cswork / libraryOpen practice workspace

Interview guides · ASDF Web Hosting

ASDF Web Hosting Software Engineer Interview Guide

ASDF Web Hosting Software Engineer interview guide: reported rounds, questions and how candidates describe the process.

The 60-second brief

A Software Engineer at ASDF Web Hosting is responsible for building and maintaining the highly resilient infrastructure, control panels, and automation systems that keep millions of websites online. In this role, you will work on the core systems that manage domain registration, DNS routing, server provisioning, and containerized hosting environments. Because our customers range from individual bloggers to enterprise-scale e-commerce platforms, the software you write must be designed for high availability, low latency, and absolute security. The engineering team at ASDF Web Hosting tackles unique challenges at the intersection of web development and systems engineering. You will contribute to products that simplify complex server management for everyday users while ensuring the underlying infrastructure remains robust and performant.

This guide is scoped to a Software Engineer candidate at ASDF Web Hosting.

Focus areas

  • Interview Feedback Writing
  • Communication Skills
  • Technical Question Handling

The ASDF Web Hosting interview process

ASDF Web Hosting candidates report 4 rounds over 3-5 weeks. The stages below are what candidates describe, not a published process.

Initial Conversation

Align on mutual expectations through an initial discussion.

What to demonstrate

  • Align on mutual expectations through an initial discussion
  • Depth in Interview Feedback Writing

How to prepare

  • Answer aloud and timed: Explain the step-by-step process of what happens when a user types a URL into their browser, specifically focusing on DNS resolution and web server routing.
  • Answer aloud and timed: How would you design a rate-limiting system to protect a web hosting control panel API from brute-force attacks?

Take-Home Assignment

Complete a practical coding task to showcase your skills in a low-pressure environment.

What to demonstrate

  • Complete a practical coding task to showcase your skills in a low-pressure environment
  • Depth in Interview Feedback Writing

How to prepare

  • Answer aloud and timed: Describe your experience with web servers like Apache or Nginx, and explain how you would configure them to handle high-concurrency traffic.
  • Answer aloud and timed: How do you manage database migrations in a production environment with zero downtime?

Technical Panel

Engage in deeper technical discussions with potential peers and engineering managers.

What to demonstrate

  • Engage in deeper technical discussions with potential peers and engineering managers
  • Depth in Interview Feedback Writing

How to prepare

  • Answer aloud and timed: What strategies would you use to optimize a slow-loading web application that relies heavily on third-party APIs?
  • Answer aloud and timed: Imagine a customer reports that their website is occasionally throwing 502 Bad Gateway errors, but your monitoring tools show the server is healthy. How do you go about troubleshooting this issue?

Behavioral Panel

Participate in behavioral interviews to assess interpersonal skills and cultural fit.

What to demonstrate

  • Participate in behavioral interviews to assess interpersonal skills and cultural fit
  • Depth in Interview Feedback Writing

How to prepare

  • Prepare three examples from your own work, each with a decision you made and an outcome you can quantify.
  • Re-read the description of the behavioral panel above and write down what you would ask to confirm before it.

Where candidates lose points

Focus on the fundamentals

We value a strong grasp of core web concepts (HTTP, DNS, databases) far more than familiarity with the latest trending framework. Make sure you can explain how things work under the hood.

Explain your thought process

During analytical and system design questions, walk your interviewer through your thinking. We want to see how you approach problems, handle ambiguity, and evaluate trade-offs.

Be pragmatic

When designing solutions or writing code, prioritize simplicity and reliability over-engineering. Explain why you chose a particular approach and what future improvements you would make if you had more time.

Questions & practice

Find overlapping job attempts and peak concurrency from lease records

Medium · sweep line · intervals · leases

A day of job_run history yields about 50,000,000 attempt records: (job_run_id, job_type, attempt, started_at, finished_at which is NULL when the worker died, lease_expires_at). Leases expire on a clock, so a job that outran its lease ran twice. Produce (a) every job_run_id whose attempts overlapped in wall-clock time and (b) the peak number of simultaneously running attempts per job_type with the minute it occurred. Target O(n log n). State how you treat a NULL finished_at and what clock skew does to your answer.

