I'm in favor of a more robust and sophisticated synch rep. But not if nobody not on this mailing list can configure it, and not if even we don't know what it will do in an actual failure situation.
That's the key point. Editing the config after a failure is a Failure of Best Practice in an HA system.
--
Simon Riggs http://www.2ndQuadrant.com/ PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services