Today Mojo embedders get one chance to establish a connection to the set of interconnected processes, and they have no way of re-connecting to anything if that broker connection gets severed.

Motivations behind that decision are:

 - if the broker dies, connections between client processes may end up
   in an inconsistent state on some platforms, because the broker may
   be brokering platform handles on behalf of an in-transit message

 - terminating all interprocess connections is necessary to efficiently
   compensate for the above issue, and this may be disruptive in some cases

 - the service manager currently has no way to authoritatively identify
   already-running processes, so it can't trust them to be who they say they
   are after a service manager restart

Upon further reflection I don't think any of these things are show-stoppers, and I think we try to solve the last point in particular (see bug 813111).

Given all that, we should make the following changes:

 - On broker connection loss, sever *all* message pipes with remote peers,
   sever *all* remote peer connections, and forget all remote peer identities

 - Allow a broker client to accept a new broker client invitation if its
   previous broker connection has been lost

 

Today Mojo embedders get one chance to establish a connection to the set of interconnected processes, and they have no way of re-connecting to anything if that broker connection gets severed.

Motivations behind that decision are:

 - if the broker dies, connections between client processes may end up
   in an inconsistent state on some platforms, because the broker may
   be brokering platform handles on behalf of an in-transit message

 - terminating all interprocess connections is necessary to efficiently
   compensate for the above issue, and this may be disruptive in some cases

I don't think this sufficiently bad to warrant the status quo. We should make the following changes:

 - On broker connection loss, sever *all* message pipes with remote peers,
   sever *all* remote peer connections, and forget all remote peer identities

 - Allow a broker client to accept a new broker client invitation if its
   previous broker connection has been lost