A Field Guide to Storage Tiers

Teams working on api design usually discover this the hard way. A design that cannot be rolled back is a design that cannot be changed safely. Latency budgets are easier to defend when every hop has a stated ceiling. This is most visible in api design. Consider api design specifically. Caching helps only until the invalidation rules become the bottleneck.

Boundaries may involve practical health decisions as well as personal comfort. If relevant, discuss contraception, barrier methods, STI testing, and what each person understands about risk before sexual activity. Be clear about what you will do if you cannot agree on a safety measure: for example, you may decide not to proceed. Neither partner should be expected to accept a risk they have not agreed to.

Cost Controls: If the rollback plan needs a meeting, it is not a rollback plan. Cost Controls: Small pages that stay small are easier to keep fast than large ones made fast. Cost Controls: Write the invariant down; otherwise it lives only in someone's memory.

For cost controls, the constraint matters more than the feature list. If a metric has no owner, it will drift until it causes an incident. Teams working on cost controls usually discover this the hard way. The cheapest optimisation is usually removing work nobody asked for. Aggregating at write time trades flexibility for predictable read cost. This is most visible in cost controls.

For rate limiting, the constraint matters more than the feature list. Configurations should be reviewable in a diff, not only in a console. Teams working on rate limiting usually discover this the hard way. The best time to add an index is before the table gets large. Failures are usually correlated, so plan for the shared dependency. This is most visible in rate limiting.

Observability: If a metric has no owner, it will drift until it causes an incident. Observability: The cheapest optimisation is usually removing work nobody asked for. Observability: Aggregating at write time trades flexibility for predictable read cost.

If the rollback plan needs a meeting, it is not a rollback plan. That applies to schema migration as well. In practice, schema migration behaves differently: Small pages that stay small are easier to keep fast than large ones made fast. Write the invariant down; otherwise it lives only in someone's memory. The same reasoning holds for schema migration.

For api design, the constraint matters more than the feature list. Configurations should be reviewable in a diff, not only in a console. Teams working on api design usually discover this the hard way. The best time to add an index is before the table gets large. Failures are usually correlated, so plan for the shared dependency. This is most visible in api design.

Storage Tiers: The interesting number is not the average, it is the 99th percentile. Storage Tiers: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Storage Tiers: Every abstraction you add is a place where behaviour can differ from intent.

Queue Design: A queue smooths spikes but also hides how far behind you are. Queue Design: Retries without jitter turn a small outage into a large one. Queue Design: Separating the reads from the writes buys room to change either side.

Cost Controls: The interesting number is not the average, it is the 99th percentile. Cost Controls: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Cost Controls: Every abstraction you add is a place where behaviour can differ from intent.

Crawl Budget: A design that cannot be rolled back is a design that cannot be changed safely. Crawl Budget: Latency budgets are easier to defend when every hop has a stated ceiling. Crawl Budget: Caching helps only until the invalidation rules become the bottleneck.

Monitoring Alerts: Periodic jobs should be safe to run twice, because they will be. You rarely need a new component to fix a boundary problem. That applies to monitoring alerts as well. In practice, monitoring alerts behaves differently: The signal you want is often already logged, just not aggregated.

API Design: The first thing to settle is the failure mode, not the happy path. API Design: Measurements taken once are anecdotes; you need a baseline that repeats. API Design: Costs usually concentrate in a small number of operations, so find those first.

For search indexing, the constraint matters more than the feature list. Configurations should be reviewable in a diff, not only in a console. Teams working on search indexing usually discover this the hard way. The best time to add an index is before the table gets large. Failures are usually correlated, so plan for the shared dependency. This is most visible in search indexing.

Serving static bytes is the cheapest thing you can do at the edge. The same reasoning holds for cloud infrastructure. For cloud infrastructure, the constraint matters more than the feature list. A schema is an interface; changing it is a migration, not an edit. Teams working on cloud infrastructure usually discover this the hard way. Track the denominator as carefully as the numerator.

Backup Strategy: Periodic jobs should be safe to run twice, because they will be. Backup Strategy: You rarely need a new component to fix a boundary problem. Backup Strategy: The signal you want is often already logged, just not aggregated.

Consider search indexing specifically. If the rollback plan needs a meeting, it is not a rollback plan. Search Indexing: Small pages that stay small are easier to keep fast than large ones made fast. Write the invariant down; otherwise it lives only in someone's memory. That applies to search indexing as well.

A queue smooths spikes but also hides how far behind you are. This is most visible in release process. Consider release process specifically. Retries without jitter turn a small outage into a large one. Release Process: Separating the reads from the writes buys room to change either side.

Cloud Infrastructure: A design that cannot be rolled back is a design that cannot be changed safely. Cloud Infrastructure: Latency budgets are easier to defend when every hop has a stated ceiling. Cloud Infrastructure: Caching helps only until the invalidation rules become the bottleneck.

In practice, crawl budget behaves differently: If a metric has no owner, it will drift until it causes an incident. The cheapest optimisation is usually removing work nobody asked for. The same reasoning holds for crawl budget. For crawl budget, the constraint matters more than the feature list. Aggregating at write time trades flexibility for predictable read cost.

Access Control: The interesting number is not the average, it is the 99th percentile. Access Control: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Access Control: Every abstraction you add is a place where behaviour can differ from intent.

In practice, access control behaves differently: If a metric has no owner, it will drift until it causes an incident. The cheapest optimisation is usually removing work nobody asked for. The same reasoning holds for access control. For access control, the constraint matters more than the feature list. Aggregating at write time trades flexibility for predictable read cost.

Search Indexing: The interesting number is not the average, it is the 99th percentile. Search Indexing: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Search Indexing: Every abstraction you add is a place where behaviour can differ from intent.