On Jan 21, 2025, at 11:27 AM, Winfield, Alister (Senior Solutions Architect) via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I’ll add one more… decide now what you want to happen if after all the planning and design something does fail. Depending on the situation the business requirements surrounding failure differ. Some cases accounting is critical so services should stop if it fails in others its far more important that the services stay up and any potential issues get handled post incident.
Agreed. Failure should not be an unusual situation which causes panic and worry. The entire system should be designed based on knowing that every single piece can fail. So the design of the system should include not only what each system does and how it works, but also what happens when that system fails. You don't make a system resilient to failure by making it perfect. You make it resilient to failure by making sure that failure isn't a problem. Alan DeKok.