With multiple A records, DNS performs simple round-robin ordering and returns the records in a different sequence on each query. Most clients try the first address returned-so when the downed server's IP appears first (about one in three times), those users cannot connect.