The “change” kind of blows our perception of cluster capacity in that we had anticipated a much higher cluster load and still maintain N-1 failover. Of course, we don’t do much with different failover policies for guests that aren’t important.

I think we’ll probably start tweaking our HA rules based on server importance, that should sort things out a bit.

Thanks for publicizing this issue - it’s a bit of a nasty realization…