SlideShare a Scribd company logo
Scaling Web App
Ashok Gautam
Agenda
Why
Challenges
Solutions
Best practices
Tools
Resources
Q&A
Why
Anyone can build a whatsapp or facebook copy but scaling it to internet scale is not everyone’s cup of tea.
Not even mine
Let’s figure out solution together
Guide on scaling web app
Challenges
Which will pull us down
Availability
Stability
Bottleneck
Latency
GEO
Disaster Recovery
Problems to solve
1
Infrastructure
Scalability, Uptime, disaster recovery,
monitoring
2 Architecture
Language, Framework, Database, Storage,
Security
3
Cost
Compute, Storage, Bandwidth
4 Performance
CDN, Rate Limit, API, Caching
Bottleneck CPU
Memory
IO
Storage
Network
Operating system
Framework
Language
Database
Security
HTTPS
Access Control
Restrict HTTP methods
Input validation
Validate content types
Management endpoints
Error handling
Audit logs
Security headers
CORS
Sensitive information in HTTP requests
● Parameters Exploitation
● Identity Theft
● Abusing authorization system
● Man-In-The-Middle
● DOS & DDOS
● Cache Poisoning
● Redirection
● XSS
● Injection
Guide on scaling web app
Guide on scaling web app
Solution
Measure Measure & Measure
CDN
Caching
Multi Level Persistence
Multi level DB
Application Layer Optimization
Micro Service Architecture
Guide on scaling web app
CDN - Not a silver bullet but
Guide on scaling web app
Guide on scaling web app
SSD vs HDD
Guide on scaling web app
Reddit
■ 25 servers
■ 2 TB of SQL data all stored on SSDs
■ Each web server has 2x 320GB SSDs in a RAID 1.
■ Each ElasticSearch box has 300 GB also using SSDs.
■ Stack Overflow has a 40:60 read-write ratio.
■ DB servers average 10% CPU utilization
■ 11 web servers, using IIS
■ 2 load balancers, 1 active, using HAProxy
■ 4 active database nodes, using MS SQL
■ 3 application servers implementing the tag engine, anything searching by tag hits
■ 3 machines doing search with ElasticSearch
■ 2 machines for distributed cache and messaging using Redis
■ 2 Networks (each a Nexus 5596 + Fabric Extenders)
■ 2 Cisco 5525-X ASAs (think Firewall)
■ 2 Cisco 3945 Routers
■ 2 read-only SQL Servers for used mainly for the Stack Exchange API
Tools
Measure Measure & Measure
AB
JMeter
XDebug
TimeIt
Redis
Memcache
ELK
Zabbix
Cloud
(AWS/GCP)
NewRelic
Pingdom
CloudFlare
Cloudinary
RDS
BigQuery
SendGrid
Best Practices
Follow the wisdom
●
●
●
●
●
●
●
●
●
●
●
Building Blocks of
Scalability
http://highscalability.com
https://code.fb.com/
https://dzone.com/articles/component-load-testing
https://medium.com/netflix-techblog/tagged/scalability
http://highscalability.com/blog/2018/4/2/how-ipdata-serves-25m-api-calls-from-10-infinitely-scalable.html
https://segment.com/blog/the-million-dollar-eng-problem/
Resources
Guide on scaling web app

More Related Content

PPTX
REST API Design & Development
PDF
Restful api design
PDF
CIS14: Best Practices You Must Apply to Secure Your APIs
PPTX
API Design- Best Practices
PDF
REST API and CRUD
ODP
Creating Web Services with Zend Framework - Matthew Turland
PPT
Salesforce REST API
PDF
Testing REST Web Services
REST API Design & Development
Restful api design
CIS14: Best Practices You Must Apply to Secure Your APIs
API Design- Best Practices
REST API and CRUD
Creating Web Services with Zend Framework - Matthew Turland
Salesforce REST API
Testing REST Web Services

What's hot (20)

PDF
Securty Testing For RESTful Applications
PPT
Introduction To REST
PPTX
SFDC REST API
PPTX
API Testing Using REST Assured with TestNG
PDF
APISecurity_OWASP_MitigationGuide
PPTX
Instant Security & Scalable User Management with Spring Boot
PPSX
Rest api standards and best practices
PDF
Pentesting RESTful webservices
PPTX
An Introduction To REST API
PPTX
What is an API?
PDF
Best Practice in Web Service Design
PPTX
Upgrading to cas 4.0 at oakland university
PPTX
Knowledge of web ui for automation testing
PDF
REST full API Design
PDF
Sliding away from Roy Fielding's REST model (Filippos Vasilakis)
PPTX
Salesforce APIs
PPTX
RESTful Architecture
PPTX
Creating Cloud-Ready Enterprise Applications with the SharePoint 2013 Add-In ...
PPTX
Rest assured
PDF
SPTECHCON - Who are You and What Do You Want - Working with OAuth in SharePoi...
Securty Testing For RESTful Applications
Introduction To REST
SFDC REST API
API Testing Using REST Assured with TestNG
APISecurity_OWASP_MitigationGuide
Instant Security & Scalable User Management with Spring Boot
Rest api standards and best practices
Pentesting RESTful webservices
An Introduction To REST API
What is an API?
Best Practice in Web Service Design
Upgrading to cas 4.0 at oakland university
Knowledge of web ui for automation testing
REST full API Design
Sliding away from Roy Fielding's REST model (Filippos Vasilakis)
Salesforce APIs
RESTful Architecture
Creating Cloud-Ready Enterprise Applications with the SharePoint 2013 Add-In ...
Rest assured
SPTECHCON - Who are You and What Do You Want - Working with OAuth in SharePoi...
Ad

