惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

B
Blog RSS Feed
有赞技术团队
有赞技术团队
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
阮一峰的网络日志
阮一峰的网络日志
V
V2EX
Y
Y Combinator Blog
Jina AI
Jina AI
G
Google Developers Blog
Last Week in AI
Last Week in AI
博客园 - 叶小钗
H
Hackread – Cybersecurity News, Data Breaches, AI and More
L
LangChain Blog
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
V
Visual Studio Blog
aimingoo的专栏
aimingoo的专栏
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
J
Java Code Geeks
Stack Overflow Blog
Stack Overflow Blog
IT之家
IT之家
The GitHub Blog
The GitHub Blog
D
Docker
量子位
罗磊的独立博客
腾讯CDC

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant
Why Retry Is One Of The Most Dangerous Keywords In Software
Amrishkhan Sheik Abdullah · 2026-06-13 · via DEV Community

Few lines of code look more innocent than this:

retry(3)

It feels responsible.

Professional.

Resilient.

After all, networks fail.

Servers become unavailable.

Databases occasionally time out.

Retrying seems like the obvious solution.

And sometimes it is.

But after enough years building production systems, I've become convinced of something:

Retry is one of the most dangerous keywords in software.

Not because retries are bad.

Because retries amplify everything.

Good systems become more reliable.

Bad systems become disasters.

The problem is that many developers treat retries as a reliability feature when they're actually a distributed systems feature.

And distributed systems are where simple ideas go to become complicated.


Why Retries Exist

Imagine:

await fetch("/api/users");

The request fails.

Maybe:

  • Network hiccup
  • Temporary database issue
  • Load balancer restart
  • Service deployment

The operation might succeed if attempted again.

So we write:

retry(3)

Seems reasonable.

And in many cases:

It Works

Which is why retries become popular.


The Dangerous Assumption

Most developers unconsciously assume:

Failure
=
Operation Did Not Execute

Unfortunately that's not always true.

A request can:

Execute Successfully
↓
Response Never Arrives

From the client's perspective:

Failure

From the server's perspective:

Success

Now a retry becomes dangerous.


The Double Payment Problem

Imagine a payment service.

await chargeCard(order);

The card processor successfully charges:

$100

The response is lost due to a network issue.

Client sees:

Request Failed

and retries.

await chargeCard(order);

again.

Now:

Charge #1 = Success
Charge #2 = Success

The customer paid twice.

Nobody wrote bad logic.

The retry created the bug.


The Email Storm Problem

Consider:

await sendWelcomeEmail(user);

Email provider accepts the message.

Response times out.

Application retries.

await sendWelcomeEmail(user);

again.

Customer receives:

Welcome!
Welcome!
Welcome!
Welcome!

Support ticket created.

Marketing team confused.

The retry succeeded.

Too well.


Retries Amplify Side Effects

This is the core issue.

Pure operations:

2 + 2

can run forever.

Nothing changes.

Side effects are different.

Examples:

Charge Card
Create Order
Send Email
Book Seat
Reserve Inventory
Send SMS

Each execution changes reality.

Retries repeat reality.

And reality doesn't always appreciate repetition.


The Thundering Herd Problem

One failed request isn't scary.

Ten thousand retries are.

Imagine:

Service A

becomes slow.

Clients start retrying.

Traffic doubles.

Service becomes slower.

More retries occur.

Traffic doubles again.

Eventually:

Small Failure
↓
Massive Outage

This is known as:

The Thundering Herd Problem

And retries are often the cause.


When Retries Attack Databases

Suppose:

Database

is under heavy load.

Queries start timing out.

Application retries automatically.

Now:

More Queries
↓
More Load
↓
More Timeouts
↓
More Retries

You have accidentally built a denial-of-service attack against your own database.


Why Idempotency Matters

In the previous article we discussed:

Idempotency

This is where it becomes critical.

