3 ms·
I disagree. EC2 is inherently unreliable, and so are consumer-grade desktops like Mac Minis. The strategy in EC2 is to be able to spin up replacements very qu
by alrs 14y ago
I disagree.
EC2 is inherently unreliable, and so are consumer-grade desktops like Mac Minis.
The strategy in EC2 is to be able to spin up replacements very quickly when your instances fail.
The only strategy for a non-power-redundant, non-RAID, no-IPMI Mac Mini failure is the same, except replacement is measured in minutes or hours instead of seconds. This is huge.
- derefr 14y agoIf you're running above-capacity, a single failure of a box in any working set (routers, database shards, app servers, etc.) doesn't matter. Just wait the few hours and let the rest of your boxes silently absorb the load. If you're running exactly-at-capacity: why? (This presumes, though, that you're Highly Available enough to begin with that one node lost is a quantitative, not qualitative, failure in your system. If you only have one app server, time-to-reprovision is the least of your worries.)