Thanks Hartmut,

It took me a couple of minutes to actually read about split brain clusters and 
I've edited my initial post a bit :-)

Anyway, how about define inactive node in active/passive cluster instead as 
node without any resource groups running and introduce some kind of check for 
resource groups before nodes starting eliminating each other. I.e. if I'm not 
running anything I'm inactive and can wait for second or two before deleting 
active node key and actually deliberately let active node win in nodes shoot 
out. 

I'm not sure if timestamps are saved in quorum database but if they are the 
simple check if primary node of split-brain cluster was reachable from quorum 
server after standby node was not able to connect to it can give standby node 
idea that primary node is not so dead and might be able to continue work. In 
real life situation node which under load has no chance to win in this race 
with node which is just sitting and doing nothing. But I'm pretty sure I'm 
missing something important here.

Regards,
Sergei
-- 
This message posted from opensolaris.org

Reply via email to