RetryGuard: Preventing Self-Inflicted Retry Storms in Cloud Microservices Applications

Fuente: arXiv
Salvato in:
Dettagli Bibliografici
Autori principali: Tavori, Jhonatan, Bremler-Barr, Anat, Levy, Hanoch, Lavi, Ofek
Natura: Preprint
Pubblicazione: 2025
Soggetti:
Accesso online:
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866915643877490688
author Tavori, Jhonatan
Bremler-Barr, Anat
Levy, Hanoch
Lavi, Ofek
author_facet Tavori, Jhonatan
Bremler-Barr, Anat
Levy, Hanoch
Lavi, Ofek
contents Modern cloud applications are built on independent, diverse microservices, offering scalability, flexibility, and usage-based billing. However, the structural design of these varied services, along with their reliance on auto-scalers for dynamic internet traffic, introduces significant coordination challenges. As we demonstrate in this paper, common default retry patterns used between misaligned services can turn into retry storms which drive up resource usage and costs, leading to self-inflicted Denial-of-Wallet (DoW) scenarios. To overcome these problems we introduce RetryGuard, a distributed framework for productive control of retry patterns across interdependent microservices. By managing retry policy on a per-service basis and making parallel decisions, RetryGuard prevents retry storms, curbs resource contention, and mitigates escalating operational costs. RetryGuard makes its decisions based on an analytic model that captures the relationships among retries, throughput (rejections), delays, and costs. Experimental results show that RetryGuard significantly reduces resource usage and costs compared to AWS standard and advanced retry policies. We further demonstrate its scalability and superior performance in a more complex Kubernetes deployment with the Istio service mesh, where it achieves substantial improvements.
format Preprint
id arxiv_https___arxiv_org_abs_2511_23278
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle RetryGuard: Preventing Self-Inflicted Retry Storms in Cloud Microservices Applications
Tavori, Jhonatan
Bremler-Barr, Anat
Levy, Hanoch
Lavi, Ofek
Networking and Internet Architecture
Cryptography and Security
Distributed, Parallel, and Cluster Computing
Modern cloud applications are built on independent, diverse microservices, offering scalability, flexibility, and usage-based billing. However, the structural design of these varied services, along with their reliance on auto-scalers for dynamic internet traffic, introduces significant coordination challenges. As we demonstrate in this paper, common default retry patterns used between misaligned services can turn into retry storms which drive up resource usage and costs, leading to self-inflicted Denial-of-Wallet (DoW) scenarios. To overcome these problems we introduce RetryGuard, a distributed framework for productive control of retry patterns across interdependent microservices. By managing retry policy on a per-service basis and making parallel decisions, RetryGuard prevents retry storms, curbs resource contention, and mitigates escalating operational costs. RetryGuard makes its decisions based on an analytic model that captures the relationships among retries, throughput (rejections), delays, and costs. Experimental results show that RetryGuard significantly reduces resource usage and costs compared to AWS standard and advanced retry policies. We further demonstrate its scalability and superior performance in a more complex Kubernetes deployment with the Istio service mesh, where it achieves substantial improvements.
title RetryGuard: Preventing Self-Inflicted Retry Storms in Cloud Microservices Applications
topic Networking and Internet Architecture
Cryptography and Security
Distributed, Parallel, and Cluster Computing
url https://arxiv.org/abs/2511.23278