A fuse protects the wire, not the appliance. It is sized to the cable, so that the cheap part gives way before the thing you cannot easily replace does. I find that a useful way to think about limits in software.
The equivalents: a timeout on every outbound call, a quota per caller, a circuit breaker that stops calling a failing service (the pattern Michael Nygard popularised in Release It!), a bulkhead so one slow dependency cannot use every worker. In each case the limit is deliberately…
Read more