Module 1 · Dive 1.1
Inherited Valkey durability.
EchoMQ enqueues on Valkey, so it inherits Valkey’s durability. With the append-only file flushed once a second, a write is safe within a second — on one box. The exposure is not abstract: it is exactly the writes accepted since the last flush. Move the crash and watch it.
The one-second window
valkey persistenceappendfsync everysec. Writes arrive left to right; a dashed line is a flush to disk. Drag the crash — everything since the last flush is the lost window.The shape is the lesson: durability here is a window, not a guarantee. Tightening the flush to every write closes the window but turns each write into its own flush — the strict, low-throughput corner of the spectrum. Loosening it widens the window for throughput. Same knob as everywhere else; Valkey simply ships it set to one second.
When it is, and isn’t, enough
graft.design.mdFor most work a one-second window is fine: a dropped metric or a retried side-effect costs nothing. For the jobs Echo Persistence exists for — a payment, the recorded product of a completed job — two things are missing, and the timeline shows both. First, the lost window is real work that was acknowledged and then vanished. Second, and invisible on a single timeline, nothing has left the machine: lose the box and you lose the file. Closing the window is one axis; getting the state off the box is the other — Dive 1.3 separates them, and the rest of the course reaches the corner where both are answered.
References & sources
- External
- Valkey persistence — AOF & appendfsyncthe once-a-second flush and its window
- Redis persistencethe same AOF model, in depth
- Echo records
- graft.design.mdwhy the inherited window is a floor, not a guarantee
- emq.roadmap.mdEchoMQ on Valkey — the bus the window belongs to