https://muhammadamal.my.id/tracks/programming/ Recent content in Programming on Hi, I'm Muhammad Amal Hugo en-us Fri, 19 Dec 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/predictions-for-2026-the-post-agent-era-for-backend-engineers/ Fri, 19 Dec 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/predictions-for-2026-the-post-agent-era-for-backend-engineers/ What 2026 likely brings for backend engineers, agents as boring infrastructure, OS-level AI, agent-native data systems, and the calibration adjustments to make. https://muhammadamal.my.id/blog/talking-to-executives-about-technical-risk-a-practical-framework/ Wed, 17 Dec 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/talking-to-executives-about-technical-risk-a-practical-framework/ A practical framework for senior engineers to communicate technical risk to executives, with concrete framing, a risk taxonomy, and templates for the conversation. https://muhammadamal.my.id/blog/lessons-from-running-platform-engineering-teams-in-2025/ Mon, 15 Dec 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/lessons-from-running-platform-engineering-teams-in-2025/ What actually works when running a platform engineering team, framed around internal product thinking, golden paths, RACI for shared services, and the failures I learned from. https://muhammadamal.my.id/blog/the-2025-technical-retrospective-agents-wasm-edge-ai-and-mcp/ Fri, 12 Dec 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/the-2025-technical-retrospective-agents-wasm-edge-ai-and-mcp/ What actually mattered in 2025, agents went multi-step, Wasm grew up on the server, edge AI got real, and MCP became the wire format. Plus what I got wrong. https://muhammadamal.my.id/blog/architecture-reviews-that-dont-waste-senior-time/ Wed, 10 Dec 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/architecture-reviews-that-dont-waste-senior-time/ A practical playbook for architecture reviews that actually inform decisions, with templates for prep docs, review rubrics, and the rules that keep meetings short. https://muhammadamal.my.id/blog/building-influence-without-authority-a-tech-leads-guide/ Mon, 08 Dec 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/building-influence-without-authority-a-tech-leads-guide/ How to move organizations when you don’t have the org chart power to do it, with concrete frameworks for credibility, allyship, and the long game of influence. https://muhammadamal.my.id/blog/writing-adrs-that-actually-inform-decisions/ Fri, 05 Dec 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/writing-adrs-that-actually-inform-decisions/ An opinionated guide to ADRs that work in real engineering orgs, with a battle-tested template, scoring rubric, and the structural choices that make ADRs readable. https://muhammadamal.my.id/blog/consultative-discovery-for-complex-software-architectures/ Wed, 03 Dec 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/consultative-discovery-for-complex-software-architectures/ A senior engineer’s discovery playbook for ambiguous architecture work, with question sets, interview structure, and a discovery brief template that drives real decisions. https://muhammadamal.my.id/blog/transitioning-to-technical-leadership-a-senior-engineers-playbook/ Mon, 01 Dec 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/transitioning-to-technical-leadership-a-senior-engineers-playbook/ What actually changes when you move from senior IC to technical leader, plus concrete frameworks for ramp, delegation, and the identity shift nobody warns you about. https://muhammadamal.my.id/blog/closing-the-loop-support-feedback-to-product-engineering/ Fri, 21 Nov 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/closing-the-loop-support-feedback-to-product-engineering/ A working model for routing support insights into product engineering decisions, with data structures, reporting cadence, and the political work of making engineering listen. https://muhammadamal.my.id/blog/escalation-paths-and-runbooks-for-enterprise-support/ Wed, 19 Nov 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/escalation-paths-and-runbooks-for-enterprise-support/ How to design escalation paths and write runbooks that hold up when an enterprise customer is in pain, with explicit decision criteria and operational templates. https://muhammadamal.my.id/blog/measuring-support-engineering-effectiveness-metrics-that-matter/ Mon, 17 Nov 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/measuring-support-engineering-effectiveness-metrics-that-matter/ Which support engineering metrics actually predict customer outcomes, which ones get gamed, and how to build a measurement stack that drives the right behavior. https://muhammadamal.my.id/blog/triage-automation-with-llms-and-zendesk-a-hands-on-tutorial/ Fri, 14 Nov 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/triage-automation-with-llms-and-zendesk-a-hands-on-tutorial/ A working LLM triage system for Zendesk in Python, covering classification, routing, agent-assist suggestions, evaluation, and the rollout pattern that doesn’t break production. https://muhammadamal.my.id/blog/sla-driven-operations-for-tech-support-managers/ Wed, 12 Nov 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/sla-driven-operations-for-tech-support-managers/ A practical operating model for SLA-driven support orgs, covering queue topology, staffing math, on-call rotations, and the dashboards that actually drive behavior. https://muhammadamal.my.id/blog/bridging-l3-engineers-and-enterprise-clients-a-tech-support-playbook/ Mon, 10 Nov 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/bridging-l3-engineers-and-enterprise-clients-a-tech-support-playbook/ A playbook for the technical translation work that holds enterprise support together, with templates, escalation patterns, and the human gotchas that nobody trains for. https://muhammadamal.my.id/blog/embedding-strategies-for-support-documentation-in-2025/ Fri, 07 Nov 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/embedding-strategies-for-support-documentation-in-2025/ A senior engineer’s decision guide for picking, mixing, and fine-tuning embeddings for technical support corpora, with runnable benchmarks and real recall numbers. https://muhammadamal.my.id/blog/building-a-support-knowledge-base-from-zendesk-and-jira/ Wed, 05 Nov 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/building-a-support-knowledge-base-from-zendesk-and-jira/ How to extract, dedupe, anonymize, and rank tickets from Zendesk and Jira into a knowledge base that’s actually safe to feed into a RAG pipeline. https://muhammadamal.my.id/blog/rag-systems-for-technical-support-teams-in-2025/ Mon, 03 Nov 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/rag-systems-for-technical-support-teams-in-2025/ A field-tested walkthrough of building retrieval-augmented generation for L1 through L3 support, with runnable Python, pgvector and Qdrant pipelines, and the failure modes nobody talks about. https://muhammadamal.my.id/blog/measuring-developer-experience-dora-space-backstage/ Wed, 29 Oct 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/measuring-developer-experience-dora-space-backstage/ A working tutorial on turning Backstage into a real DX measurement platform. https://muhammadamal.my.id/blog/service-catalog-design-that-scales/ Mon, 27 Oct 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/service-catalog-design-that-scales/ Catalog modeling decisions that pay back at scale, learned the hard way. https://muhammadamal.my.id/blog/developer-onboarding-backstage-argocd-end-to-end/ Wed, 22 Oct 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/developer-onboarding-backstage-argocd-end-to-end/ How to build an onboarding loop that a new hire can finish in their first morning. https://muhammadamal.my.id/blog/score-spec-workload-portability-2025/ Mon, 20 Oct 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/score-spec-workload-portability-2025/ Where Score Spec actually fits in a 2025 platform stack, with working examples. https://muhammadamal.my.id/blog/techdocs-at-scale-backstage-production-setup/ Wed, 15 Oct 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/techdocs-at-scale-backstage-production-setup/ How to make TechDocs fast and reliable past the first ten repositories. https://muhammadamal.my.id/blog/writing-custom-backstage-plugins-typescript/ Mon, 13 Oct 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/writing-custom-backstage-plugins-typescript/ A working engineer’s tutorial on building Backstage plugins that survive contact with production. https://muhammadamal.my.id/blog/golden-paths-software-templates-backstage/ Wed, 08 Oct 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/golden-paths-software-templates-backstage/ How to turn a portal into a paved road with real Backstage 1.34 software templates. https://muhammadamal.my.id/blog/building-internal-developer-portal-backstage-1-34/ Mon, 06 Oct 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/building-internal-developer-portal-backstage-1-34/ A working engineer’s walkthrough of building an IDP from scratch with Backstage 1.34 on Node.js 22. https://muhammadamal.my.id/blog/supply-chain-security-ai-models-signing-and-sbom/ Wed, 24 Sep 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/supply-chain-security-ai-models-signing-and-sbom/ How to sign models, produce SBOMs that mean something for ML, and verify everything at runtime without slowing your team down. https://muhammadamal.my.id/blog/content-moderation-for-llms-llama-guard-3-2/ Mon, 22 Sep 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/content-moderation-for-llms-llama-guard-3-2/ How to deploy Llama Guard 3.2 for input and output moderation without crippling latency, with custom rules and real benchmarks. https://muhammadamal.my.id/blog/policy-as-code-opa-1-0-production-walkthrough/ Wed, 17 Sep 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/policy-as-code-opa-1-0-production-walkthrough/ How to run OPA 1.0 in production without footguns, with real policies, bundle infrastructure, and the operational habits that keep it healthy. https://muhammadamal.my.id/blog/spiffe-spire-service-identity-hands-on-tutorial/ Mon, 15 Sep 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/spiffe-spire-service-identity-hands-on-tutorial/ Install SPIRE 1.10, register workloads, and use SVIDs from real applications without faking your way through the docs. https://muhammadamal.my.id/blog/securing-rag-against-data-exfiltration-2025/ Wed, 10 Sep 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/securing-rag-against-data-exfiltration-2025/ Practical controls that stop the most common RAG exfiltration vectors without breaking retrieval quality. https://muhammadamal.my.id/blog/devsecops-ai-ml-pipelines-comprehensive-tutorial/ Mon, 08 Sep 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/devsecops-ai-ml-pipelines-comprehensive-tutorial/ How to wire real security gates into ML pipelines without grinding training to a halt, with code and policies that actually work. https://muhammadamal.my.id/blog/zero-trust-architectures-ai-services-step-by-step-setup/ Wed, 03 Sep 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/zero-trust-architectures-ai-services-step-by-step-setup/ How to build a real Zero Trust setup around your model-serving stack without drowning in vendor jargon. https://muhammadamal.my.id/blog/advanced-prompt-injection-defenses-2025-practical-guide/ Mon, 01 Sep 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/advanced-prompt-injection-defenses-2025-practical-guide/ Layered prompt injection defenses that actually hold up in production, with code, diagrams, and the failure modes nobody talks about. https://muhammadamal.my.id/blog/observability-for-n8n-2025-metrics-logs-traces/ Fri, 22 Aug 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/observability-for-n8n-2025-metrics-logs-traces/ Build production observability for n8n with Prometheus metrics, structured logs, OpenTelemetry traces, and the dashboards that catch incidents early. https://muhammadamal.my.id/blog/self-hosted-n8n-on-kubernetes-production-setup/ Wed, 20 Aug 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/self-hosted-n8n-on-kubernetes-production-setup/ Deploy n8n 1.78 on Kubernetes properly, with separate main, webhook, and worker deployments, HPA, ingress, and persistence. https://muhammadamal.my.id/blog/error-handling-and-retries-for-production-n8n-workflows/ Mon, 18 Aug 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/error-handling-and-retries-for-production-n8n-workflows/ Build n8n workflows that survive flaky APIs, with retry policies, error trigger workflows, circuit breakers, and dead letter routing patterns. https://muhammadamal.my.id/blog/managing-secrets-and-credentials-in-n8n-for-enterprise/ Fri, 15 Aug 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/managing-secrets-and-credentials-in-n8n-for-enterprise/ Move n8n credentials out of the database and into Vault or Infisical, wire up Keycloak or Auth0 SSO, and build a rotation story that doesn’t break workflows. https://muhammadamal.my.id/blog/n8n-queue-mode-redis-at-scale-production-walkthrough/ Wed, 13 Aug 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/n8n-queue-mode-redis-at-scale-production-walkthrough/ From a single-node Redis to Sentinel and clustered queues, the practical guide to running n8n queue mode at production scale. https://muhammadamal.my.id/blog/connecting-jira-cloud-to-internal-platforms-with-n8n/ Mon, 11 Aug 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/connecting-jira-cloud-to-internal-platforms-with-n8n/ A real Jira to internal platform integration in n8n, webhook ingest, JQL pulls, Forge events, and the auth patterns that don’t break in six months. https://muhammadamal.my.id/blog/orchestrating-complex-enterprise-data-syncs-with-n8n/ Fri, 08 Aug 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/orchestrating-complex-enterprise-data-syncs-with-n8n/ How to build n8n data syncs that survive production, with idempotency keys, watermark-based pulls, fan-out fan-in, and a real dead letter queue. https://muhammadamal.my.id/blog/writing-custom-n8n-nodes-typescript-step-by-step-tutorial/ Wed, 06 Aug 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/writing-custom-n8n-nodes-typescript-step-by-step-tutorial/ From scaffold to npm publish, a complete TypeScript walkthrough for writing custom n8n nodes that don’t embarrass you in a code review. https://muhammadamal.my.id/blog/advanced-n8n-architecture-2025-queue-mode-worker-scaling/ Mon, 04 Aug 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/advanced-n8n-architecture-2025-queue-mode-worker-scaling/ How n8n 1.78 actually runs at scale, the main and worker split, Bull queues, concurrency knobs, and where queue mode earns its keep. https://muhammadamal.my.id/blog/rate-limiting-resilience-patterns-modern-apis/ Wed, 30 Jul 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/rate-limiting-resilience-patterns-modern-apis/ A working playbook for keeping API services up under load and degrading gracefully when they can’t. https://muhammadamal.my.id/blog/opentelemetry-grpc-go-production-walkthrough/ Mon, 28 Jul 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/opentelemetry-grpc-go-production-walkthrough/ OpenTelemetry has stabilized enough that you can wire it up once and forget. Here’s the configuration that ships. https://muhammadamal.my.id/blog/schema-first-api-development-with-buf/ Wed, 23 Jul 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/schema-first-api-development-with-buf/ buf turns protobuf from a code generator into a real schema platform. Here’s the workflow that actually scales across teams. https://muhammadamal.my.id/blog/api-gateway-architectures-2025-envoy-gateway-kong/ Mon, 21 Jul 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/api-gateway-architectures-2025-envoy-gateway-kong/ Both gateways are mature in 2025. The right choice depends less on features than on how your platform team wants to operate. https://muhammadamal.my.id/blog/streaming-grpc-realtime-data-guide/ Wed, 16 Jul 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/streaming-grpc-realtime-data-guide/ Streaming gRPC is more than calling Send in a loop. Here’s how to build streams that don’t fall over in production. https://muhammadamal.my.id/blog/securing-internal-microservices-jwt-spiffe-2025/ Mon, 14 Jul 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/securing-internal-microservices-jwt-spiffe-2025/ SPIFFE gives you trustworthy workload identity. JWT gives you portable claims. Together, they replace static service tokens. https://muhammadamal.my.id/blog/connect-go-browser-friendly-grpc-tutorial/ Wed, 09 Jul 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/connect-go-browser-friendly-grpc-tutorial/ Connect-Go gives you gRPC ergonomics with a wire format browsers can actually speak. Here’s how to use it well. https://muhammadamal.my.id/blog/grpc-deep-dive-2025-high-throughput-patterns/ Mon, 07 Jul 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/grpc-deep-dive-2025-high-throughput-patterns/ What still trips people up about gRPC in 2025, and the production patterns that actually move the needle. https://muhammadamal.my.id/blog/yugabytedb-for-global-apps/ Wed, 25 Jun 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/yugabytedb-for-global-apps/ How to design and run YugabyteDB 2.23 for globally distributed apps, covering placement, multi-region geo-partitioning, and Postgres compatibility tradeoffs. https://muhammadamal.my.id/blog/reading-pg-stat-io-and-modern-postgres-internals/ Mon, 23 Jun 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/reading-pg-stat-io-and-modern-postgres-internals/ A deep dive on pg_stat_io in PostgreSQL 17, explaining buffer cache mechanics, IO contexts, and how to diagnose storage and memory pressure from the view. https://muhammadamal.my.id/blog/time-series-at-scale-with-timescaledb-hypertables/ Wed, 18 Jun 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/time-series-at-scale-with-timescaledb-hypertables/ How to design, operate, and scale TimescaleDB 2.18 hypertables for production time-series workloads, with chunk sizing, compression, and aggregation patterns. https://muhammadamal.my.id/blog/high-availability-postgres-with-patroni-4-0/ Mon, 16 Jun 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/high-availability-postgres-with-patroni-4-0/ How to