How do you choose between SQL and NoSQL databases?

Choose SQL (PostgreSQL, MySQL) for structured data requiring ACID transactions, complex JOINs, and strict schema enforcement. Choose NoSQL (MongoDB, DynamoDB, Cassandra) for flexible schemas, massive horizontal scale, high write throughput, and eventual consistency workloads.

When should you choose Vertical Scaling vs Horizontal Scaling?

Start with vertical scaling (adding CPU/RAM to one server) for simplicity. Transition to horizontal scaling (adding more servers) when hardware limits are reached, cost curves become prohibitive, or high availability is required. Horizontal scaling introduces distributed system complexity.

What is the difference between Sharding, Partitioning, and Indexing?

Indexing speeds up read queries within a single table using B-Tree or Hash structures. Partitioning splits a single table into logical physical chunks within one database instance. Sharding distributes rows across multiple distinct database servers using a shard key, scaling write throughput and storage.

How do you scale WebSockets to millions of concurrent connections?

Increase Linux file descriptor limits, use Layer 4 load balancing with sticky sessions, and implement a Redis Pub/Sub backplane so any WebSocket server can relay messages to clients connected to other servers. Pattern: Client → HAProxy → WS Servers ↔ Redis Pub/Sub.

What is the difference between LSI and GSI in DynamoDB?

A Local Secondary Index (LSI) shares the same partition key as the base table but uses a different sort key. It is limited to 10GB per item collection and supports strong consistency. A Global Secondary Index (GSI) uses a completely different partition key, spans all partitions, supports only eventual consistency, and has its own dedicated throughput capacity.

Which database should I use for transactions, user profiles, logs, and analytics?

Use PostgreSQL for financial transactions (ACID compliance). Use MongoDB for user profiles (flexible JSON). Use Cassandra for logs and high-throughput writes (LSM tree). Use Apache Druid for real-time analytics (columnar storage). Use Elasticsearch for search and catalog (inverted index). Use Redis for sessions and caching (in-memory).

How does Consistent Hashing work?

Consistent hashing maps both servers and keys onto a circular ring. A key routes clockwise to the nearest server. When a node is added or removed, only 1/N keys need to migrate (vs nearly 100% in modulo hashing). Virtual nodes (100-200 per server) ensure even distribution and prevent hotspots.

How do you design a distributed rate limiter?

Use a Token Bucket algorithm for burst-friendly limiting. For distributed enforcement across multiple API gateway instances, use Redis with Lua scripts to atomically evaluate and increment counters, preventing race conditions (dirty reads) where concurrent requests could bypass the limit.

How do you design a secure API Gateway for routing, rate limiting, and SSL termination? — System Design Interview Answer & Trade-offs

Architectural Breakdown & AnalysisFAANG Aligned

An API Gateway acts as the single secure entry point for all client requests into internal microservices.

Core Edge Responsibilities

SSL/TLS Termination: Decrypts HTTPS at the gateway edge, passing unencrypted HTTP/TCP internally to reduce CPU load on microservices.
Reverse Proxy & Routing: Maps external URI paths (/api/v1/orders) to internal service IPs using Service Discovery (Eureka/Consul).
Cross-Cutting Concerns: Enforces central rate limiting, CORS headers, security payload sanitization, and request tracing headers (X-Request-ID).

NOTE — Recommended Tech Stack

Leverage battle-tested reverse proxies like Envoy, Kong (Lua/OpenResty), or Nginx for edge gateway deployments.

Key Architectural Comparison

Gateway Feature	L4 Proxy (HAProxy / NLB)	L7 Gateway (Kong / Envoy / APISIX)	In-App Middleware
Routing Granularity	IP address & TCP/UDP port only.	HTTP Path, Method, Headers, Cookies.	Internal method calls.
SSL / TLS Termination	Fast hardware pass-through.	Full certificate termination & inspection.	None.
Authentication & JWT	Not supported.	Centralized token validation & rate limiting.	Duplicated across each service.
Latency Overhead	Sub-millisecond.	2–5 milliseconds.	Zero network overhead.

How do you design a secure API Gateway for routing, rate limiting, and SSL termination?

Core Edge Responsibilities

Key Architectural Comparison

Continue Learning on Being SDE