Hi @patrickbingham ,
You have read correctly but perhaps not completely.
If one, two or more drives fail in the same node, that is like a single node failre. No failover. The contents of the drives are rebuilt typically in the order of seconds (flash) or minutes (spinning disk) rather than hours. Once the data is protected again, you go back to square one.
If during the seconds/minutes of the rebuild, a drive on a SECOND node in the SAME site fails, the cluster will fail over to the second site for the time it takes to rebuild.
So at the end of the day you have an extemely efficient highly redundant cluster.
I hope this helps
Don't forget to mark answers as correct if it solves your problem. This helps others find the correct answer if they search for the same problem
RedNectar aka Chris Welsh.
Forum Tips: 1. Paste images inline - don't attach. 2. Always mark helpful and correct answers, it helps others find what they need.