Subnet Management - o3ow2 (Application)

This topic is intended to capture Subnet Management activities over time for the o3ow2 subnet, providing a place to ask questions and make observations about the management of this subnet.

At the time of creating this topic the current subnet configuration is as follows:

Expand
{
  "version": 44487,
  "records": [
    {
      "key": "subnet_record_o3ow2-2ipam-6fcjo-3j5vt-fzbge-2g7my-5fz2m-p4o2t-dwlc4-gt2q7-5ae",
      "version": 44487,
      "value": {
        "membership": [
          "5resh-f6n7z-xxkbq-7lpod-spptk-nyt7n-tcvf6-f5ecb-ixxwc-6k5ai-rqe",
          "sqw45-bb5aa-rsstr-3lqro-2asg4-jqzqp-lp6az-2a2dr-tzil6-df7tw-gqe",
          "om3xx-z7r5z-22dkp-rfta4-drccc-vlbaq-k7bep-pwemg-vquay-hxc34-7qe",
          "pgim3-5bk4s-y4auc-ocnuj-gdsqb-iv2yk-qi4t7-75bpp-kbz2r-bdtuq-4qe",
          "23jbm-6z6mi-ki2ut-fkz5x-yy4uy-6llls-yyodh-xv537-2qonk-2iod3-jae",
          "l7nbu-afo7y-adwcg-m6ivf-cooqw-v3pwd-jf4w3-kgsbr-tek3p-7n3dh-3ae",
          "h3gd6-r6oc7-om7g2-2rlvu-dxqc5-moweq-tu63n-ffdcp-5kobp-mvdin-xae",
          "hdkxy-jonbm-voico-5u7px-6vet6-6i7zx-xm65d-gdswt-2uvss-5o73g-aae",
          "d4ndk-jxgud-mf7j2-63lqc-2f64s-vouw3-l6k2k-akpwd-b4t4d-vur7h-jae",
          "6qxes-2iftw-fq3we-unkdt-y7wnk-4v26t-fftzu-chgeh-t2ljb-qtevx-iae",
          "nlghu-pupyy-n5oci-hcqvn-5fvdt-h23ta-gueoi-bkpbn-atazo-sfdlp-nae",
          "kby7l-tpmyp-ntea5-g4kn2-gkwrc-fbjbo-6pjgz-gaoz7-owtct-welil-pae",
          "rv6cf-76ajy-qgcld-d7gil-e7v22-3sqfv-yc2zs-sn5r5-465el-pbym3-xae"
        ],
        "nodes": {},
        "max_ingress_bytes_per_message": 2097152,
        "max_ingress_messages_per_block": 1000,
        "max_block_payload_size": 4194304,
        "unit_delay_millis": 1000,
        "initial_notary_delay_millis": 600,
        "replica_version_id": "2c0b76cfc7e596d5c4304cff5222a2619294c8c1",
        "dkg_interval_length": 499,
        "start_as_nns": false,
        "subnet_type": "application",
        "features": {
          "canister_sandboxing": false,
          "http_requests": true,
          "sev_enabled": false
        },
        "max_number_of_canisters": 120000,
        "ssh_readonly_access": [],
        "ssh_backup_access": [],
        "ecdsa_config": null,
        "chain_key_config": null
      }
    }
  ]
}

Thereā€™s an open proposal for changing subnet membership - https://dashboard.internetcomputer.org/proposal/131429. This information is presented below:

  • red marker represents a removed node
  • green marker represents an added node
  • highlighted patches represent the country a node sits within

