Northern Trail Outfitters submits orders to a manufacturing system web service that has experienced multi-day...

When a target system experiences prolonged outages (lasting "several days"), point-to-point integration solutions built within Salesforce are likely to fail or reach their retry limits. For example, Salesforce Outbound Messaging (Option B) only retries for up to 24 hours before dropping the message.

The architecturally robust solution is to introduce a Middleware layer (ESB or iPaaS) that provides queuing and buffering. In this model, Salesforce sends the order to the middleware. The middleware immediately acknowledges receipt (preserving Salesforce performance). If the manufacturing system is offline, the middleware stores the message in a persistent queue.

Middleware is designed for this high level of Quality of Service (QoS). It can be configured with custom retry logic—such as waiting 30 minutes between attempts—and can hold millions of messages for days or even weeks. This effectively "insulates" Salesforce from the manufacturing system's instability. Option C is overly complex and requires custom development in both the event bus and Apex, whereas middleware provides this functionality as a native capability. By using middleware, the architect ensures that no orders are lost during extended manufacturing downtime and that the integration is decoupled and resilient.