Distributed process groups, registry, lifecycle monitoring, and isolated subclusters.
This module provides:
- Distributed registry: Unique key => process mapping across all nodes
- Process groups: Allow processes to join/leave keys (many processes per key)
- Isolated subclusters: Partition groups and registries into named subclusters for isolated messaging
- Lifecycle monitoring: Monitor lifecycle events for registry and group changes
Consistency Model
All operations are eventually consistent. Erlang distribution remains the membership/control plane; replica state uses a configurable nonblocking transport with sequenced anti-entropy streams. This means:
- Writes (register, join, etc.) return immediately after local update
- Other nodes receive updates asynchronously over the replica transport
- During network partitions, nodes may have divergent views
- When connectivity heals, stream gaps are repaired from a bounded oplog or an exact per-origin snapshot; dropped replica sends are therefore safe
- Registry conflicts resolve deterministically. Each losing origin records an
authoritative delete and terminates only its own local process with
{:group_registry_conflict, key, winner_meta}
Clusters
By default, all operations use the default cluster (nil). You can
optionally create isolated subclusters where only connected nodes receive events.
Named clusters use string names (e.g., "game_servers").
connect/3 supports ttl: milliseconds for named clusters. This is useful
when a node only needs a cluster while it has local interest in that cluster.
The initial connect still does the normal ETS-first membership check, so
repeated connect/3 calls while already connected stay a cheap noop and do
not refresh the TTL. When a lease expires, Group only disconnects if the
local node has no cluster-scoped monitors, no local registrations, and no
local group memberships in that named cluster.
Core Concepts
Monitoring vs Memberships
Monitoring (
monitor/2,demonitor/2): Receive events in your mailbox when processes register/join matching keys anywhere in the cluster. Supports pattern matching on keys.Memberships (
join/3,leave/2): Make your process discoverable cluster-wide viamembers/2. Triggers:joined/:leftevents to monitors.
These are independent - joining a key does NOT automatically monitor events,
and monitoring does NOT make you discoverable via members/2.
Event Types
Events are delivered as {:group, events, info} tuples:
{:group, [
%Group.Event{
type: event_type,
supervisor: name,
cluster: cluster_name, # nil for default cluster
key: key,
pid: pid,
meta: meta, # optionally transformed by extract_meta
previous_meta: ..., # nil for new, old meta for re-register/re-join
reason: ... # set on :unregistered/:left events
}
], %{name: name}}| Event | Trigger | Extra Fields |
|---|---|---|
:registered | register/3 (new or re-register) | :previous_meta |
:unregistered | Process unregistered or died | :reason |
:joined | join/3 (new or re-join) | :previous_meta |
:left | Process left group or died | :reason |
:previous_meta is nil for new registrations/joins, or the old
metadata map when re-registering/re-joining.
Registrations and memberships are automatically removed when their owning process exits, so these events can track process lifecycles.
