CONDUCTOR: a model for reliable interprocess communication

The authors introduce a model for reliable interprocess communication based on an extension of the gentleman administrator model. The architecture of the CONDUCTOR model provides increased concurrency and a simplified user view of a distributed system. The increased concurrency stems from the potential for multiple instances of administrators to coexist within administrator groups. Users communicate directly with a conductor process instead of a variety of administrators. The new model provides an abstraction which hides administrators needed to service user requests. This form of multiprocess structuring is in keeping with the philosophy of the original Thoth system. A basis for reliable communication between administrator groups and the conductor process is presented. Reliable communication in this model is provided by enforcing atomicity of message delivery and ordering of messages. The architecture of the CONDUCTOR model is robust inasmuch as it is process failure tolerant. A mechanism for detecting and replacing failed administrators of a failed conductor using N. Natarjan´s (1988) watchdog processes is presented