Blog
Articles, guides, and notes on software engineering.
Migrated the Blog System
Discover how bmf-tech evolved its blog platform across three major generations: WordPress, Laravel CMS, and Go CMS.
Recent Posts
Mastering Web Performance Tuning: Practical Speed Optimization Lessons from ISUCON
A review of Mastering Web Performance Tuning. Using ISUCON as its material, a book for systematically learning web application performance tuning that starts from measurement. Practical content worth reading at least once if you are going to take part in ISUCON.
Understanding Finance Thinking from Scratch: Growth Strategies for Employees and Companies
A review of Understanding Finance Thinking from Scratch. A gentle introduction to finance thinking that seeks to maximize corporate value with a long-term view. It helps you grasp the basics of investing in business growth rather than fixating on near-term sales and profit.
Catching Up on New Features from PHP 7.4 to PHP 8.1
Learn new PHP 8.1 features including typed properties, arrow functions, union types, match expressions, and attributes.
Obtaining SSL Certificates from Let's Encrypt Using DNS-01 with Lego
Obtain Let's Encrypt SSL certificates efficiently using DNS-01 challenge method with Lego client tool and Conoha API provider integration.
Implementing a Load Balancer in Golang
Implement a round-robin L4 load balancer in Go from scratch. Covers reverse proxy with httputil, round-robin scheduling, and active and passive health checks.
Reflection on 2021 and Goals for Next Year
Personal year-end reflection on 2021: engineer growth, what worked and what did not, plus goals set for 2022.
Building a Monitoring Platform with Containers
Build a container-based monitoring platform using EFK stack and Prometheus for logs, metrics, visualization, and alerting.
How to Stream Keynote Presenter Display with StreamYard
A guide on streaming Keynote presentations using StreamYard while displaying the presenter view.
Introduction to Building an HTTP Router with net/http
This article explains how to create a custom HTTP router using Golang's standard package net/http.
Participated in ISUCON11
Explore ISUCON11 performance tuning strategies including pprof, alp logs, N+1 queries, and MySQL optimization techniques.
Implementing Datadog APM in ECS on Fargate Environment
Implement Datadog APM on ECS Fargate for PHP applications with distributed tracing and performance monitoring configuration.
![Introduction to AWS Container Design and Construction [Practical]](/ogp/aws-container-design-introduction.png)
Introduction to AWS Container Design and Construction [Practical]
A review of a practical introduction to AWS container design and construction. It clearly and carefully explains AWS container services, structured around real-world container operations, making it a good primer for engineers about to design and build container environments on AWS.
Proofreading Text with textlint and reviewdog on CircleCI
An article on how I automated text proofreading on CircleCI using textlint and reviewdog. For text managed on GitHub, it sets up CI to run textlint and feed the warnings back onto the pull request via reviewdog, which is handy when writing long-form articles.
A Comprehensive Introduction to OAuth: Principles and Practices for Implementing a Secure Authorization System
A review of A Comprehensive Introduction to OAuth. One of the few books that explains OAuth in depth. Covering authorization from principles to practice, it is a good bridge to keep at hand after a primer and before diving into the specifications.
A Book to Understand Attacks and Countermeasures on OAuth and OIDC (Redirect Attack Edition)
A review of a book that organizes attacks and countermeasures on OAuth and OIDC (Redirect Attack Edition). It gently organizes the basic security of OAuth and OpenID Connect from the angle of attacks and defenses, using redirect-related attacks to help you grasp the essentials.
A Tutorial Guide to Understanding OAuth2.0 Without Just Going Through the Motions!
A review of A Tutorial Guide to Understanding OAuth2.0 Without Just Going Through the Motions. An introductory book for understanding OAuth2.0 by organizing its mechanisms rather than using it on vibes. Easy to read, it is well suited to first grasping OAuth2.0 flows.
Resources for Catching Up on OAuth2 and OIDC
Explore OAuth2, OIDC, JWT, and authentication standards through comprehensive specifications, books, and implementation guides.
Git Commit Split: Shell Command Quick Reference
Quick reference shell commands for splitting a Git commit using interactive rebase, reset, and staged re-commits for granular commit history.
A Book to Understand the Differences Between OAuth, OAuth Authentication, and OpenID Connect
A review of a book that helps you understand the differences between OAuth, OAuth authentication, and OpenID Connect. It clearly sorts out these easily-confused concepts for beginners, offering a starting point for understanding the role and proper use of each.