Critical database applications are protected by continuous replication to a standby database. Changes are sent to the standby, which may be on a local or wide area network. During an outage, the application is reconnected to the standby database. Once the primary database is available again, changes replicate to it from the standby. The failover can also be used to perform planned maintenance and system upgrades.