Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 3 Jun 2011 02:37:53 +0200
From:      Per von Zweigbergk <pvz@itassistans.se>
To:        Patrick Lamaiziere <patfbsd@davenulle.org>
Cc:        freebsd-fs@freebsd.org, freebsd-net@freebsd.org, John <jwd@SlowBlink.Com>
Subject:   Re: Production use of carp?
Message-ID:  <2E31CF74-416A-4310-9102-FD0C86275D0E@itassistans.se>
In-Reply-To: <20110603001036.5ad0ff8d@davenulle.org>
References:  <20110602203940.GA80549@slowblink.com> <20110603001036.5ad0ff8d@davenulle.org>

next in thread | previous in thread | raw e-mail | index | archive | help
3 jun 2011 kl. 00.10 skrev Patrick Lamaiziere:

> You may want to implement your own control because if the two hosts
> cannot communicate, you will have two masters. This can happen if the
> links on the both hosts are up, but none packet are forwarded (ie the
> switch connecting the two boxes is broken in some way).

As a general thought that might be interesting when you're building your =
HA solution:

One less-documented feature of VMware ESXi is that it checks whether =
it's isolated from the network by pinging the gateway on the management =
network.

This is how ESXi trys to avoid having a split-brain condition - by =
making sure that it only considers itself to be the master if it can =
reach the gateway, but cannot reach any other servers. You might =
implement gating in a similar way to avoid a split-brain condition in =
your HA solution.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?2E31CF74-416A-4310-9102-FD0C86275D0E>