On Tue, Jun 15, 2010 at 11:35 AM, Fujii Masao <masao.fu...@gmail.com> wrote: > On the other hand, I like immediate-panicking. And I don't want the standby > to retry reconnecting the master infinitely.
On second thought, the peremptory PANIC is not good for HA system. If the master unfortunately has written an invalid record because of its crash, the standby would exit with PANIC before performing a failover. So when an invalid record is found in streamed WAL file, we should keep the standby running and leave the decision whether the standby retries to connect to the master forever or shuts down right now, up to the user (actually, it may be a clusterware)? Regards, -- Fujii Masao NIPPON TELEGRAPH AND TELEPHONE CORPORATION NTT Open Source Software Center -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers
