In an rgw multi-site production environment, how many rgw instances will be started in a single zone? According to my test, multiple rgw instances will compete for the datalog leaselock, and it is very likely that the leaselock will not be renewed. Is the default rgw_sync_lease_period=120s a bit small?
