Search papers, labs, and topics across Lattice.
This paper introduces a formal runtime availability model for microservices that leverages stochastic connectivity to analyze endpoint resilience under fault scenarios. By integrating a typed service-dependency graph with a probability measure over node and edge states, the model quantifies availability properties, revealing that replication alone cannot mitigate the impact of bottleneck dependencies. The authors validate their approach through a synthetic adequacy study, demonstrating its effectiveness in reconstructing models from deployment traces and performing what-if analyses via Monte Carlo simulations.
Replication can't save your microservices from bottleneck dependencies, as this new model reveals the true nature of endpoint resilience.
Microservice availability is commonly assessed by fault injection and chaos experiments, but such experiments are costly, operationally risky, and difficult to repeat for every architectural change. Distributed tracing and deployment metadata provide cheaper evidence, yet they usually remain descriptive: they show which services interacted, not what endpoint-level availability property follows. This paper proposes a formal runtime availability model based on stochastic connectivity for resilience-oriented analysis of microservice endpoints. It treats endpoint availability under explicit fault scenarios as a measurable facet of microservice resilience, combining a typed service-dependency graph, a replication map, a probability measure over node and edge states, and request-specific success predicates. Its semantics separates computational failures of service replicas from communication failures of logical dependencies, showing that replication cannot compensate for bottleneck dependencies. The model can be reconstructed from traces and deployment artifacts, parameterized for architectural what-if analysis, and analyzed by Monte Carlo simulation before or alongside fault injection. We define the model, its trace-to-model construction, elementary semantic properties, and a synthetic adequacy study. The study matches closed-form oracle cases within sampling error and exposes boundaries caused by edge bottlenecks, correlated failures, missing traces, and time-dependent failures.
