techdiagrams.net
← All templates

Card authorization in under 100ms

A latency-budgeted authorization path: cell-based isolation with shuffle sharding, near-caches for account state, and hedged reads — every hop annotated with its share of the 100ms.

Open in editor — free, no login Download JSON
CELL 1 — ONE ISSUER GROUP'S WHOLE WORLDCELL 2 — IDENTICAL, SHARES NOTHINGauth request · t=0route ≤5ms · issuer→cell 1limits lookup ≤5msmiss → hedged read ≤20msscore ≤30msother issuersCard NetworkISO 8583 · 100ms SLACell Routershuffle-sharded · statelessAuth Servicecell 1 · decision in ≤40msNear-cache L1+L2hit ratio 99.4%Account Store3 replicasRisk Scorer≤30ms or default-allow rulesAuth Servicecell 2 — identical, isolatedNear-cachecell-localAccount Storecell-localthe budget: route 5 + cache 5 + risk 30 + decision 10+ network 20 = 70ms, 30ms headroom.Every edge label is a line item — spend deliberately.

What this design does

A card network gives you roughly 100 milliseconds to say yes or no, and it will not wait for your retry storm. This design spends that budget deliberately: a thin router shuffle-shards issuers across isolated cells so one bad tenant can't take the fleet down, account state is served from a two-tier near-cache, and the rare cache miss races two replicas with a hedged read. Every edge label is a line item in the latency budget.

The patterns it composes

Import it, attach your own numbers, and verify the design against failures — or read the engineering notes.