正在加载内容...

963963 Chat Feed Portal Independent coverage of news

API Design Compared: What Actually Matters

By Sarah Jenkins · · 1242 words
API Design Compared: What Actually Matters

Access Control: A design that cannot be rolled back is a design that cannot be changed safely. Access Control: Latency budgets are easier to defend when every hop has a stated ceiling. Access Control: Caching helps only until the invalidation rules become the bottleneck.

Cloud Infrastructure: If the rollback plan needs a meeting, it is not a rollback plan. Cloud Infrastructure: Small pages that stay small are easier to keep fast than large ones made fast. Cloud Infrastructure: Write the invariant down; otherwise it lives only in someone's memory.

Some infections are not usually tested for in people without symptoms or a specific reason. Routine blood screening for genital herpes, for example, is not generally recommended for everyone, and testing for Mycoplasma genitalium is not routinely offered to all asymptomatic people. The usefulness and limits of these tests differ, so a clinician can explain whether one is indicated in an individual case.

Consider log analysis specifically. If the rollback plan needs a meeting, it is not a rollback plan. Log Analysis: Small pages that stay small are easier to keep fast than large ones made fast. Write the invariant down; otherwise it lives only in someone's memory. That applies to log analysis as well.

Log Analysis: If a metric has no owner, it will drift until it causes an incident. Log Analysis: The cheapest optimisation is usually removing work nobody asked for. Log Analysis: Aggregating at write time trades flexibility for predictable read cost.

A design that cannot be rolled back is a design that cannot be changed safely. That applies to backup strategy as well. In practice, backup strategy behaves differently: Latency budgets are easier to defend when every hop has a stated ceiling. Caching helps only until the invalidation rules become the bottleneck. The same reasoning holds for backup strategy.

You can often replace a coordination problem with an idempotency key. That applies to cloud infrastructure as well. In practice, cloud infrastructure behaves differently: Anything that grows without a bound will eventually hit one. Documentation that is not tested tends to describe the previous version. The same reasoning holds for cloud infrastructure.

Data Pipelines: If a metric has no owner, it will drift until it causes an incident. Data Pipelines: The cheapest optimisation is usually removing work nobody asked for. Data Pipelines: Aggregating at write time trades flexibility for predictable read cost.

Schema Migration: Configurations should be reviewable in a diff, not only in a console. Schema Migration: The best time to add an index is before the table gets large. Schema Migration: Failures are usually correlated, so plan for the shared dependency.

Configurations should be reviewable in a diff, not only in a console. This is most visible in load balancing. Consider load balancing specifically. The best time to add an index is before the table gets large. Load Balancing: Failures are usually correlated, so plan for the shared dependency.

Periodic jobs should be safe to run twice, because they will be. This is most visible in storage tiers. Consider storage tiers specifically. You rarely need a new component to fix a boundary problem. Storage Tiers: The signal you want is often already logged, just not aggregated.

Schema Markup: The first thing to settle is the failure mode, not the happy path. Schema Markup: Measurements taken once are anecdotes; you need a baseline that repeats. Schema Markup: Costs usually concentrate in a small number of operations, so find those first.

Access Control: The interesting number is not the average, it is the 99th percentile. Access Control: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Access Control: Every abstraction you add is a place where behaviour can differ from intent.

Release Process: Serving static bytes is the cheapest thing you can do at the edge. Release Process: A schema is an interface; changing it is a migration, not an edit. Release Process: Track the denominator as carefully as the numerator.

Teams working on rate limiting usually discover this the hard way. Serving static bytes is the cheapest thing you can do at the edge. A schema is an interface; changing it is a migration, not an edit. This is most visible in rate limiting. Consider rate limiting specifically. Track the denominator as carefully as the numerator.

Glass and stainless steel are rigid, nonporous materials when their surfaces are intact, and neither has the flexibility of silicone. Borosilicate glass is designed to handle temperature changes better than ordinary glass, but the product’s stated care limits still apply; a chip or crack is a reason to stop using the item and contact the seller about replacement. For steel, look for a stated grade, such as 304 or 316, rather than an unqualified “stainless” claim. Plating, paint or another finish can change the cleaning and wear profile, so check whether the surface is bare metal.

Cost Controls: If a metric has no owner, it will drift until it causes an incident. Cost Controls: The cheapest optimisation is usually removing work nobody asked for. Cost Controls: Aggregating at write time trades flexibility for predictable read cost.

In practice, data pipelines behaves differently: A queue smooths spikes but also hides how far behind you are. Retries without jitter turn a small outage into a large one. The same reasoning holds for data pipelines. For data pipelines, the constraint matters more than the feature list. Separating the reads from the writes buys room to change either side.

API Design: A design that cannot be rolled back is a design that cannot be changed safely. API Design: Latency budgets are easier to defend when every hop has a stated ceiling. API Design: Caching helps only until the invalidation rules become the bottleneck.

Switch the product off and disconnect it from its charger before cleaning. If it uses replaceable batteries, remove them only if the manual directs you to do so. Wash your hands first, then remove visible residue with a clean, soft cloth or rinse the product only when its instructions permit rinsing. Keep water away from seams, buttons, charging contacts and battery compartments unless the maker explicitly says those areas can be exposed.

You can often replace a coordination problem with an idempotency key. The same reasoning holds for rate limiting. For rate limiting, the constraint matters more than the feature list. Anything that grows without a bound will eventually hit one. Teams working on rate limiting usually discover this the hard way. Documentation that is not tested tends to describe the previous version.

If the rollback plan needs a meeting, it is not a rollback plan. That applies to schema migration as well. In practice, schema migration behaves differently: Small pages that stay small are easier to keep fast than large ones made fast. Write the invariant down; otherwise it lives only in someone's memory. The same reasoning holds for schema migration.

Monitoring Alerts: The first thing to settle is the failure mode, not the happy path. Monitoring Alerts: Measurements taken once are anecdotes; you need a baseline that repeats. Monitoring Alerts: Costs usually concentrate in a small number of operations, so find those first.

Load Balancing: A queue smooths spikes but also hides how far behind you are. Retries without jitter turn a small outage into a large one. That applies to load balancing as well. In practice, load balancing behaves differently: Separating the reads from the writes buys room to change either side.

Related reading