Kill switch delivery

Guard 16

Choose

A risky feature sits behind a flag. 3 API instances check the flag on each of 3,000 requests/s. The flag store restarts for 20 s at 0:20. At 0:50 you turn the flag off. Fewer than 3,000 replies may still run the feature. Keep errors under 1 percent.

Goals

Not tested yet

The share of requests that fail or get no answer.Copies of data that do not match.99 of 100 requests finish faster than this.What the servers and services cost each month.
Choose a design
Read the flag store on every request
Keep the flag in each instance for 5 minutes
Keep the flag in each instance and push every change to it