What is RPO (recovery point objective)?
A target expressing to what point in time data must be recoverable when a failure or disaster occurs. With an RPO of 1 hour, at most the last hour of data may be lost, so backups or copies of the data must be taken at least every hour.
Japanese name: RPO(目標復旧時点)
RPO (recovery point objective) appears in 3 practice questions across 2 topics, including System Architecture and Reliability, IT Service Management and Systems Audit.
Field: System Architecture and Reliability
RPO and RTO
The RPO is a target for how far back recovery may go, that is, the amount of data that may be lost expressed in time. The RTO (recovery time objective) is a target for how long resumption may take. For example, with an RPO of 4 hours and an RTO of 2 hours, a failure must not lose data older than 4 hours, and business must resume within 2 hours. They are separate targets, so a scheme that meets both must be chosen.
Synchronous and asynchronous replication
Synchronous replication completes an update only after confirming that the write has also finished at the replica, so no data is lost on failure (an RPO of zero). In exchange, the round-trip communication time to the replica is added to every update, so responses become slow between distant sites. Asynchronous replication sends copies later, so responses are fast, but data not yet sent may be lost on failure.
FAQ
Are shorter RPOs and RTOs always better?
Shorter ones reduce the impact of failures, but the cost of replication, standby equipment and operational effort grows. It is common to decide them for each business by comparing the losses from stopped business or lost data with the cost of the measures.
Can a system with an RPO of zero be built?
With synchronous replication, a configuration that loses no data up to the moment of failure is possible. However, if data is corrupted by a mistaken operation or a software bug, the corrupted state is replicated as well, so backups that can return to past points in time are still needed separately.