Archive 2024
121 articles
Case Study on Authorization Management Infrastructure
Explore authorization management infrastructure case studies from freee on team structure, microservices, and QA practices.
Secure by Design: Safe Software Design
A review of Secure by Design. A book that advocates improving security from software design itself rather than patching individual vulnerabilities. Centering on DDD, it shows how careful domain modeling weaves security naturally into design, treating it as a design concern rather than a bolt-on feature.
Ruby on Rails Code Reading Part 3 - Invoking WelcomeController
The third installment of my code reading notes for Ruby on Rails. Using a project created with rails new, it traces how a request flows through routing until the action of the WelcomeController is invoked, following the request handling step by step.
Ruby on Rails Code Reading Part 1 - Rails Startup
Trace Rails startup sequence from command invocation through Rackup, Puma server initialization, and request handling flow.
Ruby on Rails Code Reading Part 2 - Rails Request Processing
The second installment of my code reading notes for Ruby on Rails. Using a project created with rails new, it follows how Rails processes a single request from the moment it arrives until a response is returned, tracing the flow of request handling through the framework.
API Design Patterns
A review of API Design Patterns. Starting from API design principles, it introduces a wealth of patterns such as resource-oriented (combining standard methods) and RPC-oriented (invoking procedures), teaching perspectives for good API design like being actionable, in a systematic way.
Books to Learn About API Design
Discover recommended books on API design: fundamentals, design phases, testing strategies, and practical design patterns.
Starting Guide to Load Testing
A starting guide aimed at helping you understand load testing and actually get started with it. From the basics that load testing is a technique for verifying system performance, it organizes how to check whether a system meets its assumed capacity, along with practical know-how.
What is the C4 Model
Master C4 model architecture visualization with four levels: system context, containers, components, and code diagrams.
What is a Critical User Journey
Understand Critical User Journeys to identify essential user touchpoints, goals, and pain points for SLO-based service reliability.
Good Strategy, Bad Strategy
A review of Good Strategy, Bad Strategy. Through many examples, it clarifies the difference between good and bad strategy. Good strategy has a kernel of diagnosis, guiding policy, and coherent action, concentrating strength; it also names the traits of bad strategy such as fluff and dodging the real problem, reminding you how vital it is to choose what not to do.
New Relic Practical Introduction, 2nd Edition: Fundamentals and Implementation of Observability
A review of New Relic Practical Introduction, 2nd Edition. A book that covers New Relic's features end to end while devoting many pages to how to use them. From the concepts of telemetry data like metrics and logs to practical ways of achieving observability, it has you covered.
The Healthy Programmer: Health Hacks for Enjoyable Programming
A review of The Healthy Programmer. A book that introduces ways for programmers to stay healthy while working, centered on exercise. Grounded in scientific research, it presents the idea that health grows from habits, such as not sitting for long stretches and changing posture, as concrete hacks.
Web API Design
A review of Web API Design. A book that has you think about API design not just from the interface but from the entry point before it. It offers perspectives for designing good APIs: focusing on what users can do rather than the mechanism, and frameworks for surfacing an API's goals.
A Starter Guide to Implementing SLOs
A start guide aimed at helping you understand SLOs and actually begin operating them. It organizes the stages you need to go through to introduce SLOs to an organization or team and start running them, from initial adoption to ongoing operation, along with practical know-how.
Contract Testing and Pact
A summary of my research into contract testing and Pact. It explains how contract testing verifies the interactions between a consumer and a provider, the difference between consumer-driven and provider-driven approaches, and how Pact works for testing between microservices.
SLO Service Level Objectives: A Practical Guide to Implementing SLI, SLO, and Error Budgets
A review of Implementing Service Level Objectives (SLO). A practical guide to adopting SLIs, SLOs, and error budgets. Starting from defining services and users, it frames reliability as whether users can do what they need, showing how to set meaningful targets while avoiding over-engineering reliability.
Relearning the Basics of TypeScript
A set of notes from revisiting the fundamentals of TypeScript. Starting with a review of JavaScript basics such as variable scope, it works through TypeScript's type system and core syntax, organizing the key points and practical takeaways.
Disadvantages of Jest Snapshot Testing
Understand the drawbacks of Jest snapshot testing including test fragility, unclear assertions, and why assertion tests are better.
Web API Testing Techniques
A review of Web API Testing Techniques. A book that explains API testing through frameworks like asking questions with the 5W1H and the ten Ps model for grasping testability. From building test strategy and plans to security perspectives via STRIDE and threat trees, it offers views useful in practice.