On 27/04/2015 11:37, Stefan Hajnoczi wrote: >>> But it's only for the failover case. Quorum (or a new >>> block/colo.c driver or filter) is fine for normal colo >>> operation. > Perhaps this patch series should mirror the Secondary's disk to a > Backup Secondary so that the system can be protected very quickly > after failover. > > I think anyone serious about fault tolerance would deploy a Backup > Secondary, otherwise the system cannot survive two failures > unless a human administrator is lucky/fast enough to set up a new > Secondary.
Let's do one thing at a time. Otherwise nothing of this is going to be ever completed... Paolo
