Timeout Hell: how long do you wait?

Why a slow service is worse than a dead one, why averages lie, and how to set timeouts for a payment service that calls fraud check, bank and notification: P99 times 2 to 3, a 4.5-second budget, deadline propagation, cascade failures and bulkheads, connection vs read timeouts, adaptive timeouts and hedged requests.