Distributed Rate Limiting in Go: GCRA, Redis, and the Pitfalls Nobody Warns You About
Every production rate limiter has two layers. The first layer is the algorithm: token bucket, leaky bucket, fixed window, sliding
Tag: go
The Transactional Outbox Pattern in Go: Reliable Events Without Dual Writes
# POST 1: Transactional Outbox (Slot 10 backend) You update a row in your database, then publish an event to
Continue readingThe Transactional Outbox Pattern in Go: Reliable Events Without Dual Writes
Structured Logging in Go With slog: Handlers, Sampling, and Dynamic Levels
A request fails at 2 AM. The on-call engineer greps through logs looking for a trace ID, finds seventeen lines
Continue readingStructured Logging in Go With slog: Handlers, Sampling, and Dynamic Levels
PgBouncer 1.26.0: Pre-Auth CVEs, the search_path Fix, and What Changes for Pool Sizing
PgBouncer has quietly become mandatory infrastructure for PostgreSQL at scale. If you run more than a few hundred client connections
Service-to-Service Authentication in Microservices: mTLS, JWTs, and the Token Exchange Pattern
Getting a request into your system is the easy part. The hard question arrives at hop two: when the order
Load Balancing Beyond Round Robin: Least Outstanding Requests and Consistent Hashing
Here is a failure mode that shows up in every system with more than two backends: round robin distributes requests
Continue readingLoad Balancing Beyond Round Robin: Least Outstanding Requests and Consistent Hashing
SSRF Defense in Go: Why URL Validation Fails and How to Fix It at the Dial Layer
Server-Side Request Forgery (SSRF) keeps topping real-world breach reports for a simple reason: modern applications are glued together with outbound
Continue readingSSRF Defense in Go: Why URL Validation Fails and How to Fix It at the Dial Layer
Inside the Go Scheduler: G, M, P, Work Stealing, and Preemption
Goroutines are famously cheap. You can scatter a hundred thousand of them across a program without thinking twice, and the
Continue readingInside the Go Scheduler: G, M, P, Work Stealing, and Preemption
Trace Context Propagation: Why Your Distributed Traces Break and How to Fix Every Hop
You open your tracing backend to debug a slow checkout request and find five disconnected traces instead of one. Five
Structured Logging in Go: slog, OpenTelemetry, and the Fields That Matter in Production
At 02:14 on a Sunday, an alert fires: payment success rate dropped four percent. You run kubectl logs across a