IntercomRyan SherlockExplainer
Ready for your busiest day: How we scale
Summary
Fin describes how its customer service platform is designed to absorb high-volume events while preserving customer isolation, availability, and operational control. At daily peaks, it handles over 150,000 customer requests per second and more than 70,000 asynchronous requests per second; its source-of-truth data spans 128 Vitess shards, while Elasticsearch supports over 650TB, 1.7 trillion documents, and peaks above 40,000 requests per second. The architecture favors AWS primitives, Vitess managed by PlanetScale, online and incremental migrations, fair queues, feature flags, heartbeat metrics, and automatic rollback, with roughly 250 production ships per workday and merge-to-production time under 10 minutes. The stated conclusion is that scale depends less on headline capacity than on clear scaling levers, tenant fairness, customer-outcome monitoring, reversible change, and routine infrastructure improvement without planned customer-impacting downtime.
Context
Customers want confidence that the platform can handle high-volume events, individual workspace spikes, production incidents, and continued growth without their systems reaching operational limits or affecting other tenants.
Approach / What changed
The platform uses AWS infrastructure primitives, Vitess managed by PlanetScale for sharded MySQL scaling, online Elasticsearch reshaping, fair queues, application-level guardrails, customer-outcome heartbeat metrics, feature flags, automatic rollback, and incremental, observable infrastructure changes.
Takeaways
The source-of-truth database is distributed across 128 Vitess shards and handles around two million requests per second, with more than ten million cache reads per second in front of it.
Elasticsearch supports more than 650TB of storage and 1.7 trillion documents, with index reshaping performed through partitioning, dual-writing, backfilling, validation, and gradual customer migration.
The operating model treats smaller, reversible production changes, heartbeat-driven detection, and automatic rollback as part of reliability, alongside a goal of avoiding routine customer-impacting maintenance windows.
Source and freshness
- Source
- intercom.com
- Published
- Added to Yomu
Summaries are generated from the original by a language model. Check the original before relying on it.
Keep reading
Related reading
The Good Stuff
Paid picks we use ourselves. Links carry a referral code — a subscription through one earns us a commission at no extra cost to you.
The best engineering reads, once a week
One useful email. Unsubscribe anytime.