LOW KAH YIENGINEER & SYSTEMS THINKER
Appearance
Contact
← Selected work

INFRASTRUCTURE / RECOVERY PLANNING

Consolidate the hardware. Plan the recovery.

Moving control applications onto shared servers saves hardware and concentrates risk. The recovery has to be planned with it.

An essay on general practice · About 2 min read

Constraint
Consolidation concentrates risk, so visibility and recovery have to improve with it.
Decision
Pair a shared platform with continuous monitoring and rehearsed recovery.
Consolidation / shared failure boundary

Separate hosts

Application 1 / host 1
Application 2 / host 2
Application 3 / host 3

A host fault has a narrower application impact.

Consolidated host

VM 1VM 2VM 3
Hypervisor
Shared physical host
SHARED FAILURE BOUNDARY

One host can affect several applications.

Application dependenciesVisibilityRecovery exercises

Conceptual topology with invented application labels, illustrating shared dependencies.

The situation

Industrial control applications tend to accumulate on dedicated physical servers, each needing its own space, power, patching and eventual replacement. Consolidating them reduces hardware but concentrates risk: one host failure can affect many applications, so visibility and recovery have to improve at the same time.

What I look for

When control applications move onto shared, virtualized servers, I look at three things together: how much each application demands of the host, how its failure would be noticed, and how it would be recovered and verified. A consolidation is only as good as the recovery drill that proves it.

What it changes

Fewer physical servers to patch, power and eventually replace. In exchange, a single host failure now reaches many applications at once. Visibility into the shared platform, and a recovery that has actually been rehearsed, are what make that trade acceptable.

The engineering principle

Bringing applications onto shared infrastructure changes the consequences of a dependency failure. Resource demand, supportability, visibility and recovery need to be considered together.

INSIDE THE DECISION

What changes when applications share infrastructure?

The trade-off a consolidation decision has to resolve.

Separate physical hosts

What it offers
A host failure has a narrower application impact.
What it asks of the design
More physical infrastructure to support.

Shared virtual infrastructure

What it offers
A more consistent support platform.
What it asks of the design
Shared dependencies make visibility and recovery more consequential.

Questions for a design review

  1. Understand application demand and support requirements.
  2. Review shared dependencies and their consequences.
  3. Define the evidence needed to recover and verify service.
  4. Distinguish evaluation evidence from operational adoption.

An infrastructure decision should make the resulting support and recovery model easier to understand.

Terms used on this page
Virtualization
Running several separate computers as virtual machines on one physical server, so they share its hardware.
Hypervisor
The software layer that runs virtual machines on a physical server and shares its processors, memory and storage between them.
All terms →

Diagrams are conceptual and do not depict any employer system.