Received: from maia.hub.org (maia-3.hub.org [200.46.204.243]) by mail.postgresql.org (Postfix) with ESMTP id E008E632A48 for ; Mon, 12 Jul 2010 13:11:54 -0300 (ADT) Received: from mail.postgresql.org ([200.46.204.86]) by maia.hub.org (mx1.hub.org [200.46.204.243]) (amavisd-maia, port 10024) with ESMTP id 05132-05 for ; Mon, 12 Jul 2010 16:11:47 +0000 (UTC) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from moutng.kundenserver.de (moutng.kundenserver.de [212.227.17.8]) by mail.postgresql.org (Postfix) with ESMTP id 5FF9C632686 for ; Mon, 12 Jul 2010 13:11:47 -0300 (ADT) Received: from [75.192.140.165] (165.sub-75-192-140.myvzw.com [75.192.140.165]) by mrelayeu.kundenserver.de (node=mrbap0) with ESMTP (Nemesis) id 0MVb0p-1OapFG1s2p-00YlWN; Mon, 12 Jul 2010 18:11:46 +0200 Message-ID: <4C3B3EBE.9070205@2ndquadrant.com> Date: Mon, 12 Jul 2010 12:11:42 -0400 From: Greg Smith User-Agent: Thunderbird 2.0.0.24 (X11/20100317) MIME-Version: 1.0 To: Thomas Kellerer CC: pgsql-admin@postgresql.org Subject: Re: High Availability: Hot Standby vs. Warm Standby References: <4C386B33.8090708@2ndquadrant.com> In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Provags-ID: V02:K0:Ll8uGLM3nYgXl+V3c28oi/I3SkBVffPJQbXQh0PRvmX 2HLqONmzaLD8N+1defW8iG4qevpNDCf7thR3Fkhwf3dTHPdYzK mb2JhM/oTRzvkajHdhdNqFe0jhOeLM1kX4gxhmvOIBTlfPEuWI imHQyp7RxI26V4VFPgT4xmC5WeGsAJyz774Kbq5VJsyXoQGgZh kVNqx9GhB/5QzygTTSBYDrCmvVRjjxCXUo1GA+5YTU= X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=-1.9 tagged_above=-10 required=5 tests=BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001 X-Spam-Level: X-Archive-Number: 201007/50 X-Sequence-Number: 35069 Thomas Kellerer wrote: > The manual lists three possible solutions to HA: shared disk failover, > file system replication and Warm/Hot Standby. I'm not an admin (nor a > DBA), so my question might sound a bit stupid: from my point of view > solutions using shared disk failover of file system replication seem > to be more reliable in terms of how much data can get lost (and > possibly the switch over lag) Yes, but if you try you'll discover that actually getting any shared disk or file system replication solution setup so that you really do achieve less failover loss than the file shipping approach will be expensive, complicated, fragile in its own way, and just generally a pain to pull off. The fundamental problem with shared storage for example is how to keep a note that's failed from try to reassume being the master when it comes back. Doing that well requires hardware support aimed at that specific use case. Meanwhile, file shipping for Warm Standby use requires nothing special at all except some modest software setup. It's comparatively simple to setup, validate, and keep going on any hardware capable of running the database. This is why shared storage and the like isn't the only obvious solution even though it's technically capable of losing less transactions; you'll discover that keeping from losing that last little bit of data when there's a crash turns out to be quite expensive. Whether it worth it or not depends on the value of your data and whether it can be retained at some higher level when this happens instead. -- Greg Smith 2ndQuadrant US Baltimore, MD PostgreSQL Training, Services and Support greg@2ndQuadrant.com www.2ndQuadrant.us