xref: /freebsd/sbin/hastd/primary.c (revision 0e1497aefd602cea581d2380d22e67dfdcac6b4e)
1 /*-
2  * Copyright (c) 2009 The FreeBSD Foundation
3  * Copyright (c) 2010 Pawel Jakub Dawidek <pjd@FreeBSD.org>
4  * All rights reserved.
5  *
6  * This software was developed by Pawel Jakub Dawidek under sponsorship from
7  * the FreeBSD Foundation.
8  *
9  * Redistribution and use in source and binary forms, with or without
10  * modification, are permitted provided that the following conditions
11  * are met:
12  * 1. Redistributions of source code must retain the above copyright
13  *    notice, this list of conditions and the following disclaimer.
14  * 2. Redistributions in binary form must reproduce the above copyright
15  *    notice, this list of conditions and the following disclaimer in the
16  *    documentation and/or other materials provided with the distribution.
17  *
18  * THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND
19  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
20  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
21  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE
22  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
23  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
24  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
25  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
26  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
27  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
28  * SUCH DAMAGE.
29  */
30 
31 #include <sys/cdefs.h>
32 __FBSDID("$FreeBSD$");
33 
34 #include <sys/types.h>
35 #include <sys/time.h>
36 #include <sys/bio.h>
37 #include <sys/disk.h>
38 #include <sys/refcount.h>
39 #include <sys/stat.h>
40 
41 #include <geom/gate/g_gate.h>
42 
43 #include <assert.h>
44 #include <err.h>
45 #include <errno.h>
46 #include <fcntl.h>
47 #include <libgeom.h>
48 #include <pthread.h>
49 #include <signal.h>
50 #include <stdint.h>
51 #include <stdio.h>
52 #include <string.h>
53 #include <sysexits.h>
54 #include <unistd.h>
55 
56 #include <activemap.h>
57 #include <nv.h>
58 #include <rangelock.h>
59 
60 #include "control.h"
61 #include "event.h"
62 #include "hast.h"
63 #include "hast_proto.h"
64 #include "hastd.h"
65 #include "hooks.h"
66 #include "metadata.h"
67 #include "proto.h"
68 #include "pjdlog.h"
69 #include "subr.h"
70 #include "synch.h"
71 
72 /* The is only one remote component for now. */
73 #define	ISREMOTE(no)	((no) == 1)
74 
75 struct hio {
76 	/*
77 	 * Number of components we are still waiting for.
78 	 * When this field goes to 0, we can send the request back to the
79 	 * kernel. Each component has to decrease this counter by one
80 	 * even on failure.
81 	 */
82 	unsigned int		 hio_countdown;
83 	/*
84 	 * Each component has a place to store its own error.
85 	 * Once the request is handled by all components we can decide if the
86 	 * request overall is successful or not.
87 	 */
88 	int			*hio_errors;
89 	/*
90 	 * Structure used to comunicate with GEOM Gate class.
91 	 */
92 	struct g_gate_ctl_io	 hio_ggio;
93 	TAILQ_ENTRY(hio)	*hio_next;
94 };
95 #define	hio_free_next	hio_next[0]
96 #define	hio_done_next	hio_next[0]
97 
98 /*
99  * Free list holds unused structures. When free list is empty, we have to wait
100  * until some in-progress requests are freed.
101  */
102 static TAILQ_HEAD(, hio) hio_free_list;
103 static pthread_mutex_t hio_free_list_lock;
104 static pthread_cond_t hio_free_list_cond;
105 /*
106  * There is one send list for every component. One requests is placed on all
107  * send lists - each component gets the same request, but each component is
108  * responsible for managing his own send list.
109  */
110 static TAILQ_HEAD(, hio) *hio_send_list;
111 static pthread_mutex_t *hio_send_list_lock;
112 static pthread_cond_t *hio_send_list_cond;
113 /*
114  * There is one recv list for every component, although local components don't
115  * use recv lists as local requests are done synchronously.
116  */
117 static TAILQ_HEAD(, hio) *hio_recv_list;
118 static pthread_mutex_t *hio_recv_list_lock;
119 static pthread_cond_t *hio_recv_list_cond;
120 /*
121  * Request is placed on done list by the slowest component (the one that
122  * decreased hio_countdown from 1 to 0).
123  */
124 static TAILQ_HEAD(, hio) hio_done_list;
125 static pthread_mutex_t hio_done_list_lock;
126 static pthread_cond_t hio_done_list_cond;
127 /*
128  * Structure below are for interaction with sync thread.
129  */
130 static bool sync_inprogress;
131 static pthread_mutex_t sync_lock;
132 static pthread_cond_t sync_cond;
133 /*
134  * The lock below allows to synchornize access to remote connections.
135  */
136 static pthread_rwlock_t *hio_remote_lock;
137 
138 /*
139  * Lock to synchronize metadata updates. Also synchronize access to
140  * hr_primary_localcnt and hr_primary_remotecnt fields.
141  */
142 static pthread_mutex_t metadata_lock;
143 
144 /*
145  * Maximum number of outstanding I/O requests.
146  */
147 #define	HAST_HIO_MAX	256
148 /*
149  * Number of components. At this point there are only two components: local
150  * and remote, but in the future it might be possible to use multiple local
151  * and remote components.
152  */
153 #define	HAST_NCOMPONENTS	2
154 /*
155  * Number of seconds to sleep between reconnect retries or keepalive packets.
156  */
157 #define	RETRY_SLEEP		10
158 
159 #define	ISCONNECTED(res, no)	\
160 	((res)->hr_remotein != NULL && (res)->hr_remoteout != NULL)
161 
162 #define	QUEUE_INSERT1(hio, name, ncomp)	do {				\
163 	bool _wakeup;							\
164 									\
165 	mtx_lock(&hio_##name##_list_lock[(ncomp)]);			\
166 	_wakeup = TAILQ_EMPTY(&hio_##name##_list[(ncomp)]);		\
167 	TAILQ_INSERT_TAIL(&hio_##name##_list[(ncomp)], (hio),		\
168 	    hio_next[(ncomp)]);						\
169 	mtx_unlock(&hio_##name##_list_lock[ncomp]);			\
170 	if (_wakeup)							\
171 		cv_signal(&hio_##name##_list_cond[(ncomp)]);		\
172 } while (0)
173 #define	QUEUE_INSERT2(hio, name)	do {				\
174 	bool _wakeup;							\
175 									\
176 	mtx_lock(&hio_##name##_list_lock);				\
177 	_wakeup = TAILQ_EMPTY(&hio_##name##_list);			\
178 	TAILQ_INSERT_TAIL(&hio_##name##_list, (hio), hio_##name##_next);\
179 	mtx_unlock(&hio_##name##_list_lock);				\
180 	if (_wakeup)							\
181 		cv_signal(&hio_##name##_list_cond);			\
182 } while (0)
183 #define	QUEUE_TAKE1(hio, name, ncomp, timeout)	do {			\
184 	bool _last;							\
185 									\
186 	mtx_lock(&hio_##name##_list_lock[(ncomp)]);			\
187 	_last = false;							\
188 	while (((hio) = TAILQ_FIRST(&hio_##name##_list[(ncomp)])) == NULL && !_last) { \
189 		cv_timedwait(&hio_##name##_list_cond[(ncomp)],		\
190 		    &hio_##name##_list_lock[(ncomp)], (timeout));	\
191 		if ((timeout) != 0) 					\
192 			_last = true;					\
193 	}								\
194 	if (hio != NULL) {						\
195 		TAILQ_REMOVE(&hio_##name##_list[(ncomp)], (hio),	\
196 		    hio_next[(ncomp)]);					\
197 	}								\
198 	mtx_unlock(&hio_##name##_list_lock[(ncomp)]);			\
199 } while (0)
200 #define	QUEUE_TAKE2(hio, name)	do {					\
201 	mtx_lock(&hio_##name##_list_lock);				\
202 	while (((hio) = TAILQ_FIRST(&hio_##name##_list)) == NULL) {	\
203 		cv_wait(&hio_##name##_list_cond,			\
204 		    &hio_##name##_list_lock);				\
205 	}								\
206 	TAILQ_REMOVE(&hio_##name##_list, (hio), hio_##name##_next);	\
207 	mtx_unlock(&hio_##name##_list_lock);				\
208 } while (0)
209 
210 #define	SYNCREQ(hio)		do {					\
211 	(hio)->hio_ggio.gctl_unit = -1;					\
212 	(hio)->hio_ggio.gctl_seq = 1;					\
213 } while (0)
214 #define	ISSYNCREQ(hio)		((hio)->hio_ggio.gctl_unit == -1)
215 #define	SYNCREQDONE(hio)	do { (hio)->hio_ggio.gctl_unit = -2; } while (0)
216 #define	ISSYNCREQDONE(hio)	((hio)->hio_ggio.gctl_unit == -2)
217 
218 static struct hast_resource *gres;
219 
220 static pthread_mutex_t range_lock;
221 static struct rangelocks *range_regular;
222 static bool range_regular_wait;
223 static pthread_cond_t range_regular_cond;
224 static struct rangelocks *range_sync;
225 static bool range_sync_wait;
226 static pthread_cond_t range_sync_cond;
227 
228 static void *ggate_recv_thread(void *arg);
229 static void *local_send_thread(void *arg);
230 static void *remote_send_thread(void *arg);
231 static void *remote_recv_thread(void *arg);
232 static void *ggate_send_thread(void *arg);
233 static void *sync_thread(void *arg);
234 static void *guard_thread(void *arg);
235 
236 static void
237 cleanup(struct hast_resource *res)
238 {
239 	int rerrno;
240 
241 	/* Remember errno. */
242 	rerrno = errno;
243 
244 	/* Destroy ggate provider if we created one. */
245 	if (res->hr_ggateunit >= 0) {
246 		struct g_gate_ctl_destroy ggiod;
247 
248 		bzero(&ggiod, sizeof(ggiod));
249 		ggiod.gctl_version = G_GATE_VERSION;
250 		ggiod.gctl_unit = res->hr_ggateunit;
251 		ggiod.gctl_force = 1;
252 		if (ioctl(res->hr_ggatefd, G_GATE_CMD_DESTROY, &ggiod) < 0) {
253 			pjdlog_errno(LOG_WARNING,
254 			    "Unable to destroy hast/%s device",
255 			    res->hr_provname);
256 		}
257 		res->hr_ggateunit = -1;
258 	}
259 
260 	/* Restore errno. */
261 	errno = rerrno;
262 }
263 
264 static __dead2 void
265 primary_exit(int exitcode, const char *fmt, ...)
266 {
267 	va_list ap;
268 
269 	assert(exitcode != EX_OK);
270 	va_start(ap, fmt);
271 	pjdlogv_errno(LOG_ERR, fmt, ap);
272 	va_end(ap);
273 	cleanup(gres);
274 	exit(exitcode);
275 }
276 
277 static __dead2 void
278 primary_exitx(int exitcode, const char *fmt, ...)
