On 07/20/2012 06:04 PM, Dietmar Maurer wrote: >> Partly yes, but I think an option to disable automatic recovery temporarily >> would be better because I just need it at some time not all the time. Suppose >> one node out of your reach is down and you need hours to get to it to do >> manual recovery, this will put cluster to dangerous for hours, even days, >> months. > > Maybe we can delay the start of recovery for some time (1h)? That way a normal > server reboot does not harm. > > Then how do you handle IOs routed to the down node if you don't recover the membership state? Think about manual restarting node isn't very common, I'd like to see an option to disable/enable auto-recovery because recover copies is more important to assure data reliability of the cluster. Thanks, Yuan -- thanks, Yuan |