Pattern Types
Monitors support three pattern types:
"user/123"- Exact match, only events for this specific key"user/"- Prefix match, all keys starting with "user/":all- All events for this supervisor
Self-Events
A process that monitors a pattern and then joins a matching key will receive
its own :joined event. Similarly for :left when leaving. Filter these in your
handler if needed:
def handle_info({:group, events, _info}, state) do
Enum.each(events, fn
%Group.Event{type: :joined, pid: pid} when pid != self() ->
# Handle other processes' join events
:ok
_ -> :ok
end)
{:noreply, state}
endExamples
Basic Monitoring
# Monitor all events for a specific key
:ok = Group.monitor(MySup, "user/123")
# Monitor all keys under a prefix
:ok = Group.monitor(MySup, "chat/")
# Monitor all events
:ok = Group.monitor(MySup, :all)
# Handle events in a GenServer
def handle_info({:group, events, _info}, state) do
Enum.each(events, fn
%Group.Event{type: :registered, key: key} ->
IO.puts("Process registered: #{key}")
%Group.Event{type: :unregistered, key: key, reason: reason} ->
IO.puts("Process unregistered: #{key}, reason: #{inspect(reason)}")
_ -> :ok
end)
{:noreply, state}
endJoining as a Member
# Join a key to be discoverable by other processes
:ok = Group.join(MySup, "game/room/42", %{role: :spectator})
# Query all members of a key (joined processes only)
members = Group.members(MySup, "game/room/42")
# => [{#PID<0.200.0>, %{role: :spectator}}]
# Leave when done
:ok = Group.leave(MySup, "game/room/42")Using Named Clusters
# Connect this node to a named cluster
:ok = Group.connect(MySup, "game_servers")
# Or lease it while this node still has local interest
:ok = Group.connect(MySup, "game_servers", ttl: 30_000)
# Join a group in the named cluster
:ok = Group.join(MySup, "room/123", %{role: :member}, cluster: "game_servers")
# Monitor events in the named cluster
:ok = Group.monitor(MySup, :all, cluster: "game_servers")
# Members and dispatch also support cluster option
Group.members(MySup, "room/123", cluster: "game_servers")
Group.dispatch(MySup, "room/123", {:msg, "hi"}, cluster: "game_servers")Architecture Notes
Events are cluster-wide: Replicated operations fire lifecycle events on all participating nodes. A monitor on Node A receives events when a process registers on Node B.
Monitors are stored per-node in an Elixir
Registry, enabling pattern matching and automatic cleanup when monitoring processes die.Memberships are stored in replicated, sharded ETS indexes and are automatically cleaned up when member processes die.
Process ownership is local: a shard monitors and exits only processes owned by its own node. Remote lifecycle changes arrive as sequenced replica records or are removed by
nodedown/peer-lease expiry.Replica recovery is bounded and leaderless: per-origin sequence gaps use retained deltas and then exact origin-slice snapshots after oplog pruning. Persisted generation/revision hints fence every lane across authority races; only an exact dist-Erlang hello can reintroduce a fully retired peer.
Summary
Functions
Returns a child spec for starting Group under a supervisor.
Connect the local node to a named cluster.
Check if the local node is connected to a named cluster.
Stop monitoring lifecycle events for the given pattern.
Disconnect the local node from one or more named clusters.
Dispatch a message to all members of a key.
Like dispatch/4, but only sends to members on the local node.
Join a group as a member.
Leave a group that was previously joined.
List all entries owned by the local node across all shards.
Count processes in a group on the local node.
List process-group members owned by the local node.
Count processes registered in the local node's registry.
Set the log level at runtime. Accepts :info, :verbose, or false.
Look up a registered process by key.
Count group members in this node's local replicated ETS view.
List all members of a group (process group entries only).
Monitor lifecycle events matching the given pattern.
Monitors the process that owns the local Group membership generation.
List all nodes running this Group instance.
List all nodes in a named cluster.
Register the calling process in the cluster registry.
Count processes registered in this node's local replicated ETS view.
Unregister a process from the cluster registry.
Functions
Returns a child spec for starting Group under a supervisor.
