[skybrian]

I’m wondering what sort of durability guarantees there are in case of an outage? It seems like replicating durable storage would add latency?

Is there going to be Jepsen testing for this?

[a-robinson]

Storage is replicated across a handful of nearby sites. It does add some latency to writes, but that's preferable to Objects being offline or lost in the case of hardware or network failures.

There's no Jepsen testing in the works at the moment, but we'll see if it makes sense in the future.