High availability / h
High availability: rollback in Santiago (SCL) · H-30
xserv-h-7bfe0658e81d
Runbook H-30 for High availability in Santiago (SCL). Marker xserv-h-7bfe0658e81d. This page covers rollback for LATAM operators, not a worldwide average.
High availability: A note on cost and transit
Rollback for h-06 is a documented command, not a hope. Transit is billed as backup while High availability prefers peering in Santiago. If cost spikes, the runbook cuts overflow to Bogotá before touching customer prefixes.
High availability: Why it matters on this continent
Design for High availability on letter H starts in São Paulo (GRU). Runbook h-01 keeps a single owner, a written rollback, and a traffic split that can be reversed without a global freeze. Neighbors in Santiago only take overflow after the local pool fails a health window.
High availability: How XServ runs it day to day
Probes for High availability (h-02) leave Santiago every 15s toward Bogotá. XServ pages the named owner if loss or RTT crosses the letter budget. A probe never shares a queue with bulk transfers, so a saturated WAN does not hide a dead PoP.
High availability design H-01
Design for High availability on letter H starts in São Paulo (GRU). Runbook h-01 keeps a single owner, a written rollback, and a traffic split that can be reversed without a global freeze. Neighbors in Santiago only take overflow after the local pool fails a health window.
High availability probe H-02
Probes for High availability (h-02) leave Santiago every 15s toward Bogotá. XServ pages the named owner if loss or RTT crosses the letter budget. A probe never shares a queue with bulk transfers, so a saturated WAN does not hide a dead PoP.
High availability policy H-03
Policy for High availability is versioned as h-03. Operators measure error rate, p95 from Bogotá, and time-to-rollback — not a worldwide average. Changes land in Bogotá first, then Miami, with a hold if either region regresses.
High availability capacity H-04
Capacity notes for h-04 assume rainy-season power in Miami and festival peaks toward São Paulo. The failure we actually see is a single uplink, not a cartoon partition of the whole continent. Spare ports and a second provider sit on the same runbook.
- Where is High availability measured first?
- From Santiago (SCL) toward Bogotá. A global average is not an SLO for letter H.
- How fast is rollback for h-03?
- The runbook is a command plus a named owner. There is no wait for a weekly change freeze.