build a production-grade highly available Postgres 17 cluster using Patroni 4.0, etcd for consensus, and HAProxy for routing. https://muhammadamal.my.id/blog/citus-for-sharded-multi-tenant-postgres/ Wed, 11 Jun 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/citus-for-sharded-multi-tenant-postgres/ A senior engineer’s walkthrough of Citus 12.1 for sharded multi-tenant Postgres, focused on schema patterns, query routing, and operational realities. https://muhammadamal.my.id/blog/distributed-sql-with-cockroachdb-24-3/ Mon, 09 Jun 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/distributed-sql-with-cockroachdb-24-3/ How to think about and operate CockroachDB 24.3 as a distributed SQL engine, with concrete schema, query, and locality patterns. https://muhammadamal.my.id/blog/scaling-pgvector-to-billion-vector-workloads/ Wed, 04 Jun 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/scaling-pgvector-to-billion-vector-workloads/ A practical engineer’s playbook for scaling pgvector 0.8 to billion-vector workloads on Postgres 17, covering HNSW, quantization, and partitioning. https://muhammadamal.my.id/blog/advanced-postgresql-17-tuning-at-scale/ Mon, 02 Jun 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/advanced-postgresql-17-tuning-at-scale/ How to tune PostgreSQL 17 for real production scale, with concrete settings, diagnostic queries, and the pitfalls that bite teams under load. https://muhammadamal.my.id/blog/postmortem-automation-with-llms-drafts-that-dont-lie/ Fri, 23 May 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/postmortem-automation-with-llms-drafts-that-dont-lie/ A draft-only postmortem pipeline that respects timestamps, refuses to invent causes, and produces a blameless template a human can finish in 30 minutes. https://muhammadamal.my.id/blog/chaos-engineering-with-ai-augmented-hypotheses/ Wed, 21 May 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/chaos-engineering-with-ai-augmented-hypotheses/ AI-proposed chaos hypotheses, human-approved blast radii, and LitmusChaos execution on Kubernetes 1.32 with rollback on SLO breach. https://muhammadamal.my.id/blog/slos-and-burn-rate-alerting-in-2025-a-practical-guide/ Mon, 19 May 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/slos-and-burn-rate-alerting-in-2025-a-practical-guide/ Practical SLO design, error budget math, and multi-window burn rate alerting rules ready to paste into Prometheus 3.0. https://muhammadamal.my.id/blog/incident-response-automation-with-langgraph-a-step-by-step-tutorial/ Fri, 16 May 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/incident-response-automation-with-langgraph-a-step-by-step-tutorial/ Treat incident response as a typed state machine in LangGraph 0.2, with deterministic transitions, audit logging, and bounded LLM use. https://muhammadamal.my.id/blog/anomaly-detection-on-prometheus-metrics-a-hands-on-guide/ Wed, 14 May 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/anomaly-detection-on-prometheus-metrics-a-hands-on-guide/ A working senior SRE’s tour through metric anomaly detection, from cheap z-score rules to isolation forest sidecars on Prometheus 3.0. https://muhammadamal.my.id/blog/building-an-sre-copilot-for-on-call-engineers/ Mon, 12 May 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/building-an-sre-copilot-for-on-call-engineers/ A senior backend engineer’s design for an LLM-powered on-call assistant with tool use, context shaping, and a read-only blast radius. https://muhammadamal.my.id/blog/ai-driven-log-analysis-at-scale-a-production-tutorial/ Fri, 09 May 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/ai-driven-log-analysis-at-scale-a-production-tutorial/ A production pattern for AI log analysis using template mining, vector retrieval, and bounded LLM summarization on Loki 3.3. https://muhammadamal.my.id/blog/auto-remediation-pipelines-with-llm-agents-and-argo-events/ Wed, 07 May 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/auto-remediation-pipelines-with-llm-agents-and-argo-events/ A practical walkthrough of LLM-proposed, deterministically-executed remediation using Argo Events and Argo Workflows on Kubernetes 1.32. https://muhammadamal.my.id/blog/aiops-in-may-2025-what-actually-works-in-production/ Mon, 05 May 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/aiops-in-may-2025-what-actually-works-in-production/ Field notes on AIOps in production, what to adopt, what to defer, and where LLMs earn their keep on the platform team. https://muhammadamal.my.id/blog/observability-edge-fleets-at-scale-patterns-that-work/ Wed, 30 Apr 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/observability-edge-fleets-at-scale-patterns-that-work/ Production observability for edge fleets. OpenTelemetry Collector at the edge, local aggregation, smart sampling, and alerts that survive WAN outages. https://muhammadamal.my.id/blog/deploying-models-tflite-micro-constrained-devices/ Mon, 28 Apr 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/deploying-models-tflite-micro-constrained-devices/ Deploy real models on microcontrollers with TFLite Micro. Conversion, quantization, arena sizing, custom ops, and a working keyword-spotter on a Cortex-M4. https://muhammadamal.my.id/blog/bridging-opc-ua-modbus-mqtt-go-step-by-step/ Wed, 23 Apr 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/bridging-opc-ua-modbus-mqtt-go-step-by-step/ A Go bridge from OPC UA and Modbus to MQTT 5. Subscriptions, polling, normalization, security, and the gotchas that come with legacy PLCs. https://muhammadamal.my.id/blog/streaming-inference-pipelines-kafka-go-production-walkthrough/ Mon, 21 Apr 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/streaming-inference-pipelines-kafka-go-production-walkthrough/ Production streaming inference with Kafka 3.9 and Go 1.24. Partitioning strategies, exactly-once, dynamic batching for GPU inference, and DLQs you can replay. https://muhammadamal.my.id/blog/onnx-runtime-edge-devices-comprehensive-tutorial/ Wed, 16 Apr 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/onnx-runtime-edge-devices-comprehensive-tutorial/ Practical ONNX Runtime 1.20 on edge devices. Execution providers, quantization, threading, memory arenas, and a benchmark harness in Go and Python. https://muhammadamal.my.id/blog/advanced-mqtt-clustering-emqx-5-8-production-guide/ Mon, 14 Apr 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/advanced-mqtt-clustering-emqx-5-8-production-guide/ Clustering EMQX 5.8 in production. Mria architecture, persistent sessions, shared subscriptions, and rolling upgrades without dropping clients. https://muhammadamal.my.id/blog/real-time-telemetry-processing-go-1-24-tutorial/ Wed, 09 Apr 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/real-time-telemetry-processing-go-1-24-tutorial/ A practical Go 1.24 telemetry pipeline. Channels with backpressure, the new map internals, generic ring buffers, and a sliding window aggregator that holds up under load. https://muhammadamal.my.id/blog/edge-ai-hardware-april-2025-jetson-coral-raspberry-pi-5-ai-hat/ Mon, 07 Apr 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/edge-ai-hardware-april-2025-jetson-coral-raspberry-pi-5-ai-hat/ What edge AI hardware looks like in April 2025. Jetson Orin Nano Super, Coral Edge TPU, Raspberry Pi 5 AI Hat. Picking, provisioning, and benchmarking each one. https://muhammadamal.my.id/blog/observability-for-multi-agent-systems-langsmith-and-phoenix-in-2025/ Wed, 26 Mar 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/observability-for-multi-agent-systems-langsmith-and-phoenix-in-2025/ Hands-on observability for multi-agent systems with LangSmith, Phoenix, OpenTelemetry, plus what to alert on and what to ignore. https://muhammadamal.my.id/blog/long-running-autonomous-agent-workflows-checkpoints-and-retries/ Mon, 24 Mar 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/long-running-autonomous-agent-workflows-checkpoints-and-retries/ Patterns and runnable code for long-running agent workflows, durable checkpoints, idempotent retries, deadlines, and circuit breakers. https://muhammadamal.my.id/blog/agent-to-agent-communication-protocols-choosing-the-right-one/ Wed, 19 Mar 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/agent-to-agent-communication-protocols-choosing-the-right-one/ A senior engineer’s guide to picking an agent-to-agent communication protocol, with shared state, typed actors, MCP, brokers, and HTTP compared. https://muhammadamal.my.id/blog/model-context-protocol-explained-building-mcp-servers-in-2025/ Mon, 17 Mar 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/model-context-protocol-explained-building-mcp-servers-in-2025/ Hands-on guide to the Model Context Protocol from Anthropic, building a Python MCP server with tools, resources, and prompts, and integrating it. https://muhammadamal.my.id/blog/autogen-0-4-deep-dive-what-changed-and-how-to-use-it/ Wed, 12 Mar 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/autogen-0-4-deep-dive-what-changed-and-how-to-use-it/ What changed in the AutoGen 0.4 rewrite, the new actor model, AgentChat patterns, async runtime, and the migration moves from 0.2. https://muhammadamal.my.id/blog/role-based-agent-teams-with-crewai-a-production-walkthrough/ Mon, 10 Mar 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/role-based-agent-teams-with-crewai-a-production-walkthrough/ Build a research-and-writing crew with CrewAI 0.86, including custom tools, hierarchical mode, memory configuration, and what to skip. https://muhammadamal.my.id/blog/production-multi-agent-systems-with-langgraph-0-2-a-hands-on-tutorial/ Wed, 05 Mar 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/production-multi-agent-systems-with-langgraph-0-2-a-hands-on-tutorial/ Hands-on LangGraph 0.2 tutorial covering Postgres checkpointers, retries, interrupts, streaming, and the gotchas that bite when you ship. https://muhammadamal.my.id/blog/multi-agent-systems-in-2025-architecture-patterns-that-work/ Mon, 03 Mar 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/multi-agent-systems-in-2025-architecture-patterns-that-work/ Practical patterns for multi-agent systems in 2025 with runnable LangGraph and CrewAI snippets, plus the gotchas that bite teams in production. https://muhammadamal.my.id/blog/running-wasm-at-the-edge-cloudflare-workers-fastly-compute/ Wed, 26 Feb 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/running-wasm-at-the-edge-cloudflare-workers-fastly-compute/ Deploy real Wasm services at the edge, Cloudflare Workers and Fastly Compute compared with Rust examples, KV usage, and operational notes. https://muhammadamal.my.id/blog/wasm-component-model-in-production-practical-walkthrough/ Mon, 24 Feb 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/wasm-component-model-in-production-practical-walkthrough/ Production patterns for the Wasm component model, WIT contracts, composition with wasm-tools compose, versioning, and operational lessons learned. https://muhammadamal.my.id/blog/distributed-wasm-apps-with-wasmcloud-production-tutorial/ Wed, 19 Feb 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/distributed-wasm-apps-with-wasmcloud-production-tutorial/ Ship a distributed Wasm app with wasmCloud 1.4, including components, capability providers, links, and the NATS lattice. https://muhammadamal.my.id/blog/wasm-vs-docker-where-lightweight-container-story-holds-up/ Mon, 17 Feb 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/wasm-vs-docker-where-lightweight-container-story-holds-up/ Where Wasm beats Docker and where it doesn’t, with cold-start numbers, density math, and a decision framework grounded in real workloads. https://muhammadamal.my.id/blog/building-wasm-microservices-with-spin-hello-world-to-production/ Wed, 12 Feb 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/building-wasm-microservices-with-spin-hello-world-to-production/ Build, test, and deploy a real HTTP microservice with Spin 3.1, covering routing, persistence, secrets, and production deployment. https://muhammadamal.my.id/blog/embedding-wasmtime-in-a-rust-host-hands-on-guide/ Mon, 10 Feb 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/embedding-wasmtime-in-a-rust-host-hands-on-guide/ A practical embedding tutorial for wasmtime 28, with resource limits, fuel-based metering, async, and clean shutdown patterns. https://muhammadamal.my.id/blog/compiling-rust-to-wasm-with-cargo-component-step-by-step-tutorial/ Wed, 05 Feb 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/compiling-rust-to-wasm-with-cargo-component-step-by-step-tutorial/ Build a real WASI 0.2 component from scratch with cargo-component 0.18, WIT bindings, and a wasmtime host that calls it. https://muhammadamal.my.id/blog/server-side-webassembly-february-2025-practical-survey/ Mon, 03 Feb 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/server-side-webassembly-february-2025-practical-survey/ Where server-side Wasm actually stands in early 2025, runtimes compared, WASI 0.2 caveats, and the workloads where it pays off. https://muhammadamal.my.id/blog/benchmarking-slms-for-your-use-case-lmeval-to-custom/ Wed, 29 Jan 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/benchmarking-slms-for-your-use-case-lmeval-to-custom/ Public leaderboards lie about your task. Build a benchmark that measures what your users actually need. https://muhammadamal.my.id/blog/local-rag-with-slms-private-knowledge-without-cloud/ Mon, 27 Jan 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/local-rag-with-slms-private-knowledge-without-cloud/ End-to-end local RAG, no cloud. Embeddings, vectors, retrieval, and grounded generation on a single box. https://muhammadamal.my.id/blog/structured-output-and-function-calling-on-local-slms/ Wed, 22 Jan 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/structured-output-and-function-calling-on-local-slms/ Get production-grade JSON and tool calls out of 3B models. Constrained decoding, schemas, and what actually works. https://muhammadamal.my.id/blog/fine-tuning-slms-with-lora-and-qlora-hands-on/ Mon, 20 Jan 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/fine-tuning-slms-with-lora-and-qlora-hands-on/ When prompting plateaus, LoRA and QLoRA take you the next mile. A real fine-tuning walkthrough on consumer GPUs. https://muhammadamal.my.id/blog/serving-slms-at-scale-with-vllm-production-guide/ Wed, 15 Jan 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/serving-slms-at-scale-with-vllm-production-guide/ When Ollama and llama.cpp stop scaling, vLLM is what you reach for. PagedAttention, batching, and the real tradeoffs. https://muhammadamal.my.id/blog/llama-cpp-deep-dive-quantization-gguf-inference-speed/ Mon, 13 Jan 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/llama-cpp-deep-dive-quantization-gguf-inference-speed/ Where Ollama ends, llama.cpp begins. Quantization, GGUF, KV cache, and squeezing tokens per second. https://muhammadamal.my.id/blog/running-slms-locally-with-ollama-step-by-step/ Wed, 08 Jan 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/running-slms-locally-with-ollama-step-by-step/ Everything I do to ship a local SLM behind Ollama 0.5, from install to a real production endpoint. https://muhammadamal.my.id/blog/slm-landscape-january-2025-practical-survey/ Mon, 06 Jan 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/slm-landscape-january-2025-practical-survey/ Where the small language model landscape actually stands in January 2025, from a backend engineer’s bench. https://muhammadamal.my.id/blog/lessons-from-year-rust-postgres-ai-agents/ Fri, 20 Dec 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/lessons-from-year-rust-postgres-ai-agents/ The combination that defined my 2024. What I learned about each, what I learned about their intersection, and what I would do differently. https://muhammadamal.my.id/blog/predictions-2025-platform-engineering-agentic-ai/ Wed, 18 Dec 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/predictions-2025-platform-engineering-agentic-ai/ Twelve calls on platform engineering and agentic AI for 2025. Specific enough to be wrong. Pinned to December 2024 context. https://muhammadamal.my.id/blog/2024-wrap-up-agentic-era-backend-engineers/ Mon, 16 Dec 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/2024-wrap-up-agentic-era-backend-engineers/ Looking back at a year where agents moved from demo to production. What actually shipped, what stayed brittle, and what the next year demands of backend engineers. https://muhammadamal.my.id/blog/roadmaps-that-survive-contact-with-reality/ Fri, 13 Dec 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/roadmaps-that-survive-contact-with-reality/ Most roadmaps die at first contact with the actual quarter. Here is how I build the kind that does not. https://muhammadamal.my.id/blog/cost-justifying-platform-investments-cfo-friendly-pitch/ Wed, 11 Dec 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/cost-justifying-platform-investments-cfo-friendly-pitch/ Platform investments live or die on the business case. Here is how to write one that survives the finance review. https://muhammadamal.my.id/blog/communicating-tradeoffs-non-engineers-without-dumbing-down/ Mon, 09 Dec 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/communicating-tradeoffs-non-engineers-without-dumbing-down/ Translating tradeoffs is a senior skill. The trick is to compress without distorting, and to let the listener make the choice. https://muhammadamal.my.id/blog/reading-the-room-politics-technical-decisions/ Fri, 06 Dec 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/reading-the-room-politics-technical-decisions/ Politics is a constraint, not a smell. Senior engineers who learn to read the room get to ship what they design. https://muhammadamal.my.id/blog/translating-business-impact-architecture-decisions/ Wed, 04 Dec 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/translating-business-impact-architecture-decisions/ Architecture decisions are business decisions in disguise. Here is how to write ADRs that hold up when the budget conversation arrives. https://muhammadamal.my.id/blog/consultative-discovery-engineering-leaders-playbook/ Mon, 02 Dec 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/consultative-discovery-engineering-leaders-playbook/ Discovery is a senior engineering skill, not a sales ritual. Here is the playbook I use to get to the real problem before architecture starts. https://muhammadamal.my.id/blog/zero-downtime-postgres-migrations-in-2024/ Fri, 22 Nov 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/zero-downtime-postgres-migrations-in-2024/ A field guide to running zero downtime schema migrations against Postgres 17, with expand-contract, backfill batching, and lock-aware DDL. https://muhammadamal.my.id/blog/vacuum-and-bloat-management-for-busy-postgres-tables/ Wed, 20 Nov 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/vacuum-and-bloat-management-for-busy-postgres-tables/ Practical vacuum tuning for write-heavy Postgres 17 workloads, with autovacuum parameters, bloat detection queries, and pg_repack guidance. https://muhammadamal.my.id/blog/native-postgres-partitioning-patterns-that-hold-at-scale/ Mon, 18 Nov 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/native-postgres-partitioning-patterns-that-hold-at-scale/ Field-tested patterns for native Postgres partitioning in 17, with sizing rules, partition pruning, foreign keys, and the gotchas you only learn at scale. https://muhammadamal.my.id/blog/logical-replication-for-blue-green-postgres-deploys/ Fri, 15 Nov 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/logical-replication-for-blue-green-postgres-deploys/ End-to-end blue green Postgres cutover using logical replication on 17, with the cutover runbook, slot sync, and the failure modes. https://muhammadamal.my.id/blog/pgvector-tuning-in-2024-hnsw-and-ivfflat-in-production/ Wed, 13 Nov 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/pgvector-tuning-in-2024-hnsw-and-ivfflat-in-production/ How to size and tune pgvector 0.7.4 indexes in production, with concrete parameters, recall benchmarks, and the failure modes nobody mentions. https://muhammadamal.my.id/blog/choosing-the-right-postgres-index-brin-gin-hnsw-ivfflat/ Mon, 11 Nov 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/choosing-the-right-postgres-index-brin-gin-hnsw-ivfflat/ When to reach for BRIN, GIN, GiST, BTREE, HNSW or IVFFlat in Postgres 17, with realistic sizing and a flowchart-style decision tree. https://muhammadamal.my.id/blog/reading-explain-analyze-like-a-senior-dba/ Fri, 08 Nov 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/reading-explain-analyze-like-a-senior-dba/ A senior DBA’s reading order for EXPLAIN ANALYZE output in Postgres 17, with real plans, estimation skew detection, and BUFFERS interpretation. https://muhammadamal.my.id/blog/connection-pooling-with-pgbouncer-setup-that-survives-10k-clients/ Wed, 06 Nov 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/connection-pooling-with-pgbouncer-setup-that-survives-10k-clients/ Hands-on guide to running PgBouncer 1.23 in front of Postgres 17 at 10k+ client connections, with config, ops, and the gotchas. https://muhammadamal.my.id/blog/postgres-17-in-production-features-worth-using/ Mon, 04 Nov 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/postgres-17-in-production-features-worth-using/ Practical look at the Postgres 17 features that move the needle for production workloads, with real psql snippets and upgrade notes. https://muhammadamal.my.id/blog/llm-red-teaming-practical-techniques-2024/ Wed, 30 Oct 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/llm-red-teaming-practical-techniques-2024/ How to run an LLM red team that produces actionable findings instead of party tricks, with attack inventory and triage flow. https://muhammadamal.my.id/blog/container-image-signing-cosign-sigstore-2024/ Mon, 28 Oct 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/container-image-signing-cosign-sigstore-2024/ A working guide to signing container images with cosign and Sigstore, including keyless signing and Kubernetes admission enforcement. https://muhammadamal.my.id/blog/securing-rag-systems-against-data-exfiltration/ Wed, 23 Oct 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/securing-rag-systems-against-data-exfiltration/ How to design RAG systems so that prompt injection and over-eager retrieval don’t become an exfiltration channel. https://muhammadamal.my.id/blog/sast-semgrep-ai-triage-real-codebases/ Mon, 21 Oct 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/sast-semgrep-ai-triage-real-codebases/ Combining Semgrep with LLM triage to make SAST output actionable on production-sized codebases. https://muhammadamal.my.id/blog/secrets-scanning-trufflehog-gitleaks-ci-2024/ Wed, 16 Oct 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/secrets-scanning-trufflehog-gitleaks-ci-2024/ A working setup for secrets scanning across TruffleHog and Gitleaks, with pre-receive enforcement and verifier-based prioritization. https://muhammadamal.my.id/blog/auto-remediation-cloud-security-findings/ Mon, 14 Oct 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/auto-remediation-cloud-security-findings/ A pragmatic blueprint for safe auto remediation of cloud security findings across AWS Security Hub and GCP SCC. https://muhammadamal.my.id/blog/ai-assisted-detection-rules-sigma-yara-2024/ Wed, 09 Oct 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/ai-assisted-detection-rules-sigma-yara-2024/ A pragmatic look at LLM-assisted authoring of Sigma and YARA detections, including evaluation harnesses and review gates. https://muhammadamal.my.id/blog/prompt-injection-defenses-llm-apps-2024/ Mon, 07 Oct 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/prompt-injection-defenses-llm-apps-2024/ Hardening patterns for prompt injection across system prompts, tools, and retrieval, with code and policy guidance. https://muhammadamal.my.id/blog/auditing-low-code-workflows-soc2-iso27001/ Wed, 25 Sep 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/auditing-low-code-workflows-soc2-iso27001/ Auditing low-code workflows for SOC 2 and ISO 27001. Control mapping for n8n and Make, evidence collection, and what auditors actually want to see. https://muhammadamal.my.id/blog/when-pro-code-wins-over-low-code-decision-matrix/ Mon, 23 Sep 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/when-pro-code-wins-over-low-code-decision-matrix/ When pro-code beats low-code. A decision matrix on latency, consistency, complexity, audit, and ownership, with concrete thresholds for 2024. https://muhammadamal.my.id/blog/identity-federation-citizen-developers-keycloak-auth0/ Wed, 18 Sep 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/identity-federation-citizen-developers-keycloak-auth0/ Identity federation for low-code platforms. Keycloak 25 and Auth0 in front of n8n and Make, with SAML, OIDC, group claims, and operational notes. https://muhammadamal.my.id/blog/reusable-connectors-n8n-make-2024/ Mon, 16 Sep 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/reusable-connectors-n8n-make-2024/ Reusable connectors for n8n and Make in 2024. Custom node code, OAuth scaffolding, dynamic options, and how to ship them to citizen devs without operational pain. https://muhammadamal.my.id/blog/webhook-reliability-patterns-retries-idempotency-signatures/ Wed, 11 Sep 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/webhook-reliability-patterns-retries-idempotency-signatures/ Outbound webhook reliability done right. Retries with jitter, idempotency keys, HMAC-SHA256 signing, and a Go 1.23 reference implementation. https://muhammadamal.my.id/blog/securely-exposing-enterprise-apis-citizen-developers/ Mon, 09 Sep 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/securely-exposing-enterprise-apis-citizen-developers/ Exposing internal APIs to citizen devs safely. Kong 3.8 patterns, scoped tokens, rate limits, audit, and the bits that actually fail in practice. https://muhammadamal.my.id/blog/self-hosting-n8n-engineering-teams-2024/ Wed, 04 Sep 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/self-hosting-n8n-engineering-teams-2024/ How to self-host n8n 1.58 properly. Postgres, queue mode, workers, secrets, upgrades, and the real operational footprint. https://muhammadamal.my.id/blog/low-code-enterprise-pro-code-view/ Mon, 02 Sep 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/low-code-enterprise-pro-code-view/ Low-code in the enterprise from a pro-code engineer. What n8n and Make are good for, what they break, and how to engage as a backend team. https://muhammadamal.my.id/blog/digital-twins-real-telemetry/ Fri, 23 Aug 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/digital-twins-real-telemetry/ Digital twins built on real telemetry, with state models, sync patterns and worthwhile use cases. https://muhammadamal.my.id/blog/securing-ot-it-boundary/ Wed, 21 Aug 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/securing-ot-it-boundary/ Practical OT/IT boundary security in 2024, with segmentation, auth and monitoring. https://muhammadamal.my.id/blog/realtime-anomaly-detection-iiot/ Mon, 19 Aug 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/realtime-anomaly-detection-iiot/ Real-time anomaly detection for industrial telemetry, practical approaches and alert hygiene. https://muhammadamal.my.id/blog/opcua-mqtt-kafka-bridging/ Fri, 16 Aug 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/opcua-mqtt-kafka-bridging/ Bridging OPC UA into MQTT and Kafka with open62541 1.4 and clean schemas. https://muhammadamal.my.id/blog/timeseries-timescale-influx-compared/ Wed, 14 Aug 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/timeseries-timescale-influx-compared/ TimescaleDB 2.16 versus InfluxDB 3.x for industrial telemetry, with the trade-offs that decide it. https://muhammadamal.my.id/blog/edge-ai-tflite-onnx-2024/ Mon, 12 Aug 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/edge-ai-tflite-onnx-2024/ Running ML on industrial gateways with TFLite 2.16 and ONNX Runtime 1.18 in 2024. https://muhammadamal.my.id/blog/scaling-mqtt-emqx-hivemq/ Fri, 09 Aug 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/scaling-mqtt-emqx-hivemq/ Scaling EMQX 5.7 and HiveMQ 4.28 for industrial workloads, with concrete tuning. https://muhammadamal.my.id/blog/mqtt5-industrial-features/ Wed, 07 Aug 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/mqtt5-industrial-features/ The MQTT 5 features worth using in industrial, and the ones that aren’t. https://muhammadamal.my.id/blog/iiot-reference-architecture-2024/ Mon, 05 Aug 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/iiot-reference-architecture-2024/ Reference IIoT architecture for 2024, edge to analytics, with the trade-offs that matter. https://muhammadamal.my.id/blog/mtls-service-mesh-or-application-layer/ Wed, 24 Jul 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/mtls-service-mesh-or-application-layer/ Choosing between mesh-terminated and application-terminated mTLS in 2024, with Envoy 1.30 and Go 1.22 implementations and the failure modes that decide it. https://muhammadamal.my.id/blog/openapi-first-go-oapi-codegen/ Mon, 22 Jul 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/openapi-first-go-oapi-codegen/ How I run an OpenAPI-first workflow with oapi-codegen 2.x in Go 1.22, including schema patterns and CI discipline that keeps spec and code aligned. https://muhammadamal.my.id/blog/rate-limiting-redis-token-bucket-sliding-window/ Wed, 17 Jul 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/rate-limiting-redis-token-bucket-sliding-window/ Token bucket vs sliding window rate limiting in Redis, with Go code, Lua scripts, and the operational tradeoffs that decide which one to ship. https://muhammadamal.my.id/blog/choosing-api-gateway-2024/ Mon, 15 Jul 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/choosing-api-gateway-2024/ Comparing Kong 3.7, Tyk, and Envoy Gateway in 2024 by the operational tradeoffs that actually decide gateway choice in production. https://muhammadamal.my.id/blog/securing-go-microservices-jwt/ Wed, 10 Jul 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/securing-go-microservices-jwt/ Production JWT patterns for Go microservices in 2024 using golang-jwt v5, covering signing, validation, and context plumbing. https://muhammadamal.my.id/blog/grpc-internal-services-go-buf/ Mon, 08 Jul 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/grpc-internal-services-go-buf/ How I wire up gRPC for internal Go services in 2024 with buf CLI 1.34, lint rules, and breaking change detection. https://muhammadamal.my.id/blog/federated-graphql-apollo-router/ Wed, 03 Jul 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/federated-graphql-apollo-router/ Federated GraphQL patterns I rely on with Apollo Router 1.48 in 2024, drawn from real subgraph deployments. https://muhammadamal.my.id/blog/graphql-vs-rest-2024/ Mon, 01 Jul 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/graphql-vs-rest-2024/ An opinionated comparison of GraphQL and REST in 2024, drawn from production Go services, not benchmarks. https://muhammadamal.my.id/blog/synthetic-monitoring-and-canary-deploys/ Wed, 26 Jun 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/synthetic-monitoring-and-canary-deploys/ Canaries catch regressions. Synthetics catch silent failures. Wire them together and you get progressive delivery that knows when to roll back without a human. https://muhammadamal.my.id/blog/blameless-postmortems-that-actually-change-behavior/ Mon, 24 Jun 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/blameless-postmortems-that-actually-change-behavior/ Blameless doesn’t mean toothless. A postmortem template, the five questions that matter, and the followup ritual that closes the loop. https://muhammadamal.my.id/blog/service-mesh-resilience-istio-ambient-vs-linkerd-2024/ Wed, 19 Jun 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/service-mesh-resilience-istio-ambient-vs-linkerd-2024/ Istio Ambient just hit GA. Linkerd 2.15 is still the simplicity champion. Here’s how they compare for the resilience patterns that actually matter. https://muhammadamal.my.id/blog/ebpf-plus-opentelemetry-observability-2024/ Mon, 17 Jun 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/ebpf-plus-opentelemetry-observability-2024/ eBPF gives you kernel-truth signals without instrumenting code. OpenTelemetry gives you a vendor-neutral pipeline. Together they’re the cheapest observability you can stand up in 2024. https://muhammadamal.my.id/blog/auto-remediation-kubernetes-argo-events-policy/ Wed, 12 Jun 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/auto-remediation-kubernetes-argo-events-policy/ Auto-remediation is high-leverage and high-risk. Argo Events plus Kyverno gives you declarative remediation. Here’s the pattern and the guardrails it needs. https://muhammadamal.my.id/blog/chaos-engineering-kubernetes-litmus-chaos-mesh-2024/ Mon, 10 Jun 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/chaos-engineering-kubernetes-litmus-chaos-mesh-2024/ Litmus and Chaos Mesh have both matured. Here’s how to pick between them, the experiments worth running first, and the safety scaffolding nobody talks about. https://muhammadamal.my.id/blog/slos-error-budgets-engineers-actually-use/ Wed, 05 Jun 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/slos-error-budgets-engineers-actually-use/ SLOs are easy to write and hard to use. Here’s how to build budgets your team will reach for during incidents and planning, not just QBRs. https://muhammadamal.my.id/blog/digital-immune-systems-for-engineers/ Mon, 03 Jun 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/digital-immune-systems-for-engineers/ Cutting through the analyst gloss on Digital Immune Systems. Six concrete pillars, the ones worth your time, and the ones that are just rebrands. https://muhammadamal.my.id/blog/evaluating-llm-agents/ Fri, 24 May 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/evaluating-llm-agents/ A practical agent evaluation system with deterministic checks, LLM-as-judge rubrics, and the regression discipline that survives model upgrades. https://muhammadamal.my.id/blog/cost-control-for-llm-agents/ Wed, 22 May 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/cost-control-for-llm-agents/ How to keep agent bills under control with hard budgets, per-step caps, model routing, and the prompt caching feature Anthropic just shipped. https://muhammadamal.my.id/blog/guardrails-for-llm-agents-2024/ Mon, 20 May 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/guardrails-for-llm-agents-2024/ Where Llama Guard, Rebuff, and NeMo each earn their place in an agent guardrail stack, and the layered approach that keeps the false positive rate bearable. https://muhammadamal.my.id/blog/memory-for-ai-agents/ Fri, 17 May 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/memory-for-ai-agents/ How to give agents memory without overstuffing the context window or building a vector database mausoleum, with concrete patterns and code. https://muhammadamal.my.id/blog/react-reflexion-planner-executor-agent-loops/ Wed, 15 May 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/react-reflexion-planner-executor-agent-loops/ Three agent loop patterns, when each is the right shape, and the code to build them with LangChain 0.1 and OpenAI’s function calling. https://muhammadamal.my.id/blog/multi-agent-conversations-with-autogen/ Mon, 13 May 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/multi-agent-conversations-with-autogen/ When AutoGen’s multi-agent model earns its keep, when it does not, and the patterns that prevent infinite loops and budget blowups. https://muhammadamal.my.id/blog/designing-tools-for-llm-agents/ Fri, 10 May 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/designing-tools-for-llm-agents/ The tool layer is where most agents quietly fail. This is the schema, validation, and error-design playbook that keeps yours working. https://muhammadamal.my.id/blog/production-agents-langgraph-state-machines/ Wed, 08 May 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/production-agents-langgraph-state-machines/ A practical walkthrough of building agents that survive production with LangGraph state machines, checkpointing, and explicit edges. https://muhammadamal.my.id/blog/agentic-ai-landscape-may-2024/ Mon, 06 May 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/agentic-ai-landscape-may-2024/ Comparing the three agent frameworks that matter right now, with code, and the architectural decisions that follow from each. https://muhammadamal.my.id/blog/from-vs-code-to-neovim-in-30-days-a-senior-devs-migration-plan/ Wed, 24 Apr 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/from-vs-code-to-neovim-in-30-days-a-senior-devs-migration-plan/ A pragmatic 30-day plan for migrating from VS Code to Neovim as a senior developer. https://muhammadamal.my.id/blog/ai-assist-in-neovim-copilot-codeium-and-chatgpt-in-2024/ Mon, 22 Apr 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/ai-assist-in-neovim-copilot-codeium-and-chatgpt-in-2024/ How Copilot, Codeium, and ChatGPT integrations stack up in Neovim in 2024. https://muhammadamal.my.id/blog/debugging-in-neovim-with-nvim-dap-go-and-python-in-2024/ Wed, 17 Apr 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/debugging-in-neovim-with-nvim-dap-go-and-python-in-2024/ Configure nvim-dap for real debugging in Go and Python projects from Neovim. https://muhammadamal.my.id/blog/tmux-and-neovim-together-a-keyboard-only-workflow-that-sticks/ Mon, 15 Apr 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/tmux-and-neovim-together-a-keyboard-only-workflow-that-sticks/ A keyboard-only workflow combining tmux and Neovim for backend development. https://muhammadamal.my.id/blog/treesitter-for-real-refactoring-structural-edits-in-neovim/ Wed, 10 Apr 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/treesitter-for-real-refactoring-structural-edits-in-neovim/ How to use Treesitter for real structural refactoring in Neovim. https://muhammadamal.my.id/blog/fast-code-navigation-in-neovim-telescope-and-fzf-lua-patterns/ Mon, 08 Apr 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/fast-code-navigation-in-neovim-telescope-and-fzf-lua-patterns/ Practical navigation workflows in Neovim using telescope.nvim and fzf-lua. https://muhammadamal.my.id/blog/bootstrapping-neovim-with-lazy-nvim-and-mason-a-backend-dev-setup/ Wed, 03 Apr 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/bootstrapping-neovim-with-lazy-nvim-and-mason-a-backend-dev-setup/ How to bootstrap Neovim with lazy.nvim and Mason for backend development in 2024. https://muhammadamal.my.id/blog/why-senior-developers-are-moving-to-neovim-in-2024/ Mon, 01 Apr 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/why-senior-developers-are-moving-to-neovim-in-2024/ The technical and ergonomic reasons Neovim is winning over senior developers in 2024. https://muhammadamal.my.id/blog/shipping-rust-kubernetes-distroless-docker-2024/ Wed, 27 Mar 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/shipping-rust-kubernetes-distroless-docker-2024/ Production guide to shipping Rust to Kubernetes with multi-stage Docker, distroless images, and cross-compilation. https://muhammadamal.my.id/blog/rust-service-observability-metrics-logs-traces-2024/ Mon, 25 Mar 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/rust-service-observability-metrics-logs-traces-2024/ Production observability for Rust services with the metrics crate, Prometheus, tracing, and OpenTelemetry. https://muhammadamal.my.id/blog/rust-shared-state-arc-mutex-channels-2024/ Wed, 20 Mar 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/rust-shared-state-arc-mutex-channels-2024/ Practical guide to Arc, Mutex, RwLock, and channel choices for safe shared state in async and threaded Rust. https://muhammadamal.my.id/blog/rust-webassembly-edge-wasmtime-wasi-2024/ Mon, 18 Mar 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/rust-webassembly-edge-wasmtime-wasi-2024/ Compile Rust to WebAssembly for edge runtimes with wasmtime 18, WASI Preview 2, and the component model. https://muhammadamal.my.id/blog/embedded-rust-embassy-no-std-2024/ Wed, 13 Mar 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/embedded-rust-embassy-no-std-2024/ Practical guide to embedded Rust in 2024 with embassy 0.5, no_std, and async on Cortex-M and ESP32 hardware. https://muhammadamal.my.id/blog/axum-http-service-tracing-2024/ Mon, 11 Mar 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/axum-http-service-tracing-2024/ Axum 0.7 end-to-end. Extractors, error types, middleware layers, OpenTelemetry tracing. The setup that pays off by week two. https://muhammadamal.my.id/blog/async-rust-tokio-patterns-2024/ Wed, 06 Mar 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/async-rust-tokio-patterns-2024/ Async Tokio patterns that survive prod. Cancellation, JoinSet, select, bounded channels. The footguns and how to dodge them. https://muhammadamal.my.id/blog/rust-production-2024-stack/ Mon, 04 Mar 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/rust-production-2024-stack/ Rust in production 2024 — what’s mature, what still bites. Async runtimes, frameworks, observability, deploy. Honest survey for backend devs. https://muhammadamal.my.id/blog/argo-cd-applicationsets-self-service/ Mon, 29 Jan 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/argo-cd-applicationsets-self-service/ Argo CD ApplicationSets turn self-service GitOps real. Generators, multi-cluster fan-out, and the patterns that scale past 200 services. https://muhammadamal.my.id/blog/score-workload-spec-platform/ Wed, 24 Jan 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/score-workload-spec-platform/ Score decouples app spec from deploy target. Same workload runs on K8s, ECS, or Nomad. What it actually buys you, where it falls short. https://muhammadamal.my.id/blog/developer-experience-metrics-dora-2024/ Mon, 22 Jan 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/developer-experience-metrics-dora-2024/ DX metrics that survive a year. DORA, SPACE, and the practical instrumentation for a platform team in 2024 without surveillance optics. https://muhammadamal.my.id/blog/service-catalog-backstage-design/ Wed, 17 Jan 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/service-catalog-backstage-design/ A Backstage service catalog that survives. Entity model, ownership, automation, and the rot patterns that kill it within a year. https://muhammadamal.my.id/blog/crossplane-vs-terraform-platform-teams/ Mon, 15 Jan 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/crossplane-vs-terraform-platform-teams/ Crossplane v1.14 vs Terraform 1.6 for platform teams. Honest trade-offs, drift handling, where each one belongs in your IDP. https://muhammadamal.my.id/blog/golden-paths-self-service-developer-experience/ Wed, 10 Jan 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/golden-paths-self-service-developer-experience/ Golden paths beat shelfware when they’re opinionated, versioned, and updateable. How to design templates devs don’t abandon at day 30. https://muhammadamal.my.id/blog/internal-developer-platform-backstage-kubernetes/ Mon, 08 Jan 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/internal-developer-platform-backstage-kubernetes/ Minimum viable IDP on Backstage 1.21 + K8s 1.29. Catalog model, scaffolder, what to ship in 90 days, what to defer. https://muhammadamal.my.id/blog/platform-engineering-vs-devops-2024/ Wed, 03 Jan 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/platform-engineering-vs-devops-2024/ Platform engineering replaced DevOps-for-everyone in 2024. What changed, what an IDP delivers, and why cognitive load is the real metric. https://muhammadamal.my.id/blog/2023-year-end-retrospective/ Thu, 28 Dec 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/2023-year-end-retrospective/ Twelve months of leadership and team work, written honestly. Wins, misses, and what I’m taking into 2024. https://muhammadamal.my.id/blog/2023-llm-tooling-retrospective/ Wed, 27 Dec 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/2023-llm-tooling-retrospective/ Which 2023 LLM tools actually earned their place in a senior engineer’s daily workflow, and which got dropped. https://muhammadamal.my.id/blog/event-storming-for-discovery/ Fri, 22 Dec 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/event-storming-for-discovery/ Event storming is the fastest way to map a complex business domain. A practical guide to running your first session. https://muhammadamal.my.id/blog/decision-logs-and-async-leadership/ Wed, 20 Dec 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/decision-logs-and-async-leadership/ Distributed teams fail when leaders lead synchronously. Decision logs and async habits that make it work. https://muhammadamal.my.id/blog/rfcs-and-adrs-as-leadership-tools/ Mon, 18 Dec 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/rfcs-and-adrs-as-leadership-tools/ RFCs and ADRs are leverage, not process. Templates and the cultural moves that make them stick. https://muhammadamal.my.id/blog/managing-multidisciplinary-teams/ Wed, 13 Dec 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/managing-multidisciplinary-teams/ Cross-functional friction is usually about team structure, not personalities. A field guide to fixing the topology. https://muhammadamal.my.id/blog/discovery-questionnaires-and-the-mom-test/ Mon, 11 Dec 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/discovery-questionnaires-and-the-mom-test/ Specific question patterns for discovery, borrowed from the Mom Test and refined across many projects. https://muhammadamal.my.id/blog/consultative-discovery-for-software-projects/ Wed, 06 Dec 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/consultative-discovery-for-software-projects/ Stated requirements are almost never the real requirements. A framework for running discovery sessions that surface the actual problem. https://muhammadamal.my.id/blog/from-senior-engineer-to-tech-lead/ Mon, 04 Dec 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/from-senior-engineer-to-tech-lead/ The