[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [tlaplus] How to get rid of the negative influence of a cycle timer mechanism



I am not really sure that I understand your question. Of course, TLA+ is meant to model systems whose behavior "never ends", and as long as the state space is finite, TLC can verify properties of such systems.

There have been previous discussions on modeling timers and timeouts in this Google group, e.g. [1]. Perhaps you find some hints there, otherwise feel free to come back, perhaps with a simplified example that explains the issue.

Thanks,
Stephan

[1] https://groups.google.com/forum/#!topic/tlaplus/mvrg99_xc74

On 15 Jun 2020, at 05:46, Earnshaw <dongluming77@xxxxxxxxx> wrote:

Dear all:

   I am specifying a distributed system consists of a cluster of nodes.      
  
   Each node's service state will be syncronized to the whole cluster periodically.

   In the  implementtation layer,  there is a cycle timer in each node and generate syncronization message periodically.


   What really confused me is how to specify this mechanism abstractly.  

   It is easy to simulate the timeout method  under the pre-condition that the node is in working state, but the result is that the state machine will always driven by the timeout mechanism and never end.

   This scenario is somewhat  like the so called stuttering state if the system had been in convergeny and without other valid trigger.

   So, what is the principle to get rid of the stuttering cycle timer's influence in buliding the model?


    Best Regards

   
  

--
You received this message because you are subscribed to the Google Groups "tlaplus" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tlaplus+unsubscribe@xxxxxxxxxxxxxxxx.
To view this discussion on the web visit https://groups.google.com/d/msgid/tlaplus/c3bcf614-06bd-4990-853a-2c30c224b31eo%40googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "tlaplus" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tlaplus+unsubscribe@xxxxxxxxxxxxxxxx.
To view this discussion on the web visit https://groups.google.com/d/msgid/tlaplus/FF575AB8-EA81-4D79-B3C2-285376369B37%40gmail.com.