正在加载内容...

963963 Chat News Review Independent coverage of news

When Cloud Infrastructure Is the Wrong Choice

By James Whitfield · · 1321 words
When Cloud Infrastructure Is the Wrong Choice

A design that cannot be rolled back is a design that cannot be changed safely. The same reasoning holds for observability. For observability, the constraint matters more than the feature list. Latency budgets are easier to defend when every hop has a stated ceiling. Teams working on observability usually discover this the hard way. Caching helps only until the invalidation rules become the bottleneck.

Storage Tiers: A queue smooths spikes but also hides how far behind you are. Storage Tiers: Retries without jitter turn a small outage into a large one. Storage Tiers: Separating the reads from the writes buys room to change either side.

For cost controls, the constraint matters more than the feature list. If a metric has no owner, it will drift until it causes an incident. Teams working on cost controls usually discover this the hard way. The cheapest optimisation is usually removing work nobody asked for. Aggregating at write time trades flexibility for predictable read cost. This is most visible in cost controls.

If the rollback plan needs a meeting, it is not a rollback plan. The same reasoning holds for backup strategy. For backup strategy, the constraint matters more than the feature list. Small pages that stay small are easier to keep fast than large ones made fast. Teams working on backup strategy usually discover this the hard way. Write the invariant down; otherwise it lives only in someone's memory.

In practice, release process behaves differently: Periodic jobs should be safe to run twice, because they will be. You rarely need a new component to fix a boundary problem. The same reasoning holds for release process. For release process, the constraint matters more than the feature list. The signal you want is often already logged, just not aggregated.

Configurations should be reviewable in a diff, not only in a console. This is most visible in edge caching. Consider edge caching specifically. The best time to add an index is before the table gets large. Edge Caching: Failures are usually correlated, so plan for the shared dependency.

A design that cannot be rolled back is a design that cannot be changed safely. The same reasoning holds for monitoring alerts. For monitoring alerts, the constraint matters more than the feature list. Latency budgets are easier to defend when every hop has a stated ceiling. Teams working on monitoring alerts usually discover this the hard way. Caching helps only until the invalidation rules become the bottleneck.

Monitoring Alerts: Periodic jobs should be safe to run twice, because they will be. Monitoring Alerts: You rarely need a new component to fix a boundary problem. Monitoring Alerts: The signal you want is often already logged, just not aggregated.

You can often replace a coordination problem with an idempotency key. The same reasoning holds for rate limiting. For rate limiting, the constraint matters more than the feature list. Anything that grows without a bound will eventually hit one. Teams working on rate limiting usually discover this the hard way. Documentation that is not tested tends to describe the previous version.

Search Indexing: Configurations should be reviewable in a diff, not only in a console. Search Indexing: The best time to add an index is before the table gets large. Search Indexing: Failures are usually correlated, so plan for the shared dependency.

A queue smooths spikes but also hides how far behind you are. This is most visible in rate limiting. Consider rate limiting specifically. Retries without jitter turn a small outage into a large one. Rate Limiting: Separating the reads from the writes buys room to change either side.

Partners may have different preferences. They can discuss whether there is an option both freely want, but neither person owes a compromise involving their body, safety or privacy. If there is no mutually acceptable option, stopping or not doing the activity is a valid outcome. A difference in boundaries can also reveal a broader mismatch in expectations; that does not make either person’s limit less legitimate.

Load Balancing: If the rollback plan needs a meeting, it is not a rollback plan. Load Balancing: Small pages that stay small are easier to keep fast than large ones made fast. Load Balancing: Write the invariant down; otherwise it lives only in someone's memory.

Cost Controls: The interesting number is not the average, it is the 99th percentile. Cost Controls: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Cost Controls: Every abstraction you add is a place where behaviour can differ from intent.

If the rollback plan needs a meeting, it is not a rollback plan. The same reasoning holds for schema markup. For schema markup, the constraint matters more than the feature list. Small pages that stay small are easier to keep fast than large ones made fast. Teams working on schema markup usually discover this the hard way. Write the invariant down; otherwise it lives only in someone's memory.

Boundaries may involve practical health decisions as well as personal comfort. If relevant, discuss contraception, barrier methods, STI testing, and what each person understands about risk before sexual activity. Be clear about what you will do if you cannot agree on a safety measure: for example, you may decide not to proceed. Neither partner should be expected to accept a risk they have not agreed to.

The interesting number is not the average, it is the 99th percentile. That applies to rate limiting as well. In practice, rate limiting behaves differently: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Every abstraction you add is a place where behaviour can differ from intent. The same reasoning holds for rate limiting.

Consider edge caching specifically. A design that cannot be rolled back is a design that cannot be changed safely. Edge Caching: Latency budgets are easier to defend when every hop has a stated ceiling. Caching helps only until the invalidation rules become the bottleneck. That applies to edge caching as well.

Cloud Infrastructure: If a metric has no owner, it will drift until it causes an incident. Cloud Infrastructure: The cheapest optimisation is usually removing work nobody asked for. Cloud Infrastructure: Aggregating at write time trades flexibility for predictable read cost.

Observability: The first thing to settle is the failure mode, not the happy path. Measurements taken once are anecdotes; you need a baseline that repeats. That applies to observability as well. In practice, observability behaves differently: Costs usually concentrate in a small number of operations, so find those first.

Routine sexual-health screening is a preventive check for sexually transmitted infections (STIs), often offered to people who have no symptoms. It may include a discussion of sexual history and one or more tests, but there is no single panel used everywhere. The tests recommended depend on a person’s health, the kinds of sexual contact they have had, timing, pregnancy status and local guidance.

API Design: If the rollback plan needs a meeting, it is not a rollback plan. API Design: Small pages that stay small are easier to keep fast than large ones made fast. API Design: Write the invariant down; otherwise it lives only in someone's memory.

Boundaries can change with circumstances, health, trust or preference. Partners can check in before a new activity or after an experience, without treating a previous agreement as permanent. Digital boundaries deserve the same care as in-person ones: discuss private messages, location sharing, passwords and images. Consent to receive or make an image is not permission to forward it.

In practice, storage tiers behaves differently: A queue smooths spikes but also hides how far behind you are. Retries without jitter turn a small outage into a large one. The same reasoning holds for storage tiers. For storage tiers, the constraint matters more than the feature list. Separating the reads from the writes buys room to change either side.

Related reading