Search

Lessons (16)

• API Contracts, Gateways and Security

  … resource-level policy](/img/system-design-l6/api-security.svg) Define resource/command contracts, error shapes, pagination, idempotency …

• Frontend Security

  … they end up in the bundle for anyone to read. Security headers checklist Header Purpose --- --- Content-Security-Policy …

• Authentication, Authorization & API Security

  … Set-Cookie sid=abc (HttpOnly, Secure, SameSite=Lax) B- S: GET /orders (Cookie: sid=abc) S- R: who …

• Helm, kubectl Cheat Sheet & Best Practices

  Package apps with Helm, deploy with GitOps, secure clusters with RBAC, and keep a kubectl cheat sheet at …

• Architecture Patterns at Scale

  … A peer-to-peer network removes a central data path but does not remove coordination, security or abuse …

• Views, Triggers & Stored Procedures

  … It can simplify joins, expose a secure subset, and give clients a stable interface. A materialized view stores …

• YAGNI: You Aren't Gonna Need It

  … structure Generic BaseAbstractManager<T classes Error handling and security Caching layer before measuring slowness Code that is easy …

• Monolith vs Microservices

  … But it also needs security, signs, maintenance and coordination that a single store never did. ![A monolith vs …

• Microkernel (Plugin) Architecture

  … catch plug-in errors, timeouts One bad plug-in shouldn't crash the host Isolate security where plug …

• What Is Software Architecture?

  … it quickly? Business rules testable without a database Security Is it protected? No customer can read another customer …

• Structural Patterns: How to Connect Objects

  … Proxy 🪪 Analogy: A security guard at a building entrance. Same doorway, but the guard checks your badge …

• S — Single Responsibility Principle

  … accounting, marketing, the security team… "One reason to change" really means one group of people who would ask …

• Clean Error Handling

  … That is a security leak. - Catching Error and re-throwing a new one without the original cause. Use …

• Docker & Containers

  … small and secure ---- FROM node:22-alpine WORKDIR /app ENV NODE ENV=production COPY package.json package-lock …

• API Gateway, BFF & Service Discovery

  … Worth it with many services and strict security needs; overkill for five services. Gateway vs mesh: the gateway …

• REST API Design

  … Authentication on every non-public route (see Authentication & Security ) - [ ] Rate limiting (see Scaling ) - [ ] OpenAPI documentation Key takeaways - Resources …