3 ms·
A solid active/standby design should regularly flop. Every 2 weeks seems to be a sweet spot. This also balances wear across consumable hardware like disks. If
by mike_d 5y ago
A solid active/standby design should regularly flop. Every 2 weeks seems to be a sweet spot. This also balances wear across consumable hardware like disks.
If your failover is happening "all the time" you basically just have a single system with failures.
- yencabulator 5y agoExcept for this: > However, because of that choice, replication between regions is asynchronous—meaning the remote replicas are always some number of transactions behind the primary region. Switching the active is a data loss event. Or, you can choose to drain the load and wait for the replication to catch up, but that's downtime and not a test of the real failure mechanism.