The Bridge-Tender's Single Span: On the Tyranny of the Universal Threshold
In the quiet, ceaseless work of keeping services upright, we have enshrined a particular idol: the universal threshold. The idea is seductive in its simplicity. Define a single, clear line for latency, for error rate, for uptime—a 99.9% here, a 200ms there—and hold all parts of your system to it. This, we are told, is the mark of a disciplined operation. It creates a common language, an objective measure of health. But I’ve come to see this practice less as a discipline and more as a kind of tyranny, one that can blind us to the true nature of the systems we tend.
The bridge-tender of old knew that a single, rigid rule for all traffic was a path to ruin. The weight a stone arch could bear in the dry heat of summer was different from what it could support in the deep freeze of winter. A farmer’s cart and a royal procession demanded different considerations, different paces, different preparations. To apply one rule to both was to misunderstand the purpose of the bridge itself—which was not merely to stand, but to serve the life that needed to cross it.
Our digital services are no different. We set a 150ms latency threshold for an API, and it becomes gospel. But what does that number mean? For a background batch job processing terabytes of data, 150ms is a fantastical, irrelevant constraint; two seconds might be a triumph. For a real-time collaborative editor or a financial trading signal, 150ms could be an eternity signaling catastrophic failure. The universal threshold forces these wildly different purposes into the same ill-fitting suit, wasting energy on unnecessary optimization in one place and offering a false sense of security in another.
Worse, it teaches us to listen to the wrong signals. A team, chastened by a breach of the global latency SLA, might add caching to a service that never needed it, introducing complexity and new failure modes, all to satisfy a number that never reflected user need. Meanwhile, a subtle but critical degradation in a truly sensitive pathway might be masked because the ‘overall’ average still sits comfortably below the line. The universal threshold doesn’t sharpen our observability; it gives us a single, blurry lens through which to view a mosaic.
The alternative is not anarchy. It is a more demanding, more thoughtful kind of stewardship. It asks us to be bridge-tenders, not toll collectors. It begins with a simple question for every service, every endpoint, every process: What is this for? From that purpose, we derive its own appropriate measures of health. The background processor is judged on throughput and completeness. The real-time service is judged on percentile latency and jitter. The user-facing web app might be judged on a blend of core web vitals and business-logic error rates.
This is harder work. It requires context, judgment, and the courage to explain why one service’s ‘red’ is another service’s ‘green.’ But it is the work of truly understanding our systems, not just policing them. It allows each component to sing its own note, in its own key, contributing to the complex harmony of a reliable whole, rather than straining to hit a single, monotonous pitch dictated by a distant, impersonal rule. The bridge, after all, is defined by the banks it connects and the traffic it carries, not by the uniform height of its railings.
Notes & further reading
A few pages I came back to while writing this:
- Pasadena, CA
- The Miller’s First Grain: On the Wisdom of the Earliest Load
- New Haven, CT
- The Ferryman's Second Oar: On the Peril of the Perfect Synchrony
- Stamford, CT
- The Bell-Ringer's Unheard Note: On the Necessity of the Silent Alarm
- Washington, DC
- one area's overview
- a practical rundown
- Little Rock, AR
- Gilbert, AZ
- Peoria, AZ
- Surprise, AZ