You can avoid machine-induced self-denial by building a “shared- nothing” architecture. Where that is impractical, apply decoupling middleware to reduce the impact of excessive demand, or make the shared resource itself horizontally scal-
able through redundancy and a backside synchronization protocol. You can also design a fallback mode for the system to use when the shared resource is not available or responding
From Release it: Design and Deploy Production Ready Software
Ala' Yasin Abuhijleh 