The failure
Clients retry at the same interval after a shared failure. Recovery synchronizes the retry wave and immediately overloads the service again.
The revision
Use exponential backoff with jitter, retry budgets, and gradual recovery. A retry is still load, even when it is polite.