Skip to content
Open
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Next Next commit
Mango covering JSON indexes RFC
Propose covering indexes within Mango, for JSON indexes, and outline the
implementation steps.
  • Loading branch information
mikerhodes committed Feb 3, 2023
commit 06bb7ba2881e098933e539ee6659d2faf7e36ed1
254 changes: 254 additions & 0 deletions src/docs/rfcs/018-mango-covering-json-index.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,254 @@
---
name: Formal RFC
about: Submit a formal Request For Comments for consideration by the team.
title: 'Support covering indexes when using Mango JSON (view) indexes'
labels: rfc, discussion
assignees: ''

---

[NOTE]: # ( ^^ Provide a general summary of the RFC in the title above. ^^ )

# Introduction

## Abstract

[NOTE]: # ( Provide a 1-to-3 paragraph overview of the requested change. )
[NOTE]: # ( Describe what problem you are solving, and the general approach. )

Covering indexes are used to reduce the time the database takes to respond to
queries. An index "covers" a query when the query only requires fields that are
in the index (in this way, "covering" is a property of index and query
combined). When this is the case, the database doesn't need to consult primary
data and can return results for the query from only the index. In more familiar
CouchDB terminology, this is equivalent to querying a view with
`include_docs=false`.

When evaluating a query, Mango currently doesn't use the concept of covering
indexes; even if a query could be answered without reading each result's full
JSON document, Mango will still read it. This makes it impossible for Mango to
return data as quickly as the underlying view.

My benchmarking shows that Mango can answer at the same rate as the underlying
view index. It currently runs at the same pace as calling the view with
`include_docs=true`. Preliminary modifications to Mango showed that, with
covering index support and a query that can use it, Mango can stream results
as quickly as the underlying view. Adding covering indexes therefore increases
the production use-cases Mango can support substantially.

There are likely two phases to this:

- Enable covering indexing processing for current indexes (ie, over view keys).
- Allow Mango view indexes to include extra data from documents, storing it in
the `value` of the view. Support use of this extra data within the covering
indexes feature.

### Out of scope

This proposal only covers adding covering indexes to JSON indexes and not text
indexes. The aim is to reduce the need for CouchDB users to run separate
processes, such as Lucene, to get improved querying performance and capability.

We do not aim to replicate `reduce` functionality from views, only to bring
parity to non-reduced view execution speed (ie, when views are used to search
the document space) to Mango.

## Requirements Language

[NOTE]: # ( Do not alter the section below. Follow its instructions. )

The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
"SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
document are to be interpreted as described in
[RFC 2119](https://www.rfc-editor.org/rfc/rfc2119.txt).

## Terminology

[TIP]: # ( Provide a list of any unique terms or acronyms, and their definitions here.)

- Mango: CouchDB's Mongo inspired querying system.
- View / JSON index: Mango index that uses the same index as Cloudant views.
- Coordinator: the erlang process that handles doing a distributed query across
a CouchDB cluster.

---

# Detailed Description

[NOTE]: # ( Describe the solution being proposed in greater detail. )
[NOTE]: # ( Assume your audience has knowledge of, but not necessarily familiarity )
[NOTE]: # ( with, the CouchDB internals. Provide enough context so that the reader )
[NOTE]: # ( can make an informed decision about the proposal. )

[TIP]: # ( Artwork may be attached to the submission and linked as necessary. )
[TIP]: # ( ASCII artwork can also be included in code blocks, if desired. )

This would take place within `mango_view_cursor.erl`. The key functions
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That is mango_cursor_view.erl.

involved are the shard-level `view_cb/2`, the streaming result handler at the
coordinator end (`handle_message/2`) and the `execute/3` function.

## Phase 1: handle keys only covering indexes

Within `execute/3` we will need to decide whether the view should be requested
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I guess that is mango_cursor_view:execute/3. It might be worth to use fully qualified names to aid readability.

to include documents. If the index is covering, this will not be required and
so the `include_docs` argument to the view fabric call will be `false`. We'll
need to add a helper method to return whether the index is covering.

When selecting an index, we'll need to be careful of some subtleties. We will
need to ensure that only fields in the `selector` and not `fields` are used when
choosing an index. This is because we require all keys in the index to be fields
within the selector -- with predicates implying `$exists=true` -- due to the
fact that only documents that include _all_ fields in the index are added to the
index. Therefore, if the selector doesn't imply all fields in the index's keys
exist, then using that index risks returning an incomplete result set.

Within `view_cb/2`, we'll need to know whether an index is covering. Without
that, `view_cb/2` will interpret the lack of included documents as an indicator
that it should do nothing, while in fact we want it to fully process the result
as it does when `include_docs` is used -- apart from when the user passes `r>=2` in the Mango query because then the coordinator reads and processes
documents. (Aside: it'd be good to remove this `r` option to simplify things).

In `handle_message/2` the main work is ensuring that we handle mixed cluster
version states -- ie, cluster state during upgrades.

