Quorum question for SQL Cluster (Always On)












2















We are looking at setting up an SQL Always On High Availability environment at our organisation.
Our organisation has two datacenters of with one much smaller one but this one's being created to create some high availability.



At our primary site we are looking at installing three servers and one at the secondary site. These server will then be added to a cluster (and we'll add the DB's in some Availability Groups accross these servers)



But here comes the problem. When the primary site is down due to a power outage for example, the whole cluster will be down because the one server doesn't have a majority even with a default quorum. We did also look at adding a quorum to cloud-storage (disk-only quorum setup) but when the internet connection is down (happens sometimes here in Belgium) we also loose the entire cluster.



Does anyone have any experience or a solution for this?



Thanks in advance!










share|improve this question

























  • So you have 4 node WSFC where 3 nodes are in one DC and last node in other DC correct ?.

    – Shanky
    Nov 15 '18 at 16:09











  • @Shanky: That's correct.

    – chittybang
    Nov 15 '18 at 20:52
















2















We are looking at setting up an SQL Always On High Availability environment at our organisation.
Our organisation has two datacenters of with one much smaller one but this one's being created to create some high availability.



At our primary site we are looking at installing three servers and one at the secondary site. These server will then be added to a cluster (and we'll add the DB's in some Availability Groups accross these servers)



But here comes the problem. When the primary site is down due to a power outage for example, the whole cluster will be down because the one server doesn't have a majority even with a default quorum. We did also look at adding a quorum to cloud-storage (disk-only quorum setup) but when the internet connection is down (happens sometimes here in Belgium) we also loose the entire cluster.



Does anyone have any experience or a solution for this?



Thanks in advance!










share|improve this question

























  • So you have 4 node WSFC where 3 nodes are in one DC and last node in other DC correct ?.

    – Shanky
    Nov 15 '18 at 16:09











  • @Shanky: That's correct.

    – chittybang
    Nov 15 '18 at 20:52














2












2








2








We are looking at setting up an SQL Always On High Availability environment at our organisation.
Our organisation has two datacenters of with one much smaller one but this one's being created to create some high availability.



At our primary site we are looking at installing three servers and one at the secondary site. These server will then be added to a cluster (and we'll add the DB's in some Availability Groups accross these servers)



But here comes the problem. When the primary site is down due to a power outage for example, the whole cluster will be down because the one server doesn't have a majority even with a default quorum. We did also look at adding a quorum to cloud-storage (disk-only quorum setup) but when the internet connection is down (happens sometimes here in Belgium) we also loose the entire cluster.



Does anyone have any experience or a solution for this?



Thanks in advance!










share|improve this question
















We are looking at setting up an SQL Always On High Availability environment at our organisation.
Our organisation has two datacenters of with one much smaller one but this one's being created to create some high availability.



At our primary site we are looking at installing three servers and one at the secondary site. These server will then be added to a cluster (and we'll add the DB's in some Availability Groups accross these servers)



But here comes the problem. When the primary site is down due to a power outage for example, the whole cluster will be down because the one server doesn't have a majority even with a default quorum. We did also look at adding a quorum to cloud-storage (disk-only quorum setup) but when the internet connection is down (happens sometimes here in Belgium) we also loose the entire cluster.



Does anyone have any experience or a solution for this?



Thanks in advance!







sql-server sql-server-2016 clustering high-availability






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Nov 16 '18 at 10:32









Tom V

13.8k74677




13.8k74677










asked Nov 15 '18 at 14:09









chittybangchittybang

233




233













  • So you have 4 node WSFC where 3 nodes are in one DC and last node in other DC correct ?.

    – Shanky
    Nov 15 '18 at 16:09











  • @Shanky: That's correct.

    – chittybang
    Nov 15 '18 at 20:52



















  • So you have 4 node WSFC where 3 nodes are in one DC and last node in other DC correct ?.

    – Shanky
    Nov 15 '18 at 16:09











  • @Shanky: That's correct.

