Wadanne ma'auni kake amfani da su don yanke shawara tsakanin rollback da hotfix?

Question

Accepted Answer

Default zuwa **rollback** — ita ce hanya mafi sauri, mafi aminci na maido da known-good state. Nemi **hotfix** kawai lokacin da rollback ba zai yiwu ba ko mafi haɗari fiye da fixing forward. A active incident, fifiko shi ne **tsai da zubar jini da farko**, diagnose daga baya.

## Ma'aunin yanke shawara

- **Rollback yana da aminci kuma yana yiwuwa?** Idan sigar baya known-good ce kuma babu wani abu mara juyawa da ya faru, roll back. Wannan shi ne amsar yau da kullum.
- **Bad release ya ƙirƙiri irreversible state?** **Database migration** ko data corruption na iya sa rollback mafi muni fiye da bug. Idan ba za ka iya komawa baya da aminci ba, dole ka fix forward.
- **Mun fahimci gyaran?** Rollback ba ya buƙatar diagnosis — wannan ƙarfinta ne. Hotfix da ba ka fahimta gaba ɗaya na iya zurfafa incident; kar a taɓa ship hasashe zuwa prod ƙarƙashin matsi.
- **Lokacin zuwa safe state.** Zaɓi hanyar da ke kaiwa kwanciyar hankali da sauri da ƙarancin haɗari. One-line, well-understood hotfix na iya doke complex rollback; risky forward-fix ba ya taɓa doke clean revert.
- **Blast radius da tsanani.** Cikakken outage yana buƙatar mafi sauri na restore (yawanci rollback); ƙaramar degradation na iya ba da damar careful hotfix.

## Sauƙin decision table

| Yanayi | Zaɓi |
| --- | --- |
| Sigar baya known-good, babu migration | Rollback |
| Irreversible DB migration ya ship | Hotfix / fix-forward |
| Dalili ba a sani ba, tasiri mai tsanani | Rollback (siyo lokaci) |
| Mara muhimmanci, well-understood one-liner | Hotfix |
| Rollback kanta tana da haɗari/ba a gwada ba | Hotfix |

## Trade-offs da kuskure

- **Rollback** yana da aminci amma yana magance alama kawai — har yanzu kana bin real fix da postmortem.
- **Hotfix** yana magance root cause amma yana tsallake safety net na yau da kullum; bugs a hotfixes na yawaita daidai saboda ana gaggauta su.
- **Untested rollback path** tarko ne — idan ba ka taɓa yin rehearse ba, na iya gazawa lokacin da kake buƙatarsa sosai. Yi practice na rollbacks kafin ka buƙace su.
- Yi hankali da **debugging a production** ƙarƙashin matsi; idan ka fi mintuna kaɗan daga confident fix, roll back kuma yi bincike a natse.

## Me ya sa yake da muhimmanci

Wannan shawarar tana faruwa a mafi munin lokaci — system ya faɗi, agogo yana gudana, kowa yana kallo. Tech Lead da ke da ƙa'ida bayyananniya, da aka rehearse don sa yana yanke MTTR sosai kuma yana hana classic mistake na ƙoƙarin zama mai wayo a tsakiyar incident lokacin da boring revert yana can. Restore da farko, ka zama mai wayo daga baya.

Yanayi	Zaɓi
Sigar baya known-good, babu migration	Rollback
Irreversible DB migration ya ship	Hotfix / fix-forward
Dalili ba a sani ba, tasiri mai tsanani	Rollback (siyo lokaci)
Mara muhimmanci, well-understood one-liner	Hotfix
Rollback kanta tana da haɗari/ba a gwada ba	Hotfix