Contain a breach

Lock 20
HTTP/2SQLHTTP/2HTTP/2SQLHTTP/2HTTP/2SQLUsers3,000 req/sUsers50 req/sLoad balanc…1 vCPU · 1 GBPostgres0.1 vCPU · 2 GBAPI server4 vCPU · 4 GBPostgres1 vCPU · 2 GBAPI server1 vCPU · 1 GBLocal cache0.1 vCPU · 0.5 GBAPI server1 vCPU · 1 GBLocal cache0.1 vCPU · 0.5 GB
HTTP/2SQLHTTP/2HTTP/2UsersUsers50 req/sLoad ba…PostgresAPI ser…PostgresAPI ser…Local c…API ser…Local c…

Fix the board. Turn every goal green.

Traffic
Calls3,000 req/s · reads onlyLogins50 req/s · reads only
Limit
API server answers about 160 req/s
Bill
  • Load balancer (L7)4 USD/mo
  • Postgres × 216 USD/mo
  • API server16 USD/mo
  • 2 more12 USD/mo
48 of 110 USD/mo

Goals

Not tested yet

99 of 100 requests finish faster than this.The share of requests that fail or get no answer.99 of 100 requests finish faster than this.The share of requests that fail or get no answer.Copies of data that do not match.What the servers and services cost each month.

A breach exposed session tokens. At 0:30 you revoke 60,000 of 200,000 sessions. Fewer than 5,000 replies may accept a revoked token. Then those users sign in again: sign-ins rise 8 times for 60 s. Keep the site up. You have 6 edits and 110 USD/mo.

0:30. Sessions are revoked, yet revoked tokens still open accounts. Sign-ins time out. Graph: auth CPU at 250 percent.

A reader with no tools stops page ordersTap or press Space to add or remove the reader

Separate reader · 0 of 100 attacks reach a tool

Parts you can add: Managed pub/sub, Managed queue, Local cache, Redis cache, Rate limiter, API server. At most 16 parts. Budget: 110 USD/mo.

Tap a part to add it, or drag it onto a trace.Click a part to add it, or drag it onto a trace.