Distributed Rate Limiting in Go: GCRA, Redis, and the Pitfalls Nobody Warns You About
Every production rate limiter has two layers. The first layer is the algorithm: token bucket, leaky bucket, fixed window, sliding
Tag: api-design
Idempotency Keys Done Right: Building Retry-Safe APIs That Never Double-Charge
You hit “Place Order,” the spinner hangs for ten seconds, and you tap the button again. Now the fear sets
Continue readingIdempotency Keys Done Right: Building Retry-Safe APIs That Never Double-Charge
Load Balancing Beyond Round Robin: Least Outstanding Requests and Consistent Hashing
Here is a failure mode that shows up in every system with more than two backends: round robin distributes requests
Continue readingLoad Balancing Beyond Round Robin: Least Outstanding Requests and Consistent Hashing
API Pagination Strategies: Offset, Cursor, and Relay Connections Done Right
Sooner or later, every API designer hits the pagination wall. The endpoint works fine in staging, then production traffic arrives
Continue readingAPI Pagination Strategies: Offset, Cursor, and Relay Connections Done Right
Deprecating API Endpoints Without Breaking Consumers: Deprecation and Sunset Headers
Every API with more than a handful of consumers eventually faces the same problem: an endpoint or field you designed
Continue readingDeprecating API Endpoints Without Breaking Consumers: Deprecation and Sunset Headers
JWT Security Pitfalls: Algorithm Confusion, Header Injection, and the Claims Everyone Forgets to Check
JWTs are everywhere because they solve an ugly problem: how does a stateless service know who’s calling without a database
Cursor-Based Pagination Done Right: Keyset Queries, Opaque Cursors, and the Pitfalls That Bite
Every API that returns a list eventually has to answer the same question: how do you hand out a million
API Versioning Strategies: Path vs Header, Calendar Dates, and Graceful Sunsets
Every API you ship is a promise. Clients hardcode your URLs, parse your field names, and schedule work around your
Continue readingAPI Versioning Strategies: Path vs Header, Calendar Dates, and Graceful Sunsets
Idempotency Keys: Making API Retries Safe by Design
The network drops the connection two seconds after your client sends the payment request. Did the charge go through? Your
Continue readingIdempotency Keys: Making API Retries Safe by Design
API Versioning Strategies That Age Well: Headers, Paths, and the Art of Not Breaking Clients
Somewhere between the first integration and the hundredth, every API team hits the same wall: the change you need to