Approach

  1. Define the interval before sorting anything: an attempt occupies [started_at, COALESCE(finished_at, lease_expires_at)). finished_at is observed and lease_expires_at is only a promise, so every attempt without a finish contributes an estimate and the whole result is a lower bound on overlap rather than an exact count.
  2. For peak concurrency, sweep: emit 2n endpoints, sort by (timestamp, kind) with ends ordered before starts at equal timestamps, then walk the sequence maintaining a counter per job_type and record each type's maximum with its timestamp. O(n log n) dominated by the sort, O(n) space, or O(1) extra if the sort is external and the walk streams.
  3. For overlap detection, do not compare attempts pairwise. A single global sort by (job_run_id, started_at) gives both the grouping and the order; within a group, keep the maximum end seen so far and report an overlap exactly when the next start is less than that running maximum, which is one linear pass after the sort.
  4. Half-open intervals matter and are easy to get wrong: with closed intervals an attempt ending at the same millisecond another begins reads as concurrency two, and across 50,000,000 records that artefact swamps the real signal.

Follow-up

  • A handler is not idempotent and you have found 400 overlapping jobs. Which of them actually caused damage, and what would you query to find out?
  • Peak concurrency for one job_type is 4 against a configured cap of 4. Is the cap working, or is the data hiding attempts that never started?

Track a rolling failure rate per destination for circuit decisions

Easy · sliding window · ring buffer · circuit breaker

The egress service delivers about 1,500 webhooks per second across roughly 40,000 destinations, each call bounded by a 10 second timeout. Maintain, per destination, the failure rate over the trailing 60 seconds so a caller can ask before dispatch whether the circuit should open. Attempts arrive as (destination_id, finished_at_ms, outcome). Requirement: amortised O(1) per attempt, with total memory bounded by the destination count rather than by traffic. Give the structure, its exact memory, and the rule that stops a destination with three attempts from opening a circuit.

Approach

  1. Name the exact-deque version and then reject it as the default. Holding timestamps and advancing a tail pointer past anything older than now minus 60 seconds is a correct two-pointer window at amortised O(1) per attempt, but its memory tracks in-window traffic, so one destination in a retry storm holds hundreds of thousands of entries while thousands of quiet destinations hold none.
  2. Use a ring of 60 one-second buckets per destination, each bucket a pair of counters for attempts and failures. On an attempt, advance the ring by the elapsed whole seconds, zeroing at most min(elapsed, 60) buckets, then increment the head. That is amortised O(1) with a fixed footprint per destination.
  3. State the footprint: 60 buckets times two 4-byte counters is 480 bytes of payload per destination, so 40,000 destinations is roughly 20 to 25 MB with per-entry overhead, bounded by the catalogue rather than by the rate. The cost is granularity, since the oldest bucket ages out in whole seconds, which is far tighter than the decision needs.
  4. Require a minimum sample before the circuit may open. A destination with three attempts and three failures reads as 100 percent and is not evidence; a floor of roughly 20 attempts in the window makes the ratio meaningful, and below that floor use a run of consecutive failures as the trigger instead.

Follow-up

  • The fleet is 30 instances and each sees roughly a thirtieth of a destination's traffic. Where does the rate actually live, and what does a per-instance answer get wrong?
  • A destination answers in 9.5 seconds and succeeds. It is not failing but it is consuming your per-destination concurrency. What signal should open the circuit here?

Archive a resource graph without breaking live references or recursing

Medium · graph traversal · topological order · tenant isolation

Resources reference other resources within a tenant; for the largest tenant the reference table holds up to 2,000,000 nodes and 8,000,000 edges. Archiving a resource must archive everything reachable from it that nothing outside the set still references, refuse when a live external referrer exists, and terminate when references form cycles, which they legitimately do. Produce the archive order and the refusal list, targeting O(V+E). Say what stops the traversal crossing a tenant boundary, and why recursion is the wrong control structure at this size.

