The onsite Tandem engineers had never been faced with a NonStop setup that just...stopped (actually it was worse than that). Bear in mind this was the company that used to do demos by randomly unplugging hardware and the transactions kept chugging along. We ended up punting coverage to a smaller flat version of the site served off Compaqs running IIS while we cleaned up the mess.
Now, Tandem shouldn't feel bad. After all, Cisco had guys in the hosting facility trying to keep the then-new PIX series up and running.
The thing with systems designed to never go down is that you still need to be sure the recovery process works well. Never going down is just half if your nines.
> served off Compaqs running IIS
Yikes!
Run it in a VM instance that can be snapshotted/checkpointed, so that any reboot turns into "suspend and resume from checkpoint"? Or are there any pitfalls to just doing that?