Table
Country Data Center Owner Node Provider Node
--- Germany Munich (mu1) q.beyond Staking Facilities om3xx-z7r5z-22dkp-rfta4-drccc-vlbaq-k7bep-pwemg-vquay-hxc34-7qe
+++ Romania Bucharest (bu1) M247 Iancu Aurel wjx4k-24wxy-us5yn-qsezv-du4ob-47l55-ffe7f-kn2p6-qquc6-4s4mp-6ae
Argentina CABA 1 (ar1) SyT - Servicios y Telecomunicaciones S.A. Mariano Stoll 5resh-f6n7z-xxkbq-7lpod-spptk-nyt7n-tcvf6-f5ecb-ixxwc-6k5ai-rqe
Australia Melbourne 2 (mn2) NEXTDC Icaria Systems Pty Ltd 23jbm-6z6mi-ki2ut-fkz5x-yy4uy-6llls-yyodh-xv537-2qonk-2iod3-jae
Belgium Antwerp (an1) Datacenter United Allusion kby7l-tpmyp-ntea5-g4kn2-gkwrc-fbjbo-6pjgz-gaoz7-owtct-welil-pae
Canada Toronto 2 (to2) Cyxtera Blockchain Development Labs d4ndk-jxgud-mf7j2-63lqc-2f64s-vouw3-l6k2k-akpwd-b4t4d-vur7h-jae
Switzerland Zurich 2 (zh2) Everyware DFINITY Operations SA 6qxes-2iftw-fq3we-unkdt-y7wnk-4v26t-fftzu-chgeh-t2ljb-qtevx-iae
Georgia Tbilisi 1 (tb1) Cloud9 George Bassadone l7nbu-afo7y-adwcg-m6ivf-cooqw-v3pwd-jf4w3-kgsbr-tek3p-7n3dh-3ae
India Navi Mumbai 1 (nm1) Rivram Rivram Inc h3gd6-r6oc7-om7g2-2rlvu-dxqc5-moweq-tu63n-ffdcp-5kobp-mvdin-xae
Japan Tokyo (ty1) Equinix Starbase rv6cf-76ajy-qgcld-d7gil-e7v22-3sqfv-yc2zs-sn5r5-465el-pbym3-xae
Korea (the Republic of) Seoul 1 (sl1) Megazone Cloud Neptune Partners sqw45-bb5aa-rsstr-3lqro-2asg4-jqzqp-lp6az-2a2dr-tzil6-df7tw-gqe
Slovenia Maribor (mb1) Posita.si Fractal Labs AG nlghu-pupyy-n5oci-hcqvn-5fvdt-h23ta-gueoi-bkpbn-atazo-sfdlp-nae
United States of America (the) Chicago 2 (ch2) Tierpoint 9Yards Capital pgim3-5bk4s-y4auc-ocnuj-gdsqb-iv2yk-qi4t7-75bpp-kbz2r-bdtuq-4qe
South Africa Gauteng 2 (jb2) Africa Data Centres Honeycomb Capital (Pty) Ltd hdkxy-jonbm-voico-5u7px-6vet6-6i7zx-xm65d-gdswt-2uvss-5o73g-aae

The removed node is replaced with a node based in Romania. Iā€™ve verified that this node is currently unassigned.

The proposal mentions that his change is needed due to the Munich (mu1) data centre being due for decommissioning. See here for more discussion and references.

1 Like

Proposal 132146

TLDR: Offline node in Switzerland replaced with one in the Netherlands. This looks good, however a few points Iā€™d like some clarity on before voting (same as quoted below).

Decentralisation Stats

Subnet node distance stats (distance between any 2 nodes in the subnet) ā†’

Smallest Distance Average Distance Largest Distance
EXISTING 476.293 km 8783.597 km 19445.845 km
PROPOSED 173.657 km (-63.5%) 8790.029 km (+0.1%) 19445.845 km

This proposal locally decreases decentralisation while on average improves decentralisation, considered purely in terms of geographic distance.

