saga420 saga420

Effectively using AWS Reserved Instances

Learn how Stripe uses AWS Reserved Instances and capacity planning to effectively manage a dynamic, scalable cloud infrastructure: https://stripe.com/blog/aws-reserved-instances

Usage

Included are three files:

Makefile: This generates our Python environment for running the ETL.

Scaling your API with rate limiters

The following are examples of the four types rate limiters discussed in the accompanying blog post. In the examples below I've used pseudocode-like Ruby, so if you're unfamiliar with Ruby you should be able to easily translate this approach to other languages. Complete examples in Ruby are also provided later in this gist.

In most cases you'll want all these examples to be classes, but I've used simple functions here to keep the code samples brief.

Request rate limiter

This uses a basic token bucket algorithm and relies on the fact that Redis scripts execute atomically. No other operations can run between fetching the count and writing the new count.

	! ===== Encrypted/HTTPDNS endpoints to BLOCK =====
	\|\|api.yuedu.dns.iqiyi.com^$important
	\|\|apidns.kwd.inkuai.com^$important
	\|\|bj.vip.waf.dns.iqiyi.com^$important
	\|\|data.video.dns.iqiyi.com^$important
	\|\|dns.alidns.com^$important
	\|\|dns.iqiyi.com^$important
	\|\|dns.jd.com^$important
	\|\|dns.jd.com.gslb.qianxun.com^$important
	\|\|dns.qiyipic.iqiyi.com^$important

	! Apple allowlist for AdGuard (focus on service continuity; include ads/metrics).
	! Syntax: AdGuard/Adblock-style whitelist rules.
	! NOTE: Final section includes “catch-all” root zones to future-proof new subdomains.

	! =========================
	! Core / Identity / CDN
	! =========================
	@@\|\|apple.com^
	@@\|\|cdn-apple.com^
	@@\|\|aaplimg.com^

	#!/usr/bin/env bash
	# ---------------------------------------------------------------------------
	# init-cloud.sh - Unified Linux Cloud Server Initialization Script
	# Combines cfg.sh and edge-sysctl-upgrade.sh with improvements
	#
	# Features:
	# • Non-interactive / idempotent / fault-tolerant
	# • Auto-detects system architecture (x86_64/ARM)
	# • Configurable swap size (default 5GB)
	# • Removes UFW, relies on iptables-nft or nftables

	#!/usr/bin/env bash
	# ---------------------------------------------------------------------------
	# Debian 12 bootstrap – high-concurrency proxy / forwarding host
	#
	# • Non-interactive / idempotent / fault-tolerant
	# • Removes UFW, relies on iptables-nft or nftables
	# • Installs tool-chain + shadowsocks-rust (auto-latest, idempotent)
	# • Enables kernel forwarding & high-performance sysctl profile
	# • Creates / resizes 5 GiB swapfile if required
	#

	package main

	import (
	"github.com/gin-gonic/gin"
	"net"
	"net/http"
	"os/exec"
	)

	var privateNetworks []*net.IPNet

	#!/usr/bin/env bash


	if [ "$AWS_PROFILE" = "" ]; then
	echo "No AWS_PROFILE set"
	exit 1
	fi


	for region in $(aws ec2 describe-regions --region eu-west-1 \| jq -r .Regions[].RegionName); do

	#!/usr/bin/python

	import os
	import boto3
	import pathlib
	import datetime
	import subprocess
	import mimetypes

	'''