Without idempotency:

Retry
=
Repeat Side Effects

With idempotency:

Retry
=
Same Result

A retry becomes safe.

That's why reliable systems almost always combine:

Retries
+
Idempotency

rather than using retries alone.


Not Every Failure Should Be Retried

A common mistake:

retry(3)

for every error.

Consider:

400 Bad Request

Retrying won't help.

The request is invalid.

Or:

401 Unauthorized

Retrying won't magically authenticate the user.

Good retry policies distinguish between:

Transient Failures

and

Permanent Failures


Exponential Backoff Exists For A Reason

Bad:

Retry Immediately
Retry Immediately
Retry Immediately

Better:

1 Second
↓
2 Seconds
↓
4 Seconds
↓
8 Seconds

This is:

Exponential Backoff

and it prevents systems from overwhelming already struggling services.


Real World Example: Flight Booking

Imagine:

Reserve Seat

times out.

Client retries.

Without protection:

Seat Reserved Twice

or:

Two Different Seats Reserved

Now inventory becomes inconsistent.

Airlines spend enormous effort preventing these scenarios.

Because retries happen constantly.


Real World Example: Webhooks

Webhook providers often retry automatically.

For example:

Payment Completed

may arrive:

1 Time
2 Times
5 Times

depending on delivery conditions.

Systems that assume:

Exactly Once

processing usually fail eventually.

Systems that expect retries survive.


Real World Example: Message Queues

Kafka.

RabbitMQ.

SQS.

Azure Service Bus.

All assume:

Messages May Be Delivered Again

because reliability is more important than uniqueness.

Consumers must be designed accordingly.


Common Retry Mistakes

Retrying Everything

Not every failure is recoverable.


Retrying Immediately

Often makes outages worse.


Ignoring Idempotency

Creates duplicate side effects.


Infinite Retries

Eventually becomes infinite damage.


Hiding Failures

Retries should not become a substitute for monitoring.


Pros Of Retries

1. Better Reliability

Transient failures disappear.

2. Better User Experience

Temporary outages become invisible.

3. Improved Resilience

Systems tolerate instability.

4. Reduced Manual Intervention

Many failures self-heal.

5. Better Distributed Systems

Network failures become manageable.


Cons Of Retries

1. Duplicate Operations

Without idempotency.

2. Traffic Amplification

Can worsen outages.

3. Cascading Failures

One issue spreads across systems.

4. Increased Complexity

Backoff strategies become necessary.

5. Hidden Production Problems

Retries can mask deeper issues.


The Real Lesson

Most developers think retries exist to make software more reliable.

That's only partially true.

Retries don't eliminate failures.

They change failures.

Sometimes they transform:

Temporary Network Problem

into:

Duplicate Payment

Sometimes they transform:

Slow Database

into:

Full System Outage

That's why experienced engineers don't ask:

Should We Retry?

They ask:

What Happens If This Operation Executes Twice?

Because once retries enter the picture, duplicate execution is no longer an edge case.

It's a certainty.

And reliable systems are designed with that reality in mind.


What's Next?

In the next article we'll discuss:

The Myth Of Stateless Systems

Because many systems described as "stateless" are actually storing state somewhere else.

And that distinction turns out to be extremely important.


About The Author

Hi, I'm Amrish Khan.

I enjoy building developer tools, exploring software architecture, and writing about the deeper ideas behind everyday programming concepts.

I'm also building Aruvix — a growing ecosystem of local-first developer tools designed to process data directly in the browser without unnecessary uploads.

Here's a detailed blog on Aruvix:

https://dev.to/amrishkhan05/aruvix-the-ultimate-offline-first-developer-toolkit-e0i

You can follow my work and thoughts here:

Portfolio:
https://www.amrishkhan.dev

LinkedIn:
https://www.linkedin.com/in/amrishkhan

GitHub:
https://www.github.com/amrishkhan05

If you enjoyed this article, consider following for more deep dives into JavaScript, architecture, local-first software, and performance engineering.