Subnet characteristic counts ā†’

Continents Countries Data Centers Owners Node Providers
EXISTING 5 13 13 13 13
PROPOSED 5 13 13 13 13

Largest number of nodes with the same characteristic (e.g. continent, country, data center, etc.) ā†’

Continent Country Data Center Owner Node Provider
EXISTING 4 1 1 1 1
PROPOSED 4 1 1 1 1

See here for acceptable limits ā†’ Motion 125549 (note that these are due for a slight revision)

The above subnet information is illustrated below, followed by a node reference table:

Map Description
  • Red marker represents a removed node (transparent center for overlap visibility)
  • Green marker represents an added node
  • Blue marker represents an unchanged node
  • Highlighted patches represent the country the above nodes sit within (red if the country is removed, green if added, otherwise grey)
  • Light grey markers with yellow borders are examples of unassigned nodes that would be viable candidates for joining the subnet according to formal decentralisation coefficients (so this proposal can be viewed in the context of alternative solutions that are not being used)

Table
Continent Country Data Center Owner Node Provider Node Status
--- Europe Switzerland Zurich 2 (zh2) Everyware DFINITY Operations SA 6qxes-2iftw-fq3we-unkdt-y7wnk-4v26t-fftzu-chgeh-t2ljb-qtevx-iae UP
+++ Europe Netherlands (the) Marseille (mr1) Digital Realty DFINITY Operations SA gn3jh-ppjoz-hdh3g-3dckg-zdgk2-qspnh-5i7p6-dfcq3-ke6vc-n5l7d-sqe UNASSIGNED
Americas Argentina CABA 1 (ar1) SyT - Servicios y Telecomunicaciones S.A. Mariano Stoll 5resh-f6n7z-xxkbq-7lpod-spptk-nyt7n-tcvf6-f5ecb-ixxwc-6k5ai-rqe UP
Oceania Australia Melbourne 2 (mn2) NEXTDC Icaria Systems Pty Ltd 23jbm-6z6mi-ki2ut-fkz5x-yy4uy-6llls-yyodh-xv537-2qonk-2iod3-jae UP
Europe Belgium Antwerp (an1) Datacenter United Allusion kby7l-tpmyp-ntea5-g4kn2-gkwrc-fbjbo-6pjgz-gaoz7-owtct-welil-pae UP
Americas Canada Toronto 2 (to2) Cyxtera Blockchain Development Labs d4ndk-jxgud-mf7j2-63lqc-2f64s-vouw3-l6k2k-akpwd-b4t4d-vur7h-jae UP
Asia Georgia Tbilisi 1 (tb1) Cloud9 George Bassadone l7nbu-afo7y-adwcg-m6ivf-cooqw-v3pwd-jf4w3-kgsbr-tek3p-7n3dh-3ae UP
Asia India Navi Mumbai 1 (nm1) Rivram Rivram Inc h3gd6-r6oc7-om7g2-2rlvu-dxqc5-moweq-tu63n-ffdcp-5kobp-mvdin-xae UP
Asia Japan Tokyo (ty1) Equinix Starbase rv6cf-76ajy-qgcld-d7gil-e7v22-3sqfv-yc2zs-sn5r5-465el-pbym3-xae UP
Asia Korea (the Republic of) Seoul 1 (sl1) Megazone Cloud Neptune Partners sqw45-bb5aa-rsstr-3lqro-2asg4-jqzqp-lp6az-2a2dr-tzil6-df7tw-gqe UP
Europe Romania Bucharest (bu1) M247 Iancu Aurel wjx4k-24wxy-us5yn-qsezv-du4ob-47l55-ffe7f-kn2p6-qquc6-4s4mp-6ae UP
Europe Slovenia Maribor (mb1) Posita.si Fractal Labs AG nlghu-pupyy-n5oci-hcqvn-5fvdt-h23ta-gueoi-bkpbn-atazo-sfdlp-nae UP
Americas United States of America (the) Chicago 2 (ch2) Tierpoint 9Yards Capital pgim3-5bk4s-y4auc-ocnuj-gdsqb-iv2yk-qi4t7-75bpp-kbz2r-bdtuq-4qe UP
Africa South Africa Gauteng 2 (jb2) Africa Data Centres Honeycomb Capital (Pty) Ltd hdkxy-jonbm-voico-5u7px-6vet6-6i7zx-xm65d-gdswt-2uvss-5o73g-aae UP

Known Neurons to follow if you're too busy to keep on top of things like this

If you found this analysis helpful and would like to follow the vote of the LORIMER known neuron in the future, consider configuring LORIMER as a followee for the Subnet Management topic.