    – chittybang
    Nov 15 '18 at 20:52

















So you have 4 node WSFC where 3 nodes are in one DC and last node in other DC correct ?.

– Shanky
Nov 15 '18 at 16:09





So you have 4 node WSFC where 3 nodes are in one DC and last node in other DC correct ?.

– Shanky
Nov 15 '18 at 16:09













@Shanky: That's correct.

– chittybang
Nov 15 '18 at 20:52





@Shanky: That's correct.

– chittybang
Nov 15 '18 at 20:52










1 Answer
1






active

oldest

votes


















2















At our primary site we are looking at installing three servers and one at the secondary site. These server will then be added to a cluster (and we'll add the DB's in some Availability Groups accross these servers)




With the current configuration there is no way you can keep WSFC running if primary site, which has 3 nodes out of 4 nodes WSFC, goes down due to power outage or some other disaster. With such configuration adding Fileshare witness would be useless because even if you add one there will be 5 voting members and for WSFC to be online there should be at least 3 online and in your case when primary DC goes down 3 voting members will be down bringing WSFC down.




Does anyone have any experience or a solution for this?





  1. The solution would be to change the architecture, IF you do not want WSFC to come down when primary DC goes down. What you can do is move the 3rd node from primary to secondary DC and configure FC witness in cloud or at some third location which is not secondary DC or Primary DC but accessible to both, so even if primary DC is down there are 3 voting members 2 from secondary DC and one FS witness to keep WSFC up and running.


  2. The other solution is, if you can afford WSFC downtime, let the architecture be as it is and when disaster strikes at primary DC use Forcequorum to bring WSFC online. This seems like bad choice at first but believe me with little practice it works like charm and within 10-15 mins or even less WSFC would be online on DR node and with failover with data loss you could bring database instance online as well. This method is quick with little practice all you need is few commands to be run to bring WSFC and databases online.



Similar readings




  • Force Start a Windows Server Failover Cluster without a Quorum to bring a SQL Server Failover Clustered Instance Online

  • Recover WSFC using Forced Quorum for SQL Server AlwaysOn Availability Group






share|improve this answer


























  • Thank you for the explanation. I'll discuss the downtime with the collegues but I'm afraid this won't be an option. The first part of your answer: is a disk-only quorum no solution for this? (not for us because of a possible downtime of the internet connection)

    – chittybang
    Nov 16 '18 at 8:54











  • Disk quorum is not solution because no matter where it resides it will be of no use when primary DC is down

    – Shanky
    Nov 16 '18 at 12:40











Your Answer








StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "182"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fdba.stackexchange.com%2fquestions%2f222635%2fquorum-question-for-sql-cluster-always-on%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























1 Answer
1






active

oldest

votes








1 Answer
1






active

oldest

votes









active

oldest

votes






active

oldest

votes









2















At our primary site we are looking at installing three servers and one at the secondary site. These server will then be added to a cluster (and we'll add the DB's in some Availability Groups accross these servers)




With the current configuration there is no way you can keep WSFC running if primary site, which has 3 nodes out of 4 nodes WSFC, goes down due to power outage or some other disaster. With such configuration adding Fileshare witness would be useless because even if you add one there will be 5 voting members and for WSFC to be online there should be at least 3 online and in your case when primary DC goes down 3 voting members will be down bringing WSFC down.




Does anyone have any experience or a solution for this?





  1. The solution would be to change the architecture, IF you do not want WSFC to come down when primary DC goes down. What you can do is move the 3rd node from primary to secondary DC and configure FC witness in cloud or at some third location which is not secondary DC or Primary DC but accessible to both, so even if primary DC is down there are 3 voting members 2 from secondary DC and one FS witness to keep WSFC up and running.


  2. The other solution is, if you can afford WSFC downtime, let the architecture be as it is and when disaster strikes at primary DC use Forcequorum to bring WSFC online. This seems like bad choice at first but believe me with little practice it works like charm and within 10-15 mins or even less WSFC would be online on DR node and with failover with data loss you could bring database instance online as well. This method is quick with little practice all you need is few commands to be run to bring WSFC and databases online.



