“…Based on the general considerations used in the design of distributed systems [72]- [74], and more specifically in NFV systems [6], [16], [28], we want to increase the awareness of the importance of designing a dependable NFVO, by analysing those general principles and mapping them to specific NFVO scenarios, which is still unexplored. Avoid Single Point-of-Failure [6], [15], [16], [28], [72], [73] [74] Stateless vs Stateful [71], [75], [76], [77], [78] Consistency vs Performance [52], [71], [79], [80] Distributed-Load vs Master/Slave [81], [82], [83], [84], [85] Failure-Independent Domains [6], [28], [72], [73], [74] Monitoring and Failure Detection in Controller and Orchestrator Systems [15], [36], [43], [44], [45], [54], [55], [75] could cause overall operation to fail. The same principle should be applied to the NFVO, and basically implies that the NFVO cannot be implemented as an individual element, but it needs to be deployed in such a robust way that a failure does not produce the unavailability of the orchestration functionalities.…”