Thanks for organizing @Dejan_Pangercic, works for us very fine. Looking forward!
Thank you @vmayoral for these interesting links.
@vmayoral do you have a written down definition for what soft real-time and hard-real time are? At Apex.AI we have a very informal one for the latter:
In general a hard real-time system can be defined as follows: the entire system must be deterministic, and if a deadline or a data sample is missed the consequence is catastrophic.
@iluetkeb I was asked by a ROS 2 TSC to lead the ROS 2 RT WG. While I do currently work in autonomous driving and have an insight in this domain, my first priority in this role is to make sure that ROS 2 is a success. Hence I will also live with the less comprehensive approach if this is what the rest of you think is better to do.
@davecrawley it seems that here yours and Ingoās goal somewhat overlap.
@iluetkeb is it unclear if you are interested in this or do you need more clarification from my side?
@iluetkeb can you elaborate a bit more what SPA is?
@iluetkeb can you elaborate a bit more what system modes approach is?
@davecrawley the problem here is that if the sensor does not speak DDS (and hence we can not use DDSā data model flow) - then we are actually solving a use case specific approach (e.g. is this sensor connected over AVB Ethernet or CAN, which RTOS are we running, do we have a regular network stack or a TSN, ā¦). I am not opposed to jumping on this but lets first decide on whether we do use case specific or generic work.
Otherwise thanks for re-structuring this.
@iluetkeb I want to keep at 60mins.
@Dejan_Pangercic in our view, when speaking about hard-real time systems, missing a deadline implies a system failure (which often can lead to a catastrophic consequence, though not always necessarily). We discuss this topic at https://arxiv.org/pdf/1809.02595.pdf.
Summarized, our view is the following:
Real-time systems can be classified depending on how critical to meet the corresponding timing constraints. For hard real-time systems, missing a deadline is considered a system failure. Examples of real-time systems are anti-lock brakes or aircraft control systems. On the other hand, firm real-time systems are more relaxed. An information or computation delivered after a missing a deadline is considered invalid, but it does not necessarily lead to system failure. In this case, missing deadlines could degrade the performance of the system. In other words, the system can tolerate a certain amount of missed deadlines before failing. Examples of firm real-time systems include most professional and industrial robot control systems such as the control loops of collaborative robot arms, aerial robot autopilots or most mobile robots, including self-driving vehicles. Finally, in the case of soft real-time, missed deadlines -even if delivered late- remain useful. This implies that soft real-time systems do not necessarily fail due to missed deadlines, instead, they produce a degradation in the usefulness of the real-time task in execution. Examples of soft-real time systems are telepresence robots of any kind (audio, video, etc.).
Beyond this, thereās also a nice description of the differences between hard, firm and soft at Introduction to Real-time Systems
Hard real-time software systems have a set of strict deadlines, and missing a deadline is considered a system failure. Examples of hard real-time systems: airplane sensor and autopilot systems, spacecrafts and planetary rovers.
Soft real-time systems try to reach deadlines but do not fail if a deadline is missed. However, they may degrade their quality of service in such an event to improve responsiveness. Examples of soft real-time systems: audio and video delivery software for entertainment (lag is undesirable but not catastrophic).
Firm real-time systems treat information delivered/computations made after a deadline as invalid. Like soft real-time systems, they do not fail after a missed deadline, and they may degrade QoS if a deadline is missed (1). Examples of firm real-time systems: financial forecast systems, robotic assembly lines (2).
To me, it is unclear whether blocking calls are an issue currently. For micro-ROS, the main focus is on rmw and rcl, and they donāt have many of those, if any at all. Iāve seen some mutexes being used in rmw layers (e.g., FastRTPS), but since we are not using those implementations for real-time applications (right?), not sure whether they are relevant.
It is a staged execution approach, inspired by Fawkes sense-plan-act (-> SPA) pipeline. In practice there are more than just those three stages, but SPA is the basic motivation. Basically, we assign callbacks to stages, and then execute those stages sequentially.
This is supposed to be more easy to use than classical priority-based scheduling for the typical robotics guy who isnāt a scheduling expert (which include me ;-), and still provide deterministic ordering.
See slide 28 from https://micro-ros.github.io/download/2019-05-07_micro-ROS.pdf for an example.
Weāre currently writing this up in a bit more detail, but since it hasnāt been fully implemented, yet, things are subject to change.
See the concept description for the motivation and there is also a modes example.
Most importantly, the concept description makes a connection to error handling, which is the motivation for me mentioning it here.
@Dejan_Pangercic - can you post a new thread with meeting times? I had to search through 17 replies to find this and I would have missed it if you hadnāt mentioned it in the TSC. Iād like to attend and include @mjeronimo and @lbegani also. Is there a Google calendar invite we can be added to?
1 Like
OK so I like following target use cases:
- consumer robots (Ingo)
- warehouse logistics robots (David)
- mobile manipulation robots (Victor)
- autonomous driving robots/cars (Dejan, Geoff)
They are real and will keep us focused. The requirements of these use cases obviously differ, but there can be a lot of commonality in the hardware implementation. Iād propose that we agree a model HW architecture that can usefully span all those 4 domains.
