Fault-Tolerant Stream Processing at Internet Scale