<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet href="/rss-styles.xsl" type="text/xsl"?><rss version="2.0"><channel><title>Palakorn Voramongkol — Blog</title><description>Notes from the trenches on architecture, engineering, and shipping software. Written by Palakorn Voramongkol, Software Engineer Specialist based in Bangkok, Thailand.</description><link>https://palakorn.com/</link><language>en</language><item><title>GitFlow and Branching Strategies: Which Workflow Fits Your Team</title><link>https://palakorn.com/blog/gitflow-and-branching-strategies/</link><guid isPermaLink="true">https://palakorn.com/blog/gitflow-and-branching-strategies/</guid><description>GitFlow, GitHub Flow, GitLab Flow, and trunk-based development — what each is, when each fits, concrete branch diagrams, the release ceremonies they imply, and how to actually pick one in 2026.</description><pubDate>Sat, 18 Apr 2026 00:00:00 GMT</pubDate><category>Git</category><category>Branching</category><category>Workflow</category><category>Release Management</category><category>Engineering Management</category><author>Palakorn Voramongkol</author></item><item><title>GitHub Actions for Automated Deployment: A Practical Guide</title><link>https://palakorn.com/blog/github-actions-deployment-best-practices/</link><guid isPermaLink="true">https://palakorn.com/blog/github-actions-deployment-best-practices/</guid><description>How to build deploy workflows that are fast, safe, and survive the 3 a.m. incident — secrets, environments, OIDC, caching, rollback, SSH vs runner-based, and the anti-patterns that catch every team once.</description><pubDate>Sat, 18 Apr 2026 00:00:00 GMT</pubDate><category>DevOps</category><category>CI/CD</category><category>GitHub Actions</category><category>Deployment</category><category>Automation</category><author>Palakorn Voramongkol</author></item><item><title>Basic Git Commands Every Software Engineer Should Know</title><link>https://palakorn.com/blog/basic-git-commands-every-software-engineer-should-know/</link><guid isPermaLink="true">https://palakorn.com/blog/basic-git-commands-every-software-engineer-should-know/</guid><description>The thirty-something git commands you actually use day-to-day — staging, branching, merging, rebasing, recovering from mistakes, and the small set of aliases worth setting up once.</description><pubDate>Fri, 17 Apr 2026 00:00:00 GMT</pubDate><category>Git</category><category>Engineering</category><category>Tools</category><category>Productivity</category><category>Workflow</category><author>Palakorn Voramongkol</author></item><item><title>The PMBOK Situations Playbook: What to Do, What to Change, What to Write Down</title><link>https://palakorn.com/blog/pmbok-situations-playbook/</link><guid isPermaLink="true">https://palakorn.com/blog/pmbok-situations-playbook/</guid><description>Real project-management situations — scope creep, budget cuts, people leaving, vendors failing, deadlines shifting, compliance landing — each with step-by-step moves, the exact documents that must change, and best/worst case outcomes.</description><pubDate>Thu, 16 Apr 2026 00:00:00 GMT</pubDate><category>Project Management</category><category>PMBOK</category><category>Delivery</category><category>Playbook</category><category>Engineering Management</category><author>Palakorn Voramongkol</author></item><item><title>Blockchain from Scratch: A Technical Intro with a Toy App You Can Actually Run</title><link>https://palakorn.com/blog/blockchain-from-scratch-technical-intro-with-toy-app/</link><guid isPermaLink="true">https://palakorn.com/blog/blockchain-from-scratch-technical-intro-with-toy-app/</guid><description>A ground-up, technical introduction to blockchains — hashes, blocks, Merkle trees, proof-of-work, consensus — paired with a ~200-line TypeScript toy chain you can run, fork, and break. The version of the explanation that assumes you&apos;re a developer, not an investor.</description><pubDate>Wed, 15 Apr 2026 00:00:00 GMT</pubDate><category>Blockchain</category><category>Cryptography</category><category>Distributed Systems</category><category>Beginner</category><category>Backend</category><author>Palakorn Voramongkol</author></item><item><title>Flowchart Diagrams: A Practical Guide to Every Symbol and When to Use It</title><link>https://palakorn.com/blog/flowchart-diagram-guide/</link><guid isPermaLink="true">https://palakorn.com/blog/flowchart-diagram-guide/</guid><description>A structural, symbol-by-symbol guide to flowcharts — ANSI/ISO 5807 shapes with real meanings, when each one applies, how to lay out process, swim-lane, and data-flow diagrams, and ready-to-copy Mermaid examples.</description><pubDate>Wed, 15 Apr 2026 00:00:00 GMT</pubDate><category>Architecture</category><category>Process Design</category><category>Documentation</category><category>Diagrams</category><author>Palakorn Voramongkol</author></item><item><title>Kafka for Beginners: What It Is, When to Use It, and Producer/Consumer Examples in Java, Python, Node.js, and Go</title><link>https://palakorn.com/blog/kafka-for-beginners-producer-consumer-4-languages/</link><guid isPermaLink="true">https://palakorn.com/blog/kafka-for-beginners-producer-consumer-4-languages/</guid><description>A ground-up introduction to Apache Kafka — what it actually is, the handful of features that matter, the use cases it&apos;s genuinely good at, and working producer/consumer snippets in four languages so you can run your first topic in under ten minutes.