279 {
280 	va_list ap;
281 
282 	va_start(ap, fmt);
283 	pjdlogv(exitcode == EX_OK ? LOG_INFO : LOG_ERR, fmt, ap);
284 	va_end(ap);
285 	cleanup(gres);
286 	exit(exitcode);
287 }
288 
289 static int
290 hast_activemap_flush(struct hast_resource *res)
291 {
292 	const unsigned char *buf;
293 	size_t size;
294 
295 	buf = activemap_bitmap(res->hr_amp, &size);
296 	assert(buf != NULL);
297 	assert((size % res->hr_local_sectorsize) == 0);
298 	if (pwrite(res->hr_localfd, buf, size, METADATA_SIZE) !=
299 	    (ssize_t)size) {
300 		KEEP_ERRNO(pjdlog_errno(LOG_ERR,
301 		    "Unable to flush activemap to disk"));
302 		return (-1);
303 	}
304 	return (0);
305 }
306 
307 static bool
308 real_remote(const struct hast_resource *res)
309 {
310 
311 	return (strcmp(res->hr_remoteaddr, "none") != 0);
312 }
313 
314 static void
315 init_environment(struct hast_resource *res __unused)
316 {
317 	struct hio *hio;
318 	unsigned int ii, ncomps;
319 
320 	/*
321 	 * In the future it might be per-resource value.
322 	 */
323 	ncomps = HAST_NCOMPONENTS;
324 
325 	/*
326 	 * Allocate memory needed by lists.
327 	 */
328 	hio_send_list = malloc(sizeof(hio_send_list[0]) * ncomps);
329 	if (hio_send_list == NULL) {
330 		primary_exitx(EX_TEMPFAIL,
331 		    "Unable to allocate %zu bytes of memory for send lists.",
332 		    sizeof(hio_send_list[0]) * ncomps);
333 	}
334 	hio_send_list_lock = malloc(sizeof(hio_send_list_lock[0]) * ncomps);
335 	if (hio_send_list_lock == NULL) {
336 		primary_exitx(EX_TEMPFAIL,
337 		    "Unable to allocate %zu bytes of memory for send list locks.",
338 		    sizeof(hio_send_list_lock[0]) * ncomps);
339 	}
340 	hio_send_list_cond = malloc(sizeof(hio_send_list_cond[0]) * ncomps);
341 	if (hio_send_list_cond == NULL) {
342 		primary_exitx(EX_TEMPFAIL,
343 		    "Unable to allocate %zu bytes of memory for send list condition variables.",
344 		    sizeof(hio_send_list_cond[0]) * ncomps);
345 	}
346 	hio_recv_list = malloc(sizeof(hio_recv_list[0]) * ncomps);
347 	if (hio_recv_list == NULL) {
348 		primary_exitx(EX_TEMPFAIL,
349 		    "Unable to allocate %zu bytes of memory for recv lists.",
350 		    sizeof(hio_recv_list[0]) * ncomps);
351 	}
352 	hio_recv_list_lock = malloc(sizeof(hio_recv_list_lock[0]) * ncomps);
353 	if (hio_recv_list_lock == NULL) {
354 		primary_exitx(EX_TEMPFAIL,
355 		    "Unable to allocate %zu bytes of memory for recv list locks.",
356 		    sizeof(hio_recv_list_lock[0]) * ncomps);
357 	}
358 	hio_recv_list_cond = malloc(sizeof(hio_recv_list_cond[0]) * ncomps);
359 	if (hio_recv_list_cond == NULL) {
360 		primary_exitx(EX_TEMPFAIL,
361 		    "Unable to allocate %zu bytes of memory for recv list condition variables.",
362 		    sizeof(hio_recv_list_cond[0]) * ncomps);
363 	}
364 	hio_remote_lock = malloc(sizeof(hio_remote_lock[0]) * ncomps);
365 	if (hio_remote_lock == NULL) {
366 		primary_exitx(EX_TEMPFAIL,
367 		    "Unable to allocate %zu bytes of memory for remote connections locks.",
368 		    sizeof(hio_remote_lock[0]) * ncomps);
369 	}
370 
371 	/*
372 	 * Initialize lists, their locks and theirs condition variables.
373 	 */
374 	TAILQ_INIT(&hio_free_list);
375 	mtx_init(&hio_free_list_lock);
376 	cv_init(&hio_free_list_cond);
377 	for (ii = 0; ii < HAST_NCOMPONENTS; ii++) {
378 		TAILQ_INIT(&hio_send_list[ii]);
379 		mtx_init(&hio_send_list_lock[ii]);
380 		cv_init(&hio_send_list_cond[ii]);
381 		TAILQ_INIT(&hio_recv_list[ii]);
382 		mtx_init(&hio_recv_list_lock[ii]);
383 		cv_init(&hio_recv_list_cond[ii]);
384 		rw_init(&hio_remote_lock[ii]);
385 	}
386 	TAILQ_INIT(&hio_done_list);
387 	mtx_init(&hio_done_list_lock);
388 	cv_init(&hio_done_list_cond);
389 	mtx_init(&metadata_lock);
390 
391 	/*
392 	 * Allocate requests pool and initialize requests.
393 	 */
394 	for (ii = 0; ii < HAST_HIO_MAX; ii++) {
395 		hio = malloc(sizeof(*hio));
396 		if (hio == NULL) {
397 			primary_exitx(EX_TEMPFAIL,
398 			    "Unable to allocate %zu bytes of memory for hio request.",
399 			    sizeof(*hio));
400 		}
401 		hio->hio_countdown = 0;
402 		hio->hio_errors = malloc(sizeof(hio->hio_errors[0]) * ncomps);
403 		if (hio->hio_errors == NULL) {
404 			primary_exitx(EX_TEMPFAIL,
405 			    "Unable allocate %zu bytes of memory for hio errors.",
406 			    sizeof(hio->hio_errors[0]) * ncomps);
407 		}
408 		hio->hio_next = malloc(sizeof(hio->hio_next[0]) * ncomps);
409 		if (hio->hio_next == NULL) {
410 			primary_exitx(EX_TEMPFAIL,
411 			    "Unable allocate %zu bytes of memory for hio_next field.",
412 			    sizeof(hio->hio_next[0]) * ncomps);
413 		}
414 		hio->hio_ggio.gctl_version = G_GATE_VERSION;
415 		hio->hio_ggio.gctl_data = malloc(MAXPHYS);
416 		if (hio->hio_ggio.gctl_data == NULL) {
417 			primary_exitx(EX_TEMPFAIL,
418 			    "Unable to allocate %zu bytes of memory for gctl_data.",
419 			    MAXPHYS);
420 		}
421 		hio->hio_ggio.gctl_length = MAXPHYS;
422 		hio->hio_ggio.gctl_error = 0;
423 		TAILQ_INSERT_HEAD(&hio_free_list, hio, hio_free_next);
424 	}
425 }
426 
427 static bool
428 init_resuid(struct hast_resource *res)
429 {
430 
431 	mtx_lock(&metadata_lock);
432 	if (res->hr_resuid != 0) {
433 		mtx_unlock(&metadata_lock);
434 		return (false);
435 	} else {
436 		/* Initialize unique resource identifier. */
437 		arc4random_buf(&res->hr_resuid, sizeof(res->hr_resuid));
438 		mtx_unlock(&metadata_lock);
439 		if (metadata_write(res) < 0)
440 			exit(EX_NOINPUT);
441 		return (true);
442 	}
443 }
444 
445 static void
446 init_local(struct hast_resource *res)
447 {
448 	unsigned char *buf;
449 	size_t mapsize;
450 
451 	if (metadata_read(res, true) < 0)
452 		exit(EX_NOINPUT);
453 	mtx_init(&res->hr_amp_lock);
454 	if (activemap_init(&res->hr_amp, res->hr_datasize, res->hr_extentsize,
455 	    res->hr_local_sectorsize, res->hr_keepdirty) < 0) {
456 		primary_exit(EX_TEMPFAIL, "Unable to create activemap");
457 	}
458 	mtx_init(&range_lock);
459 	cv_init(&range_regular_cond);
460 	if (rangelock_init(&range_regular) < 0)
461 		primary_exit(EX_TEMPFAIL, "Unable to create regular range lock");
462 	cv_init(&range_sync_cond);
463 	if (rangelock_init(&range_sync) < 0)
464 		primary_exit(EX_TEMPFAIL, "Unable to create sync range lock");
465 	mapsize = activemap_ondisk_size(res->hr_amp);
466 	buf = calloc(1, mapsize);
467 	if (buf == NULL) {
468 		primary_exitx(EX_TEMPFAIL,
469 		    "Unable to allocate buffer for activemap.");
470 	}
471 	if (pread(res->hr_localfd, buf, mapsize, METADATA_SIZE) !=
472 	    (ssize_t)mapsize) {
473 		primary_exit(EX_NOINPUT, "Unable to read activemap");
474 	}
475 	activemap_copyin(res->hr_amp, buf, mapsize);
476 	free(buf);
477 	if (res->hr_resuid != 0)
478 		return;
479 	/*
480 	 * We're using provider for the first time. Initialize local and remote
481 	 * counters. We don't initialize resuid here, as we want to do it just
482 	 * in time. The reason for this is that we want to inform secondary
483 	 * that there were no writes yet, so there is no need to synchronize
484 	 * anything.
485 	 */
486 	res->hr_primary_localcnt = 1;
487 	res->hr_primary_remotecnt = 0;
488 	if (metadata_write(res) < 0)
489 		exit(EX_NOINPUT);
490 }
491 
492 static bool
493 init_remote(struct hast_resource *res, struct proto_conn **inp,
494     struct proto_conn **outp)
495 {
496 	struct proto_conn *in, *out;
497 	struct nv *nvout, *nvin;
498 	const unsigned char *token;
499 	unsigned char *map;
500 	const char *errmsg;
501 	int32_t extentsize;
502 	int64_t datasize;
503 	uint32_t mapsize;
504 	size_t size;
505 
506 	assert((inp == NULL && outp == NULL) || (inp != NULL && outp != NULL));
507 	assert(real_remote(res));
508 
509 	in = out = NULL;
510 	errmsg = NULL;
511 
512 	/* Prepare outgoing connection with remote node. */
513 	if (proto_client(res->hr_remoteaddr, &out) < 0) {
514 		primary_exit(EX_TEMPFAIL,
515 		    "Unable to create outgoing connection to %s",
516 		    res->hr_remoteaddr);
517 	}
518 	/* Try to connect, but accept failure. */
519 	if (proto_connect(out) < 0) {
520 		pjdlog_errno(LOG_WARNING, "Unable to connect to %s",
521 		    res->hr_remoteaddr);
522 		goto close;
523 	}
524 	/* Error in setting timeout is not critical, but why should it fail? */
525 	if (proto_timeout(out, res->hr_timeout) < 0)
526 		pjdlog_errno(LOG_WARNING, "Unable to set connection timeout");
527 	/*
528 	 * First handshake step.