Approach

  1. Load the subgraph with the tenant predicate on both endpoints of the edge, not only on the side you started from. Scoping the left table alone is the classic cross-tenant leak: one mis-entered edge then pulls another tenant's resources into the traversal and, worse, into the archive.
  2. Traverse iteratively with an explicit stack. A 2,000,000-node graph can hold a chain deep enough to exhaust a native stack in the low tens of thousands of frames, and that failure is a process crash rather than an error you can return.
  3. Treat cycles as data rather than corruption: compute strongly connected components with Tarjan in O(V+E) using its own explicit stack, then condense. The condensation is a DAG, so a topological order over it gives the archive order, and every member of a component archives in one transaction because no order within a cycle is valid.
  4. Decide refusals with reverse edges. A candidate is archivable only if every in-edge originates inside the candidate set, so build the transpose or count in-degrees restricted to the visited set, and emit each blocked resource with the id of the external referrer, which is the only part of the answer an operator can act on.

Follow-up

  • The graph is read in one query and the archive writes a minute later. What can change in between, and how do you make the write safe?
  • The candidate set is 400,000 resources. Is that one transaction, and if not, what does a half-finished archive look like to a reader?

Denormalise tenant onto revisions and backfill it live

Hard · denormalisation · online migration · backfill

resource_revision (revision_id, resource_id, version, actor_user_id, change_kind, patch, request_id, created_at) has 400M rows and no tenant column; tenant_id lives only on resource. Two reads need it: a tenant-scoped audit feed ordered by created_at DESC, and an offboarding purge. Both join back to resource today. Justify adding tenant_id to resource_revision against those two reads, name the anomaly the copy introduces and the constraint that prevents it, then give the ordered migration for a live table taking 1.2k writes/second — the lock each step takes, how the backfill is batched, and where each step stops being reversible. PostgreSQL 16.

Approach

  1. Justify from the access path rather than from taste. Without the column, the audit feed either scans resource_revision by created_at and discards other tenants' rows, or resolves the tenant's resource_ids first and probes with them — both proportional to the tenant's whole history rather than to one page. With (tenant_id, created_at DESC, revision_id DESC) it is a seek that stops at 50 rows, and the purge becomes a ranged delete instead of a join.
  2. Name the cost exactly: a second copy of a fact can disagree with the first. Make the disagreement unwritable rather than documented — add UNIQUE (resource_id, tenant_id) on resource so it can serve as a foreign-key target, then FOREIGN KEY (resource_id, tenant_id) REFERENCES resource (resource_id, tenant_id) on the revision table. A revision can then only ever carry its parent's tenant.
  3. Step one, expand: ALTER TABLE resource_revision ADD COLUMN tenant_id BIGINT NULL, with no default, so it is a catalogue change and no rewrite. It still needs ACCESS EXCLUSIVE for an instant, and that instant queues behind the longest open transaction on the table while every later query queues behind it — set lock_timeout to 2s and retry rather than wait.
  4. Step two, dual-write: deploy the writer that populates tenant_id on every new revision while reads still use the join. Reversible by redeploying the previous build, because nothing reads the column yet.

Follow-up

  • The backfill is half finished and a rollback is required. What state is the table in, and what does the previous build do with a half-populated column?
  • How do you verify the backfill actually finished, given rows are still being inserted while it runs?

Write the update path that detects a concurrent edit

Medium · optimistic concurrency · transactional outbox · audit history

resource carries version INT NOT NULL DEFAULT 1. resource_revision holds revision_id, resource_id, version, actor_user_id, change_kind, patch JSONB, request_id, created_at with UNIQUE (resource_id, version). outbox_event holds aggregate_type, aggregate_id, aggregate_version, event_type, payload, status. A PUT carries the version the client read. Write the exact statements for the single transaction that applies the edit, records the revision and enqueues 'resource.updated', and give the handler's branch on zero affected rows. Then say what PostgreSQL 16 does under READ COMMITTED when two of these updates hit one row at once.

