On Fri, Aug 31, 2007 at 02:34:09PM +0200, Albe Laurenz wrote: > I have thought some more about it, and tend to agree now: > Checksums will only detect disk failure, and that's only > one of the many integrity problems that can happen. > And one that can be reduced to a reasonable degree with good > storage systems. > > So the benefit of checksums is not enough to bother.
Uhm... how often do we get people asking about corruption on -admin alone? 2-3x a month? ISTM it would be very valuable to those folks to be able to tell them if the corruption occurred between writing a page out and reading it back in. Even if we don't care about folks running on suspect hardware, having a CRC would make it far more reasonable to recommend full_page_writes=off. I never turn that off and recommend to folks that they don't turn it off because there's no way to know if it will or has corrupted data. BTW, a method that would buy additional protection would be to compute the CRC for a page every time you modify it in such a way that generates a WAL record, and record that CRC with the WAL record. That would protect from corruption that happened anytime after the page was modified, instead of just when smgr went to write it out. How useful that is I don't know... -- Decibel!, aka Jim Nasby [EMAIL PROTECTED] EnterpriseDB http://enterprisedb.com 512.569.9461 (cell)
pgpxszAG03fC9.pgp
Description: PGP signature
