Zone failover drill

Incident drill · Advanced

What is happening

Game day plan: at 40 s one zone of the data centre (the one running the most app servers) loses power for a minute; at 110 s the database primary is shut down.

Today every app server runs in one zone, and the database has no standby.

Change the design so checkout stays above 97% available through both failures.

You have 3 changes and 8 minutes. A change is adding or removing a part or a connection, or changing a part’s settings. Fewer changes and less time score higher.