hesela.devFail-partial failure model
A fail-partial failure model includes inaccessible or silently corrupted blocks as well as complete device failure.
IRON distinguishes whole-device failure, inaccessible blocks and corrupted block contents; failures can be transient or persistent and may have spatial locality. A drive that still answers requests is not necessarily returning correct data. Detection and recovery are separate policies. [1]
This is a fault model, not an estimated failure rate or a claim that all faults are independent. Intra-disk redundancy cannot protect against losing the whole drive. [1]
Relations
- related
- Fault model, Fault injection, Latent sector error, Silent data corruption, Lost write, Misdirected write, Intra-disk redundancy