Live data from Hacker News

Google loses data as lightning strikes

bbc.com

61–70 of 142 posts

Re: Google loses data as lightning strikes

#62
post #30

Earlier quoted context omitted.

This is S3 which isn't comparable to Google's persistent disks. S3 is equivalent to Google Cloud Storage which has "99.999999999%" durability as per https://cloud.google.com/storage/ To accurately compare them you'd need to look at AWS EBS: "Amazon EBS volumes are designed for an annual failure rate (AFR) of between 0.1% - 0.2%, where failure refers to a complete or partial loss of the volume, depending on the size a…

The point isn't to compare competing cloud services, but draw attention to the fantastical nature of these durability promises.

I don't think so, PD and GCS are fundamentally different products. PD is like the local disk, and you cannot assume it last forever. while GCS is durable storage and it is safer.

" This outage is wholly Google's responsibility. However, we would like to take this opportunity to highlight an important reminder for our customers: GCE instances and Persistent Disks within a zone exist in a single Google datacenter and are therefore unavoidably vulnerable to datacenter-scale disasters. Customers who need maximum availability should be prepared to switch their operations to another GCE zone. For maximum durability we recommend GCE snapshots and Google Cloud Storage as resilient, geographically replicated repositories for your data. "

In a cloud based infra, one still needs to know the difference. And for the ultra-low numbers, they are from mathematics I think. (# replicas, possibly cross DC/geo)

Re: Google loses data as lightning strikes

#64

Relevant amusing bit from the Amazon FAQ: "S3 is designed to provide 99.999999999% durability of objects over a given year. This durability level corresponds to an average annual expected loss of 0.000000001% of objects. For example, if you store 10,000 objects with Amazon S3, you can on average expect to incur a loss of a single object once every 10,000,000 years." I think my favorite part of that is "on average", a…

At this point, correlation matters. In the unlikely event that I lose at least 1 object, what is the conditional probability of losing another?

(Forgetting about correlation was a big part of the MBS and LTCM financial failures)

Re: Google loses data as lightning strikes

#65
post #26

Earlier quoted context omitted.

Nowadays they use Reed–Solomon coding to effectively distribute their data without copying it to 3 places.

Do you have a source for that? Why would they start using it now?

Disclaimer: googler, but not working on storage.

link here: http://static.googleusercontent.com/external_content/untrust...

actually in colossus one can tune RS coding parameters per file, to get a tradeoff between performance/durablity.

RS coding uses less copies, but same level of safety (tradeoff is the recovery computation time.)

Re: Google loses data as lightning strikes

#66

Relevant amusing bit from the Amazon FAQ: "S3 is designed to provide 99.999999999% durability of objects over a given year. This durability level corresponds to an average annual expected loss of 0.000000001% of objects. For example, if you store 10,000 objects with Amazon S3, you can on average expect to incur a loss of a single object once every 10,000,000 years." I think my favorite part of that is "on average", a…

Another problem is that any errors in assumptions or omissions made when calculating the odds will be enormously magnified.

I wouldn't trust any of these figures unless they have ongoing efforts to test them empirically. E.g. create distributed databases of 100 trillion objects, mess with them in various ways, and perform correctness checks on them.

Re: Google loses data as lightning strikes

#67
post #64

Relevant amusing bit from the Amazon FAQ: "S3 is designed to provide 99.999999999% durability of objects over a given year. This durability level corresponds to an average annual expected loss of 0.000000001% of objects. For example, if you store 10,000 objects with Amazon S3, you can on average expect to incur a loss of a single object once every 10,000,000 years." I think my favorite part of that is "on average", a…

At this point, correlation matters. In the unlikely event that I lose at least 1 object, what is the conditional probability of losing another? (Forgetting about correlation was a big part of the MBS and LTCM financial failures)

And Fukushima.

Assumptions that variables are independent are often very mistaken.

Re: Google loses data as lightning strikes

#68
post #56

Relevant amusing bit from the Amazon FAQ: "S3 is designed to provide 99.999999999% durability of objects over a given year. This durability level corresponds to an average annual expected loss of 0.000000001% of objects. For example, if you store 10,000 objects with Amazon S3, you can on average expect to incur a loss of a single object once every 10,000,000 years." I think my favorite part of that is "on average", a…

Glacier is also 99.999999999%. But those nines are only true if Amazon's software is bug-free. I've lost data on Glacier on my home account. They personally called me to apologize.

So empirically speaking their reliability is far, far worse than stated just based on that one data point.

Re: Google loses data as lightning strikes

#70
post #64

Earlier quoted context omitted.

At this point, correlation matters. In the unlikely event that I lose at least 1 object, what is the conditional probability of losing another? (Forgetting about correlation was a big part of the MBS and LTCM financial failures)

And Fukushima. Assumptions that variables are independent are often very mistaken.

Or the bigger problem: assuming your future reliability looks just like your past. For example, say they have a problem with year 2038. Everything works great until everything doesn't work at all.
Post reply on HN