Health Check & Service Discovery · View 04 of 21 · People and journeys
What answers the trough
- Drain-to-termination is gated on the measured propagation delay, not a fixed sleep — the number moves when the platform does.
- Slow start is published as a rising weight by the control plane, so every client honours the same curve.
- A refused drain returns the floor it hit, so the pipeline can report a reason rather than retrying blindly.
Assumptions
- Graceful drain visible to 99% of callers in 2 s, 99.9% in 5 s; new instance eligible 20 s after first readiness pass.
- Ramp to full weight over at least 60 s; lease expiry removes an ungraceful exit within 30 s.
Residual risk
- A service whose warm-up is longer than 60 s will still be hurt by the ramp. The ramp length is per service, and few teams tune it.