slot.h

Go to the documentation of this file.

/*-------------------------------------------------------------------------
 * slot.h
 *     Replication slot management.
 *
 * Copyright (c) 2012-2026, PostgreSQL Global Development Group
 *
 *-------------------------------------------------------------------------
 */
#ifndef SLOT_H
#define SLOT_H
 
#include "access/xlog.h"
#include "access/xlogreader.h"
#include "storage/condition_variable.h"
#include "storage/lwlock.h"
#include "storage/shmem.h"
#include "storage/spin.h"
#include "replication/walreceiver.h"
 
/* directory to store replication slot data in */
#define PG_REPLSLOT_DIR     "pg_replslot"
 
/*
 * The reserved name for a replication slot used to retain dead tuples for
 * conflict detection in logical replication. See
 * maybe_advance_nonremovable_xid() for detail.
 */
#define CONFLICT_DETECTION_SLOT "pg_conflict_detection"
 
/*
 * Behaviour of replication slots, upon release or crash.
 *
 * Slots marked as PERSISTENT are crash-safe and will not be dropped when
 * released. Slots marked as EPHEMERAL will be dropped when released or after
 * restarts.  Slots marked TEMPORARY will be dropped at the end of a session
 * or on error.
 *
 * EPHEMERAL is used as a not-quite-ready state when creating persistent
 * slots.  EPHEMERAL slots can be made PERSISTENT by calling
 * ReplicationSlotPersist().  For a slot that goes away at the end of a
 * session, TEMPORARY is the appropriate choice.
 */
typedef enum ReplicationSlotPersistency
{
    RS_PERSISTENT,
    RS_EPHEMERAL,
    RS_TEMPORARY,
} ReplicationSlotPersistency;
 
/*
 * Slots can be invalidated, e.g. due to max_slot_wal_keep_size. If so, the
 * 'invalidated' field is set to a value other than _NONE.
 *
 * When adding a new invalidation cause here, the value must be powers of 2
 * (e.g., 1, 2, 4...) for proper bitwise operations. Also, remember to update
 * RS_INVAL_MAX_CAUSES below, and SlotInvalidationCauses in slot.c.
 */
typedef enum ReplicationSlotInvalidationCause
{
    RS_INVAL_NONE = 0,
    /* required WAL has been removed */
    RS_INVAL_WAL_REMOVED = (1 << 0),
    /* required rows have been removed */
    RS_INVAL_HORIZON = (1 << 1),
    /* wal_level insufficient for slot */
    RS_INVAL_WAL_LEVEL = (1 << 2),
    /* idle slot timeout has occurred */
    RS_INVAL_IDLE_TIMEOUT = (1 << 3),
} ReplicationSlotInvalidationCause;
 
/* Maximum number of invalidation causes */
#define RS_INVAL_MAX_CAUSES 4
 
/*
 * When the slot synchronization worker is running, or when
 * pg_sync_replication_slots is executed, slot synchronization may be
 * skipped. This enum defines the possible reasons for skipping slot
 * synchronization.
 */
typedef enum SlotSyncSkipReason
{
    SS_SKIP_NONE,               /* No skip */
    SS_SKIP_WAL_NOT_FLUSHED,    /* Standby did not flush the wal corresponding
                                 * to confirmed flush of remote slot */
    SS_SKIP_WAL_OR_ROWS_REMOVED,    /* Remote slot is behind; required WAL or
                                     * rows may be removed or at risk */
    SS_SKIP_NO_CONSISTENT_SNAPSHOT, /* Standby could not build a consistent
                                     * snapshot */
    SS_SKIP_INVALID             /* Local slot is invalid */
} SlotSyncSkipReason;
 
/*
 * On-Disk data of a replication slot, preserved across restarts.
 */
typedef struct ReplicationSlotPersistentData
{
    /* The slot's identifier */
    NameData    name;
 
    /* database the slot is active on */
    Oid         database;
 
    /*
     * The slot's behaviour when being dropped (or restored after a crash).
     */
    ReplicationSlotPersistency persistency;
 
    /*
     * xmin horizon for data
     *
     * NB: This may represent a value that hasn't been written to disk yet;
     * see notes for effective_xmin, below.
     */
    TransactionId xmin;
 
    /*
     * xmin horizon for catalog tuples
     *
     * NB: This may represent a value that hasn't been written to disk yet;
     * see notes for effective_xmin, below.
     */
    TransactionId catalog_xmin;
 
    /* oldest LSN that might be required by this replication slot */
    XLogRecPtr  restart_lsn;
 
    /* RS_INVAL_NONE if valid, or the reason for having been invalidated */
    ReplicationSlotInvalidationCause invalidated;
 
    /*
     * Oldest LSN that the client has acked receipt for.  This is used as the
     * start_lsn point in case the client doesn't specify one, and also as a
     * safety measure to jump forwards in case the client specifies a
     * start_lsn that's further in the past than this value.
     */
    XLogRecPtr  confirmed_flush;
 
