Consensus: Raft and Paxos
How a group of machines agrees on one order of operations even when some crash or messages are delayed, and why a majority is the magic number.
On the roadmap:Advanced · step 2: Consistency models
Lesson 1 of 10 · 12 min read · quiz · exercise
The problem consensus solves
Several machines must agree on one sequence of operations (who is the leader, what is the next log entry, who owns a lock) even though machines crash and messages are delayed or lost. Without a protocol, replicas drift apart and two nodes may both believe they are the leader.
Systems that rely on consensus include coordination services (etcd, ZooKeeper), many databases for their metadata or their data, and Kubernetes (through etcd).
Why a majority
A decision is valid when a majority (quorum) of nodes accepts it. Any two majorities share at least one node, so a later decision always meets someone who remembers the earlier one. A cluster of n nodes tolerates floor((n-1)/2) failures: 3 nodes tolerate 1, 5 nodes tolerate 2. That is why clusters have an odd number of nodes; a 4th node adds cost but no extra fault tolerance over 3.
Raft in three parts
Raft splits the problem so it can be understood:
Figure SDA-ADS-01-1 · Raft roles and elections · © forcsguy.com
- Leader election. Time is divided into numbered terms. A node that hears nothing becomes a candidate and requests votes. A node votes at most once per term, and only for a candidate whose log is at least as up to date as its own. Randomised timeouts make split votes rare.
- Log replication. The leader appends a client command to its log and sends it to followers. When a majority has stored the entry, it is committed; the leader applies it and replies to the client. Followers apply committed entries in order, so every replica runs the same sequence.
- Safety. The vote rule guarantees that any new leader already has every committed entry, so committed entries are never lost or reordered.
Figure SDA-ADS-01-2 · Replicating one write · © forcsguy.com
Paxos, briefly
Paxos reaches the same guarantee with two phases (prepare/promise, then accept/accepted) over a majority. It is famous for being hard to implement and explain, and for being the basis of many systems. Multi-Paxos repeats it for a log of decisions. Raft is essentially a clearer arrangement of the same ideas with a strong leader, which is why most new systems choose it.
What consensus costs and what it does not give
- Latency: every committed write waits for a majority round trip, so cross-region clusters are slow. Keep consensus groups within a region or use few, small groups for metadata.
- Throughput: one leader handles all writes in a group. Large databases run many small groups (one per data range) to spread load.
- Availability under partition: the minority side cannot make progress. This is the CAP trade-off made concrete: consensus systems are consistent first.
- It does not remove all problems: slow nodes, clock assumptions, and reconfiguration (adding or removing nodes safely) need care.
Where you will meet it
Leader election for databases and queues, distributed locks and configuration stores, metadata for storage systems, and cluster state in Kubernetes. When a design needs "exactly one leader" or "all replicas agree on this order", you are describing consensus. See also the distributed-locks lesson in the core-concepts course.
Real-world reading
Related reading
- In Search of an Understandable Consensus Algorithm (Raft paper)Ongaro and Ousterhout · Stanford UniversityPapers
- The Raft Consensus Algorithm (site and visualisation)Diego Ongaro and community · raft.github.ioDocumentation
- ZippyDB: Facebook's key-value storeMeta Engineering · MetaCase Studies
- How Ringpop from Uber Engineering Helps Distribute Your ApplicationUber Engineering · UberCase Studies
Show 6 moreShow fewer
- etcd Raft libraryetcd · CNCF / etcdGitHub
- Google SRE Book: Managing Critical State (Distributed Consensus)Google SRE team · GoogleBlogs
- Paxos Made Simple (paper)Leslie Lamport · Microsoft ResearchPapers
- HashiCorp RaftHashiCorp · GitHubGitHub
- Distributed Systems (4th edition)Maarten van Steen and Andrew Tanenbaum · distributed-systems.netBooks
- Scaling Hadoop YARN cluster beyond 10,000 nodes at LinkedInLinkedIn engineers · LinkedInCase Studies
Check your understanding
Question 1 of 3
0 correct so far
Why does consensus need a majority (quorum)?
Go deeper
- In Search of an Understandable Consensus Algorithm by Ongaro and Ousterhout: the Raft paper
- The Raft visualisation by Raft authors: an interactive animation of leader election and replication
Topics covered in this lesson
Practise it: The leader fails
Everything below is already set up for this lesson: change the design, run the traffic, and see whether you meet the goal.
- 1The task
- 2Build and test
At 10 seconds the primary dies. A new leader would be elected, but until then writes cannot be applied.
Goal: Under 5% errors during the failover.
During an election, what keeps answering reads and what holds writes?
Try it yourself
A 3-node Raft cluster loses the leader. Describe what happens until a client write succeeds again, and what happens if two nodes are cut off from the third.
Click what a strong design here would need:
More in Distributed systems
© 2026 forcsguy.com. Original lesson text and diagrams. Books and sites linked above belong to their authors.