vonskippy wrote:
So unless you're talking about redundant systems (i.e. failover or clusters), having more then a single box increases your chance of downtime.
Of course, failover or clusters bring there own complexities.
I think a key factor is what you believe the future will hold. If scaling up a single instance has a high likelihood of meeting your availability, performance and growth needs for the foreseeable future then I'd stick with that.
Yes, splitting your customers between two independent servers means that a failure will only hit half of your customer base, but you'll still have a problem that needs attending to. Moreover, you'll have ~2x as many problems so your cumulative downtime measured in customer-hours will be the same over time in exchange for more admin work.
If you think that bumping up the instance size is going to be insufficient in the foreseeable future then going with two smaller instances would be a good step towards gaining practical experience with running your application on a resilient and scalable multi-instance architecture.