Fujii Masao <masao(dot)fujii(at)gmail(dot)com> writes:
> Should the standby also have to follow the WAL rule during recovery?
> The current patch doesn't care about the write order of the data page
> and WAL in the standby. So, after both servers fail, restarting the
> ex-standby by itself might corrupt the data.
Surely the receiver should fsync the WAL itself to disk before
acknowledging it. Assuming you've done that, I don't see any
corruption risk.
regards, tom lane