Right... I recall an incident in AWS where a malformed gossip packet took down all of Dynamo. Seems that even P2P doesn't mitigate against corner cases.
On Tue, Sep 1, 2009 at 3:12 PM, Jonathan Ellis <[email protected]> wrote: > The big win for Cassandra is that its p2p distribution model -- which > drives the consistency model -- means there is no single point of > failure. SPF can be mitigated by failover but it's really, really > hard to get all the corner cases right with that approach. Even > Google with their 3 year head start and huge engineering resources > still has trouble with that occasionally. (See e.g. > http://groups.google.com/group/google-appengine/msg/ba95ded980c8c179.)
