> For failures that don't take down the datacenter, we already have a hot standby. For datacenter failures, we can migrate to a different host (at least, we bel

> For failures that don't take down the datacenter, we already have a hot standby. For datacenter failures, we can migrate to a different host (at least, we believe we can—it's been a while since we verified this). It might be a good idea to verify it; see the recent events at OVH (https://news.ycombinator.com/item?id=26407323 https://news.ycombinator.com/item?id=26407323).