5 ms·

My rule for a couple decades: any failover procedure that only gets run when there's a failure, will not work.