XURL — Modern Smart URL Shortener & Analytics Platform
High-performance link management platform with sub-millisecond edge redirects, custom branded aliases, real-time analytics, and Razorpay billing.
Project Overview
XURL is a production-grade, serverless SaaS URL shortening platform designed to combine consumer ease of use with enterprise-grade redirect velocity and telemetry. Built with a desktop-first aesthetic using shadcn/ui and Tailwind CSS, it features instant zero-login guest shortening, multi-tier paid plans with Razorpay checkout, custom branded aliases, automated QR code generation, SSRF defense, and comprehensive 30-day link performance tracking.
Three-Tier Edge Caching & Distributed Abuse Protection
Engineered with a multi-layered resolution pipeline prioritizing ultra-low latency redirects while safeguarding against malicious targeting and DDoS bursts.
- Three-tier redirect resolution (In-Memory L1 -> Upstash Redis L2 -> Cloud Firestore L3) delivering sub-millisecond dispatch times.
- Edge middleware rate limiting with sliding-window counters and automated abuse scoring to drop spam bursts before database touches.
- Built-in SSRF defense with DNS lookup pre-validation blocking internal IP ranges, metadata endpoints, and malicious redirect chains.
- Idempotent Razorpay payment webhook handling guaranteeing atomic quota allocation with zero double-charge hazards.
Engineering Challenges & Solutions
Achieving sub-millisecond redirect latency at scale without costly compute servers
Implemented multi-tier caching at the edge leveraging Upstash Redis with pipeline fetching, resolving hot redirect slugs directly in serverless edge middleware before downstream database execution.
Preventing phishing, recursive redirect loops, and SSRF vulnerabilities in public user URLs
Engineered an automated validation pipeline executing synchronous DNS resolution and private CIDR block inspection, rejecting loopback, local network, and known malicious hosts at ingestion time.
Core Capabilities
- Instant 1-click link shortening with zero-signup guest access
- Sub-millisecond redirect engine powered by three-tier edge caching
- Custom branded aliases and automatic QR code generation
- Real-time 30-day analytics dashboard tracking referrers, browsers, devices, and countries
- Multi-tier subscription billing with Razorpay checkout and idempotent webhook verification
- RESTful Developer API with token-based authentication and rate limit telemetry
Validated Outcomes
- Sub-millisecond redirect times achieved on cached hot URLs via Upstash Redis edge pipeline
- 100% idempotent transaction processing across all Razorpay webhook payment events
- Zero malicious internal network penetrations verified through strict SSRF validation filters
- Zero layout shift (CLS = 0) across responsive desktop and mobile viewports
Licensing, IP & Contract Governance
Transparent disclosure on source code distribution, client contracts, and commercial terms
Software License Status
Partial Open Source (Core Engine MIT)
Contract & Engagement Model
Client Contract Signed & Commercial SaaS
Core URL shortening engine, API schema, and desktop-first UI components released open-source under the MIT License. Production Razorpay payment reconciliation, edge rate-limiting rules, and client analytics infrastructure deployed under client consulting agreement with signed IP governance.