Skip to content

Implement optional concurrent "Range" requests (refs #86) - #102

Open
justinfx wants to merge 4 commits into
cavaliergopher:mainfrom
justinfx:86_range_requests
Open

Implement optional concurrent "Range" requests (refs #86)#102
justinfx wants to merge 4 commits into
cavaliergopher:mainfrom
justinfx:86_range_requests

Conversation

@justinfx

Copy link
Copy Markdown
Contributor

This is an implementation of an optional feature to have a Request download the payload in multiple chunks, using a "Range" request, if supported by the server.

API updates

The Request struct gains a new field called RangeRequestMax, which when set to > 0 controls how many chunks to download in parallel using a "Range" request, instead of a single request reading the full body.

Implementation details

High level steps:

  1. RangeRequestMax > 0
  2. Ensure that a head request is always performed, so we can verify the support for "Range" and get the content length
  3. Don't start the synchronous GET request in the state machine, as it will be executed in parallel later (HEAD request is the last request performed)
  4. Transition to openWriter
  5. Use an alternate transfer implementation, called transferRanges
  6. async copyFile works the same as before

Given the way the state machine works, it seemed easier to launch the concurrent range requests during the copy phase, instead of in the synchronous getRequest state and have to monitor a list of requests.

A new transferer interface has been introduced, to have a second implementation called transferRanges

transferRanges implementation

This alternate implementation handles launching the concurrent range requests, doing the copy of the data, and tracking the metrics.

It seemed easier to just pass the HEAD Response to the private constructor, as most of the needed details are present on that struct.

transferRanges.Copy() will start a number of Range requests with an offset-limit in goroutines, per the value of RangeRequestMax passed in. Each goroutines writes directly to the open file writer using WriteAt (with underlying pwrite() syscall) to write chunks of data at offsets to the same file descriptor in parallel. Metrics are atomically updated to keep N() and BPS() working.

Other details

I did also update the default setting in the Client when it comes to setting "TCP_NODELAY". In Go standard lib, this is set to true in the net.TCPConn to target rpc workloads. But it would make more sense, in theory, to disable Nagles Algorithm by default in a library specific to downloading files over HTTP. It can still be controlled by the user supplying a custom HTTPClient

@justinfx

justinfx commented Jul 4, 2023

Copy link
Copy Markdown
Contributor Author

I've realised that I have left the returned Response contains an HTTPResponse as the one from the HEAD request, when performing a "Range" request. Would be interested in feedback on this approach, since I wasn't sure of a better response to return, seeing as the parallel range requests are running transparently and being written to the target file. Another option would be that I clone the HEAD http response and modify it to represent the method that matches the Range requests (GET, ...).

@ananthb

ananthb commented Aug 25, 2023

Copy link
Copy Markdown

If multiple goroutines are writing to the output in parallel, will the output file have gaps in between partially written chunks? If so, how would resuming a partial download work?

@justinfx

justinfx commented Aug 25, 2023

Copy link
Copy Markdown
Contributor Author

@ananthb I think it is possible in the current implementation for the resume to not be correct, given a situation where a later range concurrently finishes sooner than an earlier range and then the transfer is stopped. The reason would be that as each concurrent range completes writing, it atomically adds to the total bytes written. So if 10,20,40 finish, but 30 does not, it would report 30 total written but there would be a gap, and the file itself would look like it had 40 30 bytes written since it is sparse.
Maybe concurrent range failures need to truncate back to before the earliest failed range?

@justinfx

Copy link
Copy Markdown
Contributor Author

@ananthb I've just pushed 8b4f8d2 to address the support for resume with ranged requests. It will now truncate the file to the end of the lowest successful range offset before a failure to avoid any gaps. This means you may lose progress on some chunks that concurrently finished just after the failed range.
I've updated the existing AutoResume test to also check resuming ranged requests that did not fail with a gap. And then an extra test that sets up a failure with a gap and asserts that it truncates (which would be a case that then would function as expected with a normal Resume).

