A recovery strategy restores a system or transaction from an illegal state to a legal, acceptable state after failure. It applies only where contingencies exist; intolerable states cannot be recovered from. section 3.1
A transaction recovery strategy typically:
- Examines persistent records after restart to find transactions that were not committed. section 5.3.5
- Applies Undo operations, which must be restartable and idempotent because crashes can interrupt or repeat them. section 5.3.5
- Uses the recorded transaction state to choose abort, commit inquiry, REDO, or UNDO after a participant failure. section 6.3.2
A participant recovers
After a distributed transaction participant restarts, a pre-vote failure leads to persistent abort; a recorded vote-to-commit requires asking the coordinator; a recorded commit requires REDO; a recorded abort requires UNDO. section 6.3.2
Figure 3.1 System states and state transitions
Use the state-transition diagram to trace how failures move a system from an illegal state toward a legal state. section 3.1


