Where do sessions live

Cache 17

Choose

Five million sessions need about 1 KB each. Operators revoke about 5 sessions/s, and every API instance must reject a revoked session within 1 s. Choose where session state lives. Keep p99 below 150 ms.

Goals

Not tested yet

99 of 100 requests finish faster than this.How old the data is when a reader gets it.What the servers and services cost each month.
Choose a design
Signed cookies with no revocation lookup
Shared Redis, cached in each API for 60 s
Shared Redis session state

Tap a part to add it, or drag it onto a trace.Click a part to add it, or drag it onto a trace.