Retry + Retry Budget

A transient blip should be retried — but a sustained outage retried blindly turns one failure into a retry storm that amplifies the outage. httpware retries with full-jitter backoff, and a budget caps the share of traffic spent on retries so a dead backend can't be amplified.

That was one client recovering from a blip. The real danger of blind retries shows up at scale — when many clients hit a real outage at once.