On 2015/4/29 16:29, Paolo Bonzini wrote: > > > On 27/04/2015 11:37, Stefan Hajnoczi wrote: >>>> But it's only for the failover case. Quorum (or a new >>>> block/colo.c driver or filter) is fine for normal colo >>>> operation. >> Perhaps this patch series should mirror the Secondary's disk to a >> Backup Secondary so that the system can be protected very quickly >> after failover. >> >> I think anyone serious about fault tolerance would deploy a Backup >> Secondary, otherwise the system cannot survive two failures >> unless a human administrator is lucky/fast enough to set up a new >> Secondary. > > Let's do one thing at a time. Otherwise nothing of this is going to > be ever completed... > Yes, and the continuous backup feature is on our TODO list. We hope this series (including basic functions and COLO framework) can be upstream first.
Regards, -Gonglei
