N16Nearest region and failover
Send each user to the closest healthy region. When a region dies, the next one must absorb its users without drowning.