BestHub
Sign in
Xiaolin Talks Programming
Author

Xiaolin Talks Programming

Focuses on sharing original technical insights. Senior architect at a top tech company with years of experience in technical architecture and management, and extensive interview experience. Offers one-on-one technical coaching, guiding you from beginner to architecture design to technical management. Follow for free learning resources. Free one-on-one interview coaching to help you land offers quickly.

96
Articles
0
Likes
666
Views
0
Comments
Recent Articles

Latest from Xiaolin Talks Programming

96 recent articles
Xiaolin Talks Programming
Xiaolin Talks Programming
Oct 2, 2026 · Backend Development

Spring Boot 3 + Apache Dubbo 3: Triple Protocol, Service Governance & High-Performance RPC in Practice

This article details migrating from Spring Cloud/OpenFeign to Apache Dubbo 3 with Spring Boot 3, covering Triple protocol over HTTP/2, binary serialization, service governance (timeouts, retries, load balancing), streaming, observability, and production pitfalls with benchmark comparisons showing 3-5x throughput gains.

Apache Dubbo 3HTTP/2RPC
0 likes · 47 min read
Spring Boot 3 + Apache Dubbo 3: Triple Protocol, Service Governance & High-Performance RPC in Practice
Xiaolin Talks Programming
Xiaolin Talks Programming
Oct 1, 2026 · Backend Development

Spring Boot + Timefold Solver: Solving Complex Scheduling & Routing with Constraint Optimization

This article details integrating Timefold Solver with Spring Boot to tackle NP-hard optimization problems like employee scheduling and vehicle routing, covering domain modeling, constraint streams, incremental solving, score types, REST APIs, tuning strategies, production validation, and real-world pitfalls with concrete code examples and a 230-employee case study.

Constraint OptimizationConstraint StreamsEmployee Scheduling
0 likes · 24 min read
Spring Boot + Timefold Solver: Solving Complex Scheduling & Routing with Constraint Optimization
Xiaolin Talks Programming
Xiaolin Talks Programming
Sep 28, 2026 · Backend Development

Spring Boot 3.x AD/LDAP Integration: Unified Auth, Group Mapping & Production Pitfalls

This article details integrating Spring Boot 3.x with Active Directory/LDAP for unified authentication, covering directory model concepts, connection pooling, custom authentication providers, group-to-role mapping, JWT/OIDC/MFA integration, testing strategies, and critical production pitfalls like connection leaks, timeout misconfiguration, nested group performance, and certificate issues.

Active DirectoryAuthorizationJWT
0 likes · 48 min read
Spring Boot 3.x AD/LDAP Integration: Unified Auth, Group Mapping & Production Pitfalls
Xiaolin Talks Programming
Xiaolin Talks Programming
Sep 25, 2026 · Backend Development

Spring Boot + Apache CXF: Building Production-Ready SOAP WebServices with WSDL & WS-Security

This guide covers integrating Spring Boot with Apache CXF to publish and consume SOAP web services, detailing WSDL-first vs code-first approaches, endpoint configuration, client invocation patterns, WS-Security (username tokens, signatures, encryption), MTOM attachments, message validation, exception handling, testing strategies, and production hardening against XXE, large payloads, and version conflicts.

Apache CXFJavaSOAP
0 likes · 26 min read
Spring Boot + Apache CXF: Building Production-Ready SOAP WebServices with WSDL & WS-Security
Xiaolin Talks Programming
Xiaolin Talks Programming
Sep 24, 2026 · Databases

Spring Boot + Cassandra for High-Write Workloads: Data Modeling, Consistency Tuning & Pitfalls

This guide covers integrating Cassandra with Spring Boot for high-write scenarios, detailing data modeling with partition/clustering keys, consistency level selection (LOCAL_QUORUM), query best practices, performance tuning (compaction, compression, JVM), and production pitfalls like hot partitions and tombstone storms.

CassandraCompactionConsistency Levels
0 likes · 35 min read
Spring Boot + Cassandra for High-Write Workloads: Data Modeling, Consistency Tuning & Pitfalls
Xiaolin Talks Programming
Xiaolin Talks Programming
Sep 23, 2026 · Backend Development

Spring Boot QR Code Login: State Machines, SSE Push, and Replay Protection for Production

This article details a production-ready QR code login implementation using Spring Boot, covering state machine design with Redis and Lua for atomic transitions, SSE for low-latency status push with polling fallback, HMAC-SHA256 with nonce for replay protection, and Redis Pub/Sub for cross-instance consistency in clustered deployments.

Lua ScriptsRedisSSE
0 likes · 28 min read
Spring Boot QR Code Login: State Machines, SSE Push, and Replay Protection for Production
Xiaolin Talks Programming
Xiaolin Talks Programming
Sep 22, 2026 · Backend Development

Spring Boot Tomcat Tuning: Breaking the 4K QPS Ceiling with Thread Pool & Keep-Alive Config

This article details how default Spring Boot Tomcat settings (maxThreads=200) cap throughput at ~4K QPS despite low CPU, and demonstrates step-by-step tuning of thread pool, connection limits, and Keep-Alive parameters using Little's Law and load testing to achieve 10K+ QPS with 800 threads and proper monitoring.

Keep-AliveLittle's LawPerformance Tuning
0 likes · 17 min read
Spring Boot Tomcat Tuning: Breaking the 4K QPS Ceiling with Thread Pool & Keep-Alive Config
Xiaolin Talks Programming
Xiaolin Talks Programming
Sep 20, 2026 · Backend Development

Why RBAC Isn't Enough: Building an ABAC Policy Engine with Spring Security

The article explains why RBAC fails for complex resource and context permissions, introduces ABAC with SpEL expressions, shows Spring Security integration via PermissionEvaluator, policy storage using SpEL strings, a deny-first policy engine, real-world scenarios (department orders, document visibility, time-based access), list permissions via SQL filtering, hot reload with Caffeine/Redis, and pitfalls like self-invocation and DB calls in policies.

ABACAttribute-Based Access ControlData Permissions
0 likes · 17 min read
Why RBAC Isn't Enough: Building an ABAC Policy Engine with Spring Security