Or, the redundancy actually causes a failure, so not only have you spent more money but you’ve reduced your availability doing so.
(Or worse, the redundancy causes a subtle failure like data loss.)
(Or worse, the redundancy causes a subtle failure like data loss.)
When you start playing the HA game, the easy failures go off the table, and things break less often because “failures happen constantly and are auto-healed”. But when your virtual IP failover goes sideways or your cluster scheduler starts reaping systems because the metadata service is giving it useless data, you’re well into an infrequent, complex failure, and I hope you have a good ops team.
It’s always a trade off.