Failover can fail if never exercised
A failover that has never been performed is a theory.
Certificates expire on the standby, configuration drifts, the automation references something that no longer exists, capacity turns out to be insufficient, and nobody discovers any of it until the primary is gone. Exercising it is disruptive, which is why it does not happen, which is why it does not work.
More on Resilience
- High availability and disaster recovery solve different problemsA part, or the place
- A dependency can be more critical than the applicationThe lighter side goes down
- Manual workarounds have capacity limitsThe pipe gets narrower
- Recovery priorities should follow business outcomesWhose order is it?
- Resilience includes people and suppliersThe shelf runs out
- Graceful degradation preserves the important partDrop the ballast