Handling Flag Days

A Flag Day signifies the point in time where the network stops using one set of Network Parameters and begins using the new, previously proposed set of Network Parameters. This is discussed in Network parameters update process.

Once a Flag Day is issued, the next time a node polls the Network Map service, it will receive the updated Network Parameters, in turn causing the node to shut down due to a parameter mismatch. As a Notary node (whether a basic Notary or a worker within a HA cluster) is built upon the same foundation as a standard node, it will behave in the same way and also shut down when it next polls.

Outlined below are some basic suggestions to best deal with Flag Days. Note that to avoid any issues restarting the Notary nodes, a Notary operator should ensure that all nodes have accepted the parameter update. See Network parameters update process for more information.

With a simple non-HA Notary service, a zero-downtime parameter update is not possible. After the Flag Day the service must be restarted, either manually and immediately after the Flag Day (if the network operator in control of the Flag Day is also in control of the Notary) or automatically when the Notary next polls the Network Map service (e.g. using a daemon to restart the service after any shutdowns).

Although immediately restarting manually after a Flag Day should be preferred, there is a chance that a notarisation request is sent during the downtime from a node who is not yet aware of the Flag Day. If network participants cannot handle Notary downtime then a HA notary cluster should be run instead.

With a HA cluster of Notary worker nodes, a zero-downtime update is possible but is dependent on the Network Map service polling schedules. The schedule of each Notary worker’s polling will be determined by both the polling interval (specified by the Network Map service) along with the Notary service start time. As the node will shutdown when it next polls the Network Map service, having all polling schedules be in sync across worker nodes will mean that without manual intervention the entire HA notary cluster will shutdown after a Flag Day. To avoid this situation a Notary operator should ensure that the worker nodes are started in a staggered manner and the polling intervals are not in sync.

The best approach to achieve a zero-downtime update is to manually restart a single worker node immediately after the Flag Day. Where possible, to achieve maximum worker node uptime nodes that have most recently polled the Network Map service should be prioritised last for restarting.

If a daemon or some automated process is being used to resurrect dead worker nodes then the Notary operator can rely on this to automatically handle the Flag Day roll-over. If the polling intervals are properly staggered then this should also result in a zero-downtime Notary cluster however it is inherently more risky.

Was this page helpful?

Thanks for your feedback!

Chat with us

Chat with us on our #docs channel on slack. You can also join a lot of other slack channels there and have access to 1-on-1 communication with members of the R3 team and the online community.

Propose documentation improvements directly

Help us to improve the docs by contributing directly. It's simple - just fork this repository and raise a PR of your own - R3's Technical Writers will review it and apply the relevant suggestions.

We're sorry this page wasn't helpful. Let us know how we can make it better!

Chat with us

Chat with us on our #docs channel on slack. You can also join a lot of other slack channels there and have access to 1-on-1 communication with members of the R3 team and the online community.

Create an issue

Create a new GitHub issue in this repository - submit technical feedback, draw attention to a potential documentation bug, or share ideas for improvement and general feedback.

Propose documentation improvements directly

Help us to improve the docs by contributing directly. It's simple - just fork this repository and raise a PR of your own - R3's Technical Writers will review it and apply the relevant suggestions.