FOR SRE AND PLATFORM
Rollback isn’ta rebuild.
Production is a pointer to a build that is already deployed. Rolling back is moving the pointer back. No rebuild, no re-upload. Friday deploys are fine.
Friday, 14:00. Error rate, checkout.
time to recover: 4 min
One move. #1289 was still deployed.
REBUILD VS. REPOINT
The fastest rollback is one you never build.
Rollback by rebuild
- Find the last good commit
- Revert, wait for CI
- Build it again, hope it matches
- Upload and deploy, under pressure
recovery = full pipelineMinutes to hoursRollback on Zephyr
- Point production at the last good build
- There is no step 2
recovery = one moveSecondsRepoint, don’t rebuild
Every build stays deployed. Rollback moves the production tag to a build you already ran.
Ship what you tested
Release promotes the exact build you reviewed, not a rebuild of the same commit.
Guard production
Protected environments and role-based permissions decide who can release and who can roll back.
HOW IT WORKS
Deploy is not release.
Each build is uploaded once and kept live at its own URL.
production points at one build. The change takes effect without a rebuild.
Same move, opposite direction. The old build never left.
BOOK A DEMO
Watch us break prodand roll it back live.
30 minutes with an engineer. We ship a bad build on purpose and recover it on the call.
- Release and rollback without a rebuild
- Protected environments and roles
- How it fits your incident process