From: | Aleksander Kamenik <aleksander(dot)kamenik(at)gmail(dot)com> |
---|---|
To: | pgsql-admin(at)postgresql(dot)org |
Subject: | Re: avoiding split brain with repmgr |
Date: | 2017-08-15 05:57:12 |
Message-ID: | CADD6ONJ6f9Su0oV6q+0x22Ju_L-SUNOVYw-LxiwJEW=9S-dhAg@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-admin |
I finally found this document NOT referenced from the main README file
in the repmgr repo.
https://github.com/2ndQuadrant/repmgr/blob/master/docs/repmgrd-node-fencing.md
I guess the default solution is pgbouncer
Any simpler solutions for this tricky problem?
Regards,
Aleksander
On Mon, Aug 14, 2017 at 5:03 PM, Aleksander Kamenik
<aleksander(dot)kamenik(at)gmail(dot)com> wrote:
> Hi!
>
> In a cluster set up with postgres 9.6, streaming replication and
> repmgr I'm struggling to find a good/simple solution for avoiding
> split brain.
>
> The current theoretical setup consists of 4 nodes across two data
> centers. The master node is setup with 1 of 3 synchronous replication.
> That is it waits for at least one other node to COMMIT as well.
> repmgrd is installed on every node.
>
> The clients will use postgresql JDBC with targetServerType=master so
> they connect only to the master server in a list of four hosts.
>
> The split brain scenario I forsee is when the master node locks up or
> is isolated for a while and comes back online after repmgrd on other
> nodes have elected a new master.
>
> As the original master node has a requirement of one synced
> replication node and the remaining two standbys are streaming from the
> new master it will fortunately not start writing a separate timeline,
> but will still serve dated read only queries. For writes it will
> accept connections which hang. The repmgrd instance on the original
> master sees no problem either so does nothing.
>
> Ideally though this instance should be shut down as it has no slaves
> attached and the status on other nodes indicates this master node is
> failed.
>
> Any suggestions? I'm trying to keep the setup simple without a central
> pgbouncer/pgpool. Any simple way to avoid a central connection point
> or custom monitoring script that looks for exactly this issue?
>
> Also, do you see any other potential pitfalls in this setup?
>
> Thanks for thinking this through,
>
> Aleksander
>
> --
> Aleksander Kamenik
--
Aleksander Kamenik
From | Date | Subject | |
---|---|---|---|
Next Message | Martin Goodson | 2017-08-15 07:28:24 | Re: avoiding split brain with repmgr |
Previous Message | Don Seiler | 2017-08-14 21:32:09 | Re: Standby WAL Cleanup? |