Approach

  1. One transaction, three writes, no network call inside it: UPDATE resource SET title = $3, version = version + 1, updated_at = now() WHERE resource_id = $1 AND tenant_id = $4 AND version = $2; then INSERT the resource_revision row at version $2 + 1; then INSERT the outbox_event row at the same aggregate_version. The event goes to a table rather than a broker because no transaction spans both.
  2. Branch on the affected-row count before doing anything else. Zero has three causes — stale version, wrong tenant, row gone — so re-read once and map to 409 carrying the current version, or 404 for an id outside the caller's tenant, which also stops the endpoint confirming that another tenant's id exists.
  3. State the engine behaviour instead of assuming it. Under READ COMMITTED the second UPDATE blocks on the row lock, and when the first commits PostgreSQL re-evaluates the WHERE clause against the newly committed row, so the version predicate now fails and the statement reports zero rows. Under REPEATABLE READ the identical collision raises SQLSTATE 40001 instead, so the handler must fold both shapes into one conflict response.
  4. Keep UNIQUE (resource_id, version) even though the predicate already serialises writers. It is what makes a lost update unwritable if any other path ever reaches the revision table, and it converts a logic bug into 23505 rather than into a silently missing history row.

Follow-up

  • A client sends the version it read ten minutes ago and the resource has moved three versions. What is in your 409 so it can resolve the conflict without a full re-fetch?
  • Two editors, two disjoint fields, no overlap. Does your answer still refuse the second write, and should it?

Explain the step-by-step process of what happens when a user types a URL into their browser, specifically focu

Medium · Web Development & Systems Architecture

Explain the step-by-step process of what happens when a user types a URL into their browser, specifically focusing on DNS resolution and web server routing.

Approach

  1. Fix the scope first: who calls this, how often, and what they do when it fails.
  2. Name the read and write paths separately; they rarely have the same bottleneck.
  3. Choose a partition key and say what query it makes expensive.
  4. State the consistency you need, and where you are willing to be stale.

Follow-up

  • What breaks first when traffic grows ten times?
  • How does this behave when that dependency is down for an hour?

How would you design a rate-limiting system to protect a web hosting control panel API from brute-force attack

Medium · Web Development & Systems Architecture

How would you design a rate-limiting system to protect a web hosting control panel API from brute-force attacks?

Approach

  1. Fix the scope first: who calls this, how often, and what they do when it fails.
  2. Name the read and write paths separately; they rarely have the same bottleneck.
  3. Choose a partition key and say what query it makes expensive.
  4. State the consistency you need, and where you are willing to be stale.

Follow-up

  • What breaks first when traffic grows ten times?
  • How does this behave when that dependency is down for an hour?

How do you manage database migrations in a production environment with zero downtime?

Medium · Web Development & Systems Architecture

Approach

  1. Fix the scope first: who calls this, how often, and what they do when it fails.
  2. Name the read and write paths separately; they rarely have the same bottleneck.
  3. Choose a partition key and say what query it makes expensive.
  4. State the consistency you need, and where you are willing to be stale.

Follow-up

  • What breaks first when traffic grows ten times?
  • How does this behave when that dependency is down for an hour?

What strategies would you use to optimize a slow-loading web application that relies heavily on third-party AP

Medium · Web Development & Systems Architecture

What strategies would you use to optimize a slow-loading web application that relies heavily on third-party APIs?

Approach

  1. Fix the scope first: who calls this, how often, and what they do when it fails.
  2. Name the read and write paths separately; they rarely have the same bottleneck.
  3. Choose a partition key and say what query it makes expensive.
  4. State the consistency you need, and where you are willing to be stale.