## Phase 2: add support for included fields in indexes

I propose we add an `include` field into a Mango JSON index definition:

```json
{
"index": {
"fields": [ "age", "name" ],
"include": [ "occupation", "manager_id" ]
Copy link
Contributor

@nickva nickva Jan 30, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The order of the fields in include is not meaningful in any way? Should we add a note highlighting it in the API, just for completeness.

As an implementation detail, perhaps we'd just want to normalize it by sorting when creating the design doc and the view signature. That would mean that two indexes with the same details and only the include in a different order would be equivalent and "point to" the same view signature.

},
"name": "foo-json-index",
"type": "json"
}
```

Behaviour requirements:

- Unlike `fields`, the fields in `include` _do not have to exist_ in the source
document in order that the document be included in the index. This is to
allow the index to cover more queries.
- Including a deeply nested field would follow the same pattern as for other
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Wonder if there is any value in applying limits, or would that be over-complicating it? We'd have to decide what happens when the limit is reached: crash or ignore and fall back to just loading the doc.

Copy link
Contributor Author

@mikerhodes mikerhodes Jan 31, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Goodness -- great point 🎉

I think that we could validate the length of the list of fields when the ddoc is updated, rather than failing during indexing. We could also limit the depth by counting the . characters.

One thing we can only validate at index time are things like the length of included strings. I think here that we might want to place a limit on the total size of the values, say 32kb. Even that's quite a few disk pages, though hopefully they are sequential on disk so the kernel's prefilling the page cache ahead of us.

Given it's easier to start with limits and increase them later, perhaps we should think about this more deeply. In a view index we allow ~anything I believe, but here potentially we could be more conservative.

As an example, postgres limits indexes to 32 columns. Its max field size is 1GB; I think we'd like something a little smaller 😬

Are there other limits here?

My thought is that we do limit, and make it configurable, and perhaps start relatively low for the defaults:

  • mango_json_index_include_fields_max=16 (why 16? Powers of two always sound nice)
  • mango_json_index_include_depth_max=8
  • mango_json_index_include_size_bytes_max=32768 (32kb)

We can enforce mango_json_index_include_fields_max and mango_json_index_include_depth_max in _index. (We may have to belt-and-braces this as the user can go behind Mango's back to upload views that are the "right shape").

mango_json_index_include_size_bytes_max would need to be checked per document at index time. I worry what the behaviour should be here -- I see options of marking the whole index bad; having rows with "missing" values fields, meaning complexity during query; skipping indexing the document entirely. I lean towards skipping the doc as the least likely to cause unpredictable behaviour, but what's the current behaviour for views if indexing a doc fails?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've added a section on limits for include in 91f99be. I think that the topic is really important and it's a bit facepalm that I skipped it. Too excited about writing Erlang I guess 😬 What do you think?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great. Thank you!

Copy link
Contributor

@nickva nickva Jan 31, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I am not sure what the behavior for mango_json_index_include_size_bytes_max should be either. It's pretty tricky. From the top of my head I don't know what currently happens if we fail to index a document. With mango we don't usually fail, if I had to guess it would be we end up in a crash loop on that document. A user then may index for a day and hit a large field value their index crashes, they'd remove the field, try again (get a new view signature) , index for 2 days and crash, etc.

The alternative is to skip the doc but then there is danger of it looking like data loss - user has some very important document (medical record, say allergies to medicine), index skips it, nobody notices until the patient is prescribed the wrong medication (sorry being a bit dramatic here with a silly user story). Maybe that's something we solve outside of the RFC and just that if the value made it past the max_document_size limit then it will be indexed or crash horribly...?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What if instead of storing plain values in rows we'd allow also storing a marker which would indicate that a value was too large, and just fallback to reading the doc? We can still have a hard-limit (strict) mode perhaps which deals with failures, but this would allows us not to deal with indexing failures so to speak and punt it for later.

There may be an optimal cut-off value where storing it in the index is more wasteful than reading the doc? Or there may be not, as technically I think we can write arbitrarily large values in the index, it will just spread over a lot of b-tree blocks, but we'd still duplicate the data.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What if instead of storing plain values in rows we'd allow also storing a marker which would indicate that a value was too large, and just fallback to reading the doc?

I'd like to avoid doing this if we can -- while nice in some ways, this approach makes it more difficult for a customer to understand the performance of their query. I'd like the performance of queries to be predictable. My feeling is that large fields should require a trip to primary data, and that enforcing smaller value sizes keeps it more likely that indexes can live in RAM, where, I think, they should be.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We discussed this a bit in the developer meeting yesterday.

First, we compared this to how this would manifest in M/R views, and the example we used was what if a doc causes a JS exception to be thrown. What we do there is skip the doc and not include any result rows. We do log this in couch.log but it is not surfaced to the HTTP API user.

We went through the motions of whether to add fields inline with the result and also recording a metric for this and concluded from experience that most people do not really care about these things.

