Using TLA+ to Specify Leader Election of Raft Algorithm with Consideration of Leadership Transfer in Multiple Controllers | IEEE Conference Publication | IEEE Xplore