    /*
     * LSN at which we enabled two_phase commit for this slot or LSN at which
     * we found a consistent point at the time of slot creation.
     */
    XLogRecPtr  two_phase_at;
 
    /*
     * Allow decoding of prepared transactions?
     */
    bool        two_phase;
 
    /* plugin name */
    NameData    plugin;
 
    /*
     * Was this slot synchronized from the primary server?
     */
    bool        synced;
 
    /*
     * Is this a failover slot (sync candidate for standbys)? Only relevant
     * for logical slots on the primary server.
     */
    bool        failover;
} ReplicationSlotPersistentData;
 
/*
 * Shared memory state of a single replication slot.
 *
 * The in-memory data of replication slots follows a locking model based
 * on two linked concepts:
 * - A replication slot's in_use flag is switched when added or discarded using
 * the LWLock ReplicationSlotControlLock, which needs to be hold in exclusive
 * mode when updating the flag by the backend owning the slot and doing the
 * operation, while readers (concurrent backends not owning the slot) need
 * to hold it in shared mode when looking at replication slot data.
 * - Individual fields are protected by mutex where only the backend owning
 * the slot is authorized to update the fields from its own slot.  The
 * backend owning the slot does not need to take this lock when reading its
 * own fields, while concurrent backends not owning this slot should take the
 * lock when reading this slot's data.
 */
typedef struct ReplicationSlot
{
    /* lock, on same cacheline as effective_xmin */
    slock_t     mutex;
 
    /* is this slot defined */
    bool        in_use;
 
    /*
     * Who is streaming out changes for this slot? INVALID_PROC_NUMBER in
     * unused slots.
     */
    ProcNumber  active_proc;
 
    /* any outstanding modifications? */
    bool        just_dirtied;
    bool        dirty;
 
    /*
     * For logical decoding, it's extremely important that we never remove any
     * data that's still needed for decoding purposes, even after a crash;
     * otherwise, decoding will produce wrong answers.  Ordinary streaming
     * replication also needs to prevent old row versions from being removed
     * too soon, but the worst consequence we might encounter there is
     * unwanted query cancellations on the standby.  Thus, for logical
     * decoding, this value represents the latest xmin that has actually been
     * written to disk, whereas for streaming replication, it's just the same
     * as the persistent value (data.xmin).
     */
    TransactionId effective_xmin;
    TransactionId effective_catalog_xmin;
 
    /* data surviving shutdowns and crashes */
    ReplicationSlotPersistentData data;
 
    /* is somebody performing io on this slot? */
    LWLock      io_in_progress_lock;
 
    /* Condition variable signaled when active_proc changes */
    ConditionVariable active_cv;
 
    /* all the remaining data is only used for logical slots */
 
    /*
     * When the client has confirmed flushes >= candidate_xmin_lsn we can
     * advance the catalog xmin.  When restart_valid has been passed,
     * restart_lsn can be increased.
     */
    TransactionId candidate_catalog_xmin;
    XLogRecPtr  candidate_xmin_lsn;
    XLogRecPtr  candidate_restart_valid;
    XLogRecPtr  candidate_restart_lsn;
 
    /*
     * This value tracks the last confirmed_flush LSN flushed which is used
     * during a shutdown checkpoint to decide if logical's slot data should be
     * forcibly flushed or not.
     */
    XLogRecPtr  last_saved_confirmed_flush;
 
    /*
     * The time when the slot became inactive. For synced slots on a standby
     * server, it represents the time when slot synchronization was most
     * recently stopped.
     */
    TimestampTz inactive_since;
 
    /*
     * Latest restart_lsn that has been flushed to disk. For persistent slots
     * the flushed LSN should be taken into account when calculating the
     * oldest LSN for WAL segments removal.
     *
     * Do not assume that restart_lsn will always move forward, i.e., that the
     * previously flushed restart_lsn is always behind data.restart_lsn. In
     * streaming replication using a physical slot, the restart_lsn is updated
     * based on the flushed WAL position reported by the walreceiver.
     *
     * This replication mode allows duplicate WAL records to be received and
     * overwritten. If the walreceiver receives older WAL records and then
     * reports them as flushed to the walsender, the restart_lsn may appear to
     * move backward.
     *
     * This typically occurs at the beginning of replication. One reason is
     * that streaming replication starts at the beginning of a segment, so, if
     * restart_lsn is in the middle of a segment, it will be updated to an
     * earlier LSN, see RequestXLogStreaming. Another reason is that the
     * walreceiver chooses its startpoint based on the replayed LSN, so, if
     * some records have been received but not yet applied, they will be
     * received again and leads to updating the restart_lsn to an earlier
     * position.
     */
    XLogRecPtr  last_saved_restart_lsn;
 
