API Versioning in Go: URL Strategies, Breaking Changes, and Deprecation That Doesn’t Break People
One Tuesday your API’s most popular endpoint works fine. Two Tuesdays later, a mobile app that has been calling it
Tag: best practices
Structured Logging in Go With slog: Handlers, Sampling, and Dynamic Levels
A request fails at 2 AM. The on-call engineer greps through logs looking for a trace ID, finds seventeen lines
Continue readingStructured Logging in Go With slog: Handlers, Sampling, and Dynamic Levels
PgBouncer 1.26.0: Pre-Auth CVEs, the search_path Fix, and What Changes for Pool Sizing
PgBouncer has quietly become mandatory infrastructure for PostgreSQL at scale. If you run more than a few hundred client connections
API Pagination Strategies: Offset, Cursor, and Relay Connections Done Right
Sooner or later, every API designer hits the pagination wall. The endpoint works fine in staging, then production traffic arrives
Continue readingAPI Pagination Strategies: Offset, Cursor, and Relay Connections Done Right
Zero-Downtime Schema Migrations in PostgreSQL: Expand-Contract, Lock Timeouts, and Safe ALTER TABLE
PostgreSQL takes an ACCESS EXCLUSIVE lock for most ALTER TABLE operations. That lock conflicts with everything — reads, writes, even
AI Agents Are Machine Identities: Governing Non-Human Credentials Before They Proliferate
Your microservices fleet has 3,000 machine identities and 300 employees — a 10:1 ratio that is conservative by industry standards,
Deprecating API Endpoints Without Breaking Consumers: Deprecation and Sunset Headers
Every API with more than a handful of consumers eventually faces the same problem: an endpoint or field you designed
Continue readingDeprecating API Endpoints Without Breaking Consumers: Deprecation and Sunset Headers
JWT Security Pitfalls: Algorithm Confusion, Header Injection, and the Claims Everyone Forgets to Check
JWTs are everywhere because they solve an ugly problem: how does a stateless service know who’s calling without a database
PostgreSQL Connection Pooling: Session vs Transaction Mode, PgBouncer, and How to Size It
Every PostgreSQL backend process is a full Unix process with its own megabytes of memory. That design choice buys you
gRPC Server Reflection in Production: Gate It, and Use Health Checks Instead
Here is a debugging story that repeats across every gRPC team. A developer runs grpcurl -plaintext localhost:50051 list against a
Continue readinggRPC Server Reflection in Production: Gate It, and Use Health Checks Instead