529 	 * Setup outgoing connection with remote node.
530 	 */
531 	nvout = nv_alloc();
532 	nv_add_string(nvout, res->hr_name, "resource");
533 	if (nv_error(nvout) != 0) {
534 		pjdlog_common(LOG_WARNING, 0, nv_error(nvout),
535 		    "Unable to allocate header for connection with %s",
536 		    res->hr_remoteaddr);
537 		nv_free(nvout);
538 		goto close;
539 	}
540 	if (hast_proto_send(res, out, nvout, NULL, 0) < 0) {
541 		pjdlog_errno(LOG_WARNING,
542 		    "Unable to send handshake header to %s",
543 		    res->hr_remoteaddr);
544 		nv_free(nvout);
545 		goto close;
546 	}
547 	nv_free(nvout);
548 	if (hast_proto_recv_hdr(out, &nvin) < 0) {
549 		pjdlog_errno(LOG_WARNING,
550 		    "Unable to receive handshake header from %s",
551 		    res->hr_remoteaddr);
552 		goto close;
553 	}
554 	errmsg = nv_get_string(nvin, "errmsg");
555 	if (errmsg != NULL) {
556 		pjdlog_warning("%s", errmsg);
557 		nv_free(nvin);
558 		goto close;
559 	}
560 	token = nv_get_uint8_array(nvin, &size, "token");
561 	if (token == NULL) {
562 		pjdlog_warning("Handshake header from %s has no 'token' field.",
563 		    res->hr_remoteaddr);
564 		nv_free(nvin);
565 		goto close;
566 	}
567 	if (size != sizeof(res->hr_token)) {
568 		pjdlog_warning("Handshake header from %s contains 'token' of wrong size (got %zu, expected %zu).",
569 		    res->hr_remoteaddr, size, sizeof(res->hr_token));
570 		nv_free(nvin);
571 		goto close;
572 	}
573 	bcopy(token, res->hr_token, sizeof(res->hr_token));
574 	nv_free(nvin);
575 
576 	/*
577 	 * Second handshake step.
578 	 * Setup incoming connection with remote node.
579 	 */
580 	if (proto_client(res->hr_remoteaddr, &in) < 0) {
581 		primary_exit(EX_TEMPFAIL,
582 		    "Unable to create incoming connection to %s",
583 		    res->hr_remoteaddr);
584 	}
585 	/* Try to connect, but accept failure. */
586 	if (proto_connect(in) < 0) {
587 		pjdlog_errno(LOG_WARNING, "Unable to connect to %s",
588 		    res->hr_remoteaddr);
589 		goto close;
590 	}
591 	/* Error in setting timeout is not critical, but why should it fail? */
592 	if (proto_timeout(in, res->hr_timeout) < 0)
593 		pjdlog_errno(LOG_WARNING, "Unable to set connection timeout");
594 	nvout = nv_alloc();
595 	nv_add_string(nvout, res->hr_name, "resource");
596 	nv_add_uint8_array(nvout, res->hr_token, sizeof(res->hr_token),
597 	    "token");
598 	if (res->hr_resuid == 0) {
599 		/*
600 		 * The resuid field was not yet initialized.
601 		 * Because we do synchronization inside init_resuid(), it is
602 		 * possible that someone already initialized it, the function
603 		 * will return false then, but if we successfully initialized
604 		 * it, we will get true. True means that there were no writes
605 		 * to this resource yet and we want to inform secondary that
606 		 * synchronization is not needed by sending "virgin" argument.
607 		 */
608 		if (init_resuid(res))
609 			nv_add_int8(nvout, 1, "virgin");
610 	}
611 	nv_add_uint64(nvout, res->hr_resuid, "resuid");
612 	nv_add_uint64(nvout, res->hr_primary_localcnt, "localcnt");
613 	nv_add_uint64(nvout, res->hr_primary_remotecnt, "remotecnt");
614 	if (nv_error(nvout) != 0) {
615 		pjdlog_common(LOG_WARNING, 0, nv_error(nvout),
616 		    "Unable to allocate header for connection with %s",
617 		    res->hr_remoteaddr);
618 		nv_free(nvout);
619 		goto close;
620 	}
621 	if (hast_proto_send(res, in, nvout, NULL, 0) < 0) {
622 		pjdlog_errno(LOG_WARNING,
623 		    "Unable to send handshake header to %s",
624 		    res->hr_remoteaddr);
625 		nv_free(nvout);
626 		goto close;
627 	}
628 	nv_free(nvout);
629 	if (hast_proto_recv_hdr(out, &nvin) < 0) {
630 		pjdlog_errno(LOG_WARNING,
631 		    "Unable to receive handshake header from %s",
632 		    res->hr_remoteaddr);
633 		goto close;
634 	}
635 	errmsg = nv_get_string(nvin, "errmsg");
636 	if (errmsg != NULL) {
637 		pjdlog_warning("%s", errmsg);
638 		nv_free(nvin);
639 		goto close;
640 	}
641 	datasize = nv_get_int64(nvin, "datasize");
642 	if (datasize != res->hr_datasize) {
643 		pjdlog_warning("Data size differs between nodes (local=%jd, remote=%jd).",
644 		    (intmax_t)res->hr_datasize, (intmax_t)datasize);
645 		nv_free(nvin);
646 		goto close;
647 	}
648 	extentsize = nv_get_int32(nvin, "extentsize");
649 	if (extentsize != res->hr_extentsize) {
650 		pjdlog_warning("Extent size differs between nodes (local=%zd, remote=%zd).",
651 		    (ssize_t)res->hr_extentsize, (ssize_t)extentsize);
652 		nv_free(nvin);
653 		goto close;
654 	}
655 	res->hr_secondary_localcnt = nv_get_uint64(nvin, "localcnt");
656 	res->hr_secondary_remotecnt = nv_get_uint64(nvin, "remotecnt");
657 	res->hr_syncsrc = nv_get_uint8(nvin, "syncsrc");
658 	map = NULL;
659 	mapsize = nv_get_uint32(nvin, "mapsize");
660 	if (mapsize > 0) {
661 		map = malloc(mapsize);
662 		if (map == NULL) {
663 			pjdlog_error("Unable to allocate memory for remote activemap (mapsize=%ju).",
664 			    (uintmax_t)mapsize);
665 			nv_free(nvin);
666 			goto close;
667 		}
668 		/*
669 		 * Remote node have some dirty extents on its own, lets
670 		 * download its activemap.
671 		 */
672 		if (hast_proto_recv_data(res, out, nvin, map,
673 		    mapsize) < 0) {
674 			pjdlog_errno(LOG_ERR,
675 			    "Unable to receive remote activemap");
676 			nv_free(nvin);
677 			free(map);
678 			goto close;
679 		}
680 		/*
681 		 * Merge local and remote bitmaps.
682 		 */
683 		activemap_merge(res->hr_amp, map, mapsize);
684 		free(map);
685 		/*
686 		 * Now that we merged bitmaps from both nodes, flush it to the
687 		 * disk before we start to synchronize.
688 		 */
689 		(void)hast_activemap_flush(res);
690 	}
691 	nv_free(nvin);
692 	pjdlog_info("Connected to %s.", res->hr_remoteaddr);
693 	if (inp != NULL && outp != NULL) {
694 		*inp = in;
695 		*outp = out;
696 	} else {
697 		res->hr_remotein = in;
698 		res->hr_remoteout = out;
699 	}
700 	event_send(res, EVENT_CONNECT);
701 	return (true);
702 close:
703 	if (errmsg != NULL && strcmp(errmsg, "Split-brain condition!") == 0)
704 		event_send(res, EVENT_SPLITBRAIN);
705 	proto_close(out);
706 	if (in != NULL)
707 		proto_close(in);
708 	return (false);
709 }
710 
711 static void
712 sync_start(void)
713 {
714 
715 	mtx_lock(&sync_lock);
716 	sync_inprogress = true;
717 	mtx_unlock(&sync_lock);
718 	cv_signal(&sync_cond);
719 }
720 
721 static void
722 sync_stop(void)
723 {
724 
725 	mtx_lock(&sync_lock);
726 	if (sync_inprogress)
727 		sync_inprogress = false;
728 	mtx_unlock(&sync_lock);
729 }
730 
731 static void
732 init_ggate(struct hast_resource *res)
733 {
734 	struct g_gate_ctl_create ggiocreate;
735 	struct g_gate_ctl_cancel ggiocancel;
736 
737 	/*
738 	 * We communicate with ggate via /dev/ggctl. Open it.
739 	 */
740 	res->hr_ggatefd = open("/dev/" G_GATE_CTL_NAME, O_RDWR);
741 	if (res->hr_ggatefd < 0)
742 		primary_exit(EX_OSFILE, "Unable to open /dev/" G_GATE_CTL_NAME);
743 	/*
744 	 * Create provider before trying to connect, as connection failure
745 	 * is not critical, but may take some time.
746 	 */
747 	bzero(&ggiocreate, sizeof(ggiocreate));
748 	ggiocreate.gctl_version = G_GATE_VERSION;
749 	ggiocreate.gctl_mediasize = res->hr_datasize;
750 	ggiocreate.gctl_sectorsize = res->hr_local_sectorsize;
751 	ggiocreate.gctl_flags = 0;
752 	ggiocreate.gctl_maxcount = G_GATE_MAX_QUEUE_SIZE;
753 	ggiocreate.gctl_timeout = 0;
754 	ggiocreate.gctl_unit = G_GATE_NAME_GIVEN;
755 	snprintf(ggiocreate.gctl_name, sizeof(ggiocreate.gctl_name), "hast/%s",
756 	    res->hr_provname);
757 	if (ioctl(res->hr_ggatefd, G_GATE_CMD_CREATE, &ggiocreate) == 0) {
758 		pjdlog_info("Device hast/%s created.", res->hr_provname);
759 		res->hr_ggateunit = ggiocreate.gctl_unit;
760 		return;
761 	}
762 	if (errno != EEXIST) {
763 		primary_exit(EX_OSERR, "Unable to create hast/%s device",
764 		    res->hr_provname);
765 	}
766 	pjdlog_debug(1,
767 	    "Device hast/%s already exists, we will try to take it over.",
768 	    res->hr_provname);
769 	/*
770 	 * If we received EEXIST, we assume that the process who created the
771 	 * provider died and didn't clean up. In that case we will start from
772 	 * where he left of.
