It's config driven, so no split brain. All proxies have the same config and deployments are synchronized:

1. pause traffic 2. reload config 3. resume traffic

This can be done in under a second.

Restarts without downtime can be handled with blue/green using and a TCP load balancer or DNS.