</description><pubDate>Wed, 15 Apr 2026 00:00:00 GMT</pubDate><category>Kafka</category><category>Event Streaming</category><category>Beginner</category><category>Backend</category><category>Messaging</category><author>Palakorn Voramongkol</author></item><item><title>PMBOK as a Framework: Inputs and Output Artifacts for Every Part of a Project</title><link>https://palakorn.com/blog/pmbok-project-management-framework-guide/</link><guid isPermaLink="true">https://palakorn.com/blog/pmbok-project-management-framework-guide/</guid><description>A practitioner&apos;s walk through PMBOK — the five process groups, the ten knowledge areas, and, for each part, the inputs that feed it and the artifacts that come out. The bits you actually keep on a shelf.</description><pubDate>Wed, 15 Apr 2026 00:00:00 GMT</pubDate><category>Project Management</category><category>PMBOK</category><category>Process</category><category>Delivery</category><category>Engineering Management</category><author>Palakorn Voramongkol</author></item><item><title>Redis for Beginners: What It Is, When to Use It, and Client Examples in Java, Python, Node.js, and Go</title><link>https://palakorn.com/blog/redis-for-beginners-commands-patterns-4-languages/</link><guid isPermaLink="true">https://palakorn.com/blog/redis-for-beginners-commands-patterns-4-languages/</guid><description>A ground-up introduction to Redis — what it actually is, the handful of data structures that matter, the use cases it&apos;s genuinely good at, and working client snippets in four languages so you can run your first cache, queue, and pub/sub in under ten minutes.</description><pubDate>Wed, 15 Apr 2026 00:00:00 GMT</pubDate><category>Redis</category><category>Cache</category><category>Beginner</category><category>Backend</category><category>In-Memory</category><author>Palakorn Voramongkol</author></item><item><title>Security Attacks Every Engineer Should Know: A Field Guide to the Techniques Attackers Actually Use</title><link>https://palakorn.com/blog/security-attacks-every-engineer-should-know/</link><guid isPermaLink="true">https://palakorn.com/blog/security-attacks-every-engineer-should-know/</guid><description>A structural, named-technique-by-named-technique walkthrough of the attacks a modern web application has to defend against — injection, authentication flaws, XSS, CSRF, IDOR, SSRF, deserialization, race conditions, supply-chain attacks, and more — with how each works and what to do about it.</description><pubDate>Wed, 15 Apr 2026 00:00:00 GMT</pubDate><category>Security</category><category>Architecture</category><category>OWASP</category><category>Best Practices</category><author>Palakorn Voramongkol</author></item><item><title>SOLID Principles Explained for Working Developers</title><link>https://palakorn.com/blog/solid-principles-for-developers/</link><guid isPermaLink="true">https://palakorn.com/blog/solid-principles-for-developers/</guid><description>Five principles that separate code you can still touch in six months from code that becomes a minefield. Each principle explained in plain English with before/after code in TypeScript, Java, Python, and C#.</description><pubDate>Wed, 15 Apr 2026 00:00:00 GMT</pubDate><category>Software Design</category><category>Clean Code</category><category>OOP</category><category>Architecture</category><category>TypeScript</category><category>Java</category><category>Python</category><category>C#</category><author>Palakorn Voramongkol</author></item><item><title>Testing Strategy for Production Systems</title><link>https://palakorn.com/blog/testing-strategy-production-systems/</link><guid isPermaLink="true">https://palakorn.com/blog/testing-strategy-production-systems/</guid><description>Unit, integration, contract, and e2e — when each actually pays off, the modern test pyramid, and a practical policy for flaky tests. Concrete advice for a service that ships.</description><pubDate>Wed, 08 Apr 2026 00:00:00 GMT</pubDate><category>Testing</category><category>Architecture</category><category>Quality</category><category>CI/CD</category><category>Node.js</category><author>Palakorn Voramongkol</author></item><item><title>Observability with OpenTelemetry: A Practical End-to-End Guide</title><link>https://palakorn.com/blog/observability-opentelemetry-guide/</link><guid isPermaLink="true">https://palakorn.com/blog/observability-opentelemetry-guide/</guid><description>Instrumenting a production Node.js service for traces, metrics, and logs with OpenTelemetry — plus correlation by trace ID, exporter choices, and what breaks in production.</description><pubDate>Wed, 01 Apr 2026 00:00:00 GMT</pubDate><category>Observability</category><category>OpenTelemetry</category><category>Backend</category><category>DevOps</category><category>Node.js</category><author>Palakorn Voramongkol</author></item><item><title>Zero-Downtime Database Migrations: The Expand/Contract Playbook</title><link>https://palakorn.com/blog/zero-downtime-database-migrations/</link><guid isPermaLink="true">https://palakorn.com/blog/zero-downtime-database-migrations/</guid><description>How to change a production schema without taking traffic down — expand/contract, backfills, dual-writes, online DDL, and the migrations that always bite you.</description><pubDate>Wed, 25 Mar 2026 00:00:00 GMT</pubDate><category>Database</category><category>PostgreSQL</category><category>DevOps</category><category>Architecture</category><category>Backend</category><author>Palakorn Voramongkol</author></item><item><title>Feature Flags and Progressive Delivery in Production</title><link>https://palakorn.com/blog/feature-flags-progressive-delivery/</link><guid isPermaLink="true">https://palakorn.com/blog/feature-flags-progressive-delivery/</guid><description>From kill switches to percentage rollouts — how to decouple deploy from release, evaluate self-hosted vs SaaS flag platforms, and keep flag debt from eating your codebase.