Grove is a concurrent separation logic library for verifying distributed systems. Grove is the first to handle time-based leases, including their interaction with reconfiguration, crash recovery, thread-level concurrency, and unreliable networks. This paper uses Grove to verify several distributed system components written in Go, including GroveKV, a realistic distributed multi-threaded key-value store. GroveKV supports reconfiguration, primary/backup replication, and crash recovery, and uses leases to execute read-only requests on any replica. GroveKV achieves high performance (67-73% of Redis on a single core), scales with more cores and more backup replicas (achieving about 2x the throughput when going from 1 to 3 servers), and can safely execute reads while reconfiguring.
@article{arxiv.2309.03046,
title = {Grove: a Separation-Logic Library for Verifying Distributed Systems (Extended Version)},
author = {Upamanyu Sharma and Ralf Jung and Joseph Tassarotti and M. Frans Kaashoek and Nickolai Zeldovich},
journal= {arXiv preprint arXiv:2309.03046},
year = {2023}
}