4 ms·
>> you need to load balance across multiple independent availability zones The only problem with that is, there are no independent availability zones. What we
by kreeben 5y ago
>> you need to load balance across multiple independent availability zones
The only problem with that is, there are no independent availability zones.
What we do have, though, is an architecture where errors propagate cross-zone until they can't propagate any further, because services can't take any more requests, because they froze, because they weren't designed for a split brain scenario, and then, half the internet goes down.
- outworlder 5y ago> The only problem with that is, there are no independent availability zones. There are - they can be as independent as you need them to be. Errors won't necessarily propagate cross-zone. If they do, someone either screwed up, or they made a trade-off. Screwing up is easy, so you need to do chaos testing to make sure your system will survive as intended.
- kreeben 5y agoI'm not talking about my global app. I'm talking about the system I deploy to, the actual plumbing, and how a huge turd in a western toilet causes east's sewerage system to over-flow.