Order of Resilience Decorators
Learn why the order in which you stack resilience patterns (retry, circuit breaker, bulkhead, timeout, rate limiter) changes behavior, and how to choose the right ordering.
Order of Resilience Decorators is a free Microservices Communication Patterns (Saga, Circuit Breaker) lesson on CoddyKit — lesson 4 of 4. You can read the complete lesson below for free — then practise it hands-on in the browser with a built-in code editor and a 24/7 AI tutor. It is part of the Microservices Communication Patterns (Saga, Circuit Breaker) learning path, one of 4 lessons in the course, and your progress syncs across the web and the CoddyKit app.
Stacking Patterns
Resilience libraries let you wrap a call in multiple patterns at once: retry, circuit breaker, bulkhead, time limiter, rate limiter. The patterns form a chain, and order matters.
The same set of patterns produces different behavior depending on how they are nested.
Decorators as Layers
Think of each pattern as a layer wrapping the next. The outermost layer sees the call first; the innermost actually invokes the dependency.
layers = ['Retry', 'CircuitBreaker', 'Bulkhead', 'TimeLimiter', 'ServiceCall']
for i, l in enumerate(layers):
print(' ' * i + l)Retry Outside the Breaker
The recommended Resilience4j order puts Retry outside the Circuit Breaker.
This means each retry attempt is itself evaluated by the breaker. After enough failed attempts, the breaker opens and stops further retries entirely.
What If Retry Were Inside?
If Retry were inside the breaker, the breaker would only see one outcome per full retry cycle. A burst of internal retries could hammer a failing service before the breaker ever notices.
That is why retry usually wraps the breaker, not the other way around.
Bulkhead Placement
Place the Bulkhead inside the breaker so it limits concurrency on the actual calls. The breaker can then short-circuit before a thread is even acquired, keeping the bulkhead from filling with doomed calls.
breaker_open = True
def call(breaker_open):
if breaker_open:
return 'short-circuited; no bulkhead slot used'
return 'acquire bulkhead slot then call'
print(call(breaker_open))Time Limiter Placement
The TimeLimiter sits close to the call so each individual attempt is bounded. A slow call times out, counts as a failure for the breaker, and can trigger a retry from the outer layer.
Rate Limiter Placement
Put the RateLimiter on the outside if you want to cap total request rate including retries, or inside if you only want to cap actual dependency calls. Decide based on what you are protecting.
Recommended Default Order
A widely used default, from outermost to innermost:
- Retry
- Circuit Breaker
- Rate Limiter
- Time Limiter
- Bulkhead
Adjust to your goals, but understand each move's effect.
Fallback Goes Outermost
The fallback should wrap everything so it can catch failures from any inner layer, including a retry that exhausted attempts or a breaker that is open.
def with_fallback(inner):
try:
return inner()
except Exception:
return 'fallback value'
print(with_fallback(lambda: (_ for _ in ()).throw(Exception('all layers failed'))))Interactions to Watch
Watch for surprising combos:
- Retry plus a rate limiter can amplify load if not bounded.
- A short time limiter inside aggressive retry can storm a slow service.
- Bulkhead rejections may count as breaker failures.
Validate by Testing
Because ordering effects are subtle, validate your chain with integration tests that inject failures and slowness, then assert the observed behavior matches your intent.
Quick Check
Why is Retry typically placed OUTSIDE the Circuit Breaker rather than inside it?
Recap
You learned why decorator order matters:
- Patterns nest as layers; outermost runs first.
- Retry outside the breaker lets the breaker stop retry storms.
- Bulkhead and time limiter sit close to the call.
- Fallback wraps everything.
Choose order by intent, then verify it with failure-injection tests.
Frequently asked questions
Is the “Order of Resilience Decorators” lesson free?
Yes — the full text of “Order of Resilience Decorators” is free to read here on the web, and the Microservices Communication Patterns (Saga, Circuit Breaker) course includes 4 lessons in total. To practise it interactively (a built-in code editor and a 24/7 AI tutor) and unlock the rest of the Microservices Communication Patterns (Saga, Circuit Breaker) course, upgrade to CoddyKit PRO.
What will I learn in “Order of Resilience Decorators”?
Learn why the order in which you stack resilience patterns (retry, circuit breaker, bulkhead, timeout, rate limiter) changes behavior, and how to choose the right ordering. You practise Microservices Communication Patterns (Saga, Circuit Breaker) with hands-on code you run directly in the browser, and a 24/7 AI tutor answers your questions as you work through the lesson.
Do I need any experience to start Microservices Communication Patterns (Saga, Circuit Breaker)?
No prior experience is required. Microservices Communication Patterns (Saga, Circuit Breaker) on CoddyKit is structured for beginners through advanced learners; this is — lesson 4 of 4, so you can start here or from the beginning and move at your own pace.
How long does the “Order of Resilience Decorators” lesson take?
Most CoddyKit lessons take about 5–10 minutes. Each one is bite-sized and interactive, so you make steady progress and pick up exactly where you left off across the web and the app.
Can I write and run code in this Microservices Communication Patterns (Saga, Circuit Breaker) lesson?
Yes. Every Microservices Communication Patterns (Saga, Circuit Breaker) lesson includes a built-in code editor, so you write and run real code right in your browser and get instant AI feedback — no local setup required.
All lessons in this course
- Circuit Breaker and Bulkhead
- Circuit Breaker with Retry Logic
- Integrating Rate Limiting
- Order of Resilience Decorators