</description><pubDate>Wed, 18 Mar 2026 00:00:00 GMT</pubDate><category>DevOps</category><category>CI/CD</category><category>Architecture</category><category>Feature Flags</category><category>Node.js</category><author>Palakorn Voramongkol</author></item><item><title>OWASP Top 10 in a Real Node.js &amp; Next.js App — Before/After</title><link>https://palakorn.com/blog/owasp-top-10-nodejs-nextjs/</link><guid isPermaLink="true">https://palakorn.com/blog/owasp-top-10-nodejs-nextjs/</guid><description>The 2021 OWASP Top 10, but with actual vulnerable Node.js and Next.js snippets and the fixes I ship in production. Concrete examples beat awareness posters.</description><pubDate>Wed, 11 Mar 2026 00:00:00 GMT</pubDate><category>Security</category><category>Node.js</category><category>Next.js</category><category>Web Development</category><category>OWASP</category><author>Palakorn Voramongkol</author></item><item><title>Caching Strategies Beyond &apos;Just Add Redis&apos;</title><link>https://palakorn.com/blog/caching-strategies-beyond-redis/</link><guid isPermaLink="true">https://palakorn.com/blog/caching-strategies-beyond-redis/</guid><description>Cache-aside, write-through, write-behind, read-replicas, edge caches, HTTP ETags, and stale-while-revalidate — how to pick the right caching pattern and how to invalidate without tears.</description><pubDate>Wed, 04 Mar 2026 00:00:00 GMT</pubDate><category>Performance</category><category>Architecture</category><category>Redis</category><category>Backend</category><category>Web Development</category><author>Palakorn Voramongkol</author></item><item><title>Building a Production RAG System: Beyond the Demo</title><link>https://palakorn.com/blog/production-rag-system/</link><guid isPermaLink="true">https://palakorn.com/blog/production-rag-system/</guid><description>Chunking, embeddings, hybrid retrieval, reranking, citation, and evaluation — a practical guide to building a RAG pipeline that survives real traffic and messy documents.</description><pubDate>Wed, 25 Feb 2026 00:00:00 GMT</pubDate><category>AI</category><category>LLM</category><category>RAG</category><category>Python</category><category>Architecture</category><author>Palakorn Voramongkol</author></item><item><title>LLM Evaluation and Guardrails in Production</title><link>https://palakorn.com/blog/llm-evaluation-guardrails-production/</link><guid isPermaLink="true">https://palakorn.com/blog/llm-evaluation-guardrails-production/</guid><description>How to test prompts, catch regressions, score outputs, and defend against prompt injection — with a small eval harness you can ship this week.</description><pubDate>Wed, 18 Feb 2026 00:00:00 GMT</pubDate><category>AI</category><category>LLM</category><category>Testing</category><category>Production</category><category>Python</category><author>Palakorn Voramongkol</author></item><item><title>Monorepo Strategy in 2026: pnpm, Turborepo, Nx, and Friends</title><link>https://palakorn.com/blog/monorepo-strategy-pnpm-turbo-nx/</link><guid isPermaLink="true">https://palakorn.com/blog/monorepo-strategy-pnpm-turbo-nx/</guid><description>When a monorepo pays off, which toolchain to pick, and what a sensible layout looks like for a small-to-mid team — pnpm workspaces, Turborepo, Nx, and the newer options.</description><pubDate>Wed, 11 Feb 2026 00:00:00 GMT</pubDate><category>Monorepo</category><category>DevOps</category><category>TypeScript</category><category>Architecture</category><category>Tooling</category><author>Palakorn Voramongkol</author></item><item><title>CQRS and Event Sourcing: The Real Trade-offs</title><link>https://palakorn.com/blog/cqrs-event-sourcing-tradeoffs/</link><guid isPermaLink="true">https://palakorn.com/blog/cqrs-event-sourcing-tradeoffs/</guid><description>When CQRS pays off, when Event Sourcing makes it worse, and when plain CRUD is the right call. With TypeScript examples and the anti-patterns to avoid.</description><pubDate>Wed, 04 Feb 2026 00:00:00 GMT</pubDate><category>Architecture</category><category>CQRS</category><category>Event Sourcing</category><category>DDD</category><category>Backend</category><author>Palakorn Voramongkol</author></item><item><title>Backpressure and Flow Control in Async Systems</title><link>https://palakorn.com/blog/backpressure-async-systems/</link><guid isPermaLink="true">https://palakorn.com/blog/backpressure-async-systems/</guid><description>When a producer outpaces its consumer — Node streams, Go channels, Rust async, RxJS, and Kafka consumer lag. The patterns that actually keep memory in check.</description><pubDate>Wed, 28 Jan 2026 00:00:00 GMT</pubDate><category>Performance</category><category>Backend</category><category>Node.js</category><category>Go</category><category>Rust</category><author>Palakorn Voramongkol</author></item><item><title>The Strangler Fig Pattern: Migrating a Legacy Monolith Without the Big-Bang Rewrite</title><link>https://palakorn.com/blog/strangler-fig-legacy-migration/</link><guid isPermaLink="true">https://palakorn.com/blog/strangler-fig-legacy-migration/</guid><description>A realistic playbook for replacing a legacy system in place — routing, dual-write, shared data, team slicing, and the order of operations that actually ships.</description><pubDate>Wed, 21 Jan 2026 00:00:00 GMT</pubDate><category>Architecture</category><category>Legacy</category><category>Migration</category><category>DevOps</category><category>Refactoring</category><author>Palakorn Voramongkol</author></item><item><title>PostgreSQL Internals: MVCC, VACUUM, and HOT Updates</title><link>https://palakorn.com/blog/postgresql-internals-mvcc-vacuum/</link><guid isPermaLink="true">https://palakorn.com/blog/postgresql-internals-mvcc-vacuum/</guid><description>How Postgres actually stores rows — tuples, xmin/xmax, HOT updates, table bloat, and why VACUUM is the most misunderstood command in your database.