So poor old sparky pulled the wrong plug, panicked, hit the wrong button and everything went boom in DC1. All expected scenarios so far.
Why did DC2 blow up? If they're active-active it's not a failover scenario, it's simply a reduction in capacity. What's the betting they've gone active-active for cost reasons (i.e. less kit needed than for active-passive) but woefully underspecced the whole thing for a failover? Or simply allowed the amount of applications to exceed the load of one DC alone because "this will never happen"?
Biting the hand that feeds IT
