An active-active cluster cannot maintain business operations until the related failures are resolved under the following scenarios:
Complete outage of IDC A or IDC B, and the witness node cannot be recovered.
Network isolation between IDC A and IDC B, and the witness node cannot be recovered.
Network isolation between IDC A and IDC B, while the network between IDC A and the witness node, and IDC B and the witness node, is also disrupted.
Three or more failures among the five critical members of the cluster (2 master nodes in IDC A, 2 master nodes and the witness node in IDC B). Failures include but are not limited to: