Designing a hub and spoke that tolerates outages
Every remote site will lose its link. Design for what happens during, not just after.
Writing
Resilience
Convergence: measuring what your network actually does
Everyone claims sub-second failover. Very few have measured it.
Designing for the link you cannot drive to
Satellite enforces habits that terrestrial networks let you skip: observability before convenience, validation before shipping, and a backup path that has actually carried traffic.