Platform & DevOps·Running it: capacity, failure and recovery
the control plane was down for an hour and traffic kept flowing, because nothing in the request path needed to ask it anything.
Static stability
Also calledstatically stable design, survive without the control plane
Designing so a system keeps working from its existing state when its dependencies for making changes are unavailable, rather than needing a successful call to stay healthy. The classic application is capacity: pre-provision for the failed state so a zone failure requires no scaling event, since the scaling API is likely to be struggling at exactly that moment. It costs money in idle capacity and buys you not depending on anything working during the worst hour of the year.