@ananthb

ananthb commented Aug 30, 2023

Copy link
Copy Markdown

Yep that makes sense @justinfx.

@ananthb

ananthb commented Aug 31, 2023

Copy link
Copy Markdown

What happens if grab crashes before it can truncate the file?

If you only wrote completed chunks to the file, then you wouldn't need to truncate it in the first place.
Either by buffering incomplete chunks in-memory or on disk tmpfiles.

@justinfx

Copy link
Copy Markdown
Contributor Author

@ananthb yea if the process crashed before it could truncate, it would leave a file that could be corrupt and then used for resume. I definitely don't think we should buffer in memory because that could have surprising resource usage implications on large files.
The goal of using WriteTo was to be optimal in not having to buffer anything and only writing a single file without any post-process i/o. I admit that I wrote this feature based on my own use-case where I don't use the resume feature at all, so I didn't think through the edge cases of supporting it.
Couple of ideas in terms of writing to files:

  • Write to a ".partial" and rename to "" after chunks finish. This could leave being a ".partial" file on crash, which would always be overwritten from the start on next resume.
  • On posix OS, unlink the name of the of the target and only write to the file descriptor. Then hard link / linkat the fd to a named file after chunks finish. This would avoid leaving behind a ".partial" file on crash since there is no reference anymore.

@ananthb

ananthb commented Sep 1, 2023

Copy link
Copy Markdown

Yeah in-memory buffers alone won't be enough to cover, say large chunk sizes or many parallel chunks. I've been toying with the idea of an in-memory buffer that spills over onto disk.

My basic idea to make resume work is that the output file should always be consistent and not have any "holes". Basically write only completed chunks in order to the output file.

I could use anonymous chunks to buffer in-progress chunks and too.

@justinfx

justinfx commented Sep 1, 2023

Copy link
Copy Markdown
Contributor Author

The current implementation splits large chunks by the number of parallel workers, so I wonder if your idea could manage to avoid large memory usage. You might have to buffer alot before a gap closed.
Maybe the single temp file that only moves on success or truncation is eaiser?
But I'm interested to see what your approach produces!

@ananthb

ananthb commented Sep 5, 2024

Copy link
Copy Markdown

@justinfx I wrote a library called chonker that does Range GETs transparently.
You can use it with grab like this: https://go.dev/play/p/LOlBnp24bXp.

@justinfx

justinfx commented Sep 5, 2024

Copy link
Copy Markdown
Contributor Author

@ananthb nice one. It's been a while and I have moved on from this issue, having made use of it in a fork with this feature

@cavaliercoder

Copy link
Copy Markdown
Collaborator

I really like this idea and appreciate the work that went into it. I'm tinkering with this project again after a few years of focussing elsewhere.

One goal stated in the README is to keep Grab stateless, but I'm happy to revisit this for the benefit of multipart transfers.

I think a way forward here is multiple steps:

  1. Split the transfer into fixed sized chunks (configurable), rather than fixed chunk count. Let's say, 1MiB (or whatever the Bandwidth-Delay Product would prescribe). This way, we're building the beginning of the file first.
  2. Then, we fetch them concurrently with a fixed (configurable) concurrency. Every time a chunk completes - or maybe just periodically - we can snapshot the current progress of all chunks into a file that lives next to the destination file. Then, if a crash happens, we can resume from the last snapshot, and only lose data that was transferred after the snapshot.

The downside is the potential proliferation of snapshots in the filesystem, but one could argue it's no worse than a proliferation of corrupted, unresumable downloads.

I'm going to pick up your branch and build on it. I'd like change some things, but would really like to see you contribution land in the project history.

@justinfx

Copy link
Copy Markdown
Contributor Author

I appreciate you picking up the work I had done! It seemed to work well within the internal project using this library. But I haven't worked on that particular project for years now. Either way, it's always good to be able to contribute a starting point!

cavaliercoder added a commit that referenced this pull request Aug 20, 2026
Adds Request.RangeSize and Request.Concurrency. Setting RangeSize splits
a download into ranges of that size, fetched with separate Range
requests; Concurrency bounds how many are in flight.

