Site Reliability Engineering: How Google Runs Production Systems

by Betsy Beyer

If a component enters a degraded mode on heavy load, is it capable of exiting the degraded mode without human intervention? If a couple of servers crash under heavy load, how much does the load need to drop in order for the system to stabilize?