Question #38 of 60•Scaling•Hard• ~3 min read

How do you design a Multi-Region Active-Active Disaster Recovery Architecture?

Executive Takeaway

Analyze global traffic routing, cross-region database replication, RPO/RTO targets, and split-brain resolution.

Architectural Breakdown & AnalysisFAANG Aligned

Active-Active multi-region deployments run live application stacks in two or more geographic regions simultaneously.

Recovery Metrics

  • RPO (Recovery Point Objective): Maximum acceptable data loss duration during failover.
  • RTO (Recovery Time Objective): Maximum acceptable system downtime duration.

Architecture Challenges

  1. Global Traffic Routing: Use Route53 / Cloudflare Latency-Based DNS to route users to the nearest healthy region.
  2. Cross-Region Replication: Replicate database writes asynchronously across regions. Set up Conflict-Free Replicated Data Types (CRDTs) or last-write-wins to resolve write collisions.
  3. Split-Brain Mitigation: Deploy a third tie-breaker quorum region to prevent both regions from declaring master status independently.
WARNING — Active-Active Complexity

Active-Active data replication incurs high operational complexity. Many systems opt for Active-Passive with automated database failover.

Key Architectural Comparison

Disaster Recovery StrategyRTO (Recovery Time)RPO (Data Loss)Cost & Complexity
Backup & RestoreHours to DaysHoursLowest
Active-Passive (Pilot Light)10–30 minutesMinutesModerate
Active-Passive (Warm Standby)Under 5 minutesSub-minuteHigh
Active-Active (Multi-Region)Near Zero (Immediate failover)Zero to Sub-secondHighest (Requires CRDTs & multi-region consensus)
Previous QuestionHow does Distributed Tracing (Jaeger / Zipkin) trace requests across microservices?Next Question How do you design a High-Scale URL Shortener (TinyURL)?

Continue Learning on Being SDE

Explore deep-dive system architecture modules, low-level object-oriented designs, and interview cheat sheets.