On 16/03/13 07:06, Rick Otten wrote:
>>> I not convinced about the need for BBU with SSD - you *can* use them
>>> without one, just need to make sure about suitable longevity and also
>>> the presence of (proven) power off protection (as discussed
>>> previously). It is worth noting that using unproven or SSD known to be
>>> lacking power off protection with a BBU will *not* save you from
>>> massive corruption (or device failure) upon unexpected power loss.
>
>> I don't think any drive that corrupts on power-off is suitable for a database, but for non-db uses, sure, I guess
theyare OK, though you have to be pretty money->constrainted to like that tradeoff.
>
> Wouldn't mission critical databases normally be configured in a high availability cluster - presumably with replicas
runningon different power sources?
>
> If you lose power to a member of the cluster (or even the master), you would have new data coming in and stuff to do
longbefore it could come back online - corrupted disk or not.
>
> I find it hard to imagine configuring something that is too critical to be able to be restored from periodic backup
toNOT be in a (synchronous) cluster. I'm not sure all the fuss over whether an SSD might come back after a hard server
failureis really about. You should architect the solution so you can lose the server and throw it away and never bring
itback online again. Native streaming replication is fairly straightforward to configure. Asynchronous multimaster
(albeitwith some synchronization latency) is also fairly easy to configure using third party tools such as SymmetricDS.
>
> Agreed that adding a supercap doesn't sound like a hard thing for a hardware manufacturer to do, but I don't think it
shouldbe a necessarily be showstopper for being able to take advantage of some awesome I/O performance opportunities.
>
>
A somewhat extreme point of view. I note that the Mongodb guys added
journaling for single server reliability a while ago - an admission that
while in *theory* lots of semi-reliable nodes can be eventually
consistent, it is a lot less hassle if individual nodes are as reliable
as possible. That is what this discussion is about.
Regards
Mark
