Disk group failure policy

The local detach policy by itself is insufficient to determine the desired behavior if the master node loses access to all disks that contain copies of the configuration database and logs. In this case, the disk group is disabled. As a result, any action that would result in an update to log/config copy will also fail from the other nodes in the cluster. In release 4.1, the disk group failure policy is introduced to determine the behavior of the master node in such cases.

Table: Behavior of master node for different failure policies shows how the behavior of the master node changes according to the setting of the failure policy.

Table: Behavior of master node for different failure policies

Type of I/O failure

Leave (dgfailpolicy=leave)

Disable (dgfailpolicy=dgdisable)

Master node loses access to all copies of the logs.

The master node panics with the message "klog update failed" for a failed kernel-initiated transaction, or "cvm config update failed" for a failed user-initiated transaction.

The master node disables the disk group.

The behavior of the master node under the disk group failure policy is independent of the setting of the disk detach policy. If the disk group failure policy is set to leave, all nodes panic in the unlikely case that none of them can access the log copies.

The vxdg command can be used to set the failure policy on a shared disk group.

More Information

Setting the disk group failure policy on a shared disk group