Blast radius describes how much damage a single failure or bad change can cause. A small blast radius means a problem touches few users or components; a large one means a single mistake can take down everything.
Why it matters
You cannot prevent every failure, but you can limit how far each one spreads. Teams that reduce blast radius can deploy more often, because mistakes are cheap. It is also a central question in incident response: what is affected, and what else could be?
Example
Compare two ways to ship a risky config change:
- Large radius: push to every server in every region at once. A typo breaks 100 percent of traffic.
- Small radius: deploy to one server, then 5 percent of traffic as a canary release, then one region, then the rest, watching error rates between each step.
Other ways to shrink it include separate accounts or databases per customer tier, bulkheads between services, per-region deployments, and feature flags that can switch a change off in seconds.
Common mistakes
- Sharing one database, DNS provider, or certificate across everything, which creates a single point of failure.
- Treating a staging environment as proof that production is safe.
- Deploying on Friday afternoon to all regions at once.
- Measuring blast radius only in servers rather than in affected customers.
Related
Get notified when this term updates
Plus occasional practical tips on uptime and monitoring, nothing else. Unsubscribe anytime.
This page is general information written by our editorial team and updated when documentation changes. Servers and providers differ, so test changes safely first. See our editorial policy and disclaimer.