There is one transfer implementation rather than two. A download that is
not split is the single range covering whatever remains, and a fresh
download of a file of unknown length is that range requested with no
Range header at all - byte for byte the request grab has always made.
The tests pin those headers, because building every transfer out of
ranges must not change what an unsplit one puts on the wire.

Ranges are dispatched in ascending order so the destination fills from
the front, and each is written at its offset with WriteAt. The
destination is therefore never opened O_APPEND, which on some systems
forces every write to the end of the file whatever offset it was given.
Request.NoStore writes to an in-memory WriterAt so it takes the same
path as everything else.

A split transfer writes its progress to a checkpoint file beside the
destination, so an interrupted one resumes without refetching. The
record carries the URL, size, range size and the remote file's
validators, and is discarded unless they all still match - a stronger
guarantee than an unsplit resume can make, since that has no choice but
to assume the remote file is unchanged. Workers report partial progress
as they write, so what an interruption costs is bounded by the
checkpoint interval rather than by RangeSize. The destination is flushed
before the checkpoint naming it is renamed into place, so a checkpoint
can never claim data the filesystem has not committed.

The size of the remote file is read from Content-Range where the server
offers it rather than inferred, which also lets a range be checked
against the file it came from: a server reporting a different total part
way through has given us a different file, and one answering a Range
request with the whole file has given us a response starting somewhere
other than where we asked.

Supporting changes:

  - grabtest serves byte ranges, Content-Range and validators, records
    the ranges it served, and rejects the forms grab never sends
  - benchmarks for what a transfer costs and what tuning it is worth,
    split into `make bench` for regressions and `make bench-network` for
    the shape of the trade-offs
  - the default client is built on http.DefaultTransport, which it was
    not before, so it now has connection, TLS handshake and idle
    timeouts at all; MaxIdleConnsPerHost is raised since a split
    transfer makes many requests to one host
  - cmd/grab gains -range-size, -concurrency, -http1, -o and -batch, and
    reports each file's rate and negotiated protocol
  - docs/ describes the architecture and its invariants, how to reason
    about range size and concurrency, and how to test and benchmark,
    with the numbers measured against real mirrors from two clients

Based on the design and prototype in #102, which implemented this as a
fixed count of chunks rather than a fixed chunk size, and which had no
way to resume a transfer it interrupted.

refs #86

Co-authored-by: Justin Israel <justinisrael@gmail.com>
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
cavaliercoder added a commit that referenced this pull request Aug 20, 2026
Adds Request.RangeSize and Request.Concurrency. Setting RangeSize splits
a download into ranges of that size, fetched with separate Range
requests; Concurrency bounds how many are in flight.

There is one transfer implementation rather than two. A download that is
not split is the single range covering whatever remains, and a fresh
download of a file of unknown length is that range requested with no
Range header at all - byte for byte the request grab has always made.
The tests pin those headers, because building every transfer out of
ranges must not change what an unsplit one puts on the wire.

Ranges are dispatched in ascending order so the destination fills from
the front, and each is written at its offset with WriteAt. The
destination is therefore never opened O_APPEND, which on some systems
forces every write to the end of the file whatever offset it was given.
Request.NoStore writes to an in-memory WriterAt so it takes the same
path as everything else.

A split transfer writes its progress to a checkpoint file beside the
destination, so an interrupted one resumes without refetching. The
record carries the URL, size, range size and the remote file's
validators, and is discarded unless they all still match - a stronger
guarantee than an unsplit resume can make, since that has no choice but
to assume the remote file is unchanged. Workers report partial progress
as they write, so what an interruption costs is bounded by the
checkpoint interval rather than by RangeSize. The destination is flushed
before the checkpoint naming it is renamed into place, so a checkpoint
can never claim data the filesystem has not committed.

The size of the remote file is read from Content-Range where the server
offers it rather than inferred, which also lets a range be checked
against the file it came from: a server reporting a different total part
way through has given us a different file, and one answering a Range
request with the whole file has given us a response starting somewhere
other than where we asked.

