As an alternative to this checkout TozID. The premise of their authentication model is to avoid sending the password all together and use public key crypto to sign and verify requests between the client and the auth server.
-1 karma · joined August 25, 2014
Source: we also write encryption libraries and have a free implementation of our browser sdk at https://share.labs.tozny.com
If you're interested in reading more about it check out this blog post https://tozny.com/blog/encrypted-one-time-secret-sharing-app...
Shameless plug - that is exactly what Tozny provides. An easy way to have end to end crypto with a sharing model that keeps data in control of the original writer.
We found that there is so much mis-information available online it's too easy to shoot yourself in the foot with cryptography so we're trying to make tools that make strong crypto easy to implement.
Tozny provides end to end encryption as a service. We work with public and private organizations to create easy to use cryptography services.
We're funded and growing rapidly. Our backend is primarily Scala and we have SDK's in many languages including node, swift, java, php, etc.
Its a temporary solution since you would just be using more servers to alleviate the root cause rather than optimizing the code. Opsworks will let you deploy additional servers easily and a contractor can do all the technical setup for you. You can queue servers based on load or time of day and it can run all of your php/database servers for you.
Hope it helps and you can use something like New Relic to help notify you of downtime or performance gaps in your application.