Follow-up

  • What breaks first when traffic grows ten times?
  • How does this behave when that dependency is down for an hour?

How would you design an algorithm to efficiently allocate server resources among thousands of shared hosting a

Medium · Analytical Skills & Problem-Solving

How would you design an algorithm to efficiently allocate server resources among thousands of shared hosting accounts?

Approach

  1. Fix the scope first: who calls this, how often, and what they do when it fails.
  2. Name the read and write paths separately; they rarely have the same bottleneck.
  3. Choose a partition key and say what query it makes expensive.
  4. State the consistency you need, and where you are willing to be stale.

Follow-up

  • What breaks first when traffic grows ten times?
  • How does this behave when that dependency is down for an hour?

How do you approach writing clean, maintainable code when working with a legacy codebase that lacks test cover

Medium · Analytical Skills & Problem-Solving

How do you approach writing clean, maintainable code when working with a legacy codebase that lacks test coverage?

Approach

  1. Clarify what is being asked and what a complete answer contains.
  2. State your assumptions explicitly before working the problem.
  3. Say what you would check first and why it is the highest-information step.
  4. Work from the requirement backwards to the design.

Follow-up

  • What assumption would you test first?
  • How would you know your answer was wrong?

Imagine a customer reports that their website is occasionally throwing 502 Bad Gateway errors, but your monito

Medium · Analytical Skills & Problem-Solving

Imagine a customer reports that their website is occasionally throwing 502 Bad Gateway errors, but your monitoring tools show the server is healthy. How do you go about troubleshooting this issue?

Approach

  1. Establish what changed and when, before forming any theory.
  2. Pick a bisection that eliminates candidates whichever way it turns out.
  3. Check the instrumentation before believing the symptom.
  4. Separate the trigger from the cause; the deploy is rarely the bug.

Follow-up

  • What would you look at first, and what would it rule out?
  • How would you tell a cause from a coincidence here?

Suggested practice checklist

Built from the rounds and topics ASDF Web Hosting candidates report.

Day 1 — Map the ASDF Web Hosting loop

  • Write out the reported sequence: Initial Conversation, Take-Home Assignment, Technical Panel, Behavioral Panel.
  • For each round, write one sentence on what it is judging, from the description above, and mark the one you are least ready for.

Deliverable: A one-page map of the 4 reported rounds, with the weakest marked.

Day 2 — Work Interview Feedback Writing

  • Spend the session on Interview Feedback Writing, which ASDF Web Hosting candidates report being tested on.
  • Write one worked example in Interview Feedback Writing and time yourself on it.

Deliverable: One timed worked example in Interview Feedback Writing.

Day 3 — Work Communication Skills

  • Spend the session on Communication Skills, which ASDF Web Hosting candidates report being tested on.
  • Write one worked example in Communication Skills and time yourself on it.

Deliverable: One timed worked example in Communication Skills.

Day 4 — Work Technical Question Handling

  • Spend the session on Technical Question Handling, which ASDF Web Hosting candidates report being tested on.
  • Write one worked example in Technical Question Handling and time yourself on it.

Deliverable: One timed worked example in Technical Question Handling.

Day 5 — Answer out loud: Web Development & Systems Architecture

  • Answer aloud, timed: Explain the step-by-step process of what happens when a user types a URL into their browser, specifically focusing on DNS resolution and web server routing.
  • Answer aloud, timed: How would you design a rate-limiting system to protect a web hosting control panel API from brute-force attacks?

Deliverable: Spoken answers to 2 reported Web Development & Systems Architecture question(s), under time.

Day 6 — Answer out loud: Analytical Skills & Problem-Solving

  • Answer aloud, timed: Imagine a customer reports that their website is occasionally throwing 502 Bad Gateway errors, but your monitoring tools show the server is healthy. How do you go about troubleshooting this issue?
  • Answer aloud, timed: How would you design an algorithm to efficiently allocate server resources among thousands of shared hosting accounts?