Supporting changes:

  - grabtest serves byte ranges, Content-Range and validators, records
    the ranges it served, and rejects the forms grab never sends
  - benchmarks for what a transfer costs and what tuning it is worth,
    split into `make bench` for regressions and `make bench-network` for
    the shape of the trade-offs
  - the default client is built on http.DefaultTransport, which it was
    not before, so it now has connection, TLS handshake and idle
    timeouts at all; MaxIdleConnsPerHost is raised since a split
    transfer makes many requests to one host
  - cmd/grab gains -range-size, -concurrency, -http1, -o and -batch, and
    reports each file's rate and negotiated protocol
  - docs/ describes the architecture and its invariants, how to reason
    about range size and concurrency, and how to test and benchmark,
    with the numbers measured against real mirrors from two clients

Based on the design and prototype in #102, which implemented this as a
fixed count of chunks rather than a fixed chunk size, and which had no
way to resume a transfer it interrupted.

refs #86

Co-authored-by: Justin Israel <justinisrael@gmail.com>
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
cavaliercoder added a commit that referenced this pull request Aug 20, 2026
Adds Request.RangeSize and Request.Concurrency. Setting RangeSize splits
a download into ranges of that size, fetched with separate Range
requests; Concurrency bounds how many are in flight.

There is one transfer implementation rather than two. A download that is
not split is the single range covering whatever remains, and a fresh
download of a file of unknown length is that range requested with no
Range header at all - byte for byte the request grab has always made.
The tests pin those headers, because building every transfer out of
ranges must not change what an unsplit one puts on the wire.

Ranges are dispatched in ascending order so the destination fills from
the front, and each is written at its offset with WriteAt. The
destination is therefore never opened O_APPEND, which on some systems
forces every write to the end of the file whatever offset it was given.
Request.NoStore writes to an in-memory WriterAt so it takes the same
path as everything else.

A split transfer writes its progress to a checkpoint file beside the
destination, so an interrupted one resumes without refetching. The
record carries the URL, size, range size and the remote file's
validators, and is discarded unless they all still match - a stronger
guarantee than an unsplit resume can make, since that has no choice but
to assume the remote file is unchanged. Workers report partial progress
as they write, so what an interruption costs is bounded by the
checkpoint interval rather than by RangeSize. The destination is flushed
before the checkpoint naming it is renamed into place, so a checkpoint
can never claim data the filesystem has not committed.

The size of the remote file is read from Content-Range where the server
offers it rather than inferred, which also lets a range be checked
against the file it came from: a server reporting a different total part
way through has given us a different file, and one answering a Range
request with the whole file has given us a response starting somewhere
other than where we asked.

Supporting changes:

  - grabtest serves byte ranges, Content-Range and validators, records
    the ranges it served, and rejects the forms grab never sends
  - benchmarks for what a transfer costs and what tuning it is worth,
    split into `make bench` for regressions and `make bench-network` for
    the shape of the trade-offs
  - the default client is built on http.DefaultTransport, which it was
    not before, so it now has connection, TLS handshake and idle
    timeouts at all; MaxIdleConnsPerHost is raised since a split
    transfer makes many requests to one host
  - cmd/grab gains -range-size, -concurrency, -http1, -o and -batch, and
    reports each file's rate and negotiated protocol
  - docs/ describes the architecture and its invariants, how to reason
    about range size and concurrency, and how to test and benchmark,
    with the numbers measured against real mirrors from two clients

Based on the design and prototype in #102, which implemented this as a
fixed count of chunks rather than a fixed chunk size, and which had no
way to resume a transfer it interrupted.

refs #86

Co-authored-by: Justin Israel <justinisrael@gmail.com>
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
cavaliercoder added a commit that referenced this pull request Aug 20, 2026
Adds Request.RangeSize and Request.Concurrency. Setting RangeSize splits
a download into ranges of that size, fetched with separate Range
requests; Concurrency bounds how many are in flight.

