Featured article
Follow the Request, One Boundary at a Time
Separate name resolution, transport, TLS termination and application routing before diagnosing a failed request.
Network engineering & request paths
Notes
Original guides and technical studies, written to make the assumptions and trade-offs visible.
Read the article
Latest
5 articlesDiagnose Timeouts One Hop at a Time
Use bounded probes, cumulative timing fields and controlled route comparisons to narrow a timeout without inventing a cause.
5 min readRead article
DNS Caches and the Boundaries of a Failed Answer
Distinguish a cached address, a negative answer and a resolver failure before changing a DNS configuration.
5 min readRead article
Forwarded Headers Need a Trust Boundary
Define which proxy can supply client and scheme metadata, overwrite untrusted values and keep the application listener private.
5 min readRead article
HTTP Caches: Freshness, Validators and Variants
Choose an explicit response policy and distinguish a fresh cache hit from conditional reuse of an existing representation.
5 min readRead article
TLS Identity at the Edge
Preserve the expected service name while testing a certificate, an edge address and a separate upstream connection.
5 min readRead article
From the wider community
Engineering Feed
Publications from DEV Community. Titles and summaries are attributed to their original authors; the links open the original articles.
Your AI Guardrails Are a Taxonomy Pretending to Be an Ontology
A guardrail that only knows categories can label a problem. It can't reason about one. ...
SniffDog: I built my job-hunting friend a sniffer dog that sniffs out malware in fake recruiter repos
This is a submission for the Hacktoberfest Weekend Challenge: Build for a Friend What I...
"Why your n8n AI agent workflows fail in production (and how to fix them)"
Your n8n AI agent workflow ran perfectly for two weeks. Then on a Tuesday afternoon, a customer got...
Building a SOC Home Lab II: Local Threat Emulation & SPL Detection Engineering
In Part I of this series, I laid the foundation for this SOC home lab: a Windows 11 endpoint...
El día que descubrí que mi bot no tenía las protecciones que creía tener
Diario de un bot que opera con dinero real — Entrada #3 Durante varios días, mi bot de trading creyó...
Patching the MCP SDK Doesn't Fix It. Pin the OAuth Issuer in TypeScript.
A malicious MCP server could steer an official SDK's OAuth client into sending its secret to the wrong place. Build a tiny MCP client in TypeScript that pins the issuer before it fetches anything. No API key.