Stateless Regional Control Planes and Replicated State

I like control planes that can die without drama. If a regional API process restarts, I do not want a rescue mission. I want it to come back, rebuild what it needs, and keep serving traffic. That pushes you toward a simple rule: The control plane should not own more durable state than it has to. I ran into this while thinking through the regional control plane. The more state I wanted to push into…