Term Kind Topic What it is
AWS S3 2017: The Blast Radius of a Typo S3 us-east-1 Outage case-study Failure Modes A mistyped command during routine debugging removed far more capacity than intended, and the affected subsystems had not been restarted in years.
Byzantine Fault concept Failure Modes A failure in which a component behaves arbitrarily or deceptively — returning wrong results rather than stopping — as distinct from simply crashing.
Circular Observability Dependency Blind Spot Cycle, Self-Observing Stack, Telemetry Co-Failure concept Failure Modes When the tooling used to diagnose a failure runs on the infrastructure that is failing - so the outage removes the ability to see the outage, converting a technical problem into a search problem.
Control-Interval Matching Actuation Delay Matching, Feedback Loop Damping concept Failure Modes Setting a feedback loop's control interval to the delay of the thing it actuates - because a controller that adjusts faster than the system can respond amplifies noise instead of correcting error.
Fail-Fast vs Fail-Safe concept Failure Modes Whether a component should stop immediately on detecting a problem, or continue in a degraded but safe mode — a choice that depends entirely on which outcome is worse.
Gray Failure Partial Failure, Fail-Slow concept Failure Modes A component that is degraded rather than down, passing health checks while serving a portion of requests slowly or incorrectly.
Grey Failure Partial Failure, Fail-Slow concept Failure Modes A component that is degraded rather than down — slow, intermittently erroring, or failing for a subset of operations — which defeats health checks built for binary states.
Hedged Request Request Hedging, Tied Request pattern Failure Modes Sending the same request to a second replica after a short delay and using whichever responds first, to cut tail latency caused by unlucky slow servers.
Metastable Failure Congestive Collapse, Death Spiral concept Failure Modes A failure state that sustains itself after the original trigger is gone, because the system's own recovery behaviour generates the load keeping it down.