Options
:name(required) — atom identifying this Group instance:shards— number of GenServer shards (default: 8). Must match across all nodes:log— logging level.:info(default) logs peer discovery, node events, and cluster membership changes.:verboseadditionally logs per-shard replication messages.falsedisables routine info/verbose logs; registry conflicts and busy distribution links still emit error/warning logs.:resolve_registry_conflict—{module, function, extra_args}callback invoked when multiple origins hold the same registry key after partition healing or concurrent registration. Called once per claim asapply(module, function, [name, key, {pid, meta, time} | extra_args])and must return a deterministic Erlang term used as that claim's rank. Group chooses the maximum{rank, pid}so every node obtains the same winner regardless of claim arrival or grouping. It records an authoritative delete and terminates a losing process only on its owner node. Important: This callback runs synchronously inside the shard GenServer — it must return quickly and never block. Any information needed for the decision should be carried in the registration metadata, not fetched at resolution time.:extract_meta—{module, function, args}or a one-argument function to transform metadata on reads and lifecycle events:replicated_pg_receiver_buffer_size— max buffered replicated PG join/leave ops per shard before the receiver flushes immediately (default:64):replicated_pg_receiver_flush_interval— max time in milliseconds a shard will buffer replicated PG join/leave ops before flushing (default:5):replicated_registry_receiver_buffer_size— max buffered replicated registry register/unregister ops per shard before the receiver flushes immediately (default:64):replicated_registry_receiver_flush_interval— max time in milliseconds a shard will buffer replicated register/unregister ops before flushing (default:5):replicated_sender_buffer_size— max buffered replicated outbound ops per shard before the sender flushes immediately (default:64):replicated_sender_flush_interval— max time in milliseconds a shard will buffer replicated outbound ops before flushing during idle periods. Sender buffers also flush on size, overdue enqueue, and control/routing barriers (default:5):busy_dist_retry_attempts— max reconnect attempts after a remoteGroup.dispatch/4send reports a busy dist link and forces a disconnect (default:300):busy_dist_retry_interval— interval in milliseconds between dispatch busy-link reconnect attempts (default:1_000):replicated_pg_receiver_local_request_quota— legacy-named quota for queued local shard requests drained in each fairness turn, including while replica data or cluster controls are busy (default:8):replica_transport— replica data transport module or{module, opts}tuple. Defaults toGroup.Transport.DistErl. The transport must be nonblocking and may return:busy; anti-entropy repairs dropped messages. Sideband transports can useGroup.Transport.Outboxfor lossy, batched, per-shard isolation without adding a hop to the default transport.:replicated_oplog_max_entries— maximum retained replica records per shard before old prefixes are pruned and lagging peers require a snapshot (default:65_536):replicated_snapshot_chunk_target_bytes— target maximum encoded size of each transport-neutral exact-snapshot chunk (default:1_048_576). A single registry or membership row larger than the target remains one chunk; a separate small terminal manifest commits the complete candidate.:replicated_anti_entropy_interval— milliseconds between repeated stream head advertisements (default:1_000):replicated_peer_lease_timeout— milliseconds without a dist-Erlang replica heartbeat before remote Group state is purged (default:15_000). Must be greater than:replicated_anti_entropy_interval. Discovery probes an expired peer so a restarted Group can recover automatically.
Connect the local node to a named cluster.
This adds the current node to the cluster, allowing it to send and receive process group events within that cluster.
Parameters
name- The Group namecluster_name- The name of the cluster to connect to (binary string)opts- Keyword list of options
Options
:timeout- timeout passed to the shard request (default:60_000):ttl- for named clusters, keep the local connection leased for this many milliseconds. The lease is only created on a new connect; repeatedconnect/3calls while already connected stay a cheap noop and do not refresh the TTL. Expired leases only disconnect if the local node has no cluster-scoped monitors, no local registrations, and no local group memberships in that cluster.
Returns
:okon success
Check if the local node is connected to a named cluster.
Parameters
name- The Group namecluster_name- The name of the cluster to check (binary string)
Returns
trueif connectedfalseif not connected
Stop monitoring lifecycle events for the given pattern.
Options
:cluster- The cluster to demonitor from (default: nil for default cluster)
Returns
:okalways (demonitoring a non-existent monitor is a no-op)
Disconnect the local node from one or more named clusters.
Accepts a single cluster name (binary) or a list of cluster names.
Parameters
name- The Group namecluster_name- The cluster name or list of cluster names to disconnect fromopts- Keyword list of options
Options
:timeout- timeout passed to the shard request (default:60_000)
Dispatch a message to all members of a key.
Sends message to all processes that have joined the key via join/3, as well as
the process registered at that key, if present.
