top | item 40700230

(no title)

vorador | 1 year ago

This is very unhelpful. There's a difference between "someone fatfingered a command and brought this mysql machine down" and "our cloud provider shut down a core feature for our account".

When you design a new system do you plan for S3 to go down for more than a day? Do you have a fleet of offsite machines to smoothly transition to? If not, why not?

discuss

order

koollman|1 year ago

Well, it is about things to prepare before being in this situation, I acknowledged already that it was unhelpful now, since it is too late. It is advice for other business deciders looking at this, or for this one for changes to implement in the future.

Sometimes the plan is "well, this business had a good run, now it is over".

Sometimes it can be as cheap as "well, here's the documentation to run all my stuff elsewhere, starting from my external backups"

Depends on how much money you lose from a failure and how likely the failure is. As an additional point, you may not plan for s3 going down, but even a price hike on egress traffic may put a business in trouble if trying to move without already having external backups. So, as often, you have to do some cost/risk analysis. But having backups not controlled by your main provider is often considered a good idea.

Technical problems, human error, cost changes, various disagreements between provider and customer, can all be made easier if you have a plan B rather than being stuck with a single provider or solution

misiek08|1 year ago

If data on S3 is crucial for business to be alive? Of course! I would even think about writing data to 2 separate storages in real time to be able to switch easily. 3-2-1 backup is a no joke, especially when it's your business, not a hobby project. Having DR too. And it's not a legacy, 20 years old system, so it's much easier to do such plans and test them.

vorador|1 year ago

Do you run a multicloud system too? In case the AWS account gets shut down by billing issues?

Brian_K_White|1 year ago

"There's a difference between "someone fatfingered a command and brought this mysql machine down" and "our cloud provider shut down a core feature for our account"."

No there isn't. Those are both exactly the same problem with exactly the same solutions.