Other good neurons to follow:

  • CodeGov (will soon be committed to actively reviewing and voting on Subnet Management proposals based on those reviews)

  • WaterNeuron (the WaterNeuron DAO frequently discuss proposals like this in order to vote responsibly based on DAO consensus)

Itā€™s expected that unassigned nodes run on a different version. Nodes will automatically upgrade to the subnetā€™s version when they join the new subnet.

1 Like

Thanks @Sat, but as I understand it there are still upgrade path restrictions that should be adhered to (but arenā€™t with this proposal).

The upgrade path guarantees are +1/-1 (not strictly), and only for replica. In this case the node is not in a subnet so there is little state to upgrade / downgrade, so generally there is little incompatibility that could be expected.
Upgrading unassigned nodes is not something weā€™ve seen failing in the past.

1 Like

Thanks for clarifying @sat, this makes sense. Iā€™ve held off my vote so far. This all sounds good, and Iā€™m now more informed for future proposals :slightly_smiling_face:. Iā€™ll vote to adopt this shortly.

I really appreciate your responses :pray:

1 Like

I gather that this is a potential danger, but itā€™s just very rare, and I suppose only worth being concerned about if the unassigned nodes are very far behind the subnet.

Just adding this comment for future reference in case anyone stumbles across this thread and is looking for more info.

Subnet o3ow2 is being made public by ā†’ Expanding the list of Public Subnets on the Internet Computer - Governance / NNS proposal discussions - Internet Computer Developer Forum (dfinity.org)

DFINITY will submit an NNS proposal today to reduce the notarization delay on the subnet, o3ow2, similar to what has happened on other subnets in recent weeks (you can find all details in this forum thread).

3 Likes

Voted to adopt proposal 133077. The initial_notary_delay_millis is set to 300 and the subnet_id is correct.

1 Like

Proposal 133459

TLDR: Iā€™ve voted to reject, given that thereā€™s no means of verifying this one. Iā€™m happy with the discussed way forward though (to include a reference to evidence in future proposals).

1 removed node in Romania replaced with a node in China. No significant impact on decentralisation. The reason for the swap is stated in the proposal, but I see no clear way to verify this.

@sat, @SvenF and/or @dmanu, how should one go about verifying the need for a proposal like this. It would be great if the proposal could link to discussion with the node provider, or something like that (to validate their intentions for ā€˜redeplyment with IPv4ā€™).

Decentralisation Stats

Subnet node distance stats (distance between any 2 nodes in the subnet) ā†’

Smallest Distance Average Distance Largest Distance
EXISTING 317.676 km 8783.593 km 19448.574 km
PROPOSED 317.676 km 9117.484 km (+3.8%) 19448.574 km

This proposal slightly increases decentralisation, considered purely in terms of geographic distance (and therefore thereā€™s a slight theoretical increase in localised disaster resilience). :+1:

Subnet characteristic counts ā†’

Continents Countries Data Centers Owners Node Providers
EXISTING 5 13 13 13 13
PROPOSED 5 13 13 13 13

Largest number of nodes with the same characteristic (e.g. continent, country, data center, etc.) ā†’

Continent Country Data Center Owner Node Provider
EXISTING 4 1 1 1 1
PROPOSED 5 (+25%) 1 1 1 1

Slightly worse situation in terms of clustering countries in a single continent. This isnā€™t an official IC Target Topology metric though.

