I saw Martin Fowler this article.
Catastrophicfailover, I only have a feeling: facing nature, people can only admit their own small.
However this can becom.
A request may do something that causes a server to crash, perhaps by unwittingly exposing a bug in the server software. So when the failover kicks in, the deadly requests gets moved to another server which it can then bring down in turn. Get the timing Just Right and by The Time The First Server Has Rebooted, IT Will Be Ready To Receive That Request Again.
(In case you're wondering, this is a true story.)
A person, or even a group of people, can never get a design through BDUF, because a very good stuff, actually use it, often has completely unexpected results. So, there is no existence of all ENOUGH Design.
The wisdom of people is limited, even a group of people's wisdom is also very limited. Seeing something good one is absolutely enough.