CME-1203
Disaster Recovery / Multi-Region Failover
Description
Active-passive or active-active multi-region deployment enabling failover when primary site is compromised or unavailable. Automated failover with defined RTO/RPO.
CVSS Vector Impacts
| Metric | Transition | Rationale |
|---|---|---|
| Availability (A) | H → L | Service continues from secondary region; availability impact limited to failover time |
Verification
Verify replication is active and failover has been tested within the last 90 days
$ psql -c "SELECT state FROM pg_stat_replication" 2>/dev/null | grep -c 'streaming'
# Expected: >=1 (database replication active)
# Expected: >=1 (database replication active)
Platform: linux
$ kubectl get endpoints <failover-service> -o jsonpath='{.subsets[*].addresses[*].ip}' 2>/dev/null | wc -w
# Expected: >=2 (multiple endpoints behind failover service)
# Expected: >=2 (multiple endpoints behind failover service)
Platform: kubernetes
$ test -f <dr_test_log> && find <dr_test_log> -mtime -90 -print | wc -l
# Expected: 1 (DR test performed within last 90 days)
# Expected: 1 (DR test performed within last 90 days)
Platform: any