Catching up after an outage
The utilization target of a system that recovers by replay is set by its recovery budget, not by its latency budget.
- Maximum throughput
- the system's maximum throughput
- Arrival rate
- normal arrival rate
- Outage
- how long the outage lasted
How it behaves
One input on the horizontal axis, the others held fixed.
Data table
| Utilization a/M | Catch-up time ÷ outage |
|---|---|
| 0.05 | 0.053× |
| 0.061 | 0.065× |
| 0.073 | 0.078× |
| 0.084 | 0.091× |
| 0.095 | 0.105× |
| 0.106 | 0.119× |
| 0.117 | 0.133× |
| 0.129 | 0.148× |
| 0.14 | 0.163× |
| 0.151 | 0.178× |
| 0.163 | 0.194× |
| 0.174 | 0.21× |
| 0.185 | 0.227× |
| 0.196 | 0.244× |
| 0.207 | 0.262× |
| 0.219 | 0.28× |
| 0.23 | 0.299× |
| 0.241 | 0.318× |
| 0.253 | 0.338× |
| 0.264 | 0.358× |
| 0.275 | 0.379× |
| 0.286 | 0.401× |
| 0.297 | 0.423× |
| 0.309 | 0.447× |
| 0.32 | 0.471× |
| 0.331 | 0.495× |
| 0.342 | 0.521× |
| 0.354 | 0.547× |
| 0.365 | 0.575× |
| 0.376 | 0.603× |
| 0.387 | 0.633× |
| 0.399 | 0.663× |
| 0.41 | 0.695× |
| 0.421 | 0.728× |
| 0.432 | 0.762× |
| 0.444 | 0.798× |
| 0.455 | 0.835× |
| 0.466 | 0.874× |
| 0.477 | 0.914× |
| 0.489 | 0.956× |
| 0.5 | 1× |
| 0.511 | 1.05× |
| 0.522 | 1.09× |
| 0.534 | 1.14× |
| 0.545 | 1.2× |
| 0.556 | 1.25× |
| 0.568 | 1.31× |
| 0.579 | 1.37× |
| 0.59 | 1.44× |
| 0.601 | 1.51× |
| 0.612 | 1.58× |
| 0.624 | 1.66× |
| 0.635 | 1.74× |
| 0.646 | 1.83× |
| 0.657 | 1.92× |
| 0.669 | 2.02× |
| 0.68 | 2.12× |
| 0.691 | 2.24× |
| 0.703 | 2.36× |
| 0.714 | 2.49× |
| 0.725 | 2.64× |
| 0.736 | 2.79× |
| 0.748 | 2.96× |
| 0.759 | 3.15× |
| 0.77 | 3.35× |
| 0.781 | 3.57× |
| 0.792 | 3.82× |
| 0.804 | 4.1× |
| 0.815 | 4.41× |
| 0.826 | 4.76× |
| 0.837 | 5.15× |
| 0.849 | 5.61× |
| 0.86 | 6.14× |
| 0.871 | 6.77× |
| 0.882 | 7.51× |
| 0.894 | 8.41× |
| 0.905 | 9.53× |
| 0.916 | 10.9× |
| 0.927 | 12.8× |
| 0.939 | 15.3× |
| 0.95 | 19× |
Worked examples, recomputed
Every number the mechanisms quote for this relationship is recomputed from it, so none of them disagrees with it.
- 3 h outage at 50% utilization → another 3 h to catch up
- recover in a third of the outage → run at 25% utilization
- at 90% utilization the drain is 1/9 of arrivals: 9× the outage
- ρ = 0.5 → 1 × the outage
- ρ = 0.8 → 4 × the outage
- ρ = 0.9 → 9 × the outage
- a 10-minute outage at ρ = 0.8 → 40 minutes to drain
- 10-minute outage at 90% → 5,400 s
- stop 6 h at 60% → 9 h to catch up
- 600,000 records of lag, 5,000 − 4,000 per second → 600 s
Where it appears
Each mechanism states it in its own names. The general symbol each name stands for is shown with it.
- Fault Tolerance & Delivery Semantics
What is the cheapest thing that can be safely done twice?
- Emergent Failure Dynamics
What happens when nothing is broken, every component is healthy, and the system's own response to stress makes the stress worse?
C = · λ =
- Streaming
What does it cost to remember, when the input never ends?
- Observability & Operations
What is the smallest description of a running system from which we can find a fault, fast enough to matter, at a cost we can still pay while the system is failing?