Ian Barwick b72c894db4 repmgrd: during failover, check if other nodes have seen the primary ...

In a situation where only some standbys are cut off from the primary,
a failover would result in a split brain/split cluster situation,
as it's likely one of the cut-off standbys will promote itself, and
other cut-off standbys (but not all standbys) will follow it.

To prevent this happening, interrogate the other sibiling nodes to
check whether they've seen the primary within a reasonably short interval;
if this is the case, do not take any failover action.

This feature is experimental.

2019-02-23 13:03:22 +09:00

18 KiB

Raw Blame History

View Raw