773 	 */
774 	bzero(&ggiocancel, sizeof(ggiocancel));
775 	ggiocancel.gctl_version = G_GATE_VERSION;
776 	ggiocancel.gctl_unit = G_GATE_NAME_GIVEN;
777 	snprintf(ggiocancel.gctl_name, sizeof(ggiocancel.gctl_name), "hast/%s",
778 	    res->hr_provname);
779 	if (ioctl(res->hr_ggatefd, G_GATE_CMD_CANCEL, &ggiocancel) == 0) {
780 		pjdlog_info("Device hast/%s recovered.", res->hr_provname);
781 		res->hr_ggateunit = ggiocancel.gctl_unit;
782 		return;
783 	}
784 	primary_exit(EX_OSERR, "Unable to take over hast/%s device",
785 	    res->hr_provname);
786 }
787 
788 void
789 hastd_primary(struct hast_resource *res)
790 {
791 	pthread_t td;
792 	pid_t pid;
793 	int error;
794 
795 	/*
796 	 * Create communication channel between parent and child.
797 	 */
798 	if (proto_client("socketpair://", &res->hr_ctrl) < 0) {
799 		KEEP_ERRNO((void)pidfile_remove(pfh));
800 		pjdlog_exit(EX_OSERR,
801 		    "Unable to create control sockets between parent and child");
802 	}
803 	/*
804 	 * Create communication channel between child and parent.
805 	 */
806 	if (proto_client("socketpair://", &res->hr_event) < 0) {
807 		KEEP_ERRNO((void)pidfile_remove(pfh));
808 		pjdlog_exit(EX_OSERR,
809 		    "Unable to create event sockets between child and parent");
810 	}
811 
812 	pid = fork();
813 	if (pid < 0) {
814 		KEEP_ERRNO((void)pidfile_remove(pfh));
815 		pjdlog_exit(EX_TEMPFAIL, "Unable to fork");
816 	}
817 
818 	if (pid > 0) {
819 		/* This is parent. */
820 		/* Declare that we are receiver. */
821 		proto_recv(res->hr_event, NULL, 0);
822 		res->hr_workerpid = pid;
823 		return;
824 	}
825 
826 	gres = res;
827 
828 	(void)pidfile_close(pfh);
829 	hook_fini();
830 
831 	setproctitle("%s (primary)", res->hr_name);
832 
833 	/* Declare that we are sender. */
834 	proto_send(res->hr_event, NULL, 0);
835 
836 	init_local(res);
837 	init_ggate(res);
838 	init_environment(res);
839 	/*
840 	 * Create the guard thread first, so we can handle signals from the
841 	 * very begining.
842 	 */
843 	error = pthread_create(&td, NULL, guard_thread, res);
844 	assert(error == 0);
845 	/*
846 	 * Create the control thread before sending any event to the parent,
847 	 * as we can deadlock when parent sends control request to worker,
848 	 * but worker has no control thread started yet, so parent waits.
849 	 * In the meantime worker sends an event to the parent, but parent
850 	 * is unable to handle the event, because it waits for control
851 	 * request response.
852 	 */
853 	error = pthread_create(&td, NULL, ctrl_thread, res);
854 	assert(error == 0);
855 	if (real_remote(res) && init_remote(res, NULL, NULL))
856 		sync_start();
857 	error = pthread_create(&td, NULL, ggate_recv_thread, res);
858 	assert(error == 0);
859 	error = pthread_create(&td, NULL, local_send_thread, res);
860 	assert(error == 0);
861 	error = pthread_create(&td, NULL, remote_send_thread, res);
862 	assert(error == 0);
863 	error = pthread_create(&td, NULL, remote_recv_thread, res);
864 	assert(error == 0);
865 	error = pthread_create(&td, NULL, ggate_send_thread, res);
866 	assert(error == 0);
867 	(void)sync_thread(res);
868 }
869 
870 static void
871 reqlog(int loglevel, int debuglevel, struct g_gate_ctl_io *ggio, const char *fmt, ...)
872 {
873 	char msg[1024];
874 	va_list ap;
875 	int len;
876 
877 	va_start(ap, fmt);
878 	len = vsnprintf(msg, sizeof(msg), fmt, ap);
879 	va_end(ap);
880 	if ((size_t)len < sizeof(msg)) {
881 		switch (ggio->gctl_cmd) {
882 		case BIO_READ:
883 			(void)snprintf(msg + len, sizeof(msg) - len,
884 			    "READ(%ju, %ju).", (uintmax_t)ggio->gctl_offset,
885 			    (uintmax_t)ggio->gctl_length);
886 			break;
887 		case BIO_DELETE:
888 			(void)snprintf(msg + len, sizeof(msg) - len,
889 			    "DELETE(%ju, %ju).", (uintmax_t)ggio->gctl_offset,
890 			    (uintmax_t)ggio->gctl_length);
891 			break;
892 		case BIO_FLUSH:
893 			(void)snprintf(msg + len, sizeof(msg) - len, "FLUSH.");
894 			break;
895 		case BIO_WRITE:
896 			(void)snprintf(msg + len, sizeof(msg) - len,
897 			    "WRITE(%ju, %ju).", (uintmax_t)ggio->gctl_offset,
898 			    (uintmax_t)ggio->gctl_length);
899 			break;
900 		default:
901 			(void)snprintf(msg + len, sizeof(msg) - len,
902 			    "UNKNOWN(%u).", (unsigned int)ggio->gctl_cmd);
903 			break;
904 		}
905 	}
906 	pjdlog_common(loglevel, debuglevel, -1, "%s", msg);
907 }
908 
909 static void
910 remote_close(struct hast_resource *res, int ncomp)
911 {
912 
913 	rw_wlock(&hio_remote_lock[ncomp]);
914 	/*
915 	 * A race is possible between dropping rlock and acquiring wlock -
916 	 * another thread can close connection in-between.
917 	 */
918 	if (!ISCONNECTED(res, ncomp)) {
919 		assert(res->hr_remotein == NULL);
920 		assert(res->hr_remoteout == NULL);
921 		rw_unlock(&hio_remote_lock[ncomp]);
922 		return;
923 	}
924 
925 	assert(res->hr_remotein != NULL);
926 	assert(res->hr_remoteout != NULL);
927 
928 	pjdlog_debug(2, "Closing incoming connection to %s.",
929 	    res->hr_remoteaddr);
930 	proto_close(res->hr_remotein);
931 	res->hr_remotein = NULL;
932 	pjdlog_debug(2, "Closing outgoing connection to %s.",
933 	    res->hr_remoteaddr);
934 	proto_close(res->hr_remoteout);
935 	res->hr_remoteout = NULL;
936 
937 	rw_unlock(&hio_remote_lock[ncomp]);
938 
939 	pjdlog_warning("Disconnected from %s.", res->hr_remoteaddr);
940 
941 	/*
942 	 * Stop synchronization if in-progress.
943 	 */
944 	sync_stop();
945 
946 	event_send(res, EVENT_DISCONNECT);
947 }
948 
949 /*
950  * Thread receives ggate I/O requests from the kernel and passes them to
951  * appropriate threads:
952  * WRITE - always goes to both local_send and remote_send threads
953  * READ (when the block is up-to-date on local component) -
954  *	only local_send thread
955  * READ (when the block isn't up-to-date on local component) -
956  *	only remote_send thread
957  * DELETE - always goes to both local_send and remote_send threads
958  * FLUSH - always goes to both local_send and remote_send threads
959  */
960 static void *
961 ggate_recv_thread(void *arg)
962 {
963 	struct hast_resource *res = arg;
964 	struct g_gate_ctl_io *ggio;
965 	struct hio *hio;
966 	unsigned int ii, ncomp, ncomps;
967 	int error;
968 
969 	ncomps = HAST_NCOMPONENTS;
970 
971 	for (;;) {
972 		pjdlog_debug(2, "ggate_recv: Taking free request.");
973 		QUEUE_TAKE2(hio, free);
974 		pjdlog_debug(2, "ggate_recv: (%p) Got free request.", hio);
975 		ggio = &hio->hio_ggio;
976 		ggio->gctl_unit = res->hr_ggateunit;
977 		ggio->gctl_length = MAXPHYS;
978 		ggio->gctl_error = 0;
979 		pjdlog_debug(2,
980 		    "ggate_recv: (%p) Waiting for request from the kernel.",
981 		    hio);
982 		if (ioctl(res->hr_ggatefd, G_GATE_CMD_START, ggio) < 0) {
983 			if (sigexit_received)
984 				pthread_exit(NULL);
985 			primary_exit(EX_OSERR, "G_GATE_CMD_START failed");
986 		}
987 		error = ggio->gctl_error;
988 		switch (error) {
989 		case 0:
990 			break;
991 		case ECANCELED:
992 			/* Exit gracefully. */
993 			if (!sigexit_received) {
994 				pjdlog_debug(2,
995 				    "ggate_recv: (%p) Received cancel from the kernel.",
996 				    hio);
997 				pjdlog_info("Received cancel from the kernel, exiting.");
998 			}
999 			pthread_exit(NULL);
1000 		case ENOMEM:
1001 			/*
1002 			 * Buffer too small? Impossible, we allocate MAXPHYS
1003 			 * bytes - request can't be bigger than that.
1004 			 */
1005 			/* FALLTHROUGH */
1006 		case ENXIO:
1007 		default:
1008 			primary_exitx(EX_OSERR, "G_GATE_CMD_START failed: %s.",
1009 			    strerror(error));
1010 		}
1011 		for (ii = 0; ii < ncomps; ii++)
1012 			hio->hio_errors[ii] = EINVAL;
1013 		reqlog(LOG_DEBUG, 2, ggio,
1014 		    "ggate_recv: (%p) Request received from the kernel: ",
1015 		    hio);
1016 		/*
1017 		 * Inform all components about new write request.
1018 		 * For read request prefer local component unless the given
1019 		 * range is out-of-date, then use remote component.
1020 		 */
1021 		switch (ggio->gctl_cmd) {
1022 		case BIO_READ:
1023 			pjdlog_debug(2,
1024 			    "ggate_recv: (%p) Moving request to the send queue.",
1025 			    hio);
1026 			refcount_init(&hio->hio_countdown, 1);
1027 			mtx_lock(&metadata_lock);
1028 			if (res->hr_syncsrc == HAST_SYNCSRC_UNDEF ||
1029 			    res->hr_syncsrc == HAST_SYNCSRC_PRIMARY) {
1030 				/*
1031 				 * This range is up-to-date on local component,
1032 				 * so handle request locally.
1033 				 */
1034 				 /* Local component is 0 for now. */
1035 				ncomp = 0;
1036 			} else /* if (res->hr_syncsrc ==
1037 			    HAST_SYNCSRC_SECONDARY) */ {
1038 				assert(res->hr_syncsrc ==
1039 				    HAST_SYNCSRC_SECONDARY);
1040 				/*
1041 				 * This range is out-of-date on local component,
1042 				 * so send request to the remote node.
