Glossary
A protective mechanism that stops calling a failed service for a while, instead of running into every timeout.
When a downstream service fails, without a breaker all requests wait for their timeout. Connections and memory fill up, and the outage travels upwards until your own system is down too.
The breaker watches the error rate, opens above a threshold, and after a waiting period lets single attempts through to check whether the other side is back.