Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1rdPZU-005TD0-B5 for pgsql-admin@arkaria.postgresql.org; Fri, 23 Feb 2024 07:02:13 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1rdPZS-00GR5B-JJ for pgsql-admin@arkaria.postgresql.org; Fri, 23 Feb 2024 07:02:11 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1rdPZR-00GR53-Vl for pgsql-admin@lists.postgresql.org; Fri, 23 Feb 2024 07:02:10 +0000 Received: from mail-ej1-x635.google.com ([2a00:1450:4864:20::635]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1rdPZO-000Yoi-Gl for pgsql-admin@lists.postgresql.org; Fri, 23 Feb 2024 07:02:09 +0000 Received: by mail-ej1-x635.google.com with SMTP id a640c23a62f3a-a28a6cef709so72774566b.1 for ; Thu, 22 Feb 2024 23:02:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cybertec-at.20230601.gappssmtp.com; s=20230601; t=1708671726; x=1709276526; darn=lists.postgresql.org; h=mime-version:user-agent:content-transfer-encoding:autocrypt :references:in-reply-to:date:to:from:subject:message-id:from:to:cc :subject:date:message-id:reply-to; bh=c+XD7DMuoda67WnPG63s9eLM2nORSZ1Y7ExTnnSPsng=; b=2sNHAiWa4X+IKnB3otcKsJsf2YvBalp8q1LVNFyD2ogxTOYC5/ZfhoS8jR5F5I6bGD pe6aT9axyhfofk4G7eLILQLJciGMtFY+wKINVhcKAVjRFlaVDBoLGM38zncJKh3mRK+I or2I/ogn8Xkc5r2R4hcQk2yfnfIduxaQ6c+geBZeudmbUyQc87ydZJRkrTS8KrVTlVYQ GHfF5JaZlvn4X1PQS9O3ijGLpP3Sqew18GKRVY5nlMCcjEGtmFpjuoslCSLQaybgxj1l FaUhMM9WCj9PIYRHv3bGjEK1J/ZY/fdCc4OonVimjighhUN50u0kB9jZLddQW5Pjtktw sWQw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1708671726; x=1709276526; h=mime-version:user-agent:content-transfer-encoding:autocrypt :references:in-reply-to:date:to:from:subject:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=c+XD7DMuoda67WnPG63s9eLM2nORSZ1Y7ExTnnSPsng=; b=vQmq4hb2Ns66VDR/Cm90bTxE5Bi7TYNB8w7HQ0efZcnjLB2Z8Zsqtzuo+5qRHtUYNP s+lWf0NBMQomd54MJ0D8HhA80EQmBYUzZsK2iijF7ir8FZokP3UuBym/Zu+IZCxzA91v XBKm8VcP3fPdpm3npSvrJO67AME38aM5e2zx7OlytGHPo8UlTYSgILAJeNQhra2oNIHr IrzxZJ50AUDJ3mBmR0EYqEDEMC0a+kXeNbCGDHiRR9w4w3j6dHLhoPvp/tHh9K8rB62l GnvUte8iItkZ1MUYgjqm+ARiPzkVVbC93SrcfonQv/bfne5Ov0Ax2QjgOUyzqCUaAocx h5ow== X-Forwarded-Encrypted: i=1; AJvYcCVNI5CpzVeRBtRso7r3WAnnzog/zxMsfQzyP2l4zbKSappoiBF0qbib+ItwCtJidmkjqMeeNYxcxUVua2Oq7MFV2DmFZBqP0emjz/kB728G8A== X-Gm-Message-State: AOJu0YxFDs32ipg/LDGXZXMYlk5XsKmF8YRAFwq3gJMqs6QX5BliF0jW OdxcLdlH1iQkvNbSI8kOVpSYlxEZR2xJVBBeHNeV6p+NSvxWYVpp+oTOR3cKAk4JXW5gUnI9kRt x X-Google-Smtp-Source: AGHT+IFsOT2wNPMzGGQHEFWE6S3E8NxeD/2OTWhBNcJ0vmS/mY2FqTipaZgY7+QW94zdhfFpp5XqDg== X-Received: by 2002:a17:906:fb91:b0:a3e:9885:954a with SMTP id lr17-20020a170906fb9100b00a3e9885954amr593715ejb.65.1708671725844; Thu, 22 Feb 2024 23:02:05 -0800 (PST) Received: from localhost.localdomain ([41.66.96.85]) by smtp.gmail.com with ESMTPSA id st9-20020a170907c08900b00a3e4f554900sm5693664ejc.135.2024.02.22.23.02.05 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 22 Feb 2024 23:02:05 -0800 (PST) Message-ID: <32d1035973ed0c7be36a419df1246f94efae3166.camel@cybertec.at> Subject: Re: Would you ever recommend Shared Disk Failover for HA? From: Laurenz Albe To: norbert poellmann , pgsql-admin@lists.postgresql.org Date: Fri, 23 Feb 2024 08:02:04 +0100 In-Reply-To: <20240222185937.M23609@ibu.de> References: <20240222185937.M23609@ibu.de> Autocrypt: addr=laurenz.albe@cybertec.at; prefer-encrypt=mutual; keydata=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 bT5UrLvJ2jb99bA9QARzhFaxzyn0F/BUKzuIjRGNs/n6d5dNUFA0kOt8sX+TacmC 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 lDrT4wxdLJ/XCdbPPAyl+lZtOLsaHEEZvYNyTXwZc35dVf3R4/oz20HoG6s7ct8e1 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 36UMAx4ulWMyqJajLNGY0DdG8qIsR5nxRhrnK/mrCidZ8F9/D3bWAl4rjtHlsztN59 +AnW5l0HsQcY9ntFL/zEBOaonjdJf Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.50.4 (3.50.4-1.fc39) MIME-Version: 1.0 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Thu, 2024-02-22 at 20:34 +0100, norbert poellmann wrote: > https://www.postgresql.org/docs/current/different-replication-solutions.h= tml > is listing a shared disk solution for HA. >=20 > It also mentions, "that the standby server should never access the shared= storage > while the primary server is running." >=20 > In a datacenter, where we have postgresql servers running on vmware VMs, = the > shared disk configuration sounds like an appealing solution >=20 > But [...] >=20 > So it seems to me, getting the comfort of a single server solution, which= , in a > failover, gets replaced by another single server, is paid by getting the = low risk > of high damage. >=20 > I know of the provisions of fencing, STONITH, etc. - but in practise, wha= t is a robust solution?=20 >=20 > For example: How can I STONITH a node while having network problems?=20 > Whithout reaching the host, I cannot shoot it, nor shut it.=20 >=20 > Would you share your opinions or practical business experiences on this t= opic? Back in the old days, we had special hardware devices for STONITH. Anyway, my personal experience with a shared disk setup is a bad one. Imagine two nodes, redundantly attached to disks mirrored across data centers with fibrechannel. No single point of failure, right? Well, one day one of the fibrechannel cables had intermittent failures, which led to a corrupted file system. So we ended up with a currupted file system, nicely mirrored across data centers. We had to restore the 3TB database from backup. Yours, Laurenz Albe