Managing contingency capacity of pooled resources in multiple availability zones

摘要

A network-based services provider may reserve and provision primary resource instance capacity for a given service (e.g., enough compute instances, storage instances, or other virtual resource instances to implement the service) in one or more availability zones, and may designate contingency resource instance capacity for the service in another availability zone (without provisioning or reserving the contingency instances for the exclusive use of the service). For example, the service provider may provision resource instance(s) for a database engine head node in one availability zone and designate resource instance capacity for another database engine head node in another availability zone without instantiating the other database engine head node. While the service operates as expected using the primary resource instance capacity, the contingency resource capacity may be leased to other entities on a spot market. Leases for contingency instance capacity may be revoked when needed for the given service (e.g., during failover).

主权项

1. A computing system, comprising:
a plurality of computing nodes, each of which comprises at least one processor and a memory; wherein one or more reserved resource instances executing on the plurality of computing nodes implement a database service, and wherein the database service comprises a database engine head node and two or more server nodes of a distributed storage service that stores portions of database tables as respective data pages on one or more storage devices; wherein one or more other resource instances in a resource instance pool are designated as contingency resource instances for the database service, but are not reserved for the exclusive use of the database service; wherein, while the database engine head node is operating as expected:
the database engine head node is configured to:
receive, from a client of the database service, one or more write requests, each directed to a respective data record in a database table and specifying a modification to be made to the respective data record; androute information about the specified modifications to particular ones of the server nodes of the distributed storage service;the server nodes of the distributed storage service are configured to:
apply the specified modifications; anda resource management component executing on one of the computing nodes is configured to lease one or more of the contingency resource instances to a client under a spot market model, wherein leases for the contingency resource instances are revocable by the resource management component when they are needed for the use of the database service; and wherein, in response to determining that the database engine head node is no longer operating as expected, the resource management component is configured to:
revoke a lease for at least one of the one or more contingency resource instances;reserve the at least one of the contingency resource instances for the exclusive use of the database service; andinstantiate another database engine head node using the at least one of the contingency resource instances.