See here for acceptable limits ā†’ Motion 132136

The above subnet information is illustrated below, followed by a node reference table:

Map Description
  • Red marker represents a removed node (transparent center for overlap visibility)
  • Green marker represents an added node
  • Blue marker represents an unchanged node
  • Highlighted patches represent the country the above nodes sit within (red if the country is removed, green if added, otherwise grey)
  • Light grey markers with yellow borders are examples of unassigned nodes that would be viable candidates for joining the subnet according to formal decentralisation coefficients (so this proposal can be viewed in the context of alternative solutions that are not being used)

Table
Continent Country Data Center Owner Node Provider Node Status
--- Europe Romania Bucharest (bu1) ~~M247 ~~ Iancu Aurel wjx4k-24wxy-us5yn-qsezv-du4ob-47l55-ffe7f-kn2p6-qquc6-4s4mp-6ae UP
+++ Asia China HongKong 3 (hk3) hkcolo Power Meta Corporation za7cm-bcsh6-dkayq-wbbbi-5pw7l-5dsqk-7isoh-osqdi-rmcot-pswxd-aae UNASSIGNED
Americas Argentina CABA 1 (ar1) SyT - Servicios y Telecomunicaciones S.A. Mariano Stoll 5resh-f6n7z-xxkbq-7lpod-spptk-nyt7n-tcvf6-f5ecb-ixxwc-6k5ai-rqe UP
Oceania Australia Melbourne 2 (mn2) NEXTDC Icaria Systems Pty Ltd 23jbm-6z6mi-ki2ut-fkz5x-yy4uy-6llls-yyodh-xv537-2qonk-2iod3-jae DOWN
Europe Belgium Antwerp (an1) Datacenter United Allusion kby7l-tpmyp-ntea5-g4kn2-gkwrc-fbjbo-6pjgz-gaoz7-owtct-welil-pae UP
Americas Canada Toronto 2 (to2) Cyxtera Blockchain Development Labs d4ndk-jxgud-mf7j2-63lqc-2f64s-vouw3-l6k2k-akpwd-b4t4d-vur7h-jae UP
Europe Germany Marseille (mr1) Digital Realty DFINITY Operations SA gn3jh-ppjoz-hdh3g-3dckg-zdgk2-qspnh-5i7p6-dfcq3-ke6vc-n5l7d-sqe UP
Asia Georgia Tbilisi 1 (tb1) Cloud9 George Bassadone l7nbu-afo7y-adwcg-m6ivf-cooqw-v3pwd-jf4w3-kgsbr-tek3p-7n3dh-3ae UP
Asia India Navi Mumbai 1 (nm1) Rivram Rivram Inc h3gd6-r6oc7-om7g2-2rlvu-dxqc5-moweq-tu63n-ffdcp-5kobp-mvdin-xae UP
Asia Japan Tokyo (ty1) Equinix Starbase rv6cf-76ajy-qgcld-d7gil-e7v22-3sqfv-yc2zs-sn5r5-465el-pbym3-xae UP
Asia Korea (the Republic of) Seoul 1 (sl1) Megazone Cloud Neptune Partners sqw45-bb5aa-rsstr-3lqro-2asg4-jqzqp-lp6az-2a2dr-tzil6-df7tw-gqe UP
Europe Slovenia Maribor (mb1) Posita.si Fractal Labs AG nlghu-pupyy-n5oci-hcqvn-5fvdt-h23ta-gueoi-bkpbn-atazo-sfdlp-nae UP
Americas United States of America (the) Chicago 2 (ch2) Tierpoint 9Yards Capital pgim3-5bk4s-y4auc-ocnuj-gdsqb-iv2yk-qi4t7-75bpp-kbz2r-bdtuq-4qe UP
Africa South Africa Gauteng 2 (jb2) Africa Data Centres Honeycomb Capital (Pty) Ltd hdkxy-jonbm-voico-5u7px-6vet6-6i7zx-xm65d-gdswt-2uvss-5o73g-aae UP

Known Neurons to follow if you're too busy to keep on top of things like this

If you found this analysis helpful and would like to follow the vote of the LORIMER known neuron in the future, consider configuring LORIMER as a followee for the Subnet Management topic.

