On 28 December 2016 at 08:14, Thomas Munro
<thomas(dot)munro(at)enterprisedb(dot)com> wrote:
> 3. No server must allow a transaction to be visible that hasn't been
> flushed on N standby servers. We already prevent that on the primary
Only if the primary doesn't restart. We don't persist the xact masking
used by sync rep at the moment.
I suspect that solving that is probably tied to solving it on standbys.
--
Craig Ringer http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Training & Services