Resilience Guide
v3.8.1Last updated: 2026-05-13
Was this page helpful?
Loading OmniRoute...
diagrams/resilience-3layers.mmd
Scope: entire provider (e.g., , , ).
Purpose: stop sending traffic to a provider that is repeatedly failing at the upstream/service level.
Implementation:
States:
Defaults ():
Trip codes: only provider-level statuses . Do NOT trip for account-level errors (most 401/403/429 β those belong to cooldown or lockout).
Lazy recovery: when expires, , , refresh state to . No background timer needed.
Scope: single provider connection/account/key.
Purpose: skip one bad key while other connections for the same provider keep serving.
Implementation:
Fields per connection:
, Default cooldowns:
Anti-thundering-herd guard: prevents concurrent failures from over-extending cooldown or double-incrementing .
Terminal states (NOT cooldowns):
Lazy recovery: when is past, connection becomes eligible again. On successful use, clears all error fields.
Scope: provider + connection + model triple.
Purpose: avoid disabling a whole connection when only one model is unavailable or quota-limited.
Examples:
Implementation: β , , .
)
REST API:
. Auth: management. degraded to sync with warning..
- instead of
/.
-
-
-
STEALTH_GUIDE.md.