Best practice for high availability ZFS pool

[Ben RUBSON]

> On 17 may 2016 at 03:43, Bob Friesenhahn <bfriesen at simple.dallas.tx.us> wrote:
> 
> On Mon, 16 May 2016, Palle Girgensohn wrote:
>> 
>> Shared storage still has a single point of failure, the JBOD box. Apart from that, is there even any support for the kind of storage PCI cards that support dual head for a storage box? I cannot find any.
> 
> Use two (or three) JBOD boxes and do simple zfs mirroring across them so you can unplug a JBOD and the pool still works. Or use a bunch of JBOD boxes and use zfs raidz2 (or raidz3) across them with careful LUN selection so there is total storage redundancy and you can unplug a JBOD and the pool still works.
> 
> Fiber channel (or FCoE) or iSCSI allows putting the hardware at some distance.
> 
> Without completely isolated systems there is always the risk of total failure.  Even with zfs send there is the risk of total failure if the sent data results in corruption on the receiving side.

In this case rollback one of the previous snapshots on the receiving side ?
Did you mean the sent data can totally brake the receiving pool making it unusable / unable to import ? Did we already see this ?

Thank you,

Ben