[Pacemaker] Using "avoids" location constraint

Digimer lists at alteeve.ca
Mon Jul 8 14:13:50 UTC 2013


On 08/07/13 10:04, Lars Marowsky-Bree wrote:
> On 2013-07-08T09:57:38, Digimer <lists at alteeve.ca> wrote:
>
>> Building a shared storage cluster without fencing is asking for heart-ache.
>> There is no case, quorum or not, where it is ok to skip fencing. If a node
>> locks up mid-write and the other node simply assumes it's dead, cleans up
>> and goes on using storage without coordinating with the peer, and then the
>> peer recovers and continues writing, you've just corrupted your data.
>>
>> Please use fencing.
>
> While in general I agree, the above failure case is not likely with
> DRBD.
>
>
> Regards,
>      Lars

It was one example. You are right though, the "good" node would 
disconnect, so the result would be a split-brain. Still a poor outcome 
easily avoided with fencing.

-- 
Digimer
Papers and Projects: https://alteeve.ca/w/
What if the cure for cancer is trapped in the mind of a person without 
access to education?




More information about the Pacemaker mailing list