</description><pubDate>Wed, 14 Jan 2026 00:00:00 GMT</pubDate><category>PostgreSQL</category><category>Database</category><category>Performance</category><category>Backend</category><category>Internals</category><author>Palakorn Voramongkol</author></item><item><title>Code Review and Commit Hygiene That Actually Helps</title><link>https://palakorn.com/blog/code-review-commit-hygiene/</link><guid isPermaLink="true">https://palakorn.com/blog/code-review-commit-hygiene/</guid><description>Conventional Commits, small PRs, review culture, and the PR templates people actually fill out — how to review code so the next developer (including future-you) can still move fast.</description><pubDate>Wed, 07 Jan 2026 00:00:00 GMT</pubDate><category>Engineering</category><category>Git</category><category>Code Review</category><category>Team Culture</category><category>DevOps</category><author>Palakorn Voramongkol</author></item><item><title>Designing RESTful API Endpoints: Best Practices for HTTP Methods and URL Structure</title><link>https://palakorn.com/blog/api-endpoint-design-best-practices/</link><guid isPermaLink="true">https://palakorn.com/blog/api-endpoint-design-best-practices/</guid><description>A comprehensive guide to RESTful API endpoint design — covering HTTP methods (GET, POST, PUT, PATCH, DELETE), URL structure, status codes, pagination patterns, error handling with RFC 7807, and real-world implementations in TypeScript, Java, Python, and C#.</description><pubDate>Mon, 28 Apr 2025 00:00:00 GMT</pubDate><category>API</category><category>Backend</category><category>Architecture</category><category>REST</category><author>Palakorn Voramongkol</author></item><item><title>Database Diagrams: A Practical Guide to Schema Design and Documentation</title><link>https://palakorn.com/blog/database-diagrams-design-guide/</link><guid isPermaLink="true">https://palakorn.com/blog/database-diagrams-design-guide/</guid><description>A comprehensive guide to database diagrams — covering ERD notations (Chen, Crow&apos;s Foot, UML), drawing with Mermaid and PlantUML, real-world schema examples, and best practices for documenting database designs.</description><pubDate>Sun, 27 Apr 2025 00:00:00 GMT</pubDate><category>Database</category><category>Architecture</category><category>PostgreSQL</category><category>Data Engineering</category><author>Palakorn Voramongkol</author></item><item><title>JWT for Service-to-Service Authentication : Server-to-Server Authentication in Microservices</title><link>https://palakorn.com/blog/deep-dive-jwt-service-authentication/</link><guid isPermaLink="true">https://palakorn.com/blog/deep-dive-jwt-service-authentication/</guid><description>A comprehensive implementation guide to JWT for service-to-service authentication — covering signed JWTs between services, asymmetric keys (RS256/ES256) for distributed verification, token propagation patterns, and Node.js implementation.</description><pubDate>Sat, 26 Apr 2025 00:00:00 GMT</pubDate><category>Authentication</category><category>Security</category><category>Microservices</category><category>Architecture</category><author>Palakorn Voramongkol</author></item><item><title>Service Mesh Identity (SPIFFE/SPIRE) : Server-to-Server Authentication in Microservices</title><link>https://palakorn.com/blog/deep-dive-service-mesh-identity/</link><guid isPermaLink="true">https://palakorn.com/blog/deep-dive-service-mesh-identity/</guid><description>A comprehensive guide to SPIFFE/SPIRE for workload identity in microservices — covering SPIFFE ID format, SVIDs, SPIRE architecture and components, Istio/Envoy integration, and zero-trust networking patterns.</description><pubDate>Fri, 25 Apr 2025 00:00:00 GMT</pubDate><category>Authentication</category><category>Security</category><category>Microservices</category><category>Architecture</category><author>Palakorn Voramongkol</author></item><item><title>OAuth 2.0 Client Credentials Grant : Server-to-Server Authentication in Microservices</title><link>https://palakorn.com/blog/deep-dive-oauth2-client-credentials/</link><guid isPermaLink="true">https://palakorn.com/blog/deep-dive-oauth2-client-credentials/</guid><description>A comprehensive implementation guide to OAuth 2.0 Client Credentials Grant for machine-to-machine authentication — covering the client credentials flow, token caching and refresh, scope and audience validation, and Node.js implementation with multiple identity providers.</description><pubDate>Thu, 24 Apr 2025 00:00:00 GMT</pubDate><category>Authentication</category><category>Security</category><category>Microservices</category><category>Architecture</category><author>Palakorn Voramongkol</author></item><item><title>API Keys &amp; HMAC Signatures : Server-to-Server Authentication in Microservices</title><link>https://palakorn.com/blog/deep-dive-api-keys-hmac-authentication/</link><guid isPermaLink="true">https://palakorn.com/blog/deep-dive-api-keys-hmac-authentication/</guid><description>A comprehensive implementation guide to API key and HMAC signature authentication — covering API key generation and storage, HMAC request signing inspired by AWS Signature V4, Node.js implementation, rate limiting, and key rotation strategies.