Comment by jsnell
2 days ago
Why in the world would the program exit due to that? This is a server. I'd you're going to fail entirely due to the error, the natural scope of error propagation is to fail the request. Having the entire program quit would be insane.
And when the failures are request-scoped, you're back to the outage not being global but affecting only the customers using this feature with a bad config.
They said it themself:
We will modularize Service Control’s architecture, so the functionality is isolated and fails open. Thus, if a corresponding check fails, Service Control can still serve API requests.
It's clear that they have issues in the service itself not related to language.