plugin is very inefficient.
That seems like a logical place to start.
It seems like a shared FS solution might fit but that doesn't
necessarily protect against datacenter failure. The two extra hosts in
another location would probably help prevent that situation.