How it works
Why does it behave this way?
- 1
Why failure recovery is a different kind of problem
Why can a system not simply find out what happened?
- 2
Recovery mechanisms
From what can interrupted state be rebuilt, and which failure model do all nine recovery mechanisms assume?
9 pages - 3
Making a repeat harmless
Why can a duplicate not be prevented at the sender, and where can the record of 'already done' be kept?
8 pages - 4
Availability: masking a lost node
Why is a second copy the one cost with no escape, and why is every durability figure a claim about correlation?
5 pages