1043 				 */
1044 				 /* Remote component is 1 for now. */
1045 				ncomp = 1;
1046 			}
1047 			mtx_unlock(&metadata_lock);
1048 			QUEUE_INSERT1(hio, send, ncomp);
1049 			break;
1050 		case BIO_WRITE:
1051 			if (res->hr_resuid == 0) {
1052 				/* This is first write, initialize resuid. */
1053 				(void)init_resuid(res);
1054 			}
1055 			for (;;) {
1056 				mtx_lock(&range_lock);
1057 				if (rangelock_islocked(range_sync,
1058 				    ggio->gctl_offset, ggio->gctl_length)) {
1059 					pjdlog_debug(2,
1060 					    "regular: Range offset=%jd length=%zu locked.",
1061 					    (intmax_t)ggio->gctl_offset,
1062 					    (size_t)ggio->gctl_length);
1063 					range_regular_wait = true;
1064 					cv_wait(&range_regular_cond, &range_lock);
1065 					range_regular_wait = false;
1066 					mtx_unlock(&range_lock);
1067 					continue;
1068 				}
1069 				if (rangelock_add(range_regular,
1070 				    ggio->gctl_offset, ggio->gctl_length) < 0) {
1071 					mtx_unlock(&range_lock);
1072 					pjdlog_debug(2,
1073 					    "regular: Range offset=%jd length=%zu is already locked, waiting.",
1074 					    (intmax_t)ggio->gctl_offset,
1075 					    (size_t)ggio->gctl_length);
1076 					sleep(1);
1077 					continue;
1078 				}
1079 				mtx_unlock(&range_lock);
1080 				break;
1081 			}
1082 			mtx_lock(&res->hr_amp_lock);
1083 			if (activemap_write_start(res->hr_amp,
1084 			    ggio->gctl_offset, ggio->gctl_length)) {
1085 				(void)hast_activemap_flush(res);
1086 			}
1087 			mtx_unlock(&res->hr_amp_lock);
1088 			/* FALLTHROUGH */
1089 		case BIO_DELETE:
1090 		case BIO_FLUSH:
1091 			pjdlog_debug(2,
1092 			    "ggate_recv: (%p) Moving request to the send queues.",
1093 			    hio);
1094 			refcount_init(&hio->hio_countdown, ncomps);
1095 			for (ii = 0; ii < ncomps; ii++)
1096 				QUEUE_INSERT1(hio, send, ii);
1097 			break;
1098 		}
1099 	}
1100 	/* NOTREACHED */
1101 	return (NULL);
1102 }
1103 
1104 /*
1105  * Thread reads from or writes to local component.
1106  * If local read fails, it redirects it to remote_send thread.
1107  */
1108 static void *
1109 local_send_thread(void *arg)
1110 {
1111 	struct hast_resource *res = arg;
1112 	struct g_gate_ctl_io *ggio;
1113 	struct hio *hio;
1114 	unsigned int ncomp, rncomp;
1115 	ssize_t ret;
1116 
1117 	/* Local component is 0 for now. */
1118 	ncomp = 0;
1119 	/* Remote component is 1 for now. */
1120 	rncomp = 1;
1121 
1122 	for (;;) {
1123 		pjdlog_debug(2, "local_send: Taking request.");
1124 		QUEUE_TAKE1(hio, send, ncomp, 0);
1125 		pjdlog_debug(2, "local_send: (%p) Got request.", hio);
1126 		ggio = &hio->hio_ggio;
1127 		switch (ggio->gctl_cmd) {
1128 		case BIO_READ:
1129 			ret = pread(res->hr_localfd, ggio->gctl_data,
1130 			    ggio->gctl_length,
1131 			    ggio->gctl_offset + res->hr_localoff);
1132 			if (ret == ggio->gctl_length)
1133 				hio->hio_errors[ncomp] = 0;
1134 			else {
1135 				/*
1136 				 * If READ failed, try to read from remote node.
1137 				 */
1138 				if (ret < 0) {
1139 					reqlog(LOG_WARNING, 0, ggio,
1140 					    "Local request failed (%s), trying remote node. ",
1141 					    strerror(errno));
1142 				} else if (ret != ggio->gctl_length) {
1143 					reqlog(LOG_WARNING, 0, ggio,
1144 					    "Local request failed (%zd != %jd), trying remote node. ",
1145 					    ret, (intmax_t)ggio->gctl_length);
1146 				}
1147 				QUEUE_INSERT1(hio, send, rncomp);
1148 				continue;
1149 			}
1150 			break;
1151 		case BIO_WRITE:
1152 			ret = pwrite(res->hr_localfd, ggio->gctl_data,
1153 			    ggio->gctl_length,
1154 			    ggio->gctl_offset + res->hr_localoff);
1155 			if (ret < 0) {
1156 				hio->hio_errors[ncomp] = errno;
1157 				reqlog(LOG_WARNING, 0, ggio,
1158 				    "Local request failed (%s): ",
1159 				    strerror(errno));
1160 			} else if (ret != ggio->gctl_length) {
1161 				hio->hio_errors[ncomp] = EIO;
1162 				reqlog(LOG_WARNING, 0, ggio,
1163 				    "Local request failed (%zd != %jd): ",
1164 				    ret, (intmax_t)ggio->gctl_length);
1165 			} else {
1166 				hio->hio_errors[ncomp] = 0;
1167 			}
1168 			break;
1169 		case BIO_DELETE:
1170 			ret = g_delete(res->hr_localfd,
1171 			    ggio->gctl_offset + res->hr_localoff,
1172 			    ggio->gctl_length);
1173 			if (ret < 0) {
1174 				hio->hio_errors[ncomp] = errno;
1175 				reqlog(LOG_WARNING, 0, ggio,
1176 				    "Local request failed (%s): ",
1177 				    strerror(errno));
1178 			} else {
1179 				hio->hio_errors[ncomp] = 0;
1180 			}
1181 			break;
1182 		case BIO_FLUSH:
1183 			ret = g_flush(res->hr_localfd);
1184 			if (ret < 0) {
1185 				hio->hio_errors[ncomp] = errno;
1186 				reqlog(LOG_WARNING, 0, ggio,
1187 				    "Local request failed (%s): ",
1188 				    strerror(errno));
1189 			} else {
1190 				hio->hio_errors[ncomp] = 0;
1191 			}
1192 			break;
1193 		}
1194 		if (refcount_release(&hio->hio_countdown)) {
1195 			if (ISSYNCREQ(hio)) {
1196 				mtx_lock(&sync_lock);
1197 				SYNCREQDONE(hio);
1198 				mtx_unlock(&sync_lock);
1199 				cv_signal(&sync_cond);
1200 			} else {
1201 				pjdlog_debug(2,
1202 				    "local_send: (%p) Moving request to the done queue.",
1203 				    hio);
1204 				QUEUE_INSERT2(hio, done);
1205 			}
1206 		}
1207 	}
1208 	/* NOTREACHED */
1209 	return (NULL);
1210 }
1211 
1212 static void
1213 keepalive_send(struct hast_resource *res, unsigned int ncomp)
1214 {
1215 	struct nv *nv;
1216 
1217 	if (!ISCONNECTED(res, ncomp))
1218 		return;
1219 
1220 	assert(res->hr_remotein != NULL);
1221 	assert(res->hr_remoteout != NULL);
1222 
1223 	nv = nv_alloc();
1224 	nv_add_uint8(nv, HIO_KEEPALIVE, "cmd");
1225 	if (nv_error(nv) != 0) {
1226 		nv_free(nv);
1227 		pjdlog_debug(1,
1228 		    "keepalive_send: Unable to prepare header to send.");
1229 		return;
1230 	}
1231 	if (hast_proto_send(res, res->hr_remoteout, nv, NULL, 0) < 0) {
1232 		pjdlog_common(LOG_DEBUG, 1, errno,
1233 		    "keepalive_send: Unable to send request");
1234 		nv_free(nv);
1235 		rw_unlock(&hio_remote_lock[ncomp]);
1236 		remote_close(res, ncomp);
1237 		rw_rlock(&hio_remote_lock[ncomp]);
1238 		return;
1239 	}
1240 	nv_free(nv);
1241 	pjdlog_debug(2, "keepalive_send: Request sent.");
1242 }
1243 
1244 /*
1245  * Thread sends request to secondary node.
1246  */
1247 static void *
1248 remote_send_thread(void *arg)
1249 {
1250 	struct hast_resource *res = arg;
1251 	struct g_gate_ctl_io *ggio;
1252 	time_t lastcheck, now;
1253 	struct hio *hio;
1254 	struct nv *nv;
1255 	unsigned int ncomp;
1256 	bool wakeup;
1257 	uint64_t offset, length;
1258 	uint8_t cmd;
1259 	void *data;
1260 
1261 	/* Remote component is 1 for now. */
1262 	ncomp = 1;
1263 	lastcheck = time(NULL);
1264 
1265 	for (;;) {
1266 		pjdlog_debug(2, "remote_send: Taking request.");
1267 		QUEUE_TAKE1(hio, send, ncomp, RETRY_SLEEP);
1268 		if (hio == NULL) {
1269 			now = time(NULL);
1270 			if (lastcheck + RETRY_SLEEP <= now) {
1271 				keepalive_send(res, ncomp);
1272 				lastcheck = now;
1273 			}
1274 			continue;
1275 		}
1276 		pjdlog_debug(2, "remote_send: (%p) Got request.", hio);
1277 		ggio = &hio->hio_ggio;
1278 		switch (ggio->gctl_cmd) {
1279 		case BIO_READ:
1280 			cmd = HIO_READ;
1281 			data = NULL;
1282 			offset = ggio->gctl_offset;
1283 			length = ggio->gctl_length;
1284 			break;
1285 		case BIO_WRITE:
1286 			cmd = HIO_WRITE;
1287 			data = ggio->gctl_data;
1288 			offset = ggio->gctl_offset;
1289 			length = ggio->gctl_length;
1290 			break;
1291 		case BIO_DELETE:
1292 			cmd = HIO_DELETE;
1293 			data = NULL;
1294 			offset = ggio->gctl_offset;
1295 			length = ggio->gctl_length;
1296 			break;
1297 		case BIO_FLUSH:
1298 			cmd = HIO_FLUSH;
1299 			data = NULL;
1300 			offset = 0;
1301 			length = 0;
1302 			break;
1303 		default:
1304 			assert(!"invalid condition");
1305 			abort();
1306 		}
1307 		nv = nv_alloc();
1308 		nv_add_uint8(nv, cmd, "cmd");
1309 		nv_add_uint64(nv, (uint64_t)ggio->gctl_seq, "seq");
1310 		nv_add_uint64(nv, offset, "offset");
1311 		nv_add_uint64(nv, length, "length");
1312 		if (nv_error(nv) != 0) {
1313 			hio->hio_errors[ncomp] = nv_error(nv);
1314 			pjdlog_debug(2,
1315 			    "remote_send: (%p) Unable to prepare header to send.",
1316 			    hio);
1317 			reqlog(LOG_ERR, 0, ggio,
1318 			    "Unable to prepare header to send (%s): ",
1319 			    strerror(nv_error(nv)));
1320 			/* Move failed request immediately to the done queue. */
1321 			goto done_queue;
1322 		}
1323 		pjdlog_debug(2,
1324 		    "remote_send: (%p) Moving request to the recv queue.",
1325 		    hio);
1326 		/*
1327 		 * Protect connection from disappearing.
