Federation, this makes it immune to large-scale disruptions because a single instance may go down or a couple of instances may go down at the same time, but the entire network cannot be taken offline all at once without taking the internet itself offline.