Skip to content

Commit

Permalink
Merge pull request #127 from SolidityGo/bep-99
Browse files Browse the repository at this point in the history
[R4R] BEP-127: Temporary Maintenance Mode for Validators
  • Loading branch information
unclezoro authored May 5, 2022
2 parents 9f17c22 + c67c07d commit d67666d
Show file tree
Hide file tree
Showing 2 changed files with 58 additions and 0 deletions.
57 changes: 57 additions & 0 deletions BEP127.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,57 @@
# BEP-127: Temporary Maintenance Mode for Validators

- [BEP-127: Temporary Maintenance Mode for Validators](#bep-99-temporary-maintenance-mode-for-validators)
- [1. Summary](#1-summary)
- [2. Abstract](#2-abstract)
- [3. Status](#3-status)
- [4. Motivation](#4-motivation)
- [5. Specification](#5-specification)
- [6. License](#6-license)

## 1. Summary
This BEP introduces the **Temporary Maintenance** mode for validators on the BNB Smart Chain.

## 2. Abstract
**Temporary Maintenance** is supposed to last one or a few hours. The validator seat will be temporarily dropped from the block producing rotation during the maintenance. Since long-time offline maintenance is not encouraged, the validator will still be slashed if the maintenance lasts too long. To lower the impact from poorly-operating validators who forget to claim its maintenance, they will be forced to enter **Temporary Maintenance** mode too.

## 3. Status
Draft.

## 4. Motivation
Due to the design of **Parlia** consensus, the absence of the validator, even if it is due to scheduled maintenance, will cause instability and capacity loss of BSC due to the extra waiting time and chain reorganization for other validators. Introducing **Temporary Maintenance** mode will stabilize the blocking rotation and maintain the capacity of BSC.

## 5. Specification

### Current Slash Mechanisms
The [slash contract](https://bscscan.com/address/0x0000000000000000000000000000000000001001) will record the missed blocking metrics of each validator.
- Once the metrics are above the predefined threshold, the blocking reward for validator will not be relayed to BC for distribution but shared with other better validators.
- If the metrics remain above another higher level of threshold, the validator will be dropped from the rotation, and put as “in jail”. This will be propagated back to BNB Beacon Chain, where a predefined amount of BNB would be slashed from the self-delegated BNB of the validator.

### Temporary Maintenance Mode

#### Proactive Maintenance
Validator can claim itself to enter scheduled maintenance by sending a transaction signed by the consensus key. The validator can claim itself to exit maintenance by sending another transaction. The slash cleaning work will be done within the exit transaction:

**SlashCount = (MaintenanceEndHeight - MaintenanceStartHeight)/len(currentValidatorSet)/Scale**

**Scale** is a governable parameter, the initial setting is 2, usually it should be larger than 1. If **SlashCount** is larger than a predefined value, the validator will still be slashed. The validator can get more time to bring the node back before being slashed if it claims itself to enter maintenance. Validator is encouraged to claim itself to exit maintenance even if it will be put in jail, since it can send the unjail transaction earlier.

#### Passive Maintenance
Once the number of missed blocks is above a predefined threshold, the validator will enter maintenance automatically. The validator still gets a chance to catch up and claim itself online again.

### Limit
1. The number of maintained validators has an upper limit at the same time. Once exceeded, the following proactive/passive claim request will be rejected.
2. A validator can only enter maintenance once per day.

### ValidatorSet Change
The validators election will repeat every 24 hours, the maintenance will end immediately once election happens.

### Impact to Validator Maintainers
Validator maintainers can claim the validator to enter maintenance mode once the node runs into unexpected issues. Validator maintainers need to send transactions to exit maintenance mode even if the validator is enforced into maintenance, otherwise, the validator may be put in jail.

## 6. License

The content is licensed under [CC0](https://creativecommons.org/publicdomain/zero/1.0/).



1 change: 1 addition & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -26,4 +26,5 @@ Here are the list of subjects of BEPs:
* [BEP-91](BEP91.md): Increase Block Gas Ceiling for Binance Smart Chain
* [BEP-93](BEP93.md): Diff Sync Protocol on BSC
* [BEP-95](BEP95.md): Introduce Real-Time Burning Mechanism
* [BEP-127](BEP127.md): Temporary Maintenance Mode for Validators
* [BEP-128](BEP128.md): Improvement on BNB Smart Chain Staking Reward Distribution

0 comments on commit d67666d

Please sign in to comment.