1328 		 */
1329 		rw_rlock(&hio_remote_lock[ncomp]);
1330 		if (!ISCONNECTED(res, ncomp)) {
1331 			rw_unlock(&hio_remote_lock[ncomp]);
1332 			hio->hio_errors[ncomp] = ENOTCONN;
1333 			goto done_queue;
1334 		}
1335 		/*
1336 		 * Move the request to recv queue before sending it, because
1337 		 * in different order we can get reply before we move request
1338 		 * to recv queue.
1339 		 */
1340 		mtx_lock(&hio_recv_list_lock[ncomp]);
1341 		wakeup = TAILQ_EMPTY(&hio_recv_list[ncomp]);
1342 		TAILQ_INSERT_TAIL(&hio_recv_list[ncomp], hio, hio_next[ncomp]);
1343 		mtx_unlock(&hio_recv_list_lock[ncomp]);
1344 		if (hast_proto_send(res, res->hr_remoteout, nv, data,
1345 		    data != NULL ? length : 0) < 0) {
1346 			hio->hio_errors[ncomp] = errno;
1347 			rw_unlock(&hio_remote_lock[ncomp]);
1348 			pjdlog_debug(2,
1349 			    "remote_send: (%p) Unable to send request.", hio);
1350 			reqlog(LOG_ERR, 0, ggio,
1351 			    "Unable to send request (%s): ",
1352 			    strerror(hio->hio_errors[ncomp]));
1353 			remote_close(res, ncomp);
1354 			/*
1355 			 * Take request back from the receive queue and move
1356 			 * it immediately to the done queue.
1357 			 */
1358 			mtx_lock(&hio_recv_list_lock[ncomp]);
1359 			TAILQ_REMOVE(&hio_recv_list[ncomp], hio, hio_next[ncomp]);
1360 			mtx_unlock(&hio_recv_list_lock[ncomp]);
1361 			goto done_queue;
1362 		}
1363 		rw_unlock(&hio_remote_lock[ncomp]);
1364 		nv_free(nv);
1365 		if (wakeup)
1366 			cv_signal(&hio_recv_list_cond[ncomp]);
1367 		continue;
1368 done_queue:
1369 		nv_free(nv);
1370 		if (ISSYNCREQ(hio)) {
1371 			if (!refcount_release(&hio->hio_countdown))
1372 				continue;
1373 			mtx_lock(&sync_lock);
1374 			SYNCREQDONE(hio);
1375 			mtx_unlock(&sync_lock);
1376 			cv_signal(&sync_cond);
1377 			continue;
1378 		}
1379 		if (ggio->gctl_cmd == BIO_WRITE) {
1380 			mtx_lock(&res->hr_amp_lock);
1381 			if (activemap_need_sync(res->hr_amp, ggio->gctl_offset,
1382 			    ggio->gctl_length)) {
1383 				(void)hast_activemap_flush(res);
1384 			}
1385 			mtx_unlock(&res->hr_amp_lock);
1386 		}
1387 		if (!refcount_release(&hio->hio_countdown))
1388 			continue;
1389 		pjdlog_debug(2,
1390 		    "remote_send: (%p) Moving request to the done queue.",
1391 		    hio);
1392 		QUEUE_INSERT2(hio, done);
1393 	}
1394 	/* NOTREACHED */
1395 	return (NULL);
1396 }
1397 
1398 /*
1399  * Thread receives answer from secondary node and passes it to ggate_send
1400  * thread.
1401  */
1402 static void *
1403 remote_recv_thread(void *arg)
1404 {
1405 	struct hast_resource *res = arg;
1406 	struct g_gate_ctl_io *ggio;
1407 	struct hio *hio;
1408 	struct nv *nv;
1409 	unsigned int ncomp;
1410 	uint64_t seq;
1411 	int error;
1412 
1413 	/* Remote component is 1 for now. */
1414 	ncomp = 1;
1415 
1416 	for (;;) {
1417 		/* Wait until there is anything to receive. */
1418 		mtx_lock(&hio_recv_list_lock[ncomp]);
1419 		while (TAILQ_EMPTY(&hio_recv_list[ncomp])) {
1420 			pjdlog_debug(2, "remote_recv: No requests, waiting.");
1421 			cv_wait(&hio_recv_list_cond[ncomp],
1422 			    &hio_recv_list_lock[ncomp]);
1423 		}
1424 		mtx_unlock(&hio_recv_list_lock[ncomp]);
1425 		rw_rlock(&hio_remote_lock[ncomp]);
1426 		if (!ISCONNECTED(res, ncomp)) {
1427 			rw_unlock(&hio_remote_lock[ncomp]);
1428 			/*
1429 			 * Connection is dead, so move all pending requests to
1430 			 * the done queue (one-by-one).
1431 			 */
1432 			mtx_lock(&hio_recv_list_lock[ncomp]);
1433 			hio = TAILQ_FIRST(&hio_recv_list[ncomp]);
1434 			assert(hio != NULL);
1435 			TAILQ_REMOVE(&hio_recv_list[ncomp], hio,
1436 			    hio_next[ncomp]);
1437 			mtx_unlock(&hio_recv_list_lock[ncomp]);
1438 			goto done_queue;
1439 		}
1440 		if (hast_proto_recv_hdr(res->hr_remotein, &nv) < 0) {
1441 			pjdlog_errno(LOG_ERR,
1442 			    "Unable to receive reply header");
1443 			rw_unlock(&hio_remote_lock[ncomp]);
1444 			remote_close(res, ncomp);
1445 			continue;
1446 		}
1447 		rw_unlock(&hio_remote_lock[ncomp]);
1448 		seq = nv_get_uint64(nv, "seq");
1449 		if (seq == 0) {
1450 			pjdlog_error("Header contains no 'seq' field.");
1451 			nv_free(nv);
1452 			continue;
1453 		}
1454 		mtx_lock(&hio_recv_list_lock[ncomp]);
1455 		TAILQ_FOREACH(hio, &hio_recv_list[ncomp], hio_next[ncomp]) {
1456 			if (hio->hio_ggio.gctl_seq == seq) {
1457 				TAILQ_REMOVE(&hio_recv_list[ncomp], hio,
1458 				    hio_next[ncomp]);
1459 				break;
1460 			}
1461 		}
1462 		mtx_unlock(&hio_recv_list_lock[ncomp]);
1463 		if (hio == NULL) {
1464 			pjdlog_error("Found no request matching received 'seq' field (%ju).",
1465 			    (uintmax_t)seq);
1466 			nv_free(nv);
1467 			continue;
1468 		}
1469 		error = nv_get_int16(nv, "error");
1470 		if (error != 0) {
1471 			/* Request failed on remote side. */
1472 			hio->hio_errors[ncomp] = error;
1473 			reqlog(LOG_WARNING, 0, &hio->hio_ggio,
1474 			    "Remote request failed (%s): ", strerror(error));
1475 			nv_free(nv);
1476 			goto done_queue;
1477 		}
1478 		ggio = &hio->hio_ggio;
1479 		switch (ggio->gctl_cmd) {
1480 		case BIO_READ:
1481 			rw_rlock(&hio_remote_lock[ncomp]);
1482 			if (!ISCONNECTED(res, ncomp)) {
1483 				rw_unlock(&hio_remote_lock[ncomp]);
1484 				nv_free(nv);
1485 				goto done_queue;
1486 			}
1487 			if (hast_proto_recv_data(res, res->hr_remotein, nv,
1488 			    ggio->gctl_data, ggio->gctl_length) < 0) {
1489 				hio->hio_errors[ncomp] = errno;
1490 				pjdlog_errno(LOG_ERR,
1491 				    "Unable to receive reply data");
1492 				rw_unlock(&hio_remote_lock[ncomp]);
1493 				nv_free(nv);
1494 				remote_close(res, ncomp);
1495 				goto done_queue;
1496 			}
1497 			rw_unlock(&hio_remote_lock[ncomp]);
1498 			break;
1499 		case BIO_WRITE:
1500 		case BIO_DELETE:
1501 		case BIO_FLUSH:
1502 			break;
1503 		default:
1504 			assert(!"invalid condition");
1505 			abort();
1506 		}
1507 		hio->hio_errors[ncomp] = 0;
1508 		nv_free(nv);
1509 done_queue:
1510 		if (refcount_release(&hio->hio_countdown)) {
1511 			if (ISSYNCREQ(hio)) {
1512 				mtx_lock(&sync_lock);
1513 				SYNCREQDONE(hio);
1514 				mtx_unlock(&sync_lock);
1515 				cv_signal(&sync_cond);
1516 			} else {
1517 				pjdlog_debug(2,
1518 				    "remote_recv: (%p) Moving request to the done queue.",
1519 				    hio);
1520 				QUEUE_INSERT2(hio, done);
1521 			}
1522 		}
1523 	}
1524 	/* NOTREACHED */
1525 	return (NULL);
1526 }
1527 
1528 /*
1529  * Thread sends answer to the kernel.
1530  */
1531 static void *
1532 ggate_send_thread(void *arg)
1533 {
1534 	struct hast_resource *res = arg;
1535 	struct g_gate_ctl_io *ggio;
1536 	struct hio *hio;
1537 	unsigned int ii, ncomp, ncomps;
1538 
1539 	ncomps = HAST_NCOMPONENTS;
1540 
1541 	for (;;) {
1542 		pjdlog_debug(2, "ggate_send: Taking request.");
1543 		QUEUE_TAKE2(hio, done);
1544 		pjdlog_debug(2, "ggate_send: (%p) Got request.", hio);
1545 		ggio = &hio->hio_ggio;
1546 		for (ii = 0; ii < ncomps; ii++) {
1547 			if (hio->hio_errors[ii] == 0) {
1548 				/*
1549 				 * One successful request is enough to declare
1550 				 * success.
1551 				 */
1552 				ggio->gctl_error = 0;
1553 				break;
1554 			}
1555 		}
1556 		if (ii == ncomps) {
1557 			/*
1558 			 * None of the requests were successful.
1559 			 * Use first error.
