> So an error is raised and logged, but with the cache being cleared so that
> on the second try it reconnects?  My rational for this change is that If
> your doing a hot failover that means that a) something bad has happened to
> main server and the recovery of those transactions probably won't happen any
> way or b) it happened during a maintenance window/the failover is happening
> for convenience and any difference between the two servers are probably
> minor, such as session data.  With b. the server admin would be in the
> position to restore the main server anyways.

Sounds reasonable.  Does the "drop rather than verify" feature get verified when
connecting to a new replica? Should it?

Alan Runyan

Skype/Twitter:: runyaga
Office:: 713.942.2377 ext 111
http://ploud.com/  Plone site in less than 10 seconds
For more information about ZODB, see http://zodb.org/

ZODB-Dev mailing list  -  ZODB-Dev@zope.org

Reply via email to