</description><pubDate>Wed, 23 Apr 2025 00:00:00 GMT</pubDate><category>Authentication</category><category>Security</category><category>Microservices</category><category>Architecture</category><author>Palakorn Voramongkol</author></item><item><title>Mutual TLS (mTLS) Authentication : Server-to-Server Authentication in Microservices</title><link>https://palakorn.com/blog/deep-dive-mtls-authentication/</link><guid isPermaLink="true">https://palakorn.com/blog/deep-dive-mtls-authentication/</guid><description>A comprehensive implementation guide to Mutual TLS (mTLS) for service-to-service authentication — covering certificate chains, CA setup, certificate rotation, Node.js and Go implementations, Kubernetes cert-manager integration, and production patterns.</description><pubDate>Tue, 22 Apr 2025 00:00:00 GMT</pubDate><category>Authentication</category><category>Security</category><category>Microservices</category><category>Architecture</category><author>Palakorn Voramongkol</author></item><item><title>Server-to-Server Authentication in Microservices</title><link>https://palakorn.com/blog/server-to-server-authentication-microservices/</link><guid isPermaLink="true">https://palakorn.com/blog/server-to-server-authentication-microservices/</guid><description>A high-level comparison of five authentication patterns for service-to-service communication — mTLS, API Keys &amp; HMAC, OAuth 2.0 Client Credentials, Service Mesh Identity (SPIFFE/SPIRE), and JWT — covering when to use each, trade-offs, and real-world examples.</description><pubDate>Mon, 21 Apr 2025 00:00:00 GMT</pubDate><category>Authentication</category><category>Security</category><category>Microservices</category><category>Architecture</category><author>Palakorn Voramongkol</author></item><item><title>WebSocket and SSE Communication : Server-to-Server Communication Technologies</title><link>https://palakorn.com/blog/deep-dive-websocket-sse-communication/</link><guid isPermaLink="true">https://palakorn.com/blog/deep-dive-websocket-sse-communication/</guid><description>A comprehensive guide to WebSocket and Server-Sent Events for real-time communication — covering the WebSocket protocol, SSE, scaling persistent connections, heartbeats, reconnection, and production patterns.</description><pubDate>Sun, 20 Apr 2025 00:00:00 GMT</pubDate><category>Architecture</category><category>Backend</category><category>WebSocket</category><category>Real-time</category><author>Palakorn Voramongkol</author></item><item><title>GraphQL Federation : Server-to-Server Communication Technologies</title><link>https://palakorn.com/blog/deep-dive-graphql-federation/</link><guid isPermaLink="true">https://palakorn.com/blog/deep-dive-graphql-federation/</guid><description>A comprehensive guide to GraphQL Federation for server-to-server communication — covering schema composition, subgraph design, entity resolution, the gateway router, performance optimization, and production deployment.</description><pubDate>Sat, 19 Apr 2025 00:00:00 GMT</pubDate><category>Architecture</category><category>Backend</category><category>GraphQL</category><category>Microservices</category><author>Palakorn Voramongkol</author></item><item><title>Event Streaming with Kafka : Server-to-Server Communication Technologies</title><link>https://palakorn.com/blog/deep-dive-event-streaming-kafka/</link><guid isPermaLink="true">https://palakorn.com/blog/deep-dive-event-streaming-kafka/</guid><description>A comprehensive guide to event streaming with Apache Kafka — covering topics, partitions, consumer groups, exactly-once semantics, Schema Registry, Kafka Streams, and production deployment patterns.</description><pubDate>Fri, 18 Apr 2025 00:00:00 GMT</pubDate><category>Architecture</category><category>Backend</category><category>Kafka</category><category>Distributed Systems</category><author>Palakorn Voramongkol</author></item><item><title>Message Queue Communication : Server-to-Server Communication Technologies</title><link>https://palakorn.com/blog/deep-dive-message-queue-communication/</link><guid isPermaLink="true">https://palakorn.com/blog/deep-dive-message-queue-communication/</guid><description>A comprehensive guide to message queues for server-to-server communication — covering RabbitMQ, Amazon SQS, delivery guarantees, dead-letter queues, backpressure, and production patterns.</description><pubDate>Thu, 17 Apr 2025 00:00:00 GMT</pubDate><category>Architecture</category><category>Backend</category><category>Messaging</category><category>Microservices</category><author>Palakorn Voramongkol</author></item><item><title>gRPC Communication : Server-to-Server Communication Technologies</title><link>https://palakorn.com/blog/deep-dive-grpc-communication/</link><guid isPermaLink="true">https://palakorn.com/blog/deep-dive-grpc-communication/</guid><description>A comprehensive guide to gRPC for server-to-server communication — covering Protocol Buffers, service definitions, streaming patterns, interceptors, error handling, load balancing, and production deployment.</description><pubDate>Wed, 16 Apr 2025 00:00:00 GMT</pubDate><category>Architecture</category><category>Backend</category><category>gRPC</category><category>Microservices</category><author>Palakorn Voramongkol</author></item><item><title>REST API Communication : Server-to-Server Communication Technologies</title><link>https://palakorn.com/blog/deep-dive-rest-api-communication/</link><guid isPermaLink="true">https://palakorn.com/blog/deep-dive-rest-api-communication/</guid><description>A comprehensive guide to REST API for server-to-server communication — covering API design principles, HTTP semantics, authentication patterns, error handling, rate limiting, circuit breakers, and production best practices.