Payment integration architecture in HLD - Architecture Diagram

System Overview - Payment integration architecture

This system handles online payment processing for an e-commerce platform. It securely accepts payment requests from users, communicates with external payment gateways, and updates order status upon successful transactions. Key requirements include security, reliability, and scalability to handle many simultaneous payments.

Architecture Diagram

User
  |
  v
Load Balancer
  |
  v
API Gateway
  |
  v
Payment Service <--> Cache
  |
  v
Database
  |
  v
Message Queue
  |
  v
External Payment Gateway

Components

User

client

Initiates payment requests via web or mobile app

Load Balancer

load_balancer

Distributes incoming payment requests evenly across API Gateway instances

API Gateway

api_gateway

Handles authentication, routing, and rate limiting for payment requests

Payment Service

service

Processes payment logic, interacts with cache, database, and message queue

Cache

cache

Stores recent payment session data to reduce database load

Database

database

Stores persistent payment and order records

Message Queue

queue

Queues payment confirmation messages for asynchronous processing

External Payment Gateway

external_service

Third-party service that processes actual payment transactions

Request Flow - 13 Hops

User → Load Balancer

Load Balancer → API Gateway

API Gateway → Payment Service

Payment Service → Cache

Cache → Payment Service

Payment Service → Database

Payment Service → Message Queue

Message Queue → External Payment Gateway

External Payment Gateway → Message Queue

Message Queue → Payment Service

Payment Service → Cache

Payment Service → API Gateway

API Gateway → User

Failure Scenario

Component Fails:Database

Impact:New payment records cannot be saved; payment status updates fail. Cached data may be stale.

Mitigation:Reads can still be served from cache; writes are retried or queued. Database replication and failover reduce downtime.

Architecture Quiz - 3 Questions

Which component first handles the user's payment request after it passes through the Load Balancer?

A Payment Service

B API Gateway

C Cache

D Database

Design Principle

This architecture uses layered components to ensure secure, scalable payment processing. Caching reduces database load, asynchronous messaging decouples external payment processing, and load balancing ensures availability under high traffic.

Practice

1. Which component in a payment integration architecture is primarily responsible for securely transmitting payment data between your system and the bank?

easy

A. Payment Gateway

B. Merchant Database

C. User Interface

D. Inventory Management System

Solution

1. Step 1: Understand the role of each component

   The Payment Gateway acts as the secure bridge that transmits payment data from your system to the bank or processor.

2. Step 2: Identify the secure transmission responsibility

   Other components like Merchant Database or User Interface do not handle secure transmission of payment data.

3. Final Answer:

   Payment Gateway -> Option A

4. Quick Check:

   Secure transmission = Payment Gateway [OK]

Hint: Payment Gateway always handles secure payment data transfer [OK]

Common Mistakes:

• Confusing Payment Gateway with Merchant Database
• Thinking User Interface handles security
• Assuming Inventory Management is involved in payments

2. Which of the following is the correct sequence of steps in a typical payment integration flow?

easy

A. Bank -> Payment Processor -> Payment Gateway -> User initiates payment

B. User initiates payment -> Payment Gateway -> Payment Processor -> Bank

C. Payment Processor -> User initiates payment -> Bank -> Payment Gateway

D. Payment Gateway -> Bank -> User initiates payment -> Payment Processor

Solution

1. Step 1: Identify the logical payment flow

   The user starts the payment, which goes to the Payment Gateway, then to the Payment Processor, and finally to the Bank for authorization.

2. Step 2: Verify the order of components

   Options B, C, and D have incorrect sequences that do not match the real-world payment flow.

3. Final Answer:

   User initiates payment -> Payment Gateway -> Payment Processor -> Bank -> Option B

4. Quick Check:

   Payment flow order = A [OK]

Hint: Payment always starts with user and ends at bank authorization [OK]

Common Mistakes:

• Reversing the order of components
• Placing Bank before Payment Gateway
• Confusing Payment Processor and Gateway roles

3. Consider this simplified payment request flow in pseudocode:

sendPaymentRequest(userData) {
  gatewayResponse = callPaymentGateway(userData)
  if (gatewayResponse.status == 'success') {
    processorResponse = callPaymentProcessor(gatewayResponse.data)
    return processorResponse.status
  } else {
    return 'failed'
  }
}

What will be the output if callPaymentGateway returns {status: 'success', data: 'txn123'} and callPaymentProcessor returns {status: 'approved'}?

medium

A. 'txn123'

B. 'success'

C. 'failed'

D. 'approved'

Solution

1. Step 1: Analyze the gateway response

   The gateway returns status 'success' and data 'txn123', so the if condition is true and the processor is called.

2. Step 2: Analyze the processor response

   The processor returns status 'approved', which is returned by the function.

3. Final Answer:

   'approved' -> Option D

4. Quick Check:

   Processor status returned = 'approved' [OK]

Hint: If gateway success, processor status is final output [OK]

Common Mistakes:

• Returning gateway status instead of processor status
• Returning transaction data instead of status
• Ignoring the else branch

4. In a payment integration system, a developer notices that payment requests sometimes fail silently without error logs. Which is the most likely cause?

medium

A. Missing error handling after calling the payment gateway

B. Using HTTPS for communication

C. Encrypting payment data before sending

D. Validating user input before payment

Solution

1. Step 1: Identify silent failure cause

   Silent failures usually happen when errors are not caught or logged properly, indicating missing error handling.

2. Step 2: Evaluate other options

   Using HTTPS, encrypting data, and validating input improve security and correctness but do not cause silent failures.

3. Final Answer:

   Missing error handling after calling the payment gateway -> Option A

4. Quick Check:

   Silent failure = Missing error handling [OK]

Hint: Silent failures mean errors are not caught or logged [OK]

Common Mistakes:

• Blaming HTTPS or encryption for failures
• Ignoring the need for error handling
• Assuming validation causes silent failures

5. You are designing a payment integration system expected to handle 10,000 transactions per second. Which architectural choice best supports scalability and reliability?

hard

A. Store all payment data in a single database table without sharding

B. Process all payments synchronously in a single server to ensure order

C. Use asynchronous message queues between components and horizontally scale payment processors

D. Skip retries on failed payments to reduce load

Solution

1. Step 1: Identify scalability needs

   Handling 10,000 TPS requires distributing load and decoupling components to avoid bottlenecks.

2. Step 2: Evaluate architectural choices

   Asynchronous queues and horizontal scaling allow parallel processing and fault tolerance. Single server or unsharded DB cause bottlenecks. Skipping retries reduces reliability.

3. Final Answer:

   Use asynchronous message queues between components and horizontally scale payment processors -> Option C

4. Quick Check:

   High TPS needs async queues + horizontal scaling [OK]

Hint: Scale horizontally and use async queues for high throughput [OK]

Common Mistakes:

• Choosing synchronous single server processing
• Ignoring database sharding or partitioning
• Skipping retries reduces payment reliability