1153 - Disaster recovery: what to do when

Disaster scenario

 Recovery procedure

Permanent loss of primary AccountServer (through theft, fire, flood, etc.)

Failover (see Article 1152) to Slave AccountServer until primary AccountServer is replaced/rebuilt, then fail back.

Permanent loss of StorageServer (through theft, fire, flood, etc.)

Failover (see Article 1152) to MirrorServer until StorageServer is replaced/rebuilt. Mirror to replaced/new StorageServer, then fail back.

Temporary loss of primary AccountServer

Failover (see Article 1152) to Slave AccountServer and turn off primary-site VMs to prevent them from taking precedence.

Temporary loss of StorageServer

Failover (see Article 1152) to MirrorServer and allow backups to continue.