On 11/28/2016 2:50 PM, Israel Brewster wrote:
That's why I specified *total* failure. If only the primary dies, that's a simple cutover to the secondary, and not a total failure - no need to go to backups of any sort under that scenario :-) I'm thinking more along the lines of server room burns down, natural disaster, etc - something that causes a total failure of the db system, necessitating recovery from an offsite backup.
your base backups and WAL archive should be replicated offsite, then.
--
john r pierce, recycling bits in santa cruz