However some folks take this seriously, and we want to accommodate those. Imagine this:

  1. we increment a metrics each time a mango covering index can’t include a doc because of some limit.
  2. a user sees this number growing and finds out that this isn’t good.
  3. next they want to know which document caused this and we can point them to couch.log where this should appear (TODO: decide log level)
  4. finally, it’d be great if there was a variant to _explain, say: POST /db/_explain?include_result=true which returns the result like normal, but rows that are missing have an error object in them (or maybe we just show the error rows)

So some handwaving to be defined away, but: let’s do this right this time :)

field references in mango, `person.address.zip`.
- There is no notation to include the whole document, that is, no equivalent of
`emit(doc.name, doc)`.
- It will be an error to include a field in both `fields` and `include`. This
should be rejected by the `_index` call.
- The `include` field would be rejected for `text` type indexes.

Alternatives considered:

- Adding `include` outside `index`. This didn't seem right as the `index`
object already includes `partial_filter_selector` and `include` seems a
peer of this. ([docs](https://docs.couchdb.org/en/stable/api/database/find.html#db-index)).
- Alternative name `store`. We use this for Lucene indexes when dreyfus/clouseau
is used. I elected to use a separate name to either `value` or `store` to
avoid index-type specificity. I take the name from Postgres, which uses
`INCLUDE` in its index definition to [support covering indexes][pgcover].

[pgcover]: https://www.postgresql.org/docs/current/indexes-index-only-scans.html

Adding this will require changes in `mango_idx_view` to store the definition and
in how we process documents during indexing, which looks to be in
`get_index_entries` in `mango_native_proc`.

We'll then need to update the Mango cursor methods mentioned above to take
account of the values within the covering index code.

One thing to be careful about is again index selection. We will still need all
index keys to be present in the selector as above so need differentiate between
the fields in index's keys and values when selecting an index to ensure we
retain the correct behaviour.

# Advantages and Disadvantages

[NOTE]: # ( Briefly, list the benefits and drawbacks that would be realized should )
[NOTE]: # ( the proposal be accepted for inclusion into Apache CouchDB. )

The primary advantage is allowing Mango queries to be as performant as View
queries while retaining their greater flexibility. It does not aim to replace
`reduce` functionality.

There should be no disadvantages to this change. Existing functionality remains
intact, and there should be no decreases in performance.

# Key Changes

[TIP]: # ( If the changes will affect how a user interacts with CouchDB, explain. )

Adding the extra field to Mango JSON index definitions is the key API change.

Users will generally have to alter their indexes to take best advantage of this
new functionality. As there has been no advantage to including extra items in
a JSON index's key so far, most indexes won't contain the data to cover queries.

For now, this RFC doesn't explicitly suggest exposing the covering index choice
via `_explain`, though this would be a valuable piece of extra work. We will,
however, need to ensure that the execution stats that each `_find` call spits
out are correct -- that is, for a covering index there should be no documents
read.

## Applications and Modules affected

[NOTE]: # ( List the OTP applications or functional modules in CouchDB affected by the proposal. )

- `mango`; see details above.

## HTTP API additions

[NOTE]: # ( Provide *exact* detail on each new API endpoint, including: )
[NOTE]: # ( HTTP methods [HEAD, GET, PUT, POST, DELETE, etc.] )
[NOTE]: # ( Synopsis of functionality )
[NOTE]: # ( Headers and parameters accepted )
[NOTE]: # ( JSON in [if a PUT or POST type] )
[NOTE]: # ( JSON out )
[NOTE]: # ( Valid status codes and their definitions )
[NOTE]: # ( A proposed Request and Response block )

Add field `include` to Mango JSON index definitions. Validate that it is only
accepted within JSON indexes and not text indexes.

```json
{
"index": {
"fields": [ "age", "name" ],
"include": [ "occupation", "manager_id" ]
},
"name": "foo-json-index",
"type": "json"
}
```

## HTTP API deprecations

[NOTE]: # ( Provide *exact* detail on the API endpoints to be deprecated. )
[NOTE]: # ( If these endpoints are replaced by new endpoints, list those as well. )
[NOTE]: # ( State the proposed version in which the deprecation and removal will occur. )

None.

# Security Considerations

[NOTE]: # ( Include any impact to the security of CouchDB here. )

This change is an optimisation to query performance. It should not have any
effects on CouchDB's security model.

# References

[TIP]: # ( Include any references to CouchDB documentation, mailing list discussion, )
[TIP]: # ( external standards or other links here. )

Crunchydata have a nice article on [why covering indexes are a valuable feature][crunch].

[crunch]: https://www.crunchydata.com/blog/why-covering-indexes-are-incredibly-helpful

# Acknowledgements

[TIP]: # ( Who helped you write this RFC? )

This work builds on prior PoCs and work by Will Holley and Garren Smith, and
has benefited from discussion with them.