
But my problem is, how to make sure the whole cluster high availability?
After checking the Doc, I use such architecture as blow:

<remote_servers>
<logs>
<shard>
<weight>1</weight>
<internal_replication>false</internal_replication>
<replica>
<host>A</host>
<port>9000</port>
</replica>
<replica>
<host>A'</host>
<port>9000</port>
</replica>
</shard>
<shard>
<weight>2</weight>
<internal_replication>false</internal_replication>
<replica>
<host></host>
<port>9000</port>
</replica>
<replica>
<host>B'</host>
<port>9000</port>
</replica>
</shard>
</logs>
</remote_servers>
I use A', B' and C' as replica node, make sure I have at least one backup.
But the new problem is, how to solve the failover problem?
Found that the replication engine can solve data loss problem.
But the failover solution is still not clear.

Most helpful comment
As ClickHouse is multer-master replication, the best arch should be as below: