3 ms·
How have you tested the failure modes? I worked with a battery backup disk controller once, that had redundant failover to a duplicate unit. It worked great fo
by paulsutter 7y ago
How have you tested the failure modes?
I worked with a battery backup disk controller once, that had redundant failover to a duplicate unit. It worked great for many months with flawless failover. Except when one of the internal batteries died, the whole system deadlocked and the 24/7 nonstop cluster was down for days.
The more layers, the more unpredictable the failure modes.
- unilynx 7y agoBut did it break its storage guarantees? Sounds to me like freezing the storage if the redundancy can no longer be guaranteed due to a bad battery may be the only way to keep the promise.
- deleted 7y ago[deleted]
- ori_b 7y agoFailover doesn't mean that the system fails when you transfer load over.