Comment by oarabbus_

5 years ago

How do you avoid circular dependencies on an out-of-band-network? Seems like the choice is between a circular dependency, or turtles all the way down.

How do you go from "have a separate access method that doesn't depend on your main system" to "turtles all the way down"? The secondary access is allowed to have dependencies, just not on your network.

  • And if the secondary access fails, then what? Backup systems are not reliable 100% of the time.

    • Then you were 1-FT, which is still worlds better than 0-FT.

      "Don't put two engines on the plane because both of them might fail" is not how fault tolerance works.

      1 reply →