hangc0276 commented on pull request #13316: URL: https://github.com/apache/pulsar/pull/13316#issuecomment-996394629
> As you mentioned, we use geo-replication to support cluster failover, that means there might be have more than two cluster. In the implementation, we only can configure two clusters for the failover. I am thinking of, do we need to support more clusters to failover to make the cluster is more robust? @zymap if we have multi secondary clusters, different clients will switch to different secondary clusters. There are some problems. 1. In geo-replication case, it depends on geo-replication to ensure data integrity. It can't ensure message order in one topic. If all the producer just produce to the same cluster, we can ensure message order in one topic. 2. If the user doesn't enable geo-replication, we can't ensure the consumer get the whole messages from the topic. Because the producer may switched to cluster B, and the consumer may switched to cluster C. So, in current implementation, we can support only one secondary cluster first. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
