On Sun, Feb 22, 2009 at 7:30 PM, Tim Uckun <timuckun(at)gmail(dot)com> wrote:
>> 1. It's OK if we lose a few seconds (or even minutes) of transactions
>> should one of our primary databases crash.
>> 2. It's unlikely we'll need to load a backup that's more than a few days
>> old.
>
> How do you handle failover and falling back to the primary once it's up?
We don't plan to fail back to the primary. Amazon is a very different
beast, once a server is dead, we just toss it away. The secondary
permanently becomes the primary and we create a new tertiary from
scratch which then becomes a log shipped copy of the secondary.
Bryan