← Back to System Design Fundamentals

Availability — Five 9s

System Design FundamentalsSeniorsystem-design

The Question

What does 'five 9s' availability mean and how do you achieve it?

What a Strong Answer Covers

  • At least two tiers with numbers.

Senior-Level Answer

Five 9s refers to 99.999% availability, which translates to approximately 5 minutes and 15 seconds of total downtime per year. To put this in perspective, 99.9% (three 9s) allows roughly 8.7 hours per year, and 99.99% (four 9s) allows about 52 minutes. Each additional 9 represents a tenfold reduction in allowable downtime and a roughly tenfold increase in effort and cost.

Achieving five 9s requires eliminating single points of failure across every layer — compute, storage, networking, DNS, load balancing, and deployment. Every component must be redundant, and the system must automatically detect failures and failover without human intervention, because humans cannot respond within a 26-second monthly budget.

Redundancy is the foundation: multiple instances across availability zones or regions, replicated databases with automatic promotion, redundant network paths. Active-active architectures are preferred over active-passive because they avoid failover latency.

Automated failover and self-healing are mandatory. Health checks must detect failures within seconds. Circuit breakers prevent cascading failures. The system must degrade gracefully.

Deployment practices directly impact availability. Blue-green or canary deployments limit blast radius. Feature flags enable instant rollback. Zero-downtime database migrations are essential.

The cost-complexity tradeoff is the most important practical consideration. Moving from four to five 9s might mean multi-region active-active deployment, globally distributed databases, chaos engineering programs, and 24/7 on-call with under-5-minute response SLAs. Infrastructure cost can increase 10-100x.

Availability is also composed across dependencies. If your system depends on three services each at 99.99%, the composite availability is at most 99.97%. This is why organizations define error budgets per service.

Very few systems truly need five 9s. Most applications are well-served by three to four 9s.

What Separates a 2/3 from a 3/3

2/3 — Passing but Incomplete

Correctly quantifies five 9s with roughly 5 minutes/year downtime, mentions redundancy and monitoring.

3/3 — Strong Answer

Quantifies downtime precisely, explains redundancy and automated failover, discusses monitoring and deployment practices, articulates the exponential cost-complexity tradeoff, and mentions composite availability.

Common Mistakes

  • Quoting the wrong downtime number — 5.26 minutes per month instead of per year
  • Focusing only on infrastructure and ignoring deployment practices and operational maturity
  • Not discussing the exponential cost increase per additional 9
  • Ignoring composite availability — your dependencies limit your achievable availability
  • Suggesting manual failover, which is incompatible with a 26-second monthly budget

Follow-Up Questions

  • How do you calculate composite availability? — Multiply individual availabilities for serial dependencies; use 1 - product of failure probabilities for redundant components.
  • What is an error budget? — Error budget = 1 - SLO target. Depleted budget freezes feature releases.
  • How does chaos engineering help achieve high availability? — Proactively inject failures to validate failover paths before real incidents.
  • What is the difference between RTO and RPO? — RTO = recovery time. RPO = how much data you can lose. Both constrain architecture.
  • When would you argue against pursuing five 9s? — When cost exceeds business impact of downtime, or graceful degradation at four 9s meets user needs.

Related Questions

  • Redis Caching Patterns
  • Vertical vs Horizontal Scaling
  • API Versioning
  • SLOs vs SLAs
  • Latency vs Throughput

Can You Explain This Cold?

Reading the answer is step one. Explaining it unprompted — under interview pressure — is what actually matters. Get AI-graded feedback on your answer with follow-up probes on your weak points.

Get Graded — Free Assessment
GrindQuestionsAITechnical interview assessment
TermsPrivacyAbout