Managing contingency capacity of pooled resources in multiple availability zones

摘要

A network-based services provider may reserve and provision primary resource instance capacity for a given service (e.g., enough compute instances, storage instances, or other virtual resource instances to implement the service) in one or more availability zones, and may designate contingency resource instance capacity for the service in another availability zone (without provisioning or reserving the contingency instances for the exclusive use of the service). For example, the service provider may provision resource instance(s) for a database engine head node in one availability zone and designate resource instance capacity for another database engine head node in another availability zone without instantiating the other database engine head node. While the service operates as expected using the primary resource instance capacity, the contingency resource capacity may be leased to other entities on a spot market. Leases for contingency instance capacity may be revoked when needed for the given service (e.g., during failover).

主权项

1. A computing system, comprising:
a plurality of computing nodes, each of which comprises at least one processor and a memory; wherein one or more resource instances executing on the plurality of computing nodes implement a storage service, and wherein the storage service comprises a head node and two or more server nodes of a distributed storage service that stores portions of data on one or more storage devices; wherein one or more other resource instances in a resource instance pool are designated as contingency resource instances for the storage service, but are not reserved for the exclusive use of the storage service; wherein, while the head node is operating as expected:
the head node is configured to:
receive, from a client of the storage service, one or more write requests, each directed to a respective data item and specifying a modification to be made to the respective data item; androute information about the specified modifications to particular ones of the server nodes of the distributed storage service;the server nodes of the distributed storage service are configured to:
apply the specified modifications; and a resource management component executing on one of the computing nodes is configured to lease one or more of the contingency resource instances to a client, wherein leases for the contingency resource instances are revocable by the resource management component when they are needed for the use of the storage service; and wherein, in response to determining that the head node is no longer operating as expected, the resource management component is configured to:
revoke a lease for at least one of the one or more contingency resource instances;reserve the at least one of the contingency resource instances for the use of the storage service; andinstantiate another head node using the at least one of the contingency resource instances.