Capturing thoughts and reflections while coding.
The article explains the CVE‑2025‑14847 MongoDB vulnerability, detailing how crafted BSON with a falsified document length triggers memory over‑read, demonstrates a reproducible PoC, compares it to the SSL Heartbleed bug, and offers mitigation advice for affected deployments.
Learn how to dramatically reduce Docker build times for Spring Boot applications by using the official Jarmode=tools layered jar feature, extracting layers, and employing multi‑stage Dockerfiles with optimized runtime settings, caching strategies, and optional security and performance enhancements.
This article examines practical ways to bypass NAT restrictions for UDP communication, covering direct P2P for friendly NATs, UDP hole punching for symmetric NATs, reliable VPS relays for any NAT, and Nginx’s UDP proxy, complete with configuration examples, workflow diagrams, and a comparison to traditional NAT behavior.
This article explains how UDP’s simplicity is challenged by various NAT types, compares Symmetric and Full Cone NAT behaviors, shows Go code for multi‑server UDP communication, and outlines P2P hole‑punching techniques and real‑world NAT diversity.
A comprehensive analysis of a year‑long Nginx log dataset reveals that nearly half of all requests come from bots—especially AI crawlers—while real users account for less than half, highlighting security threats, attack patterns, and the effectiveness of blacklist defenses across monthly, daily, and hourly dimensions.
A comprehensive benchmark compares Go's experimental GreenTeaGC (enabled via GOEXPERIMENT=greenteagc) against the standard GC using 30,000 and 50,000 long‑lived TCP connections, measuring GC pauses, heap usage, CPU load and scalability, and finds no decisive performance advantage.
The article recounts the original complex implementation of a four‑layer TCP proxy in Easegress, explains why using separate read/write goroutines and custom buffers caused error‑handling and flow‑control difficulties, and then shows how switching to Go's io.Copy (and its variants) dramatically simplifies the code while preserving performance through zero‑copy techniques.
This article explores using Byte Buddy to build Java agents, detailing the premain method, class loading mechanisms, handling dependency conflicts with Maven shade versus custom classloaders, and implementing a Dispatcher to bridge agent and application classloaders, providing practical code snippets and diagrams for each step.
When a Go TCP proxy splits socket I/O into separate read and write goroutines, closing the connection can cause "use of closed network connection" errors, and this article shows how to use context cancellation and SetReadDeadline to make both loops exit cleanly.
This article shares a developer’s experience converting a Java Spring Boot microservice to Kotlin, covering why Kotlin is attractive, required Maven plugins and dependencies, code‑migration quirks such as open classes and @Jvm annotations, testing hurdles, and the final decision to revert to Java.