</description><pubDate>Tue, 15 Apr 2025 00:00:00 GMT</pubDate><category>Architecture</category><category>Backend</category><category>API</category><category>Microservices</category><author>Palakorn Voramongkol</author></item><item><title>Server-to-Server Communication Technologies</title><link>https://palakorn.com/blog/server-to-server-communication-technologies/</link><guid isPermaLink="true">https://palakorn.com/blog/server-to-server-communication-technologies/</guid><description>A high-level comparison of server-to-server communication patterns — REST, gRPC, Message Queues, Event Streaming, GraphQL Federation, and WebSocket/SSE — covering when to use each, trade-offs, and real-world use cases.</description><pubDate>Mon, 14 Apr 2025 00:00:00 GMT</pubDate><category>Architecture</category><category>Backend</category><category>Microservices</category><category>Distributed Systems</category><author>Palakorn Voramongkol</author></item><item><title>Multi-Factor Authentication (MFA) : Authentication Strategies for Modern Web Applications</title><link>https://palakorn.com/blog/deep-dive-mfa-authentication/</link><guid isPermaLink="true">https://palakorn.com/blog/deep-dive-mfa-authentication/</guid><description>A comprehensive implementation guide to multi-factor authentication — covering TOTP setup, backup codes, SMS verification, hardware security keys, adaptive MFA, and recovery strategies.</description><pubDate>Sun, 13 Apr 2025 00:00:00 GMT</pubDate><category>Authentication</category><category>Security</category><category>Backend</category><category>Node.js</category><author>Palakorn Voramongkol</author></item><item><title>Passwordless Authentication : Authentication Strategies for Modern Web Applications</title><link>https://palakorn.com/blog/deep-dive-passwordless-authentication/</link><guid isPermaLink="true">https://palakorn.com/blog/deep-dive-passwordless-authentication/</guid><description>A comprehensive implementation guide to passwordless authentication — covering magic email links, SMS OTP, WebAuthn/FIDO2 passkeys, implementation patterns, and security considerations.</description><pubDate>Sat, 12 Apr 2025 00:00:00 GMT</pubDate><category>Authentication</category><category>Security</category><category>Backend</category><category>Node.js</category><author>Palakorn Voramongkol</author></item><item><title>OAuth 2.0 Authentication : Authentication Strategies for Modern Web Applications</title><link>https://palakorn.com/blog/deep-dive-oauth2-authentication/</link><guid isPermaLink="true">https://palakorn.com/blog/deep-dive-oauth2-authentication/</guid><description>A comprehensive implementation guide to OAuth 2.0 — covering authorization flows, OpenID Connect, implementing Google and GitHub login, token management, and enterprise SSO patterns.</description><pubDate>Fri, 11 Apr 2025 00:00:00 GMT</pubDate><category>Authentication</category><category>Security</category><category>Backend</category><category>Node.js</category><author>Palakorn Voramongkol</author></item><item><title>JWT Authentication : Authentication Strategies for Modern Web Applications</title><link>https://palakorn.com/blog/deep-dive-jwt-authentication/</link><guid isPermaLink="true">https://palakorn.com/blog/deep-dive-jwt-authentication/</guid><description>A comprehensive implementation guide to JWT authentication — covering token structure, signing algorithms, access/refresh token patterns, middleware implementation, token revocation strategies, and security best practices.</description><pubDate>Thu, 10 Apr 2025 00:00:00 GMT</pubDate><category>Authentication</category><category>Security</category><category>Backend</category><category>Node.js</category><author>Palakorn Voramongkol</author></item><item><title>Session-Based Authentication : Authentication Strategies for Modern Web Applications</title><link>https://palakorn.com/blog/deep-dive-session-based-authentication/</link><guid isPermaLink="true">https://palakorn.com/blog/deep-dive-session-based-authentication/</guid><description>A comprehensive implementation guide to session-based authentication — covering how sessions work under the hood, server-side storage strategies, cookie security, scaling with Redis, and production best practices.</description><pubDate>Wed, 09 Apr 2025 00:00:00 GMT</pubDate><category>Authentication</category><category>Security</category><category>Backend</category><category>Node.js</category><author>Palakorn Voramongkol</author></item><item><title>Authentication Strategies for Modern Web Applications</title><link>https://palakorn.com/blog/authentication-strategies-modern-web-apps/</link><guid isPermaLink="true">https://palakorn.com/blog/authentication-strategies-modern-web-apps/</guid><description>A high-level comparison of modern authentication approaches — Session-based, JWT, OAuth 2.0, Passwordless, and MFA — covering when to use each, trade-offs, and real-world use cases.</description><pubDate>Tue, 08 Apr 2025 00:00:00 GMT</pubDate><category>Authentication</category><category>Security</category><category>Backend</category><category>Architecture</category><author>Palakorn Voramongkol</author></item><item><title>Flutter vs React Native: Cross-Platform Development in 2025</title><link>https://palakorn.com/blog/flutter-react-native-cross-platform-2025/</link><guid isPermaLink="true">https://palakorn.com/blog/flutter-react-native-cross-platform-2025/</guid><description>A detailed technical comparison of Flutter and React Native in 2025, covering architecture, performance, developer experience, ecosystem maturity, and real-world project considerations.