    /*
     * Reason for the most recent slot synchronization skip.
     *
     * Slot sync skips can occur for both temporary and persistent replication
     * slots. They are more common for temporary slots, but persistent slots
     * may also skip synchronization in rare cases (e.g.,
     * SS_SKIP_WAL_NOT_FLUSHED or SS_SKIP_WAL_OR_ROWS_REMOVED).
     *
     * Since, temporary slots are dropped after server restart, persisting
     * slotsync_skip_reason provides no practical benefit.
     */
    SlotSyncSkipReason slotsync_skip_reason;
} ReplicationSlot;
 
#define SlotIsPhysical(slot) ((slot)->data.database == InvalidOid)
#define SlotIsLogical(slot) ((slot)->data.database != InvalidOid)
 
/*
 * Shared memory control area for all of replication slots.
 */
typedef struct ReplicationSlotCtlData
{
    /*
     * This array should be declared [FLEXIBLE_ARRAY_MEMBER], but for some
     * reason you can't do that in an otherwise-empty struct.
     */
    ReplicationSlot replication_slots[1];
} ReplicationSlotCtlData;
 
/*
 * Set slot's inactive_since property unless it was previously invalidated.
 */
static inline void
ReplicationSlotSetInactiveSince(ReplicationSlot *s, TimestampTz ts,
                                bool acquire_lock)
{
    if (acquire_lock)
        SpinLockAcquire(&s->mutex);
 
    if (s->data.invalidated == RS_INVAL_NONE)
        s->inactive_since = ts;
 
    if (acquire_lock)
        SpinLockRelease(&s->mutex);
}
 
/*
 * Pointers to shared memory
 */
extern PGDLLIMPORT ReplicationSlotCtlData *ReplicationSlotCtl;
extern PGDLLIMPORT ReplicationSlot *MyReplicationSlot;
 
/* GUCs */
extern PGDLLIMPORT int max_replication_slots;
extern PGDLLIMPORT char *synchronized_standby_slots;
extern PGDLLIMPORT int idle_replication_slot_timeout_secs;
 
/* shmem initialization functions */
extern Size ReplicationSlotsShmemSize(void);
extern void ReplicationSlotsShmemInit(void);
 
/* management of individual slots */
extern void ReplicationSlotCreate(const char *name, bool db_specific,
                                  ReplicationSlotPersistency persistency,
                                  bool two_phase, bool failover,
                                  bool synced);
extern void ReplicationSlotPersist(void);
extern void ReplicationSlotDrop(const char *name, bool nowait);
extern void ReplicationSlotDropAcquired(void);
extern void ReplicationSlotAlter(const char *name, const bool *failover,
                                 const bool *two_phase);
 
extern void ReplicationSlotAcquire(const char *name, bool nowait,
                                   bool error_if_invalid);
extern void ReplicationSlotRelease(void);
extern void ReplicationSlotCleanup(bool synced_only);
extern void ReplicationSlotSave(void);
extern void ReplicationSlotMarkDirty(void);
 
/* misc stuff */
extern void ReplicationSlotInitialize(void);
extern bool ReplicationSlotValidateName(const char *name,
                                        bool allow_reserved_name,
                                        int elevel);
extern bool ReplicationSlotValidateNameInternal(const char *name,
                                                bool allow_reserved_name,
                                                int *err_code, char **err_msg, char **err_hint);
extern void ReplicationSlotReserveWal(void);
extern void ReplicationSlotsComputeRequiredXmin(bool already_locked);
extern void ReplicationSlotsComputeRequiredLSN(void);
extern XLogRecPtr ReplicationSlotsComputeLogicalRestartLSN(void);
extern bool ReplicationSlotsCountDBSlots(Oid dboid, int *nslots, int *nactive);
extern bool CheckLogicalSlotExists(void);
extern void ReplicationSlotsDropDBSlots(Oid dboid);
extern bool InvalidateObsoleteReplicationSlots(uint32 possible_causes,
                                               XLogSegNo oldestSegno,
                                               Oid dboid,
                                               TransactionId snapshotConflictHorizon);
extern ReplicationSlot *SearchNamedReplicationSlot(const char *name, bool need_lock);
extern int  ReplicationSlotIndex(ReplicationSlot *slot);
extern bool ReplicationSlotName(int index, Name name);
extern void ReplicationSlotNameForTablesync(Oid suboid, Oid relid, char *syncslotname, Size szslot);
extern void ReplicationSlotDropAtPubNode(WalReceiverConn *wrconn, char *slotname, bool missing_ok);
 
extern void StartupReplicationSlots(void);
extern void CheckPointReplicationSlots(bool is_shutdown);
 
extern void CheckSlotRequirements(void);
extern void CheckSlotPermissions(void);
extern ReplicationSlotInvalidationCause
            GetSlotInvalidationCause(const char *cause_name);
extern const char *GetSlotInvalidationCauseName(ReplicationSlotInvalidationCause cause);
 
extern bool SlotExistsInSyncStandbySlots(const char *slot_name);
extern bool StandbySlotsHaveCaughtup(XLogRecPtr wait_for_lsn, int elevel);
extern void WaitForStandbyConfirmation(XLogRecPtr wait_for_lsn);
 
#endif                          /* SLOT_H */