Design Rate Limiter System

Edge rate limiting with token bucket and distributed counters.

Functional requirements

  • Enforce a rate limit of 100 requests per minute per user.
  • Allow bursting up to 20 requests in a 10 second window.
  • Persist rate limit configs and counters durably.
  • Emit an event for every throttled request for analytics.
  • Deploy config changes without downtime or dropped requests.

Non-functional requirements

  • Handle 10,000 requests per second with 99.9% availability.
  • Rate checks must add no more than 10ms latency to API calls.
  • System should degrade gracefully under load, prioritizing availability over strict rate enforcement.

How the design evolves

Stage 1: Monolith Token Bucket

Start with a single service applying token bucket logic.

What was missing: No separation of concerns, no redundancy, no async, no observability.

Why that's risky: Single point of failure, no protection from spikes, no monitoring.

What gets added: Nothing yet (MVP).

Trade-offs: Simple, but not production ready.

Stage 2: Add Edge and API Gateway

Introduce edge and API gateway for security and separation of concerns.

What was missing: No edge security, no API gateway, no separation of logic.

Why that's risky: Vulnerable to DDoS, no traffic shaping, logic not isolated.

What gets added: Edge, API gateway.

Trade-offs: Slightly more complex.

Stage 3: Add Load Balancer and Replicas

Add load balancer and multiple token bucket replicas for scale and redundancy.

What was missing: No redundancy, no horizontal scaling, single token bucket bottleneck.

Why that's risky: Single point of failure, cannot handle spikes.

What gets added: Load balancer, multiple token bucket replicas.

Trade-offs: More complex deployment.

Stage 4: Distributed Sync and Async Queue

Add distributed sync, async queue, and worker pool for scale and durability.

What was missing: No async sync, no worker pool, all updates synchronous.

Why that's risky: Spikes can overload token buckets, slow sync blocks requests.

What gets added: Async queue, worker pool, idempotency.

Trade-offs: More moving parts, eventual consistency for sync.

Stage 5: Multi-Region, Monitoring, and Circuit Breaker

Add multi-region, monitoring/logging, and circuit breaker for resilience and observability.

What was missing: No multi-region, no monitoring, no circuit breaker, no observability.

Why that's risky: Failures can cascade, no alerting, no regional failover.

What gets added: Multi-region, monitoring/logging, circuit breaker.

Trade-offs: More moving parts, more operational complexity.

Stage 6: Global Quota Sync and Analytics

Add global quota sync, analytics DB, and feedback for advanced operations.

What was missing: No global quota sync, no analytics DB, no feedback loop.

Why that's risky: No global visibility, no analytics for tuning, no feedback for improvement.

What gets added: Global quota sync, analytics DB, feedback loop.

Trade-offs: More moving parts, more operational complexity.

Frequently asked questions

How do you prevent hot key issues in rate limiter counters?

Shard counters by user hash and use sliding windows with probabilistic sampling.

How do you handle distributed synchronization?

Use async queues to reconcile counter deltas and accept minor drift with periodic sync.

Why keep token bucket logic at the edge?

Edge placement blocks abusive traffic early and reduces downstream load.

What does the sync queue solve in distributed rate limiting?

The queue smooths counter updates and lets workers reconcile state without blocking requests.

PRISM
System Design Interview
Round 1 of 4 · Architecture Design · 60:00 remaining
PRISM logo
AI Interview
Interview Prep
Interview Challenges
Design Your Own System NEW
System Architectures
Interactive Roadmap System Design Guides
Notifications
  • No new notifications
Feedback
Signed in
Phase
Design Your Own System
Phase 01: Thinking in Systems
Upcoming

Components

User
CDN
Load Balancer
Server
Cache
Database
Blob Storage
Search Index
Queue
Worker
Rate Limiter
Service
API Gateway
Reverse Proxy
WebSocket Server
Third-party API

Inspector

Notes
Use clear names so your design intent is easy to understand.
Good
Name by business meaning
"Order API", "Restaurant Service"
Avoid
Generic names = zero signal
"Server 1", "API", "Queue"
A short description for each component makes feedback much better.
100%
Start by identifying:
  • Users & entry points
  • APIs & services
  • Databases & storage
  • Traffic flow & scale

Round 1 of 4 Architecture Design

Run a simulation to see results.

Time Remaining
60:00
System Design Interview

What are the core functional requirements?
What are the key non-functional constraints?

Questions

Start Evaluation to unlock questions.

Components Added
No components listed
Click "+ Add" to document components introduced in this stage.
Design Decisions

Click Simulate to run your design and see results here.

Internal notes — not shown to learners.

EVALUATE MODE

Test yourself like it's the real thing.

