Satellite & Capsule Architecture

Hi,

Looking at the Satellite architecture. If you deploy the capsules on different geographical sites. If a capsule not available/down, the hosts are connected that that capsule is not able to get any updates or patch isn't it? How do you overcome this single point of capsule failure?

Thanks