Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

I believe both can be scaled.
<@U01LWRXUF7B> might have more insight into which would be better depending on the use case

True, very much depends on the use case. Most of Ory apps have a bursting character which means that the mean load is quite low but can peak during some strenuous operations, like generating cryptographic keys 

In that case it is better to have multiple replicas with low requests and high limits 

On the other hand you have oathkeeper which as a proxy holds all the rules in memory and more replicas just multiply the resource used

But works as a round Robbin allowing for faster response time 

The answer would be: depends how much you want to optimize the setup ;) 

Thanks ! We will tests different tweakup and see but it's good pointers for us :slightly_smiling_face: