Multi-Region Resilience: Failover, Data, and DNS
Design for region failure. Active/passive and active/active, data replication, and failover testing.
Key takeaways
- Design for region failure.
- Active/passive and active/active, data replication, and failover testing.
On this page
Multi-Region Resilience: Failover, Data, and DNS#
Single-region risk is high. Multi-region design improves availability and disaster recovery.
Patterns#
- Active/passive: One primary region; failover to secondary on failure. RTO/RPO depend on replication and DNS.
- Active/active: Traffic in multiple regions; better latency and availability, harder data consistency.
Data#
- Replication: Async for RPO tolerance; sync for strong consistency (with latency tradeoff).
- Conflict resolution: Last-write-wins or application-defined; test conflict scenarios.
DNS and Traffic#
- Route53 / global load balancers: Health checks and failover or weighted routing.
- TTL: Lower TTL before failover to reduce propagation delay; balance with DNS load.
Best Practices#
- Run failover drills regularly; automate where possible.
- Document RTO/RPO and runbooks; align with business.
- Monitor replication lag and health in both regions.
Multi-region adds cost and complexity; start with critical paths and expand.
Get the DevOps Troubleshooting Cheat Sheet
Subscribe and get our free one-page reference for the errors that eat an afternoon — CrashLoopBackOff, OOMKilled, Terraform state locks, and more — plus new guides as we publish them.
Canary Releases: Gradual Rollout Strategy
We've run canary deploys on most services for two years. The mechanics are easy; the metrics that decide "promote or roll back" are where the design is.
DevOps Metrics and KPIs: Measuring Success
We track the four DORA metrics plus a handful of others. The trade-off between what's measurable and what's meaningful, and how we use the numbers.
More from Cloud
Explore more articles in this category
Best Serverless Databases in 2026 (Compared)
A practitioner comparison of the leading serverless databases by use case, cold-start behavior, branching, pricing model, and lock-in.
Cloudflare D1: The Edge SQLite Database Guide (2026)
A practitioner's look at Cloudflare D1, the serverless SQLite database built for Workers, covering setup, read replication, limits, and fit.
Neon vs PlanetScale: Serverless SQL Compared (2026)
A practitioner comparison of Neon's serverless Postgres against PlanetScale's Vitess-backed MySQL to help you pick the right database.
You might have missed
Evergreen posts worth revisiting.