Similar readings




  • Force Start a Windows Server Failover Cluster without a Quorum to bring a SQL Server Failover Clustered Instance Online

  • Recover WSFC using Forced Quorum for SQL Server AlwaysOn Availability Group






share|improve this answer


























  • Thank you for the explanation. I'll discuss the downtime with the collegues but I'm afraid this won't be an option. The first part of your answer: is a disk-only quorum no solution for this? (not for us because of a possible downtime of the internet connection)

    – chittybang
    Nov 16 '18 at 8:54











  • Disk quorum is not solution because no matter where it resides it will be of no use when primary DC is down

    – Shanky
    Nov 16 '18 at 12:40
















2















At our primary site we are looking at installing three servers and one at the secondary site. These server will then be added to a cluster (and we'll add the DB's in some Availability Groups accross these servers)




With the current configuration there is no way you can keep WSFC running if primary site, which has 3 nodes out of 4 nodes WSFC, goes down due to power outage or some other disaster. With such configuration adding Fileshare witness would be useless because even if you add one there will be 5 voting members and for WSFC to be online there should be at least 3 online and in your case when primary DC goes down 3 voting members will be down bringing WSFC down.




Does anyone have any experience or a solution for this?





  1. The solution would be to change the architecture, IF you do not want WSFC to come down when primary DC goes down. What you can do is move the 3rd node from primary to secondary DC and configure FC witness in cloud or at some third location which is not secondary DC or Primary DC but accessible to both, so even if primary DC is down there are 3 voting members 2 from secondary DC and one FS witness to keep WSFC up and running.


  2. The other solution is, if you can afford WSFC downtime, let the architecture be as it is and when disaster strikes at primary DC use Forcequorum to bring WSFC online. This seems like bad choice at first but believe me with little practice it works like charm and within 10-15 mins or even less WSFC would be online on DR node and with failover with data loss you could bring database instance online as well. This method is quick with little practice all you need is few commands to be run to bring WSFC and databases online.



Similar readings




  • Force Start a Windows Server Failover Cluster without a Quorum to bring a SQL Server Failover Clustered Instance Online

  • Recover WSFC using Forced Quorum for SQL Server AlwaysOn Availability Group






share|improve this answer


























  • Thank you for the explanation. I'll discuss the downtime with the collegues but I'm afraid this won't be an option. The first part of your answer: is a disk-only quorum no solution for this? (not for us because of a possible downtime of the internet connection)

    – chittybang
    Nov 16 '18 at 8:54











  • Disk quorum is not solution because no matter where it resides it will be of no use when primary DC is down

    – Shanky
    Nov 16 '18 at 12:40














2












2








2








At our primary site we are looking at installing three servers and one at the secondary site. These server will then be added to a cluster (and we'll add the DB's in some Availability Groups accross these servers)




With the current configuration there is no way you can keep WSFC running if primary site, which has 3 nodes out of 4 nodes WSFC, goes down due to power outage or some other disaster. With such configuration adding Fileshare witness would be useless because even if you add one there will be 5 voting members and for WSFC to be online there should be at least 3 online and in your case when primary DC goes down 3 voting members will be down bringing WSFC down.




Does anyone have any experience or a solution for this?





  1. The solution would be to change the architecture, IF you do not want WSFC to come down when primary DC goes down. What you can do is move the 3rd node from primary to secondary DC and configure FC witness in cloud or at some third location which is not secondary DC or Primary DC but accessible to both, so even if primary DC is down there are 3 voting members 2 from secondary DC and one FS witness to keep WSFC up and running.


  2. The other solution is, if you can afford WSFC downtime, let the architecture be as it is and when disaster strikes at primary DC use Forcequorum to bring WSFC online. This seems like bad choice at first but believe me with little practice it works like charm and within 10-15 mins or even less WSFC would be online on DR node and with failover with data loss you could bring database instance online as well. This method is quick with little practice all you need is few commands to be run to bring WSFC and databases online.