1560 			 */
1561 			ggio->gctl_error = hio->hio_errors[0];
1562 		}
1563 		if (ggio->gctl_error == 0 && ggio->gctl_cmd == BIO_WRITE) {
1564 			mtx_lock(&res->hr_amp_lock);
1565 			activemap_write_complete(res->hr_amp,
1566 			    ggio->gctl_offset, ggio->gctl_length);
1567 			mtx_unlock(&res->hr_amp_lock);
1568 		}
1569 		if (ggio->gctl_cmd == BIO_WRITE) {
1570 			/*
1571 			 * Unlock range we locked.
1572 			 */
1573 			mtx_lock(&range_lock);
1574 			rangelock_del(range_regular, ggio->gctl_offset,
1575 			    ggio->gctl_length);
1576 			if (range_sync_wait)
1577 				cv_signal(&range_sync_cond);
1578 			mtx_unlock(&range_lock);
1579 			/*
1580 			 * Bump local count if this is first write after
1581 			 * connection failure with remote node.
1582 			 */
1583 			ncomp = 1;
1584 			rw_rlock(&hio_remote_lock[ncomp]);
1585 			if (!ISCONNECTED(res, ncomp)) {
1586 				mtx_lock(&metadata_lock);
1587 				if (res->hr_primary_localcnt ==
1588 				    res->hr_secondary_remotecnt) {
1589 					res->hr_primary_localcnt++;
1590 					pjdlog_debug(1,
1591 					    "Increasing localcnt to %ju.",
1592 					    (uintmax_t)res->hr_primary_localcnt);
1593 					(void)metadata_write(res);
1594 				}
1595 				mtx_unlock(&metadata_lock);
1596 			}
1597 			rw_unlock(&hio_remote_lock[ncomp]);
1598 		}
1599 		if (ioctl(res->hr_ggatefd, G_GATE_CMD_DONE, ggio) < 0)
1600 			primary_exit(EX_OSERR, "G_GATE_CMD_DONE failed");
1601 		pjdlog_debug(2,
1602 		    "ggate_send: (%p) Moving request to the free queue.", hio);
1603 		QUEUE_INSERT2(hio, free);
1604 	}
1605 	/* NOTREACHED */
1606 	return (NULL);
1607 }
1608 
1609 /*
1610  * Thread synchronize local and remote components.
1611  */
1612 static void *
1613 sync_thread(void *arg __unused)
1614 {
1615 	struct hast_resource *res = arg;
1616 	struct hio *hio;
1617 	struct g_gate_ctl_io *ggio;
1618 	unsigned int ii, ncomp, ncomps;
1619 	off_t offset, length, synced;
1620 	bool dorewind;
1621 	int syncext;
1622 
1623 	ncomps = HAST_NCOMPONENTS;
1624 	dorewind = true;
1625 	synced = 0;
1626 	offset = -1;
1627 
1628 	for (;;) {
1629 		mtx_lock(&sync_lock);
1630 		if (offset >= 0 && !sync_inprogress) {
1631 			pjdlog_info("Synchronization interrupted. "
1632 			    "%jd bytes synchronized so far.",
1633 			    (intmax_t)synced);
1634 			event_send(res, EVENT_SYNCINTR);
1635 		}
1636 		while (!sync_inprogress) {
1637 			dorewind = true;
1638 			synced = 0;
1639 			cv_wait(&sync_cond, &sync_lock);
1640 		}
1641 		mtx_unlock(&sync_lock);
1642 		/*
1643 		 * Obtain offset at which we should synchronize.
1644 		 * Rewind synchronization if needed.
1645 		 */
1646 		mtx_lock(&res->hr_amp_lock);
1647 		if (dorewind)
1648 			activemap_sync_rewind(res->hr_amp);
1649 		offset = activemap_sync_offset(res->hr_amp, &length, &syncext);
1650 		if (syncext != -1) {
1651 			/*
1652 			 * We synchronized entire syncext extent, we can mark
1653 			 * it as clean now.
1654 			 */
1655 			if (activemap_extent_complete(res->hr_amp, syncext))
1656 				(void)hast_activemap_flush(res);
1657 		}
1658 		mtx_unlock(&res->hr_amp_lock);
1659 		if (dorewind) {
1660 			dorewind = false;
1661 			if (offset < 0)
1662 				pjdlog_info("Nodes are in sync.");
1663 			else {
1664 				pjdlog_info("Synchronization started. %ju bytes to go.",
1665 				    (uintmax_t)(res->hr_extentsize *
1666 				    activemap_ndirty(res->hr_amp)));
1667 				event_send(res, EVENT_SYNCSTART);
1668 			}
1669 		}
1670 		if (offset < 0) {
1671 			sync_stop();
1672 			pjdlog_debug(1, "Nothing to synchronize.");
1673 			/*
1674 			 * Synchronization complete, make both localcnt and
1675 			 * remotecnt equal.
1676 			 */
1677 			ncomp = 1;
1678 			rw_rlock(&hio_remote_lock[ncomp]);
1679 			if (ISCONNECTED(res, ncomp)) {
1680 				if (synced > 0) {
1681 					pjdlog_info("Synchronization complete. "
1682 					    "%jd bytes synchronized.",
1683 					    (intmax_t)synced);
1684 					event_send(res, EVENT_SYNCDONE);
1685 				}
1686 				mtx_lock(&metadata_lock);
1687 				res->hr_syncsrc = HAST_SYNCSRC_UNDEF;
1688 				res->hr_primary_localcnt =
1689 				    res->hr_secondary_localcnt;
1690 				res->hr_primary_remotecnt =
1691 				    res->hr_secondary_remotecnt;
1692 				pjdlog_debug(1,
1693 				    "Setting localcnt to %ju and remotecnt to %ju.",
1694 				    (uintmax_t)res->hr_primary_localcnt,
1695 				    (uintmax_t)res->hr_secondary_localcnt);
1696 				(void)metadata_write(res);
1697 				mtx_unlock(&metadata_lock);
1698 			}
1699 			rw_unlock(&hio_remote_lock[ncomp]);
1700 			continue;
1701 		}
1702 		pjdlog_debug(2, "sync: Taking free request.");
1703 		QUEUE_TAKE2(hio, free);
1704 		pjdlog_debug(2, "sync: (%p) Got free request.", hio);
1705 		/*
1706 		 * Lock the range we are going to synchronize. We don't want
1707 		 * race where someone writes between our read and write.
1708 		 */
1709 		for (;;) {
1710 			mtx_lock(&range_lock);
1711 			if (rangelock_islocked(range_regular, offset, length)) {
1712 				pjdlog_debug(2,
1713 				    "sync: Range offset=%jd length=%jd locked.",
1714 				    (intmax_t)offset, (intmax_t)length);
1715 				range_sync_wait = true;
1716 				cv_wait(&range_sync_cond, &range_lock);
1717 				range_sync_wait = false;
1718 				mtx_unlock(&range_lock);
1719 				continue;
1720 			}
1721 			if (rangelock_add(range_sync, offset, length) < 0) {
1722 				mtx_unlock(&range_lock);
1723 				pjdlog_debug(2,
1724 				    "sync: Range offset=%jd length=%jd is already locked, waiting.",
1725 				    (intmax_t)offset, (intmax_t)length);
1726 				sleep(1);
1727 				continue;
1728 			}
1729 			mtx_unlock(&range_lock);
1730 			break;
1731 		}
1732 		/*
1733 		 * First read the data from synchronization source.
1734 		 */
1735 		SYNCREQ(hio);
1736 		ggio = &hio->hio_ggio;
1737 		ggio->gctl_cmd = BIO_READ;
1738 		ggio->gctl_offset = offset;
1739 		ggio->gctl_length = length;
1740 		ggio->gctl_error = 0;
1741 		for (ii = 0; ii < ncomps; ii++)
1742 			hio->hio_errors[ii] = EINVAL;
1743 		reqlog(LOG_DEBUG, 2, ggio, "sync: (%p) Sending sync request: ",
1744 		    hio);
1745 		pjdlog_debug(2, "sync: (%p) Moving request to the send queue.",
1746 		    hio);
1747 		mtx_lock(&metadata_lock);
1748 		if (res->hr_syncsrc == HAST_SYNCSRC_PRIMARY) {
1749 			/*
1750 			 * This range is up-to-date on local component,
1751 			 * so handle request locally.
1752 			 */
1753 			 /* Local component is 0 for now. */
1754 			ncomp = 0;
1755 		} else /* if (res->hr_syncsrc == HAST_SYNCSRC_SECONDARY) */ {
1756 			assert(res->hr_syncsrc == HAST_SYNCSRC_SECONDARY);
1757 			/*
1758 			 * This range is out-of-date on local component,
1759 			 * so send request to the remote node.
1760 			 */
1761 			 /* Remote component is 1 for now. */
1762 			ncomp = 1;
1763 		}
1764 		mtx_unlock(&metadata_lock);
1765 		refcount_init(&hio->hio_countdown, 1);
1766 		QUEUE_INSERT1(hio, send, ncomp);
1767 
1768 		/*
1769 		 * Let's wait for READ to finish.
1770 		 */
1771 		mtx_lock(&sync_lock);
1772 		while (!ISSYNCREQDONE(hio))
1773 			cv_wait(&sync_cond, &sync_lock);
1774 		mtx_unlock(&sync_lock);
1775 
1776 		if (hio->hio_errors[ncomp] != 0) {
1777 			pjdlog_error("Unable to read synchronization data: %s.",
1778 			    strerror(hio->hio_errors[ncomp]));
1779 			goto free_queue;
1780 		}
1781 
1782 		/*
1783 		 * We read the data from synchronization source, now write it
1784 		 * to synchronization target.
1785 		 */
1786 		SYNCREQ(hio);
1787 		ggio->gctl_cmd = BIO_WRITE;
1788 		for (ii = 0; ii < ncomps; ii++)
1789 			hio->hio_errors[ii] = EINVAL;
1790 		reqlog(LOG_DEBUG, 2, ggio, "sync: (%p) Sending sync request: ",
1791 		    hio);
1792 		pjdlog_debug(2, "sync: (%p) Moving request to the send queue.",
1793 		    hio);
1794 		mtx_lock(&metadata_lock);
1795 		if (res->hr_syncsrc == HAST_SYNCSRC_PRIMARY) {
1796 			/*
1797 			 * This range is up-to-date on local component,
1798 			 * so we update remote component.
1799 			 */
1800 			 /* Remote component is 1 for now. */
1801 			ncomp = 1;
1802 		} else /* if (res->hr_syncsrc == HAST_SYNCSRC_SECONDARY) */ {
1803 			assert(res->hr_syncsrc == HAST_SYNCSRC_SECONDARY);
1804 			/*
1805 			 * This range is out-of-date on local component,
1806 			 * so we update it.
