On Tue, 2009-06-09 at 20:59 +0200, Kolb, Harald (NSN - DE/Munich) wrote:
> There are some good reasons why a switchover could be an appropriate
> means in case the DB is facing troubles. It may be that the root cause
> is not the DB itsself, but used resources or other things which are
> going crazy and hit the DB first ( we've seen a lot of these
> unbelievable things which made us quite sensible for robustness
> aspects). Therefore we want to have control on the DB recovery.
> If you don't want to see this option as a GUC parameter, would it be
> acceptable to have it as a new postmaster cmd line option ?
Even if you had this, you still need to STONITH just in case the
failover happens by mistake.
If you still have to take an action to be certain, what is the point of
the feature?
Most losses of availability are caused by human error and this seems
like one more way to blow your remaining toes off.
-- Simon Riggs www.2ndQuadrant.comPostgreSQL Training, Services and Support