There is one transfer implementation rather than two. A download that is
not split is the single range covering whatever remains, and a fresh
download of a file of unknown length is that range requested with no
Range header at all - byte for byte the request grab has always made.
The tests pin those headers, because building every transfer out of
ranges must not change what an unsplit one puts on the wire.

Ranges are dispatched in ascending order so the destination fills from
the front, and each is written at its offset with WriteAt. The
destination is therefore never opened O_APPEND, which on some systems
forces every write to the end of the file whatever offset it was given.
Request.NoStore writes to an in-memory WriterAt so it takes the same
path as everything else.

A split transfer writes its progress to a checkpoint file beside the
destination, so an interrupted one resumes without refetching. The
record carries the URL, size, range size and the remote file's
validators, and is discarded unless they all still match - a stronger
guarantee than an unsplit resume can make, since that has no choice but
to assume the remote file is unchanged. Workers report partial progress
as they write, so what an interruption costs is bounded by the
checkpoint interval rather than by RangeSize. The destination is flushed
before the checkpoint naming it is renamed into place, so a checkpoint
can never claim data the filesystem has not committed.

The size of the remote file is read from Content-Range where the server
offers it rather than inferred, which also lets a range be checked
against the file it came from: a server reporting a different total part
way through has given us a different file, and one answering a Range
request with the whole file has given us a response starting somewhere
other than where we asked.

Supporting changes:

  - grabtest serves byte ranges, Content-Range and validators, records
    the ranges it served, and rejects the forms grab never sends
  - benchmarks for what a transfer costs and what tuning it is worth,
    split into `make bench` for regressions and `make bench-network` for
    the shape of the trade-offs
  - the default client is built on http.DefaultTransport, which it was
    not before, so it now has connection, TLS handshake and idle
    timeouts at all; MaxIdleConnsPerHost is raised since a split
    transfer makes many requests to one host
  - cmd/grab gains -range-size, -concurrency, -http1, -o and -batch, and
    reports each file's rate and negotiated protocol
  - docs/ describes the architecture and its invariants, how to reason
    about range size and concurrency, and how to test and benchmark,
    with the numbers measured against real mirrors from two clients

Based on the design and prototype in #102, which implemented this as a
fixed count of chunks rather than a fixed chunk size, and which had no
way to resume a transfer it interrupted.

refs #86

Co-authored-by: Justin Israel <justinisrael@gmail.com>
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
cavaliercoder added a commit that referenced this pull request Aug 20, 2026
Adds Request.RangeSize and Request.Concurrency. Setting RangeSize splits
a download into ranges of that size, fetched with separate Range
requests; Concurrency bounds how many are in flight.

There is one transfer implementation rather than two. A download that is
not split is the single range covering whatever remains, and a fresh
download of a file of unknown length is that range requested with no
Range header at all - byte for byte the request grab has always made.
The tests pin those headers, because building every transfer out of
ranges must not change what an unsplit one puts on the wire.

Ranges are dispatched in ascending order so the destination fills from
the front, and each is written at its offset with WriteAt. The
destination is therefore never opened O_APPEND, which on some systems
forces every write to the end of the file whatever offset it was given.
Request.NoStore writes to an in-memory WriterAt so it takes the same
path as everything else.

A split transfer writes its progress to a checkpoint file beside the
destination, so an interrupted one resumes without refetching. The
record carries the URL, size, range size and the remote file's
validators, and is discarded unless they all still match - a stronger
guarantee than an unsplit resume can make, since that has no choice but
to assume the remote file is unchanged. Workers report partial progress
as they write, so what an interruption costs is bounded by the
checkpoint interval rather than by RangeSize. The destination is flushed
before the checkpoint naming it is renamed into place, so a checkpoint
can never claim data the filesystem has not committed.

The size of the remote file is read from Content-Range where the server
offers it rather than inferred, which also lets a range be checked
against the file it came from: a server reporting a different total part
way through has given us a different file, and one answering a Range
request with the whole file has given us a response starting somewhere
other than where we asked.

