Redundancy for repository servers

Eventually, Freexian wants to serve its main repository from Debusine. At the same time, the main repository should have redundant backends such that any single backend can fail without disrupting the service. It is not necessary for modifying requests (e.g. uploads) to be served from redundant backends, but it should be possible to serve the repository content (as consumed by apt) from several servers (read-only).