Service-to-Service Authentication in Microservices: mTLS, JWTs, and the Token Exchange Pattern
Getting a request into your system is the easy part. The hard question arrives at hop two: when the order
Tag: go
Load Balancing Beyond Round Robin: Least Outstanding Requests and Consistent Hashing
Here is a failure mode that shows up in every system with more than two backends: round robin distributes requests
Continue readingLoad Balancing Beyond Round Robin: Least Outstanding Requests and Consistent Hashing
SSRF Defense in Go: Why URL Validation Fails and How to Fix It at the Dial Layer
Server-Side Request Forgery (SSRF) keeps topping real-world breach reports for a simple reason: modern applications are glued together with outbound
Continue readingSSRF Defense in Go: Why URL Validation Fails and How to Fix It at the Dial Layer
Inside the Go Scheduler: G, M, P, Work Stealing, and Preemption
Goroutines are famously cheap. You can scatter a hundred thousand of them across a program without thinking twice, and the
Continue readingInside the Go Scheduler: G, M, P, Work Stealing, and Preemption
Trace Context Propagation: Why Your Distributed Traces Break and How to Fix Every Hop
You open your tracing backend to debug a slow checkout request and find five disconnected traces instead of one. Five
Structured Logging in Go: slog, OpenTelemetry, and the Fields That Matter in Production
At 02:14 on a Sunday, an alert fires: payment success rate dropped four percent. You run kubectl logs across a
gRPC Server Reflection in Production: Gate It, and Use Health Checks Instead
Here is a debugging story that repeats across every gRPC team. A developer runs grpcurl -plaintext localhost:50051 list against a
Continue readinggRPC Server Reflection in Production: Gate It, and Use Health Checks Instead
Go Memory Management Under the Hood: Allocator, Stacks, Escape Analysis, and GC
Every go process you ship is quietly running a second program: the garbage collector. It shares your heap, pauses your
Continue readingGo Memory Management Under the Hood: Allocator, Stacks, Escape Analysis, and GC
Cursor-Based Pagination Done Right: Keyset Queries, Opaque Cursors, and the Pitfalls That Bite
Every API that returns a list eventually has to answer the same question: how do you hand out a million
False Sharing in Go: How 64-Byte Cache Lines Slow Down Race-Free Code
Your CPU does not read single bytes. It moves memory between caches in fixed-size blocks called cache lines — 64
Continue readingFalse Sharing in Go: How 64-Byte Cache Lines Slow Down Race-Free Code