Limit code guesses

Lock 06
HTTP/2HTTP/2SQLUsers3,000 req/sUsers200 req/sLoad balanc…0.5 vCPU · 0.5 GBAPI server0.5 vCPU · 1 GBPostgres1 vCPU · 2 GB
HTTP/2HTTP/2HTTP/2SQLUsers3,000 req/sUsers200 req/sLoad balanc…API serverPostgres

Turn every goal green.

Traffic
Codes200 req/s · reads onlyGuesses3,000 req/s · reads only
Limit
API server answers about 1,700 req/s
Bill
  • Load balancer (L7)2 USD/mo
  • API server4 USD/mo
  • Postgres8 USD/mo
14 of 40 USD/mo

Goals

Not tested yet

Requests served each second.The share of requests that fail or get no answer.99 of 100 requests finish faster than this.What the servers and services cost each month.

People sign in with a 6-digit code sent by email: 200 codes/s across 100,000 accounts. A botnet sends 3,000 guesses/s from 5,000 addresses at 10 accounts. Let at most 20 guesses/s through. Fail under 0.5 percent of real codes. Keep p99 under 150 ms.

Parts you can add: Rate limiter, Web firewall, Bot filter, API server. At most 4 parts. Budget: 40 USD/mo.

Tap a part to add it, or drag it onto a trace.Click a part to add it, or drag it onto a trace.