Deliverable: Spoken answers to 2 reported Analytical Skills & Problem-Solving question(s), under time.

Day 7 — Answer out loud: Behavioral & Experience

  • Answer aloud, timed: Walk me through a complex project you worked on during a previous role or internship. What was your specific contribution, and what did you learn?
  • Answer aloud, timed: How do you handle a situation where you and a senior engineer disagree on the architectural direction of a new feature?

Deliverable: Spoken answers to 2 reported Behavioral & Experience question(s), under time.

Behavioural preparation

Behavioural rounds judge the decision you made and what it cost.

Describe your experience with web servers like Apache or Nginx, and explain how you would configure them to ha

Medium · Web Development & Systems Architecture

Describe your experience with web servers like Apache or Nginx, and explain how you would configure them to handle high-concurrency traffic.

Approach

  1. Pick a story where you made the decision, not one where you watched it.
  2. State the situation in two sentences and spend the rest on the reasoning.
  3. Give the blast radius: what could have broken, and what you measured.
  4. Name the disagreement and how you resolved it with evidence.

Follow-up

  • What would you do differently if you ran that again?
  • How did you know your change caused the improvement?

Describe a time when you had to analyze a system bottleneck. What tools did you use, and how did you resolve t

Medium · Analytical Skills & Problem-Solving

Describe a time when you had to analyze a system bottleneck. What tools did you use, and how did you resolve the issue?

Approach

  1. Pick a story where you made the decision, not one where you watched it.
  2. State the situation in two sentences and spend the rest on the reasoning.
  3. Give the blast radius: what could have broken, and what you measured.
  4. Name the disagreement and how you resolved it with evidence.

Follow-up

  • What would you do differently if you ran that again?
  • How did you know your change caused the improvement?

Walk me through a complex project you worked on during a previous role or internship. What was your specific c

Medium · Behavioral & Experience

Walk me through a complex project you worked on during a previous role or internship. What was your specific contribution, and what did you learn?

Approach

  1. Pick a story where you made the decision, not one where you watched it.
  2. State the situation in two sentences and spend the rest on the reasoning.
  3. Give the blast radius: what could have broken, and what you measured.
  4. Name the disagreement and how you resolved it with evidence.

Follow-up

  • What would you do differently if you ran that again?
  • How did you know your change caused the improvement?

How do you handle a situation where you and a senior engineer disagree on the architectural direction of a new

Medium · Behavioral & Experience

How do you handle a situation where you and a senior engineer disagree on the architectural direction of a new feature?

Approach

  1. Pick a story where you made the decision, not one where you watched it.
  2. State the situation in two sentences and spend the rest on the reasoning.
  3. Give the blast radius: what could have broken, and what you measured.
  4. Name the disagreement and how you resolved it with evidence.

Follow-up

  • What would you do differently if you ran that again?
  • How did you know your change caused the improvement?

Describe a time when a deployment went wrong. How did you handle the situation, and what post-mortem steps did

Medium · Behavioral & Experience

Describe a time when a deployment went wrong. How did you handle the situation, and what post-mortem steps did you take?

Approach

  1. Pick a story where you made the decision, not one where you watched it.
  2. State the situation in two sentences and spend the rest on the reasoning.
  3. Give the blast radius: what could have broken, and what you measured.
  4. Name the disagreement and how you resolved it with evidence.

Follow-up

  • What would you do differently if you ran that again?
  • How did you know your change caused the improvement?

Why do you want to work in the web hosting industry, and what interests you most about ASDF Web Hosting?

Medium · Behavioral & Experience

Approach

  1. Pick a story where you made the decision, not one where you watched it.
  2. State the situation in two sentences and spend the rest on the reasoning.
  3. Give the blast radius: what could have broken, and what you measured.
  4. Name the disagreement and how you resolved it with evidence.

Follow-up

  • What would you do differently if you ran that again?
  • How did you know your change caused the improvement?