Temporal

Secondary Server Failover Mechanism Failure

critical
availabilityUpdated Mar 3, 2026

Failover servers (secondary servers) that should automatically take over during primary server issues can fail to come online during scheduled maintenance, eliminating redundancy and causing complete service outages.

Technologies:
How to detect:

During a scheduled reboot of the primary load balancer or cache server, the secondary failover server fails to come online for 3+ hours, leaving no backup capacity. The primary system cannot reconnect to the secondary server, resulting in complete loss of service availability.

Recommended action:

1. Before any scheduled maintenance, verify failover mechanisms by testing secondary server activation. 2. Pre-mount all required data volumes on secondary servers and verify mount points persist across reboots. 3. Add health checks that specifically validate failover server readiness during maintenance windows. 4. Implement auto-mount validation checks as part of server boot sequences. 5. Alert immediately if secondary servers do not come online within expected timeframes (e.g., 5-10 minutes). 6. Maintain detailed failover runbooks with manual activation procedures if automatic failover fails.