Run master instances on separate physical hardware
For a multi-instance system, master instances should run on separate physical hardware. If your instances run on virtual machines, run the master instances on separate physical hosts.
Run services on more than one instance
In a multi-instance system, you can choose which and how many instances that each service can run on. For redundancy, you should run each service on more than one instance.