When You Don't Trust Clients: A Hybrid Paxos

In this talk, I will derive a version of the well-known Paxos protocol for a hybrid failure model.In this model, clients can be arbitrarily faulty and servers are crash faulty. This model is suited for environments where the servers run within one administrative domain and the clients are not in this domain. The protocol provides low latency for client requests, tolerates any number of (arbitrarily) faulty clients, and up to 1/3 (crash) faulty servers. It does not rely on signatures in the common case.