[Pacemaker] DRBD and fencing

[Martin Aspeli]

Hi folks,

Let's say have a two-node cluster with DRBD and OCFS2, with a database 
server that's supposed to be active on one node at a time, using the 
OCFS2 partition for its data store.

If we detect a failure on the active node and fail the database over to 
the other node, we need to fence off the shared storage in case the 
active node is still writing to it.

Can this be done in such a way that the local DRBD/OCFS2 refuses to 
accept writes from the now-presumed-dead node? I guess this would be 
similar to putting an access rule on a SAN to block off the previously 
active node from attempting to read or write any data.

Is this feasible?

Martin