Ian Barwick 9753bcc8c3 repmgrd: during failover, check if other nodes have seen the primary ...

In a situation where only some standbys are cut off from the primary,
a failover would result in a split brain/split cluster situation,
as it's likely one of the cut-off standbys will promote itself, and
other cut-off standbys (but not all standbys) will follow it.

To prevent this happening, interrogate the other sibiling nodes to
check whether they've seen the primary within a reasonably short interval;
if this is the case, do not take any failover action.

This feature is experimental.

2019-03-06 13:23:22 +09:00

135 KiB

Raw Blame History

View Raw