
Everything fails all the time: designing a device fleet for broker restarts
99.9% uptime still allows almost 9 hours of downtime a year. What matters is what the fleet does in those hours and in the minute after: broker restarts, reconnect storms, backoff with jitter, offline behaviour and fleet-level alerts.















































