Failover transfers service traffic from failed primary resources to passive standby resources. An active-passive configuration keeps one environment serving requests while another remains ready as backup. section 9.1.2
A practical failover sequence is:
- Create a duplicate passive environment in another region and manage it with infrastructure as code. section 9.1.2
- Test, monitor, and observe infrastructure and applications before making changes, then debug the failed environment after traffic moves. section 9.1.2 section 9.4
Regional standby
The sundew system runs actively in us-central1 and keeps a passive duplicate in us-west1. If the active environment breaks during an IaC change, traffic moves to the passive region. section 9.1.2





