diff --git a/pages/clustering/high-availability.mdx b/pages/clustering/high-availability.mdx index 9c4b7fc4a..5030f8416 100644 --- a/pages/clustering/high-availability.mdx +++ b/pages/clustering/high-availability.mdx @@ -384,6 +384,18 @@ server that coordinator instances use for communication. Flag `--instance-health check the status of the replication instance to update its status. Flag `--instance-down-timeout-sec` gives the user the ability to control how much time should pass before the coordinator starts considering the instance to be down. + +Users can also choose whether failover to the async replica is allowed by using the following query: + +``` +SET COORDINATOR SETTING 'sync_failover_only' TO 'true'/'false' ; +``` + +By default, the value is `true`, which means that only sync replicas are candidates in the election. When the value is set to `false`, the async replica is also considered, but +there is an additional risk of experiencing data loss. However, failover to an async replica may be necessary when other sync replicas are down and you want to +manually perform a failover. + + Consider the instance to be down only if several consecutive pings fail because a single ping can fail because of a large number of different reasons in distributed systems.