LCA: Andrew Tanenbaum on creating reliable systems
Posted Jan 18, 2007 19:21 UTC (Thu) by
oak (subscriber, #2786)
In reply to:
LCA: Andrew Tanenbaum on creating reliable systems by vonbrand
Parent article:
LCA: Andrew Tanenbaum on creating reliable systems
Amen.
However, you missed this one:
The health of components should be monitored; if one stops operating
properly, the system should know about it.
I.e. polling / wakeups? -> goodbye battery life
I've also seen a case where the monitor thought the component was
misbehaving and killed & restarted it constantly. Yes, the component
was not communicating "according to spec" but from the user's perspective
it worked correctly. Killing was worse than letting it live and constant
restarting of course also drains the battery.
(
Log in to post comments)
