Comment by geogriffin

Exactly, 1000 guesses per second is probably a reasonable target to tune your KDF's difficulty to, depending on of course the application and the amount of resources you're willing to dedicate to running the KDF on every login..