Technology Fundamentals 5 in Practice: Lessons From Real Deployments

Begin by asking what the other person is comfortable with, rather than treating consent as a general approval of everything that might happen. Agreement to one activity does not automatically mean agreement to another. A person may also be comfortable with something one day and not another time.

The interesting number is not the average, it is the 99th percentile. The same reasoning holds for edge caching. For edge caching, the constraint matters more than the feature list. Adding a cache in front of a slow query is a fix; fixing the query is a cure. Teams working on edge caching usually discover this the hard way. Every abstraction you add is a place where behaviour can differ from intent.

API Design: A queue smooths spikes but also hides how far behind you are. API Design: Retries without jitter turn a small outage into a large one. API Design: Separating the reads from the writes buys room to change either side.

If the rollback plan needs a meeting, it is not a rollback plan. That applies to edge caching as well. In practice, edge caching behaves differently: Small pages that stay small are easier to keep fast than large ones made fast. Write the invariant down; otherwise it lives only in someone's memory. The same reasoning holds for edge caching.

Content Delivery: Periodic jobs should be safe to run twice, because they will be. You rarely need a new component to fix a boundary problem. That applies to content delivery as well. In practice, content delivery behaves differently: The signal you want is often already logged, just not aggregated.

In practice, queue design behaves differently: Configurations should be reviewable in a diff, not only in a console. The best time to add an index is before the table gets large. The same reasoning holds for queue design. For queue design, the constraint matters more than the feature list. Failures are usually correlated, so plan for the shared dependency.

Content Delivery: The first thing to settle is the failure mode, not the happy path. Measurements taken once are anecdotes; you need a baseline that repeats. That applies to content delivery as well. In practice, content delivery behaves differently: Costs usually concentrate in a small number of operations, so find those first.

Access Control: The interesting number is not the average, it is the 99th percentile. Access Control: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Access Control: Every abstraction you add is a place where behaviour can differ from intent.

Backup Strategy: The first thing to settle is the failure mode, not the happy path. Backup Strategy: Measurements taken once are anecdotes; you need a baseline that repeats. Backup Strategy: Costs usually concentrate in a small number of operations, so find those first.

Queue Design: A queue smooths spikes but also hides how far behind you are. Queue Design: Retries without jitter turn a small outage into a large one. Queue Design: Separating the reads from the writes buys room to change either side.

Consider load balancing specifically. Serving static bytes is the cheapest thing you can do at the edge. Load Balancing: A schema is an interface; changing it is a migration, not an edit. Track the denominator as carefully as the numerator. That applies to load balancing as well.

A queue smooths spikes but also hides how far behind you are. This is most visible in api design. Consider api design specifically. Retries without jitter turn a small outage into a large one. API Design: Separating the reads from the writes buys room to change either side.

Observability: A design that cannot be rolled back is a design that cannot be changed safely. Observability: Latency budgets are easier to defend when every hop has a stated ceiling. Observability: Caching helps only until the invalidation rules become the bottleneck.

Release Process: If a metric has no owner, it will drift until it causes an incident. The cheapest optimisation is usually removing work nobody asked for. That applies to release process as well. In practice, release process behaves differently: Aggregating at write time trades flexibility for predictable read cost.

In practice, monitoring alerts behaves differently: Configurations should be reviewable in a diff, not only in a console. The best time to add an index is before the table gets large. The same reasoning holds for monitoring alerts. For monitoring alerts, the constraint matters more than the feature list. Failures are usually correlated, so plan for the shared dependency.

Access Control: The first thing to settle is the failure mode, not the happy path. Access Control: Measurements taken once are anecdotes; you need a baseline that repeats. Access Control: Costs usually concentrate in a small number of operations, so find those first.

Schema Migration: If a metric has no owner, it will drift until it causes an incident. Schema Migration: The cheapest optimisation is usually removing work nobody asked for. Schema Migration: Aggregating at write time trades flexibility for predictable read cost.

Data Pipelines: Configurations should be reviewable in a diff, not only in a console. The best time to add an index is before the table gets large. That applies to data pipelines as well. In practice, data pipelines behaves differently: Failures are usually correlated, so plan for the shared dependency.

Access Control: A queue smooths spikes but also hides how far behind you are. Retries without jitter turn a small outage into a large one. That applies to access control as well. In practice, access control behaves differently: Separating the reads from the writes buys room to change either side.

Load Balancing: A design that cannot be rolled back is a design that cannot be changed safely. Load Balancing: Latency budgets are easier to defend when every hop has a stated ceiling. Load Balancing: Caching helps only until the invalidation rules become the bottleneck.

Monitoring Alerts: Periodic jobs should be safe to run twice, because they will be. You rarely need a new component to fix a boundary problem. That applies to monitoring alerts as well. In practice, monitoring alerts behaves differently: The signal you want is often already logged, just not aggregated.

In practice, search indexing behaves differently: Periodic jobs should be safe to run twice, because they will be. You rarely need a new component to fix a boundary problem. The same reasoning holds for search indexing. For search indexing, the constraint matters more than the feature list. The signal you want is often already logged, just not aggregated.

Edge Caching: The interesting number is not the average, it is the 99th percentile. Edge Caching: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Edge Caching: Every abstraction you add is a place where behaviour can differ from intent.

Log Analysis: A design that cannot be rolled back is a design that cannot be changed safely. Log Analysis: Latency budgets are easier to defend when every hop has a stated ceiling. Log Analysis: Caching helps only until the invalidation rules become the bottleneck.