John R Pierce <pierce@hogranch.com> writes:
> failure modes can
> include things like failing fans (which will be detected, resulting in a
> server shutdown if too many fail), power supply failure (redundant PSUs, but
> I've seen the power combining circuitry fail). Any of these sorts of
> failures will result in a failover without corrupting the data.
>
> and of course, intentional planned failovers to do OS maintenance... you
> patch the standby system, fail over to it and verify its good, then patch
> the other system.
Ah, I see the use case much better now, thank you. And I begin too see
how expensive reaching such a goal is, too. Going from "I can lose this
many transactions" to "No data lost, ever" is at that price, though.
Regards,
--
dim