[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[tlaplus] How to get rid of the negative influence of a cycle timer mechanism

Dear all:

   I am specifying a distributed system consists of a cluster of nodes.      
   Each node's service state will be syncronized to the whole cluster periodically.

   In the  implementtation layer,  there is a cycle timer in each node and generate syncronization message periodically.

   What really confused me is how to specify this mechanism abstractly.  

   It is easy to simulate the timeout method  under the pre-condition that the node is in working state, but the result is that the state machine will always driven by the timeout mechanism and never end.

   This scenario is somewhat  like the so called stuttering state if the system had been in convergeny and without other valid trigger.

   So, what is the principle to get rid of the stuttering cycle timer's influence in buliding the model?

    Best Regards


You received this message because you are subscribed to the Google Groups "tlaplus" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tlaplus+unsubscribe@xxxxxxxxxxxxxxxx.
To view this discussion on the web visit https://groups.google.com/d/msgid/tlaplus/c3bcf614-06bd-4990-853a-2c30c224b31eo%40googlegroups.com.