A short outage makes many requests fail; their retries arrive together with new traffic and can keep the server overloaded after the original fault is gone. Backoff with jitter and a retry budget limit it.
Retry storm
Overload made worse by clients that retry failed requests all at once.