Site Topics Fundamentals 5 in Practice: Lessons From Real Deployments

For access control, the constraint matters more than the feature list. Periodic jobs should be safe to run twice, because they will be. Teams working on access control usually discover this the hard way. You rarely need a new component to fix a boundary problem. The signal you want is often already logged, just not aggregated. This is most visible in access control.

Consider schema markup specifically. You can often replace a coordination problem with an idempotency key. Schema Markup: Anything that grows without a bound will eventually hit one. Documentation that is not tested tends to describe the previous version. That applies to schema markup as well.

Edge Caching: A design that cannot be rolled back is a design that cannot be changed safely. Edge Caching: Latency budgets are easier to defend when every hop has a stated ceiling. Edge Caching: Caching helps only until the invalidation rules become the bottleneck.

A queue smooths spikes but also hides how far behind you are. This is most visible in search indexing. Consider search indexing specifically. Retries without jitter turn a small outage into a large one. Search Indexing: Separating the reads from the writes buys room to change either side.

Rate Limiting: Serving static bytes is the cheapest thing you can do at the edge. Rate Limiting: A schema is an interface; changing it is a migration, not an edit. Rate Limiting: Track the denominator as carefully as the numerator.

Schema Markup: Serving static bytes is the cheapest thing you can do at the edge. Schema Markup: A schema is an interface; changing it is a migration, not an edit. Schema Markup: Track the denominator as carefully as the numerator.

Queue Design: Configurations should be reviewable in a diff, not only in a console. Queue Design: The best time to add an index is before the table gets large. Queue Design: Failures are usually correlated, so plan for the shared dependency.

Cloud Infrastructure: If the rollback plan needs a meeting, it is not a rollback plan. Cloud Infrastructure: Small pages that stay small are easier to keep fast than large ones made fast. Cloud Infrastructure: Write the invariant down; otherwise it lives only in someone's memory.

Cloud Infrastructure: The first thing to settle is the failure mode, not the happy path. Measurements taken once are anecdotes; you need a baseline that repeats. That applies to cloud infrastructure as well. In practice, cloud infrastructure behaves differently: Costs usually concentrate in a small number of operations, so find those first.

You can often replace a coordination problem with an idempotency key. That applies to cloud infrastructure as well. In practice, cloud infrastructure behaves differently: Anything that grows without a bound will eventually hit one. Documentation that is not tested tends to describe the previous version. The same reasoning holds for cloud infrastructure.

Release Process: A queue smooths spikes but also hides how far behind you are. Release Process: Retries without jitter turn a small outage into a large one. Release Process: Separating the reads from the writes buys room to change either side.

Access Control: A design that cannot be rolled back is a design that cannot be changed safely. Access Control: Latency budgets are easier to defend when every hop has a stated ceiling. Access Control: Caching helps only until the invalidation rules become the bottleneck.

Observability: Periodic jobs should be safe to run twice, because they will be. Observability: You rarely need a new component to fix a boundary problem. Observability: The signal you want is often already logged, just not aggregated.

In practice, log analysis behaves differently: The first thing to settle is the failure mode, not the happy path. Measurements taken once are anecdotes; you need a baseline that repeats. The same reasoning holds for log analysis. For log analysis, the constraint matters more than the feature list. Costs usually concentrate in a small number of operations, so find those first.

Consider content delivery specifically. The interesting number is not the average, it is the 99th percentile. Content Delivery: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Every abstraction you add is a place where behaviour can differ from intent. That applies to content delivery as well.

Periodic jobs should be safe to run twice, because they will be. This is most visible in storage tiers. Consider storage tiers specifically. You rarely need a new component to fix a boundary problem. Storage Tiers: The signal you want is often already logged, just not aggregated.

Content Delivery: You can often replace a coordination problem with an idempotency key. Content Delivery: Anything that grows without a bound will eventually hit one. Content Delivery: Documentation that is not tested tends to describe the previous version.

Cloud Infrastructure: Periodic jobs should be safe to run twice, because they will be. Cloud Infrastructure: You rarely need a new component to fix a boundary problem. Cloud Infrastructure: The signal you want is often already logged, just not aggregated.

For log analysis, the constraint matters more than the feature list. Configurations should be reviewable in a diff, not only in a console. Teams working on log analysis usually discover this the hard way. The best time to add an index is before the table gets large. Failures are usually correlated, so plan for the shared dependency. This is most visible in log analysis.

Search Indexing: Periodic jobs should be safe to run twice, because they will be. Search Indexing: You rarely need a new component to fix a boundary problem. Search Indexing: The signal you want is often already logged, just not aggregated.

Schema Markup: Configurations should be reviewable in a diff, not only in a console. Schema Markup: The best time to add an index is before the table gets large. Schema Markup: Failures are usually correlated, so plan for the shared dependency.

Storage Tiers: If a metric has no owner, it will drift until it causes an incident. Storage Tiers: The cheapest optimisation is usually removing work nobody asked for. Storage Tiers: Aggregating at write time trades flexibility for predictable read cost.

For access control, the constraint matters more than the feature list. The first thing to settle is the failure mode, not the happy path. Teams working on access control usually discover this the hard way. Measurements taken once are anecdotes; you need a baseline that repeats. Costs usually concentrate in a small number of operations, so find those first. This is most visible in access control.

Data Pipelines: The first thing to settle is the failure mode, not the happy path. Data Pipelines: Measurements taken once are anecdotes; you need a baseline that repeats. Data Pipelines: Costs usually concentrate in a small number of operations, so find those first.