</description><pubDate>Wed, 02 Apr 2025 00:00:00 GMT</pubDate><category>Mobile</category><category>Flutter</category><category>React Native</category><category>Cross-Platform</category><author>Palakorn Voramongkol</author></item><item><title>Building a Production Monitoring and Observability Stack</title><link>https://palakorn.com/blog/monitoring-observability-stack-production/</link><guid isPermaLink="true">https://palakorn.com/blog/monitoring-observability-stack-production/</guid><description>Monitoring tells you something is broken. Observability tells you why. Here&apos;s the stack and methodology I use to instrument production systems — from metrics and logs to traces and alerting that doesn&apos;t wake you up at 3 AM for nothing.</description><pubDate>Tue, 01 Apr 2025 00:00:00 GMT</pubDate><category>DevOps</category><category>Monitoring</category><category>Infrastructure</category><category>Backend</category><author>Palakorn Voramongkol</author></item><item><title>System Design Patterns Every Senior Engineer Should Know</title><link>https://palakorn.com/blog/system-design-interview-patterns/</link><guid isPermaLink="true">https://palakorn.com/blog/system-design-interview-patterns/</guid><description>Essential system design patterns for senior engineers, covering load balancing, caching strategies, database sharding, message queues, rate limiting, circuit breaker, CQRS, and event sourcing with practical architectural examples.</description><pubDate>Tue, 25 Mar 2025 00:00:00 GMT</pubDate><category>Architecture</category><category>System Design</category><category>Backend</category><category>Infrastructure</category><author>Palakorn Voramongkol</author></item><item><title>TypeScript Patterns for Large Codebases</title><link>https://palakorn.com/blog/typescript-patterns-large-codebases/</link><guid isPermaLink="true">https://palakorn.com/blog/typescript-patterns-large-codebases/</guid><description>TypeScript at scale requires different patterns than TypeScript for a side project. Here are the type patterns and architectural decisions that keep large codebases maintainable, based on managing 200K+ line TypeScript projects.</description><pubDate>Tue, 18 Mar 2025 00:00:00 GMT</pubDate><category>TypeScript</category><category>Architecture</category><category>Frontend</category><category>Backend</category><author>Palakorn Voramongkol</author></item><item><title>Integrating AI into Production Applications: A Practical Guide</title><link>https://palakorn.com/blog/ai-integration-production-apps/</link><guid isPermaLink="true">https://palakorn.com/blog/ai-integration-production-apps/</guid><description>A comprehensive guide to integrating LLMs and AI models into production applications, covering architecture patterns, cost optimization, fallback strategies, prompt engineering, RAG systems, monitoring, and critical considerations.</description><pubDate>Wed, 12 Mar 2025 00:00:00 GMT</pubDate><category>AI</category><category>Machine Learning</category><category>Production</category><category>Architecture</category><author>Palakorn Voramongkol</author></item><item><title>CI/CD Pipeline Design: Principles for Reliable Deployments</title><link>https://palakorn.com/blog/cicd-pipeline-design-principles/</link><guid isPermaLink="true">https://palakorn.com/blog/cicd-pipeline-design-principles/</guid><description>A well-designed CI/CD pipeline is the backbone of engineering velocity. Here are the design principles I follow after building and maintaining pipelines for teams ranging from 3 to 50 developers.</description><pubDate>Wed, 05 Mar 2025 00:00:00 GMT</pubDate><category>DevOps</category><category>CI/CD</category><category>GitHub Actions</category><category>Infrastructure</category><author>Palakorn Voramongkol</author></item><item><title>React Server Components: Practical Patterns for Production</title><link>https://palakorn.com/blog/react-server-components-practical-patterns/</link><guid isPermaLink="true">https://palakorn.com/blog/react-server-components-practical-patterns/</guid><description>Server Components change the mental model of React development. After building two production apps with RSC, here are the patterns that work, the pitfalls to avoid, and when client components are still the right call.</description><pubDate>Thu, 20 Feb 2025 00:00:00 GMT</pubDate><category>React</category><category>Next.js</category><category>Frontend</category><category>Performance</category><author>Palakorn Voramongkol</author></item><item><title>PostgreSQL Performance Tuning: Lessons from Production</title><link>https://palakorn.com/blog/postgresql-performance-tuning-production/</link><guid isPermaLink="true">https://palakorn.com/blog/postgresql-performance-tuning-production/</guid><description>After optimizing PostgreSQL for three high-traffic production systems, I&apos;ve compiled the tuning strategies that actually moved the needle — from indexing patterns to connection pooling and query optimization.</description><pubDate>Mon, 03 Feb 2025 00:00:00 GMT</pubDate><category>PostgreSQL</category><category>Database</category><category>Performance</category><category>Backend</category><author>Palakorn Voramongkol</author></item><item><title>Docker Compose to Kubernetes: A Practical Migration Guide</title><link>https://palakorn.com/blog/docker-compose-to-kubernetes-migration-guide/</link><guid isPermaLink="true">https://palakorn.com/blog/docker-compose-to-kubernetes-migration-guide/</guid><description>Migrating from Docker Compose to Kubernetes doesn&apos;t have to be a big-bang rewrite. Here&apos;s the incremental approach I&apos;ve used across three production migrations — with real configs and hard-won lessons.</description><pubDate>Wed, 15 Jan 2025 00:00:00 GMT</pubDate><category>Kubernetes</category><category>Docker</category><category>DevOps</category><category>Infrastructure</category><author>Palakorn Voramongkol</author></item><item><title>Building Scalable B2B Platforms with Microservices</title><link>https://palakorn.com/blog/building-scalable-b2b-platforms-microservices/</link><guid isPermaLink="true">https://palakorn.com/blog/building-scalable-b2b-platforms-microservices/</guid><description>After shipping three B2B SaaS platforms from scratch, I&apos;ve learned that microservices aren&apos;t a silver bullet — but applied correctly, they let small teams move fast without stepping on each other. Here&apos;s the architecture playbook I return to again and again.