[Linux-cluster] GFS over AOE without fencing?

[Bryn M. Reeves]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Kadlecsik Jozsi wrote:
> Hello,
> 
> Assuming a dedicated VLAN which servers only AOE and GFS traffic among 
> the Coraid boxes and the GFS hosts, is there any need for fencing at all?
> 
> What are the hidden traps behind such setups?
> 
> Best regards,
> Jozsef

If you are using GFS on shared storage then you need fencing. Period.

The only way you can guarantee data integrity in this scenario is by
completely cutting a failed or misbehaving node off from the storage;
either by power cycling it or having the storage reject its access.

Otherwise, imagine a situation where a node hangs for some reason and is
ejected from the cluster. At this point none of its locks for the shared
data are valid anymore. Some time later, the node recovers from the hang
and begins flushing writes to the storage -> corruption.

Regardless of the storage type or networking, you need some way for the
cluster to isolate failing nodes to prevent harm to the GFS volumes.

Regards,
Bryn.



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFGJL2D6YSQoMYUY94RAopXAKCP7eh0qzFLUY2H+H6kYmjXaKsYegCdHHAp
8DzUGonsXdLs9wYgNCkmt3k=
=xM/U
-----END PGP SIGNATURE-----