[Pacemaker] some questions about STONITH

[Lars Marowsky-Bree]

On 2013-11-20T09:45:54, Andrey Groshev <greenx at yandex.ru> wrote:

> > A "fence" request is executed when a node is deemed to be in an
> > untrustworthy state - when a stop has failed, or when a network error
> > occurs. Note that in the last case, login via ssh is obviously no longer
> > possible at all.
> In last case the node conditional fenced. )

No. It may experience network trouble, it may be the local node having
the network problem, or it could still corrupt the shared storage.

> As I understand it, under the "fence" all you mean "power off" node or disconnect it from a network. Yes?

No. It must be stopped from interfering with any shared resources
(network (ARP cache), storage) as well as further diverging on its local
storage in a way that is hard/impossible to resync later. (Such as
continuing to accept and acknowledge transactions.)

Regards,
    Lars

-- 
Architect Storage/HA
SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 21284 (AG Nürnberg)
"Experience is the name everyone gives to their mistakes." -- Oscar Wilde