1807 			 */
1808 			 /* Local component is 0 for now. */
1809 			ncomp = 0;
1810 		}
1811 		mtx_unlock(&metadata_lock);
1812 
1813 		pjdlog_debug(2, "sync: (%p) Moving request to the send queues.",
1814 		    hio);
1815 		refcount_init(&hio->hio_countdown, 1);
1816 		QUEUE_INSERT1(hio, send, ncomp);
1817 
1818 		/*
1819 		 * Let's wait for WRITE to finish.
1820 		 */
1821 		mtx_lock(&sync_lock);
1822 		while (!ISSYNCREQDONE(hio))
1823 			cv_wait(&sync_cond, &sync_lock);
1824 		mtx_unlock(&sync_lock);
1825 
1826 		if (hio->hio_errors[ncomp] != 0) {
1827 			pjdlog_error("Unable to write synchronization data: %s.",
1828 			    strerror(hio->hio_errors[ncomp]));
1829 			goto free_queue;
1830 		}
1831 
1832 		synced += length;
1833 free_queue:
1834 		mtx_lock(&range_lock);
1835 		rangelock_del(range_sync, offset, length);
1836 		if (range_regular_wait)
1837 			cv_signal(&range_regular_cond);
1838 		mtx_unlock(&range_lock);
1839 		pjdlog_debug(2, "sync: (%p) Moving request to the free queue.",
1840 		    hio);
1841 		QUEUE_INSERT2(hio, free);
1842 	}
1843 	/* NOTREACHED */
1844 	return (NULL);
1845 }
1846 
1847 static void
1848 config_reload(void)
1849 {
1850 	struct hastd_config *newcfg;
1851 	struct hast_resource *res;
1852 	unsigned int ii, ncomps;
1853 	int modified;
1854 
1855 	pjdlog_info("Reloading configuration...");
1856 
1857 	ncomps = HAST_NCOMPONENTS;
1858 
1859 	newcfg = yy_config_parse(cfgpath, false);
1860 	if (newcfg == NULL)
1861 		goto failed;
1862 
1863 	TAILQ_FOREACH(res, &newcfg->hc_resources, hr_next) {
1864 		if (strcmp(res->hr_name, gres->hr_name) == 0)
1865 			break;
1866 	}
1867 	/*
1868 	 * If resource was removed from the configuration file, resource
1869 	 * name, provider name or path to local component was modified we
1870 	 * shouldn't be here. This means that someone modified configuration
1871 	 * file and send SIGHUP to us instead of main hastd process.
1872 	 * Log advice and ignore the signal.
1873 	 */
1874 	if (res == NULL || strcmp(gres->hr_name, res->hr_name) != 0 ||
1875 	    strcmp(gres->hr_provname, res->hr_provname) != 0 ||
1876 	    strcmp(gres->hr_localpath, res->hr_localpath) != 0) {
1877 		pjdlog_warning("To reload configuration send SIGHUP to the main hastd process (pid %u).",
1878 		    (unsigned int)getppid());
1879 		goto failed;
1880 	}
1881 
1882 #define MODIFIED_REMOTEADDR	0x1
1883 #define MODIFIED_REPLICATION	0x2
1884 #define MODIFIED_TIMEOUT	0x4
1885 #define MODIFIED_EXEC		0x8
1886 	modified = 0;
1887 	if (strcmp(gres->hr_remoteaddr, res->hr_remoteaddr) != 0) {
1888 		/*
1889 		 * Don't copy res->hr_remoteaddr to gres just yet.
1890 		 * We want remote_close() to log disconnect from the old
1891 		 * addresses, not from the new ones.
1892 		 */
1893 		modified |= MODIFIED_REMOTEADDR;
1894 	}
1895 	if (gres->hr_replication != res->hr_replication) {
1896 		gres->hr_replication = res->hr_replication;
1897 		modified |= MODIFIED_REPLICATION;
1898 	}
1899 	if (gres->hr_timeout != res->hr_timeout) {
1900 		gres->hr_timeout = res->hr_timeout;
1901 		modified |= MODIFIED_TIMEOUT;
1902 	}
1903 	if (strcmp(gres->hr_exec, res->hr_exec) != 0) {
1904 		strlcpy(gres->hr_exec, res->hr_exec, sizeof(gres->hr_exec));
1905 		modified |= MODIFIED_EXEC;
1906 	}
1907 	/*
1908 	 * If only timeout was modified we only need to change it without
1909 	 * reconnecting.
1910 	 */
1911 	if (modified == MODIFIED_TIMEOUT) {
1912 		for (ii = 0; ii < ncomps; ii++) {
1913 			if (!ISREMOTE(ii))
1914 				continue;
1915 			rw_rlock(&hio_remote_lock[ii]);
1916 			if (!ISCONNECTED(gres, ii)) {
1917 				rw_unlock(&hio_remote_lock[ii]);
1918 				continue;
1919 			}
1920 			rw_unlock(&hio_remote_lock[ii]);
1921 			if (proto_timeout(gres->hr_remotein,
1922 			    gres->hr_timeout) < 0) {
1923 				pjdlog_errno(LOG_WARNING,
1924 				    "Unable to set connection timeout");
1925 			}
1926 			if (proto_timeout(gres->hr_remoteout,
1927 			    gres->hr_timeout) < 0) {
1928 				pjdlog_errno(LOG_WARNING,
1929 				    "Unable to set connection timeout");
1930 			}
1931 		}
1932 	} else if ((modified &
1933 	    (MODIFIED_REMOTEADDR | MODIFIED_REPLICATION)) != 0) {
1934 		for (ii = 0; ii < ncomps; ii++) {
1935 			if (!ISREMOTE(ii))
1936 				continue;
1937 			remote_close(gres, ii);
1938 		}
1939 		if (modified & MODIFIED_REMOTEADDR) {
1940 			strlcpy(gres->hr_remoteaddr, res->hr_remoteaddr,
1941 			    sizeof(gres->hr_remoteaddr));
1942 		}
1943 	}
1944 #undef	MODIFIED_REMOTEADDR
1945 #undef	MODIFIED_REPLICATION
1946 #undef	MODIFIED_TIMEOUT
1947 #undef	MODIFIED_EXEC
1948 
1949 	pjdlog_info("Configuration reloaded successfully.");
1950 	return;
1951 failed:
1952 	if (newcfg != NULL) {
1953 		if (newcfg->hc_controlconn != NULL)
1954 			proto_close(newcfg->hc_controlconn);
1955 		if (newcfg->hc_listenconn != NULL)
1956 			proto_close(newcfg->hc_listenconn);
1957 		yy_config_free(newcfg);
1958 	}
1959 	pjdlog_warning("Configuration not reloaded.");
1960 }
1961 
1962 static void
1963 guard_one(struct hast_resource *res, unsigned int ncomp)
1964 {
1965 	struct proto_conn *in, *out;
1966 
1967 	if (!ISREMOTE(ncomp))
1968 		return;
1969 
1970 	rw_rlock(&hio_remote_lock[ncomp]);
1971 
1972 	if (!real_remote(res)) {
1973 		rw_unlock(&hio_remote_lock[ncomp]);
1974 		return;
1975 	}
1976 
1977 	if (ISCONNECTED(res, ncomp)) {
1978 		assert(res->hr_remotein != NULL);
1979 		assert(res->hr_remoteout != NULL);
1980 		rw_unlock(&hio_remote_lock[ncomp]);
1981 		pjdlog_debug(2, "remote_guard: Connection to %s is ok.",
1982 		    res->hr_remoteaddr);
1983 		return;
1984 	}
1985 
1986 	assert(res->hr_remotein == NULL);
1987 	assert(res->hr_remoteout == NULL);
1988 	/*
1989 	 * Upgrade the lock. It doesn't have to be atomic as no other thread
1990 	 * can change connection status from disconnected to connected.
1991 	 */
1992 	rw_unlock(&hio_remote_lock[ncomp]);
1993 	pjdlog_debug(2, "remote_guard: Reconnecting to %s.",
1994 	    res->hr_remoteaddr);
1995 	in = out = NULL;
1996 	if (init_remote(res, &in, &out)) {
1997 		rw_wlock(&hio_remote_lock[ncomp]);
1998 		assert(res->hr_remotein == NULL);
1999 		assert(res->hr_remoteout == NULL);
2000 		assert(in != NULL && out != NULL);
2001 		res->hr_remotein = in;
2002 		res->hr_remoteout = out;
2003 		rw_unlock(&hio_remote_lock[ncomp]);
2004 		pjdlog_info("Successfully reconnected to %s.",
2005 		    res->hr_remoteaddr);
2006 		sync_start();
2007 	} else {
2008 		/* Both connections should be NULL. */
2009 		assert(res->hr_remotein == NULL);
2010 		assert(res->hr_remoteout == NULL);
2011 		assert(in == NULL && out == NULL);
2012 		pjdlog_debug(2, "remote_guard: Reconnect to %s failed.",
2013 		    res->hr_remoteaddr);
2014 	}
2015 }
2016 
2017 /*
2018  * Thread guards remote connections and reconnects when needed, handles
2019  * signals, etc.
2020  */
2021 static void *
2022 guard_thread(void *arg)
2023 {
2024 	struct hast_resource *res = arg;
2025 	unsigned int ii, ncomps;
2026 	struct timespec timeout;
2027 	time_t lastcheck, now;
2028 	sigset_t mask;
2029 	int signo;
2030 
2031 	ncomps = HAST_NCOMPONENTS;
2032 	lastcheck = time(NULL);
2033 
2034 	PJDLOG_VERIFY(sigemptyset(&mask) == 0);
2035 	PJDLOG_VERIFY(sigaddset(&mask, SIGHUP) == 0);
2036 	PJDLOG_VERIFY(sigaddset(&mask, SIGINT) == 0);
2037 	PJDLOG_VERIFY(sigaddset(&mask, SIGTERM) == 0);
2038 
2039 	timeout.tv_sec = RETRY_SLEEP;
2040 	timeout.tv_nsec = 0;
2041 	signo = -1;
2042 
2043 	for (;;) {
2044 		switch (signo) {
2045 		case SIGHUP:
2046 			config_reload();
2047 			break;
2048 		case SIGINT:
2049 		case SIGTERM:
2050 			sigexit_received = true;
2051 			primary_exitx(EX_OK,
2052 			    "Termination signal received, exiting.");
2053 			break;
2054 		default:
2055 			break;
2056 		}
2057 
2058 		pjdlog_debug(2, "remote_guard: Checking connections.");
2059 		now = time(NULL);
2060 		if (lastcheck + RETRY_SLEEP <= now) {
2061 			for (ii = 0; ii < ncomps; ii++)
2062 				guard_one(res, ii);
2063 			lastcheck = now;
2064 		}
2065 		signo = sigtimedwait(&mask, NULL, &timeout);
2066 	}
2067 	/* NOTREACHED */
2068 	return (NULL);
2069 }
2070