Re: [RFC] quorum module configuration bits

[David Teigland <teigland@xxxxxxxxxx>]

On Thu, Jan 26, 2012 at 03:15:40PM +0300, Vladislav Bogdanov wrote:
> Imagine (this case is a little bit hypothetical, but anyways):
> * You have cluster with 8 active nodes, and you (for some historical
> reasons or due to admin fault/laziness) have expected_votes set to 3
> (ok, you had 3-node cluster not so long ago, but added more nodes
> because of growing load).
> * Cluster splits 5+3 due to loss of communication between switches (or
> switch-stacks).
> * 3 nodes are fenced.
> * Partition with majority continues operation.
> * 3 fenced nodes boot back, and form *quorate* partition because they
> have expected_votes set to 3

At this point, the fencing system on the 3 nodes should do startup fencing
of everyone in the quorate partition (see fenced man page under Domain
startup for explanation of startup fencing.)  That's not nice behavior,
and a correct expected_votes would prevent it.  But it's not as bad as
corruption.

> * Data is corrupted

_______________________________________________
discuss mailing list
discuss@xxxxxxxxxxxx
http://lists.corosync.org/mailman/listinfo/discuss