public inbox for [email protected]  

help / color / mirror / Atom feed
From: 陈宗志 <[email protected]>
To: wenhui qiu <[email protected]>
Cc: Robert Treat <[email protected]>
Cc: Jakub Wartak <[email protected]>
Cc: [email protected]
Subject: Re: [PROPOSAL] Doublewrite Buffer as an alternative torn page protection to Full Page Write
Date: Sat, 28 Feb 2026 03:15:36 +0800
Message-ID: <CAGbZs7hQMU-eJv07vrGRjXkcp+7cxPSMTsJJ8NVR-u9yfNju=A@mail.gmail.com> (raw)
In-Reply-To: <CAGjGUAKd70W3YZ9Dg_DTVAQW4NpH7b6q3-h+0=c6bhW6O+S=4Q@mail.gmail.com>
References: <CAGbZs7g+x0qUhe9Xdf_SqC4U5HGMnM=rnuvoc+vCR4Hbq1X=wA@mail.gmail.com>
	<CAKZiRmyN40=WW27Mnkj_zO3FvYn8fcoFwnQ+a=+W6zymqPr0vQ@mail.gmail.com>
	<CABV9wwPp8Zn3-9B4ciYTEAuBueMUv5BoRAvRw34F3yrNS4XOUw@mail.gmail.com>
	<CAGbZs7j9ESVUF2kpqndy4NXgVevnaHJb7144NFC6WK08yXo1Eg@mail.gmail.com>
	<CAGjGUAJRVnbzj8jJqHYS-91HEojLeTFPgpaYDBsUAbG3cJ0o2g@mail.gmail.com>
	<CAGbZs7j2x4Ld7OztM1wrdXD9-PLwYpQXiw1SfKaws85nnHewcA@mail.gmail.com>
	<CAGjGUAKd70W3YZ9Dg_DTVAQW4NpH7b6q3-h+0=c6bhW6O+S=4Q@mail.gmail.com>

Hi,

> This test is completely meaningless. Just as you wouldn't set
> innodb_redo_log_capacity=Minimum Value,
> innodb_max_dirty_pages_pct=Minimum Value
> You used an extreme example to prove the double write.Why didn't you
> compare using best practices?

I wouldn't be so quick to dismiss these results. The configuration
was deliberately chosen to trigger more frequent checkpoints. As I
mentioned in my initial email, more frequent checkpoints strictly bound
the amount of WAL that needs to be replayed, resulting in much faster
crash recovery.

The entire ARIES paper heavily emphasizes optimizing crash recovery
time in database design. Minimizing recovery time is a fundamental
database capability, and we shouldn't rely solely on High Availability
(HA) switchovers to mask or solve crash recovery problems.

Actually, I have always felt that PostgreSQL's minimum limit of 30s
for `checkpoint_timeout` is a bit too restrictive. Ideally, the system
should allow for even higher frequency checkpoints. Setting it to a
lower value, such as 10s, could achieve the exact same effect of
strictly bounding recovery time. This test simulates an environment
where a very aggressive RTO (Recovery Time Objective) is required,
which is a highly practical scenario, not just an extreme edge case.

Regards,
Baotiao






view thread (6+ messages)  latest in thread

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected], [email protected], [email protected]
  Subject: Re: [PROPOSAL] Doublewrite Buffer as an alternative torn page protection to Full Page Write
  In-Reply-To: <CAGbZs7hQMU-eJv07vrGRjXkcp+7cxPSMTsJJ8NVR-u9yfNju=A@mail.gmail.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox