For a multi-instance system, master instances should run on separate physical hardware. If your instances run on virtual machines, run the master instances on separate physical hosts.
In a multi-instance system, you can choose which and how many instances that each service can run on. For redundancy, you should run each service on more than one instance.
You can download your workflow, data connection, pipeline, and index collection configurations by exporting them as packages. In the event of a system failure, you can quickly restore your workflow components by reinstalling the system and importing your package files.