Resilience

DBSS uses a four-level reliability architecture. It provides inspection, resistance, recovery, and adaptation capabilities to help you manually or automatically recover services, enhancing data durability and reliability.

**Table 1** DBSS reliability architecture
Capability	Item	Objective	Category
Inspection	Intrusion detection	DBSS can work with HSS to detect server exceptions. The detection accuracy is higher than 98%. The detection takes 1 minute.	Security
Inspection	Monitoring	DBSS generates alarms for microservice exception logs.	System
Resistance	Data backup	All key data can be backed up. Even if a database is completely damaged, its services can be restored using the backup data. User service logs will be backed up to OBS.	System
	Rapid response	DBSS can quickly detect and rectify AZ- or region-level service faults. DBSS is deployed in out-of-path mode and system services will not be affected.	System
	Service decoupling	Microservices can be separately deployed, started, and stopped.	System
Recovery	VM-level recovery	A faulty VM can be automatically or manually recovered.	System
Recovery	System-level recovery	The system can be automatically or manually recovered.	System
Adaptation	Automatic key rotation	Dynamic SCC key rotation	Security
	Automatic certificate rotation	Dynamic rotation of internal microservice communication certificates	Security
	Automatic rotation of accounts and passwords	Dynamic rotation of service accounts and passwords	Security