O'Reilly logo
  • First Last thinks this is interesting:

In the case of an ungraceful failover, however, it is impossible to be sure that the failed namenode has stopped running.

From

Cover of Hadoop: The Definitive Guide, 3rd Edition

Note

This is just like HADR.