to and from it. This approach aligns with the patterns we follow in other packages. However, implementing such a change would require significant time and extensive modifications to the package. What are your thoughts?
Have you tried the event loop approach? At a glance I think we only need to add a new channel receiver attemptResultReq on Switch and read it in the main loop htlcForwader? Seems doable as the diff is small https://gist.github.com/yyforyongyu/7cf8d2e2586b2c38d197e05315b9d55d
The other approach is simply removing the wg.Add - why do we need it or am I missing anything here?
diff --git a/htlcswitch/switch.go b/htlcswitch/switch.go
index 720625f2c..5e11ce794 100644
--- a/htlcswitch/switch.go
+++ b/htlcswitch/switch.go
@@ -493,10 +493,7 @@ func (s *Switch) GetAttemptResult(attemptID uint64, paymentHash lntypes.Hash,
// Since the attempt was known, we can start a goroutine that can
// extract the result when it is available, and pass it on to the
// caller.
- s.wg.Add(1)
go func() {
- defer s.wg.Done()
-
var n *networkResult
select {
case n = <-nChan:
@@ -518,12 +515,15 @@ func (s *Switch) GetAttemptResult(attemptID uint64, paymentHash lntypes.Hash,
if err != nil {
e := fmt.Errorf("unable to extract result: %w", err)
log.Error(e)
- resultChan <- &PaymentResult{
- Error: e,
- }
+ fn.SendOrQuit(
+ resultChan, &PaymentResult{
+ Error: e,
+ }, s.quit,
+ )
return
}
- resultChan <- result
+
+ fn.SendOrQuit(resultChan, result, s.quit)
}()
return resultChan, nilI think we are more or less on the same page, as we know it's a temporary mitigation to the issue. And I wanna stress again about the wrong usage of wg.Add(1), as explained from this OG comment.
Or my question is this - now that we have the new fn.GoroutineManager, how are we gonna prevent future development from using it to cover the mistake that a wg.Add is called inside a goroutine?
| }() | ||
| }) | ||
| // The switch shutting down is signaled by closing the channel. | ||
| if !ok { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why do we still need this check? Won't the line <-ctx.Done() be hit when it's shutting down?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If GoroutineManager.Stop is called before the Go method (i.e., the switch is in the process of stopping), the Go method will return false without launching a new goroutine. In such cases, we should perform the same action as if it had stopped after launching the goroutine - specifically, closing resultChan. Failing to close the channel and simply returning it could cause the caller to get stuck indefinitely while waiting to receive from the channel.
| ok := s.gm.Go(context.TODO(), func(ctx context.Context) { | ||
| s.logFwdErrs(ctx, &numSent, &wg, fwdChan) | ||
| }) | ||
| if !ok { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
same here - why do we need this check? I think s.logFwdErrs will listen on <-s.gm.Done(): and quit?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is a similar situation. We should handle it the same way if the goroutine manager is stopped before the Go method is executed.
If we remove |
|
I don't think my comments are addressed. I've provided two alternatives that we don't need the
|
|
@yyforyongyu: review reminder |
|
!lightninglabs-deploy mute |
Change Description
Replaced the use of
s.quitands.wgwiths.gm(GoroutineManager). WaitGroup is still needed to wait forhandleLocalResponse: if it was switched tos.gm, then it may skip running, which has unclear consequences. AfterhandleLocalResponseis changed to run without a goroutine, we can remove WaitGroup completely.This fixes a race condition between
s.wg.Add(1)ands.wg.Wait().Steps to Test
I added a test which used to fail under
-racebefore this commit.This test crashes with a data race if I undo the changes of implementation of switch.
Pull Request Checklist
Testing
Code Style and Documentation
[skip ci]in the commit message for small changes.