← Back to Concept Contrast

Concept Contrast Fable

Service level objectives and error budgets

Conclusion first:An SLO is the lower bound of service quality you promise—for example, "99.9% of requests return within 200 milliseconds." The error budget is the room allowed for missing that target—"the remaining 0.1% of the time can be slower." An SLO without an error budget is a tyrant; teams will halt all releases to keep 100% compliance. The error budget gives teams a calculable trade-off tool between stability and release speed.

An SLO is the lower bound of service quality you promise—for example, "99.9% of requests return within 200 milliseconds." The error budget is the room allowed for missing that target—"the remaining 0.1% of the time can be slower." An SLO without an error budget is a tyrant; teams will halt all releases to keep 100% compliance. The error budget gives teams a calculable trade-off tool between stability and release speed.

Fable

The fish pond gatekeeper and the sluice gate

The reservoir management office set a water level warning line: once the water level exceeds six meters, open the gate to release water; below four meters, close the gate to store water. For the first two years, it was executed rigidly. Administrator Xiao Zou received the instruction—release when above six meters, without asking why, without checking the weather forecast, without discussion.

One year, continuous heavy rain upstream sent the water level surging from 5.8 meters to 6.2 meters. Xiao Zou immediately opened the gates to release water. After releasing all day, the water level dropped back to 5.5 meters. That same afternoon, the city happened to be holding a dragon boat race, and the downstream channel was churned up so badly by the released water that the race was canceled. The city leaders called to chew him out. Xiao Zou felt wronged: the regulation says open the gates at six meters—what did I do wrong by following the regulation?

After old engineer Duan took over management, he changed a line into a range. Within the range was the safe water level: four meters to six meters. Below four meters, water must be stored; above six meters, water must be released. In this middle "tolerable window," whether to release or store depended on weather, downstream activity, and power generation demand, and the manager could make a judgment.

Xiao Zou asked Lao Duan: then don’t the precise numbers become meaningless? Lao Duan said: No, the precise numbers tell you where the bottom line is. If it exceeds six meters and no water is released, the dam will burst—that is absolutely not to be crossed. But at five and a half meters, you can buffer a little according to downstream conditions, and that buffering capacity is your operating space. Without that space, every time you exceed the limit you have only one set of actions, and either upstream or downstream someone will suffer.

The management office later set a new rule: when the water level is between four and six meters, the administrator may dispatch according to actual conditions, but each dispatch must record the reason and be reviewed at month-end. If the water level exceeds six meters more than twice in a month, it means the previous dispatch was too conservative, and pre-release should start earlier the next month. If it falls below four meters more than three times, it means the previous approach was too aggressive, and the next month should be more conservative.

A year after the new rules took effect, the dragon boat race was no longer flooded out, and the farmland downstream was no longer parched. Little Zou summed it up: in the past, looking at a single line, the feeling of pressure was "never touch it, or you'll have to pay." Now, looking at a range, the feeling of pressure is "how much room is left, how much to use for this dispatch and how much to keep." A single line makes people tense; a range lets them make judgments.

Someone from the neighboring reservoir came to visit and asked Old Duan: isn't your six-meter warning line the same as our six-meter warning line? Old Duan took him to the console: there were two lines on the screen—one was the six-meter red line, and beside it was a five-and-a-half-meter orange line. Old Duan pointed at the orange line and said: above the orange line we start acting; we don't wait until the red line to panic. The space between the orange line and the red line gives us composure.

After the visitor returned, he modified the control panel and added an intermediate range. During internal training he said: a high water level is not what's frightening; what's frightening is having only one option, one point in time, one chance in your operation. Manage the space beyond the red line well, and only then can the red line hold.

Service Level Objective

The lower bound of quality metrics promised by the service provider, such as availability percentage, latency ceiling, or error rate threshold. It defines the "boundary of normal"; exceeding the boundary is considered non-compliant.

Error budget

The allowable amount of underperformance within an SLO. For example, if the SLO is 99.9% availability, the error budget is the 0.1% of unavailable time. Teams can use the error budget to decide release cadence and risk-taking.

Story Mapping

  • The six-meter warning line: SLO — the quality floor that must never be breached.
  • A tolerable window of four to six meters: error budget—the room allowed for deviation.
  • Exceeding the threshold must release water regardless of scenario: without an error budget, the SLO is a rigid constraint and lacks flexibility.
  • Within the window, it can be judged, recorded, and reviewed: error budgets give teams decision space and a feedback mechanism.
  • The more overruns this month, the more conservative next month: rolling management of the error budget, establishing negative feedback regulation.

In the project

When setting SLOs, define the error budget consumption rules at the same time. For example: when more than 50 percent of the error budget remains, normal releases are allowed; between 10 and 50 percent, careful evaluation is required; below 10 percent, releases are frozen until the budget recovers. This rule turns "can we ship" from a subjective argument into an objective calculation. In addition, the error budget should not be judged only by the remaining amount, but by the consumption trend—burning half the budget in three days is far more dangerous than slowly consuming it over a month.

京ICP备2026014272号