On 08/07/13 10:04, Lars Marowsky-Bree wrote:
On 2013-07-08T09:57:38, Digimer <li...@alteeve.ca> wrote:
Building a shared storage cluster without fencing is asking for heart-ache.
There is no case, quorum or not, where it is ok to skip fencing. If a node
locks up mid-write and the other node simply assumes it's dead, cleans up
and goes on using storage without coordinating with the peer, and then the
peer recovers and continues writing, you've just corrupted your data.
Please use fencing.
While in general I agree, the above failure case is not likely with
DRBD.
Regards,
Lars
It was one example. You are right though, the "good" node would
disconnect, so the result would be a split-brain. Still a poor outcome
easily avoided with fencing.
--
Digimer
Papers and Projects: https://alteeve.ca/w/
What if the cure for cancer is trapped in the mind of a person without
access to education?
_______________________________________________
Pacemaker mailing list: Pacemaker@oss.clusterlabs.org
http://oss.clusterlabs.org/mailman/listinfo/pacemaker
Project Home: http://www.clusterlabs.org
Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf
Bugs: http://bugs.clusterlabs.org
