plugin is very inefficient.
That seems like a logical place to start.
It seems like a shared FS solution might fit but that doesn't necessarily protect against datacenter failure. The two extra hosts in another location would probably help prevent that situation.