“Regional redundancy works when failure is bodily or infrastructural. It doesn’t work when failure is logical and shared,” Gogia stated. “When metadata contracts change in a backwards-incompatible manner, each area that will depend on that shared contract turns into weak, no matter the place the information bodily resides.”
The outage uncovered a misalignment between how platforms take a look at and the way manufacturing truly behaves, Gogia stated. Manufacturing entails drifting consumer variations, cached execution plans, and long-running jobs that cross launch boundaries. “Backwards compatibility failures sometimes floor solely when these realities intersect, which is tough to simulate exhaustively earlier than launch,” he stated.
The problem raises questions on Snowflake’s staged deployment course of. Staged rollouts are extensively misunderstood as containment ensures when they’re truly probabilistic threat discount mechanisms, Gogia stated. Backwards-incompatible schema modifications usually degrade performance regularly as mismatched parts work together, permitting the change to propagate throughout areas earlier than detection thresholds are crossed, he stated.
