Learning Trails
Curated paths from single-concept micros to staff-level systems. Each step builds on the last.
Scaling Fundamentals
From a single server to millions of reads. The on-ramp: every other trail builds on what you learn here.
0 of 10 mastered
Scaling Fundamentals
From a single server to millions of reads. The on-ramp: every other trail builds on what you learn here.
Fundamentals
One server caps your traffic; a load balancer over replicas is the first scaling move every system makes.
Replicas only work if any instance can serve any user. State must move out of the server.
The cheapest read is the one that never hits the database: cache-aside is the default read-path optimization.
Now the write side: write-through trades write latency for read freshness. Your first real trade-off.
Caching at the edge: move static content next to the user and your origin breathes.
Builder
Bridge: a real architecture with a real problem, already on your canvas. Improve it before designing from scratch.
- ChallengeDesign a URL Shortener
First full system: a read-heavy service whose high-score skeleton is exactly the patterns you just trained. Realistic goal here: 6+, not 9, since you are juggling 5 dimensions now.
- ChallengeDesign a Link-in-Bio Service
Same read-heavy shape, new domain: repetition with variation is how composition becomes instinct.
- ChallengeDesign a Feature Flag Service
Reads at scale with a twist: every client must see flag changes fast, so caching now fights consistency.
Architect
- InterviewProve it: Junior-tier interview
Prove it under pressure: spin a junior-tier interview. Blind challenge, timer on, Elo on the line.
Go to interviews →
Distributed Data
Where data lives when one machine is not enough: replicas, shards, failover and consistency. Capstone: a distributed KV store.
0 of 12 mastered
Distributed Data
Where data lives when one machine is not enough: replicas, shards, failover and consistency. Capstone: a distributed KV store.
Fundamentals
The first answer to a hot database: copies that serve reads.
- MicroShard a Hot Database
When copies are not enough: split the data itself. Choosing the shard key is the decision that haunts.
Distributed data must survive a dead primary: standby + promotion path.
Not all reads are equal: analytics belongs in its own store, fed by CDC.
Builder
Bridge: the hot-database incident, on your canvas. Apply your replica/split micros to a system that already exists.
- ChallengeDesign a Paste Service
First full system of this trail: storage-shaped, where your data model decides the score.
- ChallengeDesign a Metrics Storage System
Time-series data breaks naive models: partition by time, plan retention from day one.
- ChallengeDesign a Product Catalog Service
Modeling for search: the same data, shaped for a different query pattern.
Architect
Primer for the senior step: state as an append-only log of facts, projections building the views.
Now the paradigm at full scale: CQRS with real consistency and replay concerns.
- ChallengeDesign a Distributed Key-Value Store
Capstone: sharding, replication, failover and consistency. Every concept of this trail, at once, in one design.
- InterviewProve it: Senior-tier interview
Prove it: a senior-tier interview. The roulette decides; your trail prepared you.
Go to interviews →
Async Systems & Events
Decoupling is the only way to scale writes and processing: queues, fanout, DLQs and event-driven design. Capstone: a data lake platform.
0 of 13 mastered
Async Systems & Events
Decoupling is the only way to scale writes and processing: queues, fanout, DLQs and event-driven design. Capstone: a data lake platform.
Fundamentals
The foundational move of async design: a queue absorbs the burst, a worker drains it.
Queues fail in production: the DLQ is where bad messages go to be debugged, not lost.
One event, many consumers: pub/sub decouples producers from everyone downstream.
Decoupling extends to data: services that share a database are not decoupled at all.
Async to the client too: push beats polling when freshness matters.
Builder
Bridge: the synchronous chain that took checkout down. Your queue/DLQ/fanout micros are exactly the toolbox.
- ChallengeDesign an Image Resizing Service
First full pipeline: upload, queue, worker, storage. Your micros assembled into a system.
- ChallengeDesign a Notification System
Fanout + DLQ + multi-channel: this challenge is literally the composition of your first three micros.
- ChallengeDesign a Distributed Job Scheduler
Reliable execution: at-least-once delivery makes idempotency non-negotiable.
- InterviewProve it: Mid-tier interview
Mid-level checkpoint: spin a mid-tier interview before climbing to senior. Most of what you trained in these chapters (queues, fanout, DLQs, idempotency) is exactly what the mid pool asks.