Similar readings




  • Force Start a Windows Server Failover Cluster without a Quorum to bring a SQL Server Failover Clustered Instance Online

  • Recover WSFC using Forced Quorum for SQL Server AlwaysOn Availability Group






share|improve this answer
















At our primary site we are looking at installing three servers and one at the secondary site. These server will then be added to a cluster (and we'll add the DB's in some Availability Groups accross these servers)




With the current configuration there is no way you can keep WSFC running if primary site, which has 3 nodes out of 4 nodes WSFC, goes down due to power outage or some other disaster. With such configuration adding Fileshare witness would be useless because even if you add one there will be 5 voting members and for WSFC to be online there should be at least 3 online and in your case when primary DC goes down 3 voting members will be down bringing WSFC down.




Does anyone have any experience or a solution for this?





  1. The solution would be to change the architecture, IF you do not want WSFC to come down when primary DC goes down. What you can do is move the 3rd node from primary to secondary DC and configure FC witness in cloud or at some third location which is not secondary DC or Primary DC but accessible to both, so even if primary DC is down there are 3 voting members 2 from secondary DC and one FS witness to keep WSFC up and running.


  2. The other solution is, if you can afford WSFC downtime, let the architecture be as it is and when disaster strikes at primary DC use Forcequorum to bring WSFC online. This seems like bad choice at first but believe me with little practice it works like charm and within 10-15 mins or even less WSFC would be online on DR node and with failover with data loss you could bring database instance online as well. This method is quick with little practice all you need is few commands to be run to bring WSFC and databases online.



Similar readings




  • Force Start a Windows Server Failover Cluster without a Quorum to bring a SQL Server Failover Clustered Instance Online

  • Recover WSFC using Forced Quorum for SQL Server AlwaysOn Availability Group







share|improve this answer














share|improve this answer



share|improve this answer








edited 12 mins ago

























answered Nov 16 '18 at 7:37









ShankyShanky

14.1k32039




14.1k32039













  • Thank you for the explanation. I'll discuss the downtime with the collegues but I'm afraid this won't be an option. The first part of your answer: is a disk-only quorum no solution for this? (not for us because of a possible downtime of the internet connection)

    – chittybang
    Nov 16 '18 at 8:54











  • Disk quorum is not solution because no matter where it resides it will be of no use when primary DC is down

    – Shanky
    Nov 16 '18 at 12:40



















  • Thank you for the explanation. I'll discuss the downtime with the collegues but I'm afraid this won't be an option. The first part of your answer: is a disk-only quorum no solution for this? (not for us because of a possible downtime of the internet connection)

    – chittybang
    Nov 16 '18 at 8:54











  • Disk quorum is not solution because no matter where it resides it will be of no use when primary DC is down

    – Shanky
    Nov 16 '18 at 12:40

















Thank you for the explanation. I'll discuss the downtime with the collegues but I'm afraid this won't be an option. The first part of your answer: is a disk-only quorum no solution for this? (not for us because of a possible downtime of the internet connection)

– chittybang
Nov 16 '18 at 8:54





Thank you for the explanation. I'll discuss the downtime with the collegues but I'm afraid this won't be an option. The first part of your answer: is a disk-only quorum no solution for this? (not for us because of a possible downtime of the internet connection)

– chittybang
Nov 16 '18 at 8:54













Disk quorum is not solution because no matter where it resides it will be of no use when primary DC is down

– Shanky
Nov 16 '18 at 12:40





Disk quorum is not solution because no matter where it resides it will be of no use when primary DC is down

– Shanky
Nov 16 '18 at 12:40


















draft saved

draft discarded




















































Thanks for contributing an answer to Database Administrators Stack Exchange!


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fdba.stackexchange.com%2fquestions%2f222635%2fquorum-question-for-sql-cluster-always-on%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

SQL Server 17 - Attemping to backup to remote NAS but Access is denied

Always On Availability groups resolving state after failover - Remote harden of transaction...

Restoring from pg_dump with foreign key constraints