Maintain two identical production environments ("blue" and "green"). At any time, one is live and the other is idle. To deploy, push the new version to the idle environment, test it, then switch traffic. To rollback, switch traffic back.