NetworkNews

Alibaba Cloud Brazil: check services and failure domains

On this page
  1. Open infrastructure and planned services
  2. Two zones need an explicit failure model
  3. Measure the path your users take
  4. Sources

Alibaba Cloud announced its first South American region on 27 August, with two data centres in Brazil. Local infrastructure creates another deployment option, but the announcement alone does not establish the availability or resilience of your exact application.

Three voting members split 2+1 across two zones require two survivors. Losing the one-member zone preserves quorum; losing the two-member zone does not. This is an illustrative topology, not an Alibaba service diagram.
Three voting members split 2+1 across two zones require two survivors. Losing the one-member zone preserves quorum; losing the two-member zone does not. This is an illustrative topology, not an Alibaba service diagram. Chart : PeopleAreGeek. Data source.
View full-size image

Open infrastructure and planned services

The Brazilian press statement describes the region’s opening and plans to introduce enterprise agent services. Those future services should not all be described as available at launch. The statement gives a worldwide footprint of 106 availability zones across 31 regions; those are the company’s figures at announcement time.

A product category is not an instance specification. Before moving a workload, check its exact compute family, managed database version, quotas and regional endpoints. Trace backup, monitoring and external API destinations as well: deploying the application in Brazil does not prove every dependency runs there.

Two zones need an explicit failure model

Our earlier explanation wrongly suggested that quorum systems simply need an odd number of failure domains. A majority depends on voting members and their placement, not on making the zone count odd.

The etcd FAQ explains that a cluster needs a majority to make progress. For a three-voter example, place two members in zone A and one in B. Losing B leaves two voters and preserves a majority; losing A leaves one and cannot. The diagram illustrates this arithmetic, not Alibaba’s managed-database architecture.

Four voters split two and two do not solve that problem: either zone loss leaves two, below the required three. A third independent domain can help, but remote latency, correlated failures and the service’s supported topology still matter. Do not improvise a witness configuration that the database does not support.

Measure the path your users take

Test from the cities and access networks that supply your actual traffic. Record connection time, end-to-end response time and error rate at several times of day. Compare equivalent application work rather than a ping to one provider and a database query to another. A closer region can reduce distance without eliminating poor routing or a distant backend.

For resilience, deliberately stop a disposable replica and check which operations remain available. Then test restoration from a separate backup. Passing a replica-failure test does not establish survival of a whole zone outage; label each result by the failure you actually exercised. We have not provisioned or benchmarked the new region.

Sources

Checked the Brazilian launch statement; corrected August 27, separated planned agent services from launch availability, and corrected two-zone quorum reasoning.