Retries can recover from transient failures but can also make outages worse.

Only retry operations when doing so is safe. Idempotent operations are easier to retry. Non-idempotent operations may require idempotency keys or another deduplication mechanism.

Use bounded retries and exponential backoff with jitter. Retrying immediately from thousands of clients can create a retry storm exactly when the dependency is already unhealthy.