Dispatch vs Monitor
There are two ways to receive messages in this module:
monitor/2- Receive lifecycle events (:registered,:unregistered, etc.) when processes register/join/leave keys matching a pattern. These are system-generated events.dispatch/3- Receive application messages sent explicitly by your code. The registered process and joined members of the exact key receive the message.
Use monitor to react to lifecycle changes. Use dispatch to send your own
messages to members.
Filtering by Metadata
dispatch/3 sends to all members. If you need to filter by metadata (e.g., only
send to members with %{type: :channel}), use members/2 directly:
for {pid, %{type: :channel}} <- Group.members(sup, key) do
send(pid, message)
endOptions
:cluster- Dispatch to a named cluster instead of the default cluster
Returns
:okalways
Like dispatch/4, but only sends to members on the local node.
Skips all cross-node messaging. Useful when you know remote nodes will handle their own local dispatch (e.g., a broadcast originating on each node).
Options
:cluster- Dispatch to a named cluster instead of the default cluster
Returns
:okalways
Join a group as a member.
The process will:
- Be discoverable via
members/2 - Be automatically removed when it dies
Re-joining an already-joined group updates the metadata in place.
Note: Joining does NOT automatically monitor events.
Call monitor/2 separately if you want to receive events.
Parameters
name- The Group namegroup- The group to join (string)meta- Metadata map (default:%{})opts- Keyword list of options
Options
:cluster- Join a named cluster instead of the default cluster:timeout- timeout passed to the shard request (default:5_000)
Returns
:okon success{:error, reason}on failure
Leave a group that was previously joined.
Parameters
name- The Group namegroup- The group to leave (string)opts- Keyword list of options
Options
:cluster- Leave from a named cluster instead of the default cluster:timeout- timeout passed to the shard request (default:5_000)
Returns
:okon success{:error, :not_in_group}if not a member
List all entries owned by the local node across all shards.
Returns a flat tagged list containing both registry and process-group entries:
{:registry, cluster, key, pid, meta}
{:pg, cluster, key, pid, meta}This includes only entries whose owner node is the local node, not the full
replicated cluster view. Metadata is passed through the configured
extract_meta callback, if any.
Parameters
name- The Group name
Returns
List of
{:registry | :pg, cluster, key, pid, meta}tuples
Count processes in a group on the local node.
Supports prefix matching: if group ends with "/", counts all local
members whose group key starts with that prefix.
Exact counts perform one ETS lookup in the key's owning shard. Prefix counts perform one ETS lookup per configured shard; neither path scans resident memberships.
Parameters
name- The Group namegroup- The group to count (string). Append"/"for prefix matching.opts- Keyword list of options
Options
:cluster- Count in a named cluster instead of the default cluster
Returns
- Integer count
List process-group members owned by the local node.
Unlike members/3, this excludes replicated memberships owned by remote
nodes. Registry entries are not included.
Supports prefix matching: if group ends with "/", returns local members
whose group key starts with that prefix. Prefix queries scan all shards. Exact
queries hit a single shard.
Options
:cluster- Query a named cluster instead of the default cluster:extract_meta- Override the configured extract_meta callback for this call:limit- Return at most this many members. Must be a non-negative integer.
Returns
- List of
{pid, meta}tuples
Count processes registered in the local node's registry.
This counts only processes registered via register/4 on the local node.
Parameters
name- The Group nameopts- Keyword list of options
Options
:cluster- Count in a named cluster instead of the default cluster
Returns
- Integer count
Set the log level at runtime. Accepts :info, :verbose, or false.
Updates the persistent_term config so the change takes effect immediately on all shards without restart.
This calls :persistent_term.put/2, so treat it as an admin operation,
not something to invoke in a hot loop.
Look up a registered process by key.
Returns the pid and metadata for the process registered at the given key,
or nil if no process is registered.
