Designing for Failure: How to Manage Thousands of Hosts Through Automation
summary
Uber runs thousands of hosts with Apache Mesos and Aurora and builds a Cluster Lifecycle Manager to automate safe upgrades, drainage and remediation. CLM stores goal-state in Git, queries a local graph cache of inventory and monitoring, and dispatches workflows to Cadence orchestration workers (Cassandra-backed) that rate-limit batches, enforce SLAs (example: maintain 90% replicas for 10 minutes) and escalate from reboot to RMA. Early rollouts (batch sizes like 250) caused outages; CLM’s service-aware checks and automation cut hundreds of manual host alerts to mostly automatic fixes.
AI-written summary · about
chapters (4)
related talks
42mPlanning To Fail
47mDeploying Like a Boss: From 2 Servers to 20,000
50mOps issues
35mHandling Risky Business: Cluster Upgrades
41mScaling Reliability Engineering with Tools
07mNavigating the Minefield: Common Lifecycle Management Pitfalls at...
01h 02mTools for simplified large scale systems
49mAutomation in Deployment on Hybrid Hosting and Private Cloud Environments
