SL#152 - Architecture at Scale (1) - Slack: Silo Every Service by Availability Zone, Then Drain the Zone From the Edge

Slack did not teach its RPC clients to survive a sick availability zone. It kept every service inside its own zone and moved failover to one lever at the edge, pulled in under five minutes with no user-visible errors.