Dedicated to sharing programmer-architect skills—Java backend, system, microservice, and distributed architectures—to help you become a senior architect.
This tutorial demonstrates implementing login attempt limiting using Spring Boot, Redis, and Lua scripts to block IP addresses after three failed password attempts, with automatic lockout expiration.
This guide covers Nginx rate limiting via ngx_http_limit_req_module (leaky bucket algorithm), connection limiting with ngx_http_limit_conn_module, and bandwidth throttling using limit_rate, limit_rate_after, and proxy_limit_rate, including burst handling, nodelay, whitelists, and dynamic rate control via map variables.
This guide introduces PlantUML, an open-source text-based UML diagramming tool, covering its advantages, installation in IntelliJ IDEA, Graphviz setup with environment variables, configuration steps, and practical examples for creating flowcharts and class diagrams, plus a browser-based alternative.
This article explains Spring AOP's core concepts including join points, advice abstraction, and weaving mechanisms, detailing the AOP Alliance interface design with JoinPoint and MethodInterceptor, and contrasting static versus dynamic weaving approaches used by Spring.
This article explains why microservices require an API gateway by comparing three approaches for handling cross-cutting concerns like authentication, demonstrating how gateways eliminate code duplication, reduce service JAR size, and enable centralized updates without redeploying all services, while also covering gateway architecture, core functions, and technology stack recommendations.
This article explains how database indexes accelerate queries by leveraging sorted data structures and binary search, detailing disk I/O mechanics, clustered vs. non-clustered indexes, index trade-offs on write performance, and common SQL optimization pitfalls like OR conditions and leading wildcards that cause index invalidation.
This article explains MySQL full-text search using inverted indexes as an alternative to LIKE % queries, covering index creation, natural language, boolean, and query expansion modes with syntax examples and performance considerations.
A step-by-step MySQL query optimization case study showing how indexing, join rewriting, composite indexes, and covering indexes reduced execution time from 30,248 seconds to 0.001 seconds with execution plan analysis.
This article explains why seamless token refresh prevents sudden logouts, compares backend automatic token renewal with frontend dual-token (access/refresh) approaches, provides Java JWT implementation code with expiration calculations, and discusses handling edge cases like long-form submissions where no requests are sent before token expiry.
This article explores MaxKey, an open-source single sign-on system supporting OAuth 2.x, OpenID Connect, SAML 2.0, JWT, CAS, and SCIM, detailing its microservices architecture, security features like secondary authentication and single logout, session timeout design, brute-force protections, and bcrypt password storage implementation.