Supporting changes:

  - grabtest serves byte ranges, Content-Range and validators, records
    the ranges it served, and rejects the forms grab never sends
  - benchmarks for what a transfer costs and what tuning it is worth,
    split into `make bench` for regressions and `make bench-network` for
    the shape of the trade-offs
  - the default client is built on http.DefaultTransport, which it was
    not before, so it now has connection, TLS handshake and idle
    timeouts at all; MaxIdleConnsPerHost is raised since a split
    transfer makes many requests to one host
  - cmd/grab gains -range-size, -concurrency, -http1, -o and -batch, and
    reports each file's rate and negotiated protocol
  - docs/ describes the architecture and its invariants, how to reason
    about range size and concurrency, and how to test and benchmark,
    with the numbers measured against real mirrors from two clients

Based on the design and prototype in #102, which implemented this as a
fixed count of chunks rather than a fixed chunk size, and which had no
way to resume a transfer it interrupted.

refs #86

Co-authored-by: Justin Israel <justinisrael@gmail.com>
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
cavaliercoder added a commit that referenced this pull request Aug 23, 2026
Adds Request.RangeSize and Request.Concurrency. Setting RangeSize splits
a download into ranges of that size, fetched with separate Range
requests; Concurrency bounds how many are in flight.

There is one transfer implementation rather than two. A download that is
not split is the single range covering whatever remains, and a fresh
download of a file of unknown length is that range requested with no
Range header at all - byte for byte the request grab has always made.
The tests pin those headers, because building every transfer out of
ranges must not change what an unsplit one puts on the wire.

Ranges are dispatched in ascending order so the destination fills from
the front, and each is written at its offset with WriteAt. The
destination is therefore never opened O_APPEND, which on some systems
forces every write to the end of the file whatever offset it was given.
Request.NoStore writes to an in-memory WriterAt so it takes the same
path as everything else.

A split transfer writes its progress to a checkpoint file beside the
destination, so an interrupted one resumes without refetching. The
record carries the URL, size, range size and the remote file's
validators, and is discarded unless they all still match - a stronger
guarantee than an unsplit resume can make, since that has no choice but
to assume the remote file is unchanged. Workers report partial progress
as they write, so what an interruption costs is bounded by the
checkpoint interval rather than by RangeSize. The destination is flushed
before the checkpoint naming it is renamed into place, so a checkpoint
can never claim data the filesystem has not committed.

The size of the remote file is read from Content-Range where the server
offers it rather than inferred, which also lets a range be checked
against the file it came from: a server reporting a different total part
way through has given us a different file, and one answering a Range
request with the whole file has given us a response starting somewhere
other than where we asked.

Supporting changes:

  - grabtest serves byte ranges, Content-Range and validators, records
    the ranges it served, and rejects the forms grab never sends
  - benchmarks for what a transfer costs and what tuning it is worth,
    split into `make bench` for regressions and `make bench-network` for
    the shape of the trade-offs
  - the default client is built on http.DefaultTransport, which it was
    not before, so it now has connection, TLS handshake and idle
    timeouts at all; MaxIdleConnsPerHost is raised since a split
    transfer makes many requests to one host
  - cmd/grab gains -range-size, -concurrency, -http1, -o and -batch, and
    reports each file's rate and negotiated protocol
  - docs/ describes the architecture and its invariants, how to reason
    about range size and concurrency, and how to test and benchmark,
    with the numbers measured against real mirrors from two clients

Based on the design and prototype in #102, which implemented this as a
fixed count of chunks rather than a fixed chunk size, and which had no
way to resume a transfer it interrupted.

refs #86

Co-authored-by: Justin Israel <justinisrael@gmail.com>
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
cavaliercoder added a commit that referenced this pull request Aug 23, 2026
RangeSize and Concurrency both have guards for values that make no
sense - a Concurrency below one runs a single worker, and a RangeSize
that is zero, negative or no smaller than the file leaves the transfer
unsplit - but nothing held them in place.

Cover them, adapting the negative chunk count from #102. Its separate
RangeRequestMinSize has no equivalent here and needs none: RangeSize is
itself the floor, as a file no larger than one range is never split.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants