Choosing the reserved cluster failover capacity