Zero-Downtime Schema Migrations in PostgreSQL: Expand-Contract, Lock Timeouts, and Safe ALTER TABLE
PostgreSQL takes an ACCESS EXCLUSIVE lock for most ALTER TABLE operations. That lock conflicts with everything — reads, writes, even
Tag: best practices
AI Agents Are Machine Identities: Governing Non-Human Credentials Before They Proliferate
Your microservices fleet has 3,000 machine identities and 300 employees — a 10:1 ratio that is conservative by industry standards,
Deprecating API Endpoints Without Breaking Consumers: Deprecation and Sunset Headers
Every API with more than a handful of consumers eventually faces the same problem: an endpoint or field you designed
Continue readingDeprecating API Endpoints Without Breaking Consumers: Deprecation and Sunset Headers
JWT Security Pitfalls: Algorithm Confusion, Header Injection, and the Claims Everyone Forgets to Check
JWTs are everywhere because they solve an ugly problem: how does a stateless service know who’s calling without a database
PostgreSQL Connection Pooling: Session vs Transaction Mode, PgBouncer, and How to Size It
Every PostgreSQL backend process is a full Unix process with its own megabytes of memory. That design choice buys you
gRPC Server Reflection in Production: Gate It, and Use Health Checks Instead
Here is a debugging story that repeats across every gRPC team. A developer runs grpcurl -plaintext localhost:50051 list against a
Continue readinggRPC Server Reflection in Production: Gate It, and Use Health Checks Instead
The Rust Borrow Checker Demystified: Aliasing, Memory Model, and When to Fight Back
What the borrow checker actually enforces, what Rust’s memory model promises, and which patterns — RefCell, Mutex, ownership restructuring — resolve the common contention points. … Continue readingThe Rust Borrow Checker Demystified: Aliasing, Memory Model, and When to Fight Back
False Sharing in Go: How 64-Byte Cache Lines Slow Down Race-Free Code
Your CPU does not read single bytes. It moves memory between caches in fixed-size blocks called cache lines — 64
Continue readingFalse Sharing in Go: How 64-Byte Cache Lines Slow Down Race-Free Code
API Versioning Strategies: Path vs Header, Calendar Dates, and Graceful Sunsets
Every API you ship is a promise. Clients hardcode your URLs, parse your field names, and schedule work around your
Continue readingAPI Versioning Strategies: Path vs Header, Calendar Dates, and Graceful Sunsets
SSRF: The Vulnerability That Turns Your Server Against Its Own Network
Your webapp has a feature where users can attach an image by URL. A user submits https://example.com/logo.png and the backend
Continue readingSSRF: The Vulnerability That Turns Your Server Against Its Own Network