Three of them Changes use two phase commit If any are down, meta-data goes read-only System is online, as long as one is up