Re: Infrastructure changes for recovery

Simon Riggs <simon@2ndquadrant.com> writes:
> I propose to
> * have startup process signal postmaster when it starts Redo phase (if
> it starts it)

Doesn't seem like "starts recovery" is the point at which you can start
letting clients into the DB.  What you want is to reach a point at which
you're sure that the DB is internally consistent, though perhaps not
fully synced with the master.  In a PITR recovery scenario this would
correspond to reaching the minimum safe stop point.  In true crash
recovery I don't think you can let people in till you're done.
        regards, tom lane