Simon Riggs wrote:
> How we handle degraded mode is important, yes. Whatever parameters we
> choose the problem will remain the same.
>
> Should we just ignore degraded mode and respond as if nothing bad had
> happened? Most people would say not.
>
> If we specify server1 = synch and server2 = async we then also need to
> specify what happens if server1 is down. People might often specify
> if (server1 == down) server2 = synch.
>
I have a hard time imagining including async servers in the quorum. If
an async servers vote is necessary to reach quorum due to a 'real' sync
standby server failure, it would mean that the async-intended standby is
now also in sync with the master transactions. IMHO this is a bad
situation, since instead of the DBA getting the error: "not enough sync
standbys to reach quorum", he'll now get "database is slow" complaints,
only to find out later that too much sync standby servers went south.
(under the assumption that async servers are mostly on too slow links to
consider for sync standby).
regards,
Yeb Havinga