On-callMediumoc-p105

Subject Incident responseLevel Mid–Senior~20 minCommon in Reliability & on-call interviewsIndustries Technology

Question

A traffic-splitting/weighted-routing change accidentally sent a large share of traffic (80% instead of 5%) to a canary or a small/underprovisioned set of instances, overloading them. How do you respond?

What a strong answer looks like

Stop the bleeding first (mitigate), then form hypotheses from real signals. Separate root cause from symptom, communicate status as you go, and close with what prevents a repeat.

Learn the concepts

Diagram & narrate the incident

Loading whiteboard…

Run or narrate your approach, then ask the coach.