Other good neurons to follow:

  • Synapse (follows the LORIMER and CodeGov known neurons for Subnet Management, and is a generally well informed known neuron to follow on numerous other topics)

  • CodeGov (actively reviews and votes on Subnet Management proposals, and is well informed on numerous other technical topics)

  • WaterNeuron (the WaterNeuron DAO frequently discuss proposals like this in order to vote responsibly based on DAO consensus)

1 Like

UPDATE : Voted to adopt Proposal 133459, after being provided clear and detailed info on the flow for this proposal. Much appreciated.

Looking at subnet o3ow2 we can see that 23jbm node is offline.

While the proposal is correct and it replaces a healthy node from Bucharest with the motivation ā€œin order to be redeployed, in this case with ipv4ā€ based on ā€œas per user requestā€.
Couple of questions jump to mind:

  1. What is this user request ? Is it the NP or users from the specific subnet ?
  2. Where if anywhere can we see the request (obviously Dfinity wouldnā€™t just submit unfounded proposals but a forum post as a heads up would be nice)
  3. Looking at the docs in Deployment and Updating nodes ipv4 we can see there are two ways of doing this, one of them does not require redeployment. So the question is will this node really be redeployed and if so will it loose itā€™s place since it was replaced by what I am guessing is not temporary ?
1 Like

@awrelll Was proposal 133459 submitted at your request?

Hi @ZackDS thanks for the questions, I guess replacing a node for maintenance is a ā€œnew caseā€ that we have not discussed yet in terms of process, so good that you bring this up.

To give some background, all node machines currently support IPv6. All Gen1 NPs are requested to have at least 2 nodes deployed with IPv4, the reason being that is supports some features like http outcalls and bitcoin. But a node provider can only reinstall a node when it is no active in a subnet. If a node is active in a subnet, the node first has to be removed from that subnet and replaced by another node machine. So far, the DRE team is submitting these proposals (although in the future we want to instruct NPs to do this themselves).

Yes, the Ops team from Dfinity requested the NP to redeploy IPv4 on these two nodes, and the NP subsequently asked the DRE team to remove one of the nodes that was in a subnet to be removed.

So far, the requests are done directly to the Dfinity OPS team (e.g. through the Element channel we have for NPs). What we can do for example is ask each NP to add a short forum post in the subnet management thread each time they request to replace the node. Let me know if you think this would work.

All Gen1 nodes are deployed with HSM key, the feature to deploy a node without HSM using dfx was only added recently. So this basically means there is no other way than first to remove the node from a subnet.

@ZackDS @timk11 let me know what you think would be the best process for validating these redeployment requests. I am open to either reject this proposal and to resubmit it with e.g. a forum post by the NP, or we adopt this proposal and follow the new process the next time a replacement requests comes along.

2 Likes

Thank you for the very detailed information. After this update I will vote to adopt the proposal, since it is all clear it makes no sense to reject at this point.
For future I think we can all agree a short forum post from the NP would suffice.

1 Like

Thanks, will make sure we include it in our DRE instructions.

2 Likes

@Lorimer @timk11 please also have a look whether you are okay with the above clarification and process.

1 Like

Voted to adopt proposal 133459.

This proposal replaces node wjx4k as per a request from the node provider. Decentralisation parameters are unchanged and remain within the requirements of the target topology. I agree that a forum post from the node provider acknowledging the request would be the best way to verify this. I did have a look in the IC Node Providers Element channel but I couldnā€™t see where this request was made. However, Iā€™m happy to go with your explanation that the request was made directly to the team.

2 Likes

Voted to adopt proposal 133459. The proposal aims to replace the node wjx4k on subnet o3ow2 with node za7cm. The node provider of node wjx4k has requested for this to be removed for redeplyment with IPv4 and this has been confirmed by @SvenF.
In terms of moving forward with this type of proposals I do think it would be easier if the NP makes a forum post explaining the situation.

2 Likes