A structured 4-module evaluation that mirrors how top companies assess system design candidates.

Architecture Design
Draw your system on the canvas. Define components, connections, and data flow.
FR & NFR Requirements
Answer functional and non-functional requirement questions about your design.
MCQ Round
Multiple choice questions testing your depth on the chosen system.
Tradeoff Analysis
Justify your design decisions and defend your architectural tradeoffs.
AI Report Generated
A R S
Used by engineers preparing for FAANG & top-tier companies
Choose a Problem
No problem selected
  • 30 min
  • 45 min
  • 60 min
Round 2 of 4
MCQ Round
Answer multiple-choice questions based on your design.

Exit Interview?

You're in the middle of an interview session. Leaving now will end your current attempt.

Your progress will be saved.

Open a saved design

Select a design to load into the canvas.

My Evaluations

Your past evaluation sessions

Here’s a simple request flow that follows the expected layer order.

External User
→
Edge CDN → API Gateway → Load Balancer
→
Compute App Servers / Services
→
DataAccess Cache
→
Storage Database / Search Index
→
Async Queue → Worker

Tip: keep arrows moving forward through layers (Edge → Compute → Storage). Avoid sending storage back to compute.

Evaluation Instructions

Read the rules carefully before starting. The test auto-submits on refresh.

Before you start

  • Build your architecture on the canvas. The timer starts when you click Start Evaluation.
  • Don't forget to answer Functional Requirement and Non Functional Requirements.
  • When satisfied with your design, click Next to lock it and view the questions.
  • Please answer final step questions to complete the evaluation.

Dos

  • Do read each question carefully before answering.
  • Do include required components to maximize component coverage.
  • Do save a copy of your design if you want to keep it before submission.

Don'ts

  • Don't refresh or close the tab during an active evaluation — this will auto-submit your answers.
  • Don't switch app modes or open another tab while the evaluation is running.
  • Don't attempt to edit the design after clicking Next; the workspace will be locked.

All the best!!

Confirm

Input

Notice

Evaluation Report:

Evaluation Complete

Generating Your Report

Hang tight — our AI is evaluating your design…

Did you know?

Loading…

Share feedback

Tell us what worked well and what we can improve.

Let's personalize this

Answer a couple of quick questions so we can tailor your journey and missions.

You can change this anytime from your Profile.

Your personalized missions are ready

We tailored these first steps based on your answers.

    PRISM Welcome Gift

    This is a personal welcome gift from PRISM.

    Congratulations.

    You explored PRISM.

    You earned Apprentice.

    As a welcome gift, unlock Full PRISM Access for the configured trial duration.

    This starts Trial. Trial timer begins only after you activate this gift.

    Welcome to PRISM

    We've prepared a personalized Apprentice Journey based on your goals and experience.

    This journey introduces you to the capabilities of PRISM that are most relevant to you.

    Complete all 8 missions to earn your Apprentice title. 8 MISSIONS

    PRISM Surprise Offer

    Complete your Apprentice Journey to unlock a special gift from PRISM.

    • No payment required
    • No credit card required
    • Just complete the journey
    MISSION CONTROL
    0 / 8 missions complete
    NEXT UP Continue your missions
    View full roadmap →
    Mission Complete 0 / 8 Completed Next: Keep going
    SYSTEM BRIEF

    ⬤ System Constraints

    What the system must do — every item is a user-facing behaviour your architecture must support.

      ↑ Engineering Constraints

      These are the failure modes you must design against — latency SLAs, durability targets, traffic ceilings.

        ⇆ Architecture Constraints

        ◈ Core Concepts to Master

        Your Journey
        PHASE – –
        0 / 0 0%
        0
        Mock Interview Checklist

        Pick a topic to start

        Explore concept overviews, real-system examples, key tradeoffs, and interview talking points for each roadmap section.

        Topic-Wise Progress
        Experience Points 0 XP
        Read subtopics & solve challenges to earn XP
        Theory Read +0 XP
        Solved +0 XP
        Streak Bonus +0 XP
        Theory Read 0%
        — Mastered — Solved
        Weekly Streak 0 day streak
        Mon
        Tue
        Wed
        Thu
        Fri
        Sat
        Sun
        Keep going — log in daily to build your streak!
        0 0%
        Skill Profile
        Recommended Next
        🎯 Your Focus

        You haven't explored enough yet.

        Focus on
        → Understanding System Design
        → Estimating Scale
        Next Action
        Continue → Next: –
        Mock Interview Checklist
        Architecture DNA
        Engineering Profile
        Phase Mastered

        You've conquered this phase. These are the skills you now own:

          +500 XP

          Engineering Profile

          Company Interview Paths

          Progress Summary