Go to interviews →
Architect
- Read
Read before the next step: real-time co-editing cannot lock. Two models resolve concurrent edits: Operational Transform (transform each edit against concurrent ones; needs a central sequencer) and CRDTs (data structures whose merges are mathematically conflict-free, any order). OT centralizes and simplifies intent; CRDTs decentralize and tolerate partitions at the cost of metadata growth. In the next challenge, your job is not to implement either; it is to choose one, place it in the topology, and defend the trade-off.
- ChallengeDesign a Collaborative Text Editor
Real-time collaboration: push, presence and the conflict model you just read about.
- ChallengeDesign a Data Lake Platform
Capstone: ingestion at scale. Every queue, stream and pipeline of this trail feeding one platform.
- InterviewProve it: Senior-tier interview
Prove it: a senior-tier interview.
Go to interviews →
Resilience & Global Operations
Systems that survive failures, and Friday deploys: failover, multi-region, sagas, observability and coordination. Capstone: a multi-region database.
0 of 14 mastered
Resilience & Global Operations
Systems that survive failures, and Friday deploys: failover, multi-region, sagas, observability and coordination. Capstone: a multi-region database.
Fundamentals
Resilience starts at the database: a standby that can be promoted.
- MicroGo Multi-Region
A region can die: serve from more than one, and decide what is shared.
Transactions across services without 2PC: sagas with compensating actions.
You cannot fix what you cannot see: logs from every service, one searchable place.
Logs explain incidents; metrics and alerts DETECT them, before your users do.
In a service chain, WHERE did the request slow down? Tracing follows it across hops.
Builder
Bridge: the 6-hour silent outage. Failover + observability micros, applied to the stack that needed them.
- ChallengeDesign a Log Collection Agent
First full system: reliable collection under backpressure. Losing logs during an incident is losing the incident.
- ChallengeDesign a Distributed Job Scheduler
Reliable execution at scale: retries, idempotency and the cost of "exactly once".
Global propagation with consistency: every node must converge on the same config, fast.
Architect
Primer for staff territory: when exactly one of N must act, a coordination service decides who.
- ChallengeDesign a Service Mesh
Resilience and observability as infrastructure: the mesh moves retries, mTLS and telemetry out of app code.
- ChallengeDesign a Multi-Region Database
Capstone: replication, failover, coordination and consistency across regions. The full resilience toolbox in one design.
- InterviewProve it: Staff+-tier interview
Prove it at the top tier: a staff interview. The roulette may hand you consensus, payments or order management.
Go to interviews →
Security at Scale
Zero trust from edge to secret: authn, WAF, rate limits, tenant isolation and auditability. Capstone: a global IAM.
0 of 14 mastered
Security at Scale
Zero trust from edge to secret: authn, WAF, rate limits, tenant isolation and auditability. Capstone: a global IAM.
Fundamentals
Identity first: verifiable tokens are the foundation every other control builds on.
Identity without server state: the property that lets auth scale horizontally.
Block the obvious at the edge: the WAF strips attack noise before it touches your services.
Abuse looks like traffic: limits per client are both a security and a stability control.
One door to guard: the gateway concentrates authn, limits and routing in a single entry point.
Files out of the database: the storage topology you will secure with signed links two steps from now.
Builder
Bridge: the wide-open API being scraped right now. Gateway, JWT, WAF and rate-limit micros, assembled.
- ChallengeDesign an API Gateway
First full system: the gateway for real. Authn, rate limits and routing under latency constraints.
- ChallengeDesign a File Sharing Service
Authorization on objects: signed URLs, scoped access, and the cost of getting it wrong.
Architect
- ChallengeDesign an Audit Log System
Security you can prove: immutable audit trails are what compliance actually asks for.
- ChallengeDesign a Multi-Tenant SaaS Platform
Isolation end to end: one bad tenant boundary and every customer is exposed.
Capstone: identity and authorization for everything else you will ever build. Global, fast and correct.
- ChallengeDesign a Secret Management Service
Post-graduate: the system that guards the keys to every other system.
- InterviewProve it: Staff+-tier interview
Prove it at the top tier: a staff interview.
Go to interviews →