Contain a breach

  • Fix
  • Lock 20

Difficulty 5 of 5

A breach exposed session tokens. At 0:30 you revoke 60,000 of 200,000 sessions. Fewer than 5,000 replies may accept a revoked token. Then those users sign in again: sign-ins rise 8 times for 60 s. Keep the site up. You have 6 edits and 110 USD/mo.

0:30. Sessions are revoked, yet revoked tokens still open accounts. Sign-ins time out. Graph: auth CPU at 250 percent.

Play level

HTTP/2SQLHTTP/2HTTP/2SQLHTTP/2HTTP/2SQLUsers3,000 req/sUsers50 req/sLoad balanc…1 vCPU · 1 GBPostgres0.1 vCPU · 2 GBAPI server4 vCPU · 4 GBPostgres1 vCPU · 2 GBAPI server1 vCPU · 1 GBLocal cache0.1 vCPU · 0.5 GBAPI server1 vCPU · 1 GBLocal cache0.1 vCPU · 0.5 GB
HTTP/2SQLHTTP/2HTTP/2UsersUsers50 req/sLoad ba…PostgresAPI ser…PostgresAPI ser…Local c…API ser…Local c…
The board at the start of the level
A reader with no tools stops page ordersTap or press Space to add or remove the reader

Separate reader · 0 of 100 attacks reach a tool

Goals and limits

p99 latency (Calls)
under 100 ms
Error rate (Calls)
under 0.1%
p99 latency (Logins)
under 500 ms
Error rate (Logins)
under 1%
Data mismatches
under 5,000
Monthly cost
under 110 USD/mo
Parts you can add
Managed pub/sub, Managed queue, Local cache, Redis cache, Rate limiter, API server
Part limit
16
Edit limit
6
Traffic
3,000 req/s

Concepts

How players did

Player results load from the server.

All levels