Failure model in distributed system