LinkedIn Professional Network

Solution Architecture v1.0 · LinkedIn's own stack in LinkedIn-run colos · Enterprise Architecture · 2026-09

A professional network architected at LinkedIn's published scale: 1.2 billion members, a 270-billion-edge graph served at 2 million queries a second, and trillions of Kafka messages a day. It is built mostly on the systems LinkedIn itself built (Rest.li, Espresso, Venice, LIquid, FollowFeed, Galene, Ambry, Kafka, Brooklin, Samza, Pinot), across 30 views and 33 architecture decision records.

30 views 30 HTML views30 SVG30 draw.io 1 document Updated 2026-09-10
Architecture views

30 views, each in three formats.

Open a view to read it in full. Every SVG carries its diagram source inside it, so it opens in diagrams.net fully editable with no import step; the draw.io files are the same diagrams as plain source.

  1. 01
    System Context

    Who uses the network, what it depends on, and what has deliberately been left outside the line.

  2. 02
    High-Level Architecture

    The shape of the platform in one picture: synchronous on the left, asynchronous from the event backbone onward.

  3. 03
    Actors and Their Core Journeys

    Who this is for, and what each of them actually gets to do with it, including the machines that act without being asked.

  4. 04
    Journey — Job Seeker, Search to Status

    The journey with the most at stake for the member, and the silence after applying that decides how applications are stored.

  5. 05
    Journey — Creator, Draft to Reach

    The supply side of the feed, and why the first hour after posting shapes media, fan-out and ranking.

  6. 06
    Journey — Recruiter, Search to First Reply

    The paying customer's journey, where search relevance, member privacy and metered messaging meet.

  7. 07
    Layered Architecture

    What depends on what, and the one arrow that deliberately points back up.

  8. 08
    Container Architecture

    The deployable units inside one colo, the technology of each, and the store it owns.

  9. 09
    Integration Catalogue

    Every interface in and out, its protocol and cadence, and who owns the contract.

  10. 10
    Data Architecture and Ownership

    Record, derived, log and lake: which data is backed up and which is rebuilt.

  11. 11
    Data Flow — Online, Nearline, Offline

    The same data moving at three speeds, and the rule for which speed computes what.

  12. 12
    Event Backbone

    Who publishes, who reacts, and why a publisher never knows its consumers.

  13. 13
    Core Data Model

    The thirteen entities every service shares, and the keys that make ordering and idempotency properties of the data.

  14. 14
    Feed Read — Critical Flow

    One feed page in under 300 ms: three candidate sources, one ranker, and a deadline on every call.

  15. 15
    Post Distribution — Hybrid Fan-out

    Push for normal authors, pull for high-degree ones, and recommended and sponsored content in lanes of their own.

  16. 16
    Feed Ranking Pipeline

    Candidates, filter, score, policy, serve: the ranking is kept separate from feed storage, as the requirement asks.

  17. 17
    Connection Request — Idempotent Flow

    The requirement's own example: a retried POST /connections must never create a second invitation.

  18. 18
    Message Delivery — Ordered, Online and Offline

    Durable before acknowledged, ordered by one sequencer, delivered over SSE or by push.

  19. 19
    Search — Indexing and Query

    An offline base index, a live buffer fed in seconds, and a federated query that personalises by graph distance.

  20. 20
    Notifications — Generate, Decide, Deliver

    One service owns the member's attention: it decides whether, when and on which channel they hear about something.

  21. 21
    Media — Upload, Process, Deliver

    Bytes go straight from the client to Ambry, are scanned and transcoded, and are served from the CDN.

  22. 22
    Deployment Topology

    Four active colos, members pinned to one of them, and a colo drained as routine rather than as an emergency.

  23. 23
    Delivery Pipeline, Canaries and Ramps

    How a change reaches members, and the three things that stop a bad one.

  24. 24
    Observability and Operations

    How anyone knows the network is working, and who gets woken up when it is not.

  25. 25
    Relevance ML Lifecycle

    How feed, search and jobs ranking improve: a loop that closes through what members actually do.

  26. 26
    Graceful Degradation Contract

    What each capability does when a dependency is slow, down, or in a lost colo, agreed before the incident.

  27. 27
    Security Zones

    Where the trust boundaries are, what crosses each one, and where an attacker arrives.

  28. 28
    Identity and Access Flow

    Who proves what to whom at sign-in, and how a session becomes a principal that services trust.

  29. 29
    Privacy and Authorization

    The checks every read of member data passes through, and why a block returns not-found.

  30. 30
    Abuse Detection and Content Moderation

    Rules, models, member reports and human reviewers, all writing one decision log that can be audited.

The package

Everything as it was delivered.

These files are served exactly as they were produced — the diagram pages keep their own house style because that is the artifact, not a rendering of it.