Token Bucket vs Sliding Window: Choosing an API Rate Limiter
Compare token bucket, sliding window, fixed window and leaky bucket rate limiting: how each works, burst behaviour, memory cost and distributed pitfalls.
17 min read
Tag
Compare token bucket, sliding window, fixed window and leaky bucket rate limiting: how each works, burst behaviour, memory cost and distributed pitfalls.
17 min read
Treat API error handling as a public contract: HTTP status codes, stable error codes from a catalog, and RFC 9457 Problem Details bodies.
14 min read
Learn why cursor pagination over a unique, indexed sort key beats offset pagination, and how to design filtering, sorting, cursors and limits as one contract.
14 min read
Learn how the backend for frontend pattern works, how a BFF differs from an API gateway, how to implement aggregation safely, and when to skip it.
12 min read
Learn how gRPC and protobuf work, when they beat JSON over REST for internal services, the operational trade-offs, and a framework for choosing between them.
14 min read
Treat your OpenAPI description as a reviewed, versioned contract: design it first, generate types, and use CI and contract tests to stop drift.
15 min read
Pick gRPC, REST, or GraphQL per boundary, not per company: how each works, where each breaks, error models, and a checklist for internal vs public APIs.
13 min read
How to judge backward compatible API changes against real consumer behavior, classify breaking changes, apply tolerant readers, and run deprecation.
18 min read
Learn how idempotency keys, durable dedup records and atomic state transitions make retries safe when exactly-once delivery is impossible.
14 min read
Learn to share API contracts across monorepo services using OpenAPI as the source of truth, generated types, and CI checks that catch breaking changes.
13 min read
Compare GraphQL vs REST on data modeling, over-fetching, caching, N+1, security and versioning, with a decision framework for backend teams.
13 min read
Model resources as nouns, use HTTP methods and status codes per RFC 9110, and enforce conventions in CI so clients can predict every endpoint.
14 min read