Similar to Guide on scaling web app (20)

PPTX
Building-Scalable-Web-Applications.Presentation
PDF
How to Build a Robust Web Application in 2024.
PPTX
Building Scalable Web Apps - LVL.UP KL
PDF
How to Build a Robust Web Application in 2024.pdf
PDF
how_to_build_a_robust_web_application_in_2023.pdf
PPT
7 Stages of Scaling Web Applications
PPTX
Scalable Web Architecture and Distributed Systems
PPTX
Build Web Applications using Microservices on Node.js and Serverless AWS
PDF
Scalable Web Applications Session at Codebase
PPSX
Oded Coster - Stack Overflow behind the scenes - how it's made - Codemotion M...
PDF
Scalable Web Apps - Journey Through the Cloud
PPTX
Techniques for scaling application with security and visibility in cloud
PDF
Ivo jansch - the art of scalability
PPTX
Scale net apps in aws
PPTX
Scale net apps in aws
PDF
Best Practices for Building Scalable Web Applications.pdf
PPTX
Scalable web apps on AWS - Hebrew Webinar September 2017
PDF
Structure08 - Scaling To Satiate Demand - panel questions
PPTX
Microservices Architecture for Web Applications using AWS Lambda and more
PPTX
Microservices Architecture for Web Applications using Amazon AWS Cloud
Building-Scalable-Web-Applications.Presentation
How to Build a Robust Web Application in 2024.
Building Scalable Web Apps - LVL.UP KL
How to Build a Robust Web Application in 2024.pdf
how_to_build_a_robust_web_application_in_2023.pdf
7 Stages of Scaling Web Applications
Scalable Web Architecture and Distributed Systems
Build Web Applications using Microservices on Node.js and Serverless AWS
Scalable Web Applications Session at Codebase
Oded Coster - Stack Overflow behind the scenes - how it's made - Codemotion M...
Scalable Web Apps - Journey Through the Cloud
Techniques for scaling application with security and visibility in cloud
Ivo jansch - the art of scalability
Scale net apps in aws
Scale net apps in aws
Best Practices for Building Scalable Web Applications.pdf
Scalable web apps on AWS - Hebrew Webinar September 2017
Structure08 - Scaling To Satiate Demand - panel questions
Microservices Architecture for Web Applications using AWS Lambda and more
Microservices Architecture for Web Applications using Amazon AWS Cloud
Ad

Recently uploaded (20)

PPTX
MYSQL Presentation for SQL database connectivity
PDF
Mobile App Security Testing_ A Comprehensive Guide.pdf
PPTX
Spectroscopy.pptx food analysis technology
PDF
Dropbox Q2 2025 Financial Results & Investor Presentation
PDF
Approach and Philosophy of On baking technology
PDF
7 ChatGPT Prompts to Help You Define Your Ideal Customer Profile.pdf
PDF
Spectral efficient network and resource selection model in 5G networks
PDF
MIND Revenue Release Quarter 2 2025 Press Release
PPTX
sap open course for s4hana steps from ECC to s4
PPTX
Big Data Technologies - Introduction.pptx
PPT
Teaching material agriculture food technology
PDF
Network Security Unit 5.pdf for BCA BBA.
PDF
Building Integrated photovoltaic BIPV_UPV.pdf
PDF
TokAI - TikTok AI Agent : The First AI Application That Analyzes 10,000+ Vira...
PDF
Architecting across the Boundaries of two Complex Domains - Healthcare & Tech...
PDF
The Rise and Fall of 3GPP – Time for a Sabbatical?
PDF
Review of recent advances in non-invasive hemoglobin estimation
PDF
Encapsulation_ Review paper, used for researhc scholars
PDF
Reach Out and Touch Someone: Haptics and Empathic Computing
PPTX
Programs and apps: productivity, graphics, security and other tools
MYSQL Presentation for SQL database connectivity
Mobile App Security Testing_ A Comprehensive Guide.pdf
Spectroscopy.pptx food analysis technology
Dropbox Q2 2025 Financial Results & Investor Presentation
Approach and Philosophy of On baking technology
7 ChatGPT Prompts to Help You Define Your Ideal Customer Profile.pdf
Spectral efficient network and resource selection model in 5G networks
MIND Revenue Release Quarter 2 2025 Press Release
sap open course for s4hana steps from ECC to s4
Big Data Technologies - Introduction.pptx
Teaching material agriculture food technology
Network Security Unit 5.pdf for BCA BBA.
Building Integrated photovoltaic BIPV_UPV.pdf
TokAI - TikTok AI Agent : The First AI Application That Analyzes 10,000+ Vira...
Architecting across the Boundaries of two Complex Domains - Healthcare & Tech...
The Rise and Fall of 3GPP – Time for a Sabbatical?
Review of recent advances in non-invasive hemoglobin estimation
Encapsulation_ Review paper, used for researhc scholars
Reach Out and Touch Someone: Haptics and Empathic Computing
Programs and apps: productivity, graphics, security and other tools

Guide on scaling web app