Parameters
name- The Group namekey- The key to look upopts- Keyword list of options
Options
:cluster- Look up in a named cluster instead of the default cluster:extract_meta- Override the configured extract_meta callback for this call
Returns
{pid, meta}if a process is registered at the keynilif no process is registered
Count group members in this node's local replicated ETS view.
This returns the caller node's current view of process group membership. It is eventually consistent across nodes and may differ briefly during propagation, partitions, or healing.
Supports prefix matching: if group ends with "/", counts all
members whose group key starts with that prefix.
Exact counts perform one ETS lookup in the key's owning shard. Prefix counts perform one ETS lookup per configured shard; neither path scans resident memberships.
Parameters
name- The Group namegroup- The group to count (string). Append"/"for prefix matching.opts- Keyword list of options
Options
:cluster- Count in a named cluster instead of the default cluster
Returns
- Integer count
List all members of a group (process group entries only).
Returns processes that have joined via join/3. Registry entries
(via register/3) are not included — use lookup/3 for those.
Supports prefix matching: if group ends with "/", returns all
members whose group key starts with that prefix. Prefix queries scan
all shards. Exact queries hit a single shard.
Parameters
name- The Group namegroup- The group to query (string). Append"/"for prefix matching.opts- Keyword list of options
Options
:cluster- Query a named cluster instead of the default cluster:extract_meta- Override the configured extract_meta callback for this call:limit- Return at most this many members. Must be a non-negative integer.
Returns
- List of
{pid, meta}tuples
Monitor lifecycle events matching the given pattern.
The calling process will receive {:group, events, info} tuples containing matching events:
{:group, [%Group.Event{type: :registered, ...}], %{name: name}}Patterns
"exact/key"- exact key match"prefix/"- all keys starting with "prefix/":all- all keys
Options
:cluster- Monitor events from a named cluster (default: nil for default cluster)
Returns
:okon success{:error, reason}on failure
Monitors the process that owns the local Group membership generation.
All local registry and process-group entries are stored in ETS tables owned by this process. If it exits, those entries no longer exist even when their owner processes remain alive. Long-lived owners can use this monitor to terminate and re-register against the next Group generation.
A generation that exits between lookup and monitor creation still produces
the normal immediate :DOWN message for the returned monitor reference.
Returns {:ok, pid, monitor_ref} or {:error, :not_running}.
List all nodes running this Group instance.
Returns nodes that have completed the peer discovery handshake, excluding
the local node. Unlike Node.list(), this only includes nodes actually
running this Group instance, not all connected Erlang nodes.
Parameters
name- The Group name
Returns
- List of node atoms
List all nodes in a named cluster.
Parameters
name- The Group namecluster_name- The cluster name (binary string)
Returns
- List of node atoms
Register the calling process in the cluster registry.
This registers a process with a unique key in the cluster. Only one process can be registered with a given key at a time (cluster-wide uniqueness).
Use register/4 when you need exactly one process per key. Use join/4
when multiple processes should be able to share the same key.
Parameters
name- The Group namekey- The unique key to register undermeta- Metadata map to associate with the registrationopts- Keyword list of options
Options
:cluster- Register in a named cluster instead of the default cluster:timeout- timeout passed to the shard request (default:5_000)
Returns
:okon success{:error, :taken}if another process is already registered with this key
Count processes registered in this node's local replicated ETS view.
This returns the caller node's current view of the cluster registry. It is eventually consistent across nodes and may differ briefly during propagation, partitions, or healing.
Parameters
name- The Group nameopts- Keyword list of options
Options
:cluster- Count in a named cluster instead of the default cluster
Returns
- Integer count
Unregister a process from the cluster registry.
This removes a process registration. Typically not needed as registrations are automatically cleaned up when the process dies.
Parameters
name- The Group namekey- The key to unregisteropts- Keyword list of options
Options
:cluster- Unregister from a named cluster instead of the default cluster:timeout- timeout passed to the shard request (default:5_000)
Returns
:okon success{:error, reason}on failure