Fault isolation contains a failure within one component so it has minimal effect on users and the rest of the application. In a microservices system, the gateway can stop a failing service from propagating errors to the frontend, allowing the application to continue in a degraded state. section 11.4.5
Implement fault isolation with safeguards that limit waiting, repeated failure, and resource consumption:
- Set timeouts so unresponsive internal or external requests abort quickly instead of waiting indefinitely. section 11.4.6
- Use retries for potentially temporary failures, while bounding attempts and adding a wait between them. section 11.4.6
- Combine timeouts and retries with circuit breakers and bulkheads to prevent a local failure from overwhelming dependent components. section 11.4.5
- Return a focused error for the unavailable feature while keeping unrelated application functions available. section 11.4.5
Video upload becomes unavailable
If the video-upload microservice stops responding, an unprotected request can carry the error to the frontend and disrupt the whole service. With gateway safeguards, the fault remains inside the cluster: users see that video upload is unavailable, but can continue using the rest of the application. section 11.4.5
Trace the contrast between an error propagating to the user and a gateway containing the fault within the cluster. section 11.4.5

