WFGY/ProblemMap/ops/failover_and_recovery.md
2025-08-15 23:36:28 +08:00

7 KiB
Raw Blame History

Failover & recovery — deterministic recovery steps

Purpose: deterministic operator steps to failover or recover critical components (vectorstore, retriever, generator, indexer, controller). Aim to reduce data loss and return to safe state quickly.


Basic principles

  1. Fail fast to a safe mode — prefer read-only answers or cached responses over uncontrolled writes or risky LLM calls.
  2. Preserve evidence — do not truncate logs or delete index segments until investigation complete.
  3. Prefer scoped recovery — restart single pod/shard before cluster-wide actions.

Scenario A: Vectorstore shard down / index corrupt

Symptoms

  • Retriever returns empty sets or inconsistent scores for golden queries.
  • Vectorstore pod logs show IO / index errors.

Steps

  1. Mark the shard unhealthy in the service registry (so retriever avoids it).

  2. If replica exists, route traffic to other replica.

  3. Attempt graceful re-open:

    kubectl -n $NS exec deploy/vectorstore -- /bin/sh -c "ctl index reopen shard-5"
    
    
    
  4. If reopen fails, restore from latest snapshot (S3) to a new shard:

    • Create new PV and restore snapshot.
    • Start fresh pod pointed to restored PV.
  5. Re-run small validation suite (1050 golden qids) before reintroducing shard.

Post recovery

  • Re-index missing docs if necessary; track reindex job progress.
  • Add a postmortem entry and schedule a permanent fix.

Scenario B: Generator (LLM) provider outage

Symptoms

  • LLM errors (5xx), rate-limit responses, or auth failures.

Steps

  1. Switch to backup LLM provider (if configured) via config flag:

    # toggle provider in config map or feature flag
    kubectl -n $NS set env deploy/rag-api PROVIDER=backup-provider
    
  2. If no backup, enable local fallback:

    • Return cached answers for known qids.
    • Return safe refusal for unknown qids.
  3. Throttle traffic and backlog long-running requests to a worker queue.

  4. Once provider restored, slowly ramp traffic and compare CHR/precision to baseline.


Scenario C: Bootstrap deadlock at startup

Symptoms

  • Pods stuck in CrashLoopBackOff or Ready never true; logs show circular dependency or missing migration.

Steps

  1. Inspect init containers & migration jobs:

    kubectl -n $NS get jobs
    kubectl -n $NS logs job/migrations
    
  2. Run migrations manually in controlled pod:

    kubectl -n $NS run --rm -it migration-runner --image=myimage -- bash -c "python migrate.py"
    
  3. Ensure controller component (if any) is up before starting retriever/generator. Use Helm hooks or manual kubectl apply ordering.

  4. If necessary, scale down and start components one-by-one.


Safety nets & best practices

  • Keep automated snapshots of vectorstore daily; keep 714 days retention.
  • Maintain a tested restore playbook and a “mini-cluster” restore test monthly.
  • Automate warm-failover for LLMs: pre-warm API tokens for backup providers.

Post-incident

  • Triage root cause, assign fixes.
  • Add automated test that would have caught this.
  • Update runbooks and notify stakeholders.


🔗 Quick-Start Downloads (60 sec)

Tool Link 3-Step Setup
WFGY 1.0 PDF Engine Paper 1 Download · 2 Upload to your LLM · 3 Ask “Answer using WFGY + <your question>”
TXT OS (plain-text OS) TXTOS.txt 1 Download · 2 Paste into any LLM chat · 3 Type “hello world” — OS boots instantly

🧭 Explore More

Module Description Link
WFGY Core WFGY 2.0 engine is live: full symbolic reasoning architecture and math stack View →
Problem Map 1.0 Initial 16-mode diagnostic and symbolic fix framework View →
Problem Map 2.0 RAG-focused failure tree, modular fixes, and pipelines View →
Semantic Clinic Index Expanded failure catalog: prompt injection, memory bugs, logic drift View →
Semantic Blueprint Layer-based symbolic reasoning & semantic modulations View →
Benchmark vs GPT-5 Stress test GPT-5 with full WFGY reasoning suite View →
🧙‍♂️ Starter Village 🏡 New here? Lost in symbols? Click here and let the wizard guide you through Start →

👑 Early Stargazers: See the Hall of Fame
Engineers, hackers, and open source builders who supported WFGY from day one.

GitHub stars WFGY Engine 2.0 is already unlocked. Star the repo to help others discover it and unlock more on the Unlock Board.

WFGY Main   TXT OS   Blah   Blot   Bloc   Blur   Blow