In a distributed system, a circuit breaker mechanism shields backend servers from cascading failures. When a server encounters a streak of consecutive errors, its circuit "opens" and blocks further traffic. After a cooldown period of consecutive blocked requests, the circuit resets to "closed" and begins accepting traffic again.

A gateway manages routing between two backend servers -- a primary and a secondary -- each protected by its own independent circuit breaker. ...