</description><pubDate>Tue, 12 Nov 2024 00:00:00 GMT</pubDate><category>Architecture</category><category>Microservices</category><category>Node.js</category><category>Kubernetes</category><author>Palakorn Voramongkol</author></item><item><title>Why Rust Changed How I Think About Backend Performance</title><link>https://palakorn.com/blog/why-rust-changed-how-i-think-about-backend-performance/</link><guid isPermaLink="true">https://palakorn.com/blog/why-rust-changed-how-i-think-about-backend-performance/</guid><description>After shipping a 50k RPS service in Rust, I returned to Node.js with a completely different mental model for performance. This is the story of memory models, threading, and why your async runtime is both better and worse than you think.</description><pubDate>Mon, 28 Oct 2024 00:00:00 GMT</pubDate><category>Rust</category><category>Performance</category><category>Backend</category><category>Systems Programming</category><author>Palakorn Voramongkol</author></item><item><title>API Design: REST Best Practices from Real-World Experience</title><link>https://palakorn.com/blog/api-design-rest-best-practices/</link><guid isPermaLink="true">https://palakorn.com/blog/api-design-rest-best-practices/</guid><description>Designing APIs that developers actually enjoy using requires more than following REST conventions. After building and consuming dozens of APIs, here are the principles that matter most — from URL design to pagination, versioning, and error handling.</description><pubDate>Sat, 05 Oct 2024 00:00:00 GMT</pubDate><category>API Design</category><category>REST</category><category>Backend</category><category>Node.js</category><author>Palakorn Voramongkol</author></item><item><title>From jQuery to React: 20 Years of Frontend Evolution</title><link>https://palakorn.com/blog/from-jquery-to-react-20-years-of-frontend-evolution/</link><guid isPermaLink="true">https://palakorn.com/blog/from-jquery-to-react-20-years-of-frontend-evolution/</guid><description>I&apos;ve been writing JavaScript since 1999. jQuery felt like magic. React feels inevitable. This is the story of how we went from DOM manipulation to declarative UIs, and why the future probably isn&apos;t React.</description><pubDate>Mon, 30 Sep 2024 00:00:00 GMT</pubDate><category>JavaScript</category><category>Frontend</category><category>React</category><category>Web History</category><author>Palakorn Voramongkol</author></item><item><title>State Management in React: What Actually Works in 2025</title><link>https://palakorn.com/blog/state-management-react-2025/</link><guid isPermaLink="true">https://palakorn.com/blog/state-management-react-2025/</guid><description>The React state management landscape has matured significantly. After evaluating every major solution across multiple production apps, here&apos;s a pragmatic guide to choosing the right tool — and why you probably need less than you think.</description><pubDate>Tue, 10 Sep 2024 00:00:00 GMT</pubDate><category>React</category><category>State Management</category><category>Frontend</category><category>Architecture</category><author>Palakorn Voramongkol</author></item><item><title>Deploying Machine Learning Models to Production with FastAPI</title><link>https://palakorn.com/blog/machine-learning-production-fastapi/</link><guid isPermaLink="true">https://palakorn.com/blog/machine-learning-production-fastapi/</guid><description>Training an ML model is the easy part. Serving it reliably in production — with proper input validation, versioning, monitoring, and scaling — is where the real engineering happens. Here&apos;s a battle-tested approach using FastAPI.</description><pubDate>Thu, 15 Aug 2024 00:00:00 GMT</pubDate><category>Machine Learning</category><category>Python</category><category>FastAPI</category><category>Backend</category><author>Palakorn Voramongkol</author></item><item><title>Real-Time Data Pipelines: Lessons From Production</title><link>https://palakorn.com/blog/real-time-data-pipelines-lessons-from-production/</link><guid isPermaLink="true">https://palakorn.com/blog/real-time-data-pipelines-lessons-from-production/</guid><description>Real-time data pipelines sound simple: ingest data, process it, serve results. In production with gigabytes per second, every architectural decision compounds. These are the lessons learned the hard way.</description><pubDate>Thu, 15 Aug 2024 00:00:00 GMT</pubDate><category>Data Engineering</category><category>Real-time</category><category>Production</category><category>Kafka</category><author>Palakorn Voramongkol</author></item><item><title>The Next.js Full-Stack Production Checklist</title><link>https://palakorn.com/blog/nextjs-full-stack-production-checklist/</link><guid isPermaLink="true">https://palakorn.com/blog/nextjs-full-stack-production-checklist/</guid><description>Launching a Next.js application to production is more than just running next build. After deploying six Next.js apps to production, here&apos;s the comprehensive checklist I wish I had from the start — covering performance, security, SEO, and operational readiness.</description><pubDate>Sat, 20 Jul 2024 00:00:00 GMT</pubDate><category>Next.js</category><category>React</category><category>Performance</category><category>DevOps</category><author>Palakorn Voramongkol</author></item></channel></rss>