Datanode fault tolerance