The cluster can recover from multiple simultaneous node failures if the total number of failed nodes does not exceed the value configured for max_failures.
Queries (DML and DDL)
If a transaction or statement is interrupted by a Group Change before it has a chance to commit, it will receive an error.
If the global autoretry is true and a transaction was submitted with autocommit enabled, the database will automatically retry. If the retried statements cannot be executed successfully, the application will receive another error.
Replication processes will automatically restart at the proper binlog location following a Group Change.
Connections to nodes that are still in quorum will be maintained and will not experience any errors. Connections to non-communicative nodes will be lost.