Can we consider master-slave model

[ylgrgyq]

Maybe we can replicate operations from master to slave. If master fail down, slave can take master's place automatically. filter-service provides RESTFul API, maybe fail over can be a trivial operation.

We'd better not using Zookeeper etc. to keep our service simple.