All of these systems will basically consist of
a) Sensors
b) uC
- uC attached to sensors (I assume that this is always required for any sensor)
- uC attached elsewhere in the network (e.g for bridging one network type to another)
- uC attached to actuators
c) Networking infrastructure
d) Main host computer
e) Actuators
For real time system purposes we only really care about b,c,d. So Iād propose we agree what model HW weād work towards. Something like
b) uC : STM32 running Nuttx
c) 1)AVB Ethernet & 2) point to point serial line comms (could be any underlying physical layer - which physical layer is used is not relevant to real time)
d) 1) i86 & 2) ARM
Iād suggest that we target the elements that definitely span all 4 domains in the beginning namely b and c2. I respect @iluetkeb desire not to get in to d in the first instance. Weāll probably get more mileage by sorting out b and c2 first, but the way I see the world - eventually we are going to need real time in d even for relatively low cost applications like warehouse.
Not only the transport layer but everything above as well, from the data link layer (OSI layer 2) up to the ROS 2 rcl (OSI layer 7, and going through all middle layers including the network and transport layers (which we typically refer to as the networking stack), the communication middleware (e.g. DDS), etc.).
The network infrastructure is key. I picked AVB because it is widely used in automotive and widely available. Also in it most of the OSI layers are already real time capable. In particular you have to have bandwidth guarantees (possible in AVB and implied in any point to point protocol) without which I donāt see how we can make a RT system. If you have a sensor that transmits directly on to a broadcast network (e.g. plain vanilla ethernet) that doesnāt have its own individualized bandwidth allocation - I donāt see how you can make that system RT unless you can also guarantee that it is the only thing that is doing so on the parts of the network it is using.
I put serial in there, because well, you are always bound to have some kind of serial comms going on somewhere.
This doesnāt prevent us from expanding with other connectivity choices or uC later on - it just means that weāll design it with this stuff in mind and can provide a template to build hardware for eventual testing.
@davecrawley the problem here is that if the sensor does not speak DDS (and hence we can not use DDSā data model flow) - then we are actually solving a use case specific approach (e.g. is this sensor connected over AVB Ethernet or CAN, which RTOS are we running, do we have a regular network stack or a TSN, ā¦). I am not opposed to jumping on this but lets first decide on whether we do use case specific or generic work.
Sure! Whatever sensor you hook up will have to connect to a uC that speaks DDS and connects to our RT middleware fabric. Iād propose we create / define a standard setup for that uC but not really get in to the connection between the uC and the sensor. I think we have to assume that whatever the connection between the uC and the sensor it is deterministic. Most of the sensors I use hook directly in to a uC that I control anyways. It only gets messy when you want to connect a sensor that connects to a shared communications fabric out of the box and that sensor doesnāt speak DDS or respect determinism. For example, an ethernet LIDAR. But there is no way around it! Such a sensor will inject data with non deterministic timing in to a shared and finite communications fabric and as such cannot be deterministic as long as it commingles with other non-deterministic data while it does so. You have to put it in to our real time middleware layer before it comingles with any other non-real time data and so that either means re-programming whatever uC is on the sensor or using a bridge. That bridge will mostly have the same setup as the standard uC discussed above. So I think we just define/agree one standard uC setup.
AVB has the property that it can handle RT and non-RT data streams simultaneously. Obviously we have to figure out how our middleware is going to talk to it though and make sure that it allocates the right amount of bandwidth, for a sensor for example, to ensure the guaranteed quality of service.
1 Like
I would also like to join the meeting on Monday, and would like to propose an item for the agenda that is in particular related to 6.5 (real-time pub/sub).
We have recently investigated the current ROS 2 implementation from a real-time predictability angle. In particular, we have investigated the order in which callbacks are executed. As it turns out, the current implementation has a couple of very surprising properties that result from the interplay between the executor implementation in rclcpp and the rmw API. Overall, the rclcpp executor exhibits a behavior that is somewhere in the middle between FIFO, round robin on the topics, and fixed-priority scheduling. These properties make it very hard to understand and predict the execution order of callbacks, even if the arrival order at the DDS level is known perfectly.
The behavior is described in detail in Section 3 of our paper (which is available as a preprint) and can be experimentally verified using our model validation test.
I think it would be useful to discuss (a) how best to address this issue and (b) which behavior and which ordering guarantees ROS 2 should provide.
2 Likes
@nburek @traversaro @mosteo @davecrawley does this time work for you for our first meeting?
@mkhansen I will post a separate thread with the meeting invite.
2 Likes
This time works for me. 
@Dejan_Pangercic
Iād also like to join the meeting, really appreciate for taking care of this thread.
@iluetkeb
i really like the idea about SPA, since it is what robots(and human) usually do. actually i was thinking more like Sense(sometimes reflection immediately) -> Perception -> Plan -> Action.
@vmayoral
happy that you brought up Precision Time Protocol here, i think that this is mandatory when it comes to the robots orchestration and work together at the same time.
I am curious if any of you have ever used
Quantum Leapsā real-time embedded framework for programming real-time systems on embedded processors.
Mixing a real-time embedded framework with an RTOS and micro-ROS might be a nice way of implementing real-time components in a larger robotic system.
@traversaro, @vmayoral, since you mentioned the DDS/TSN mapping, I thought you may be interested in the open-source mini-demo showcasing it at GitHub - NXP/dds-tsn: Example project of DDS-TSN integration. Our demo is based on a larger case-study with Autoware.auto (ROS2), which we wanted to detail at ROSCon 2021 but didnāt get accepted. In general, real-time and reliable communication needs TSN for shared Ethernet links, which can be exercised with ROS2 already today.
8 Likes
This is awesome! Many thanks for sharing @andrei! Too bad it didnāt make it to ROSCon, Iām dissapointed.
This is the kind of thing that needs to be featured to show to the world that ROS 2 is industry-ready. Congratulations for your work @andrei. Ping @carlossv and @LanderU, this should at least bring a smile to you!
3 Likes