Book Image

PostgreSQL 12 High Availability Cookbook - Third Edition

By : Shaun Thomas
Book Image

PostgreSQL 12 High Availability Cookbook - Third Edition

By: Shaun Thomas

Overview of this book

Databases are nothing without the data they store. In the event of an outage or technical catastrophe, immediate recovery is essential. This updated edition ensures that you will learn the important concepts related to node architecture design, as well as techniques such as using repmgr for failover automation. From cluster layout and hardware selection to software stacks and horizontal scalability, this PostgreSQL cookbook will help you build a PostgreSQL cluster that will survive crashes, resist data corruption, and grow smoothly with customer demand. You’ll start by understanding how to plan a PostgreSQL database architecture that is resistant to outages and scalable, as it is the scaffolding on which everything rests. With the bedrock established, you'll cover the topics that PostgreSQL database administrators need to know to manage a highly available cluster. This includes configuration, troubleshooting, monitoring and alerting, backups through proxies, failover automation, and other considerations that are essential for a healthy PostgreSQL cluster. Later, you’ll learn to use multi-master replication to maximize server availability. Later chapters will guide you through managing major version upgrades without downtime. By the end of this book, you’ll have learned how to build an efficient and adaptive PostgreSQL 12 database cluster.
Table of Contents (17 chapters)

Integrating primary fencing

An important concept of high availability is node fencing, or physically disabling or separating a node from the cluster under specific circumstances. A somewhat common related method of accomplishing this is to shoot the other node in the head (STONITH).

We technically utilize an aspect of this in other recipes when we connect to the VIP in order to destroy it before establishing it on the local node. One critical flaw in STONITH is the assumption that it's possible to contact the remote system in order to disable it. This may not be possible in cases of network disruption, leaving us with no assurance that the remote primary is actually offline or otherwise disabled.

This is why version 4.4 of repmgr introduced a workaround for this scenario. It is now possible to specify a certain amount of connected child nodes (either standby or witness) must...