hardest part of becoming a tech lead isn’t the new responsibilities — it’s letting go of the identity that got you the role. https://muhammadamal.my.id/blog/repository-pattern-done-right-php-and-go/ Thu, 26 Oct 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/repository-pattern-done-right-php-and-go/ The repository pattern, demystified. When to use it, when not to, and the specific mistakes I made over ten years. Real examples in PHP 8.2 and Go 1.21. https://muhammadamal.my.id/blog/decoupling-laravel-from-eloquent-without-fighting-the-framework/ Mon, 23 Oct 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/decoupling-laravel-from-eloquent-without-fighting-the-framework/ How to decouple application code from Eloquent in Laravel 10 without ditching it. Mapping patterns, transaction boundaries, and the case for keeping Eloquent. https://muhammadamal.my.id/blog/dependency-injection-laravel-container-patterns/ Thu, 19 Oct 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/dependency-injection-laravel-container-patterns/ Practical Laravel 10 service container patterns: contextual bindings, scoped instances, and tagged services. With production examples and anti-patterns. https://muhammadamal.my.id/blog/domain-layer-purity-in-laravel-10/ Mon, 16 Oct 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/domain-layer-purity-in-laravel-10/ Building a real domain layer in Laravel 10 without Eloquent leaking through. Entities, value objects, and the discipline to keep them framework-free. https://muhammadamal.my.id/blog/ports-and-adapters-in-go-with-wire-and-fx/ Thu, 12 Oct 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/ports-and-adapters-in-go-with-wire-and-fx/ Hexagonal architecture in idiomatic Go 1.21. When to use Wire, when to use fx, and when to just write the wiring by hand. With production-tested patterns. https://muhammadamal.my.id/blog/hexagonal-architecture-explained-for-php-and-go-devs/ Mon, 09 Oct 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/hexagonal-architecture-explained-for-php-and-go-devs/ Hexagonal architecture, ports and adapters, explained without the dogma. With concrete PHP 8.2 and Go 1.21 code, and the parts I think Cockburn got right. https://muhammadamal.my.id/blog/clean-architecture-php-without-the-cult/ Thu, 05 Oct 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/clean-architecture-php-without-the-cult/ Clean Architecture in PHP without the dogma. Use cases, entities, and where to stop folder-splitting. A pragmatic guide from a Laravel 10 production codebase. https://muhammadamal.my.id/blog/upgrading-laravel-10-real-world-checklist/ Mon, 02 Oct 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/upgrading-laravel-10-real-world-checklist/ What actually breaks when upgrading a Laravel 9 app to Laravel 10 in production. PHP 8.1 floor, native types, deprecations, and the migrations that bit me. https://muhammadamal.my.id/blog/pod-security-standards-migration/ Thu, 28 Sep 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/pod-security-standards-migration/ Migrating from PodSecurityPolicy to Pod Security Standards on Kubernetes 1.28 — namespace labels, audit-mode rollout, and the workloads guaranteed to break. https://muhammadamal.my.id/blog/slsa-provenance-build-attestations/ Mon, 25 Sep 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/slsa-provenance-build-attestations/ Pragmatic SLSA v1.0 provenance with GitHub Actions and Cosign — what Level 2 actually delivers, and the operational lift to reach Level 3. https://muhammadamal.my.id/blog/opa-gatekeeper-admission-policy/ Thu, 21 Sep 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/opa-gatekeeper-admission-policy/ Practical Gatekeeper 3.13 admission policy patterns — constraint templates, audit mode, mutation, and Rego that is actually maintainable. https://muhammadamal.my.id/blog/falco-runtime-security-kubernetes/ Mon, 18 Sep 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/falco-runtime-security-kubernetes/ Running Falco 0.35 in production Kubernetes with the modern eBPF driver — rule tuning, output routing to Slack and SIEM, and the defaults to switch off. https://muhammadamal.my.id/blog/vault-dynamic-secrets-kubernetes/ Thu, 14 Sep 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/vault-dynamic-secrets-kubernetes/ Running Vault 1.14 dynamic database secrets in Kubernetes 1.28 — injector vs CSI, lease renewal, and the failure modes that bite under load. https://muhammadamal.my.id/blog/sbom-syft-cyclonedx-pipeline/ Mon, 11 Sep 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/sbom-syft-cyclonedx-pipeline/ Producing accurate SBOMs with Syft and CycloneDX 1.5, the gaps you will not see, and how to attach them as signed attestations. https://muhammadamal.my.id/blog/sigstore-cosign-keyless-signing/ Thu, 07 Sep 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/sigstore-cosign-keyless-signing/ Production-grade keyless container signing with Cosign 2.2 and Sigstore — the OIDC trust chain, Rekor verification, and air-gap caveats. https://muhammadamal.my.id/blog/trivy-container-scanning-pipeline/ Mon, 04 Sep 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/trivy-container-scanning-pipeline/ Trivy 0.45 in CI: severity gating, ignore policies, DB caching, and the gotchas that bite teams shipping containers daily. https://muhammadamal.my.id/blog/iiot-backpressure-reliability-patterns/ Wed, 30 Aug 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/iiot-backpressure-reliability-patterns/ End-to-end backpressure, DLQs, and graceful degradation patterns for IIoT pipelines, edge to cloud. https://muhammadamal.my.id/blog/opc-ua-to-mqtt-bridge/ Sat, 26 Aug 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/opc-ua-to-mqtt-bridge/ Translate OPC UA subscriptions to MQTT 5 topics for IIoT — node mapping, security, sampling, lifecycle. https://muhammadamal.my.id/blog/edge-computing-k3s-iiot/ Wed, 23 Aug 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/edge-computing-k3s-iiot/ Deploy K3s on edge gateways for IIoT preprocessing, local rules, store-and-forward across 200 sites. https://muhammadamal.my.id/blog/kafka-for-iiot-ingestion/ Sat, 19 Aug 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/kafka-for-iiot-ingestion/ Use Kafka 3.5 as the durable backbone between MQTT and IIoT consumers — topics, partitions, EOS. https://muhammadamal.my.id/blog/timescaledb-vs-influxdb-sensor-storage/ Wed, 16 Aug 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/timescaledb-vs-influxdb-sensor-storage/ When to pick TimescaleDB 2.11 over InfluxDB 2.7 for IIoT — schema, joins, compression, continuous aggregates. https://muhammadamal.my.id/blog/telegraf-influxdb-mqtt-pipeline/ Sat, 12 Aug 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/telegraf-influxdb-mqtt-pipeline/ Wire Telegraf 1.27 between MQTT and InfluxDB 2.7 with proper buffering, batching, and line-protocol. https://muhammadamal.my.id/blog/emqx-5-clustering-for-iiot/ Wed, 09 Aug 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/emqx-5-clustering-for-iiot/ Cluster EMQX 5.1 across plants with Mria core/replicant topology, auth, rules, and DR patterns. https://muhammadamal.my.id/blog/tuning-mosquitto-2-at-scale/ Sat, 05 Aug 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/tuning-mosquitto-2-at-scale/ Kernel, TLS, persistence, and ACL tuning to push Mosquitto 2.0.x past default limits for IIoT. https://muhammadamal.my.id/blog/choosing-mqtt-5-broker-iiot/ Wed, 02 Aug 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/choosing-mqtt-5-broker-iiot/ Field-tested comparison of Mosquitto 2.0, EMQX 5.1, and HiveMQ 4 for IIoT workloads at scale. https://muhammadamal.my.id/blog/rustls-vs-openssl-backend-tls/ Fri, 28 Jul 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/rustls-vs-openssl-backend-tls/ When to pick rustls and when to stay with OpenSSL for Rust backend TLS — performance, deployment, and compliance trade-offs from production experience. https://muhammadamal.my.id/blog/axum-0-6-production-apis/ Tue, 25 Jul 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/axum-0-6-production-apis/ A production-shaped axum 0.6 service — state, extractors, middleware, tracing, and the patterns that survive load testing. https://muhammadamal.my.id/blog/error-handling-thiserror-anyhow/ Fri, 21 Jul 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/error-handling-thiserror-anyhow/ Rust error handling that holds up in production: thiserror for libraries, anyhow for applications, and the context patterns in between. https://muhammadamal.my.id/blog/building-secure-clis-clap-4/ Tue, 18 Jul 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/building-secure-clis-clap-4/ Design patterns for secure CLI tools in Rust using clap 4: secret handling, input validation, static binaries, and predictable exit codes. https://muhammadamal.my.id/blog/async-rust-tokio-1-29/ Fri, 14 Jul 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/async-rust-tokio-1-29/ A working model of async Rust on tokio 1.29 — futures, the runtime, cancellation, and the patterns that hold up in production. https://muhammadamal.my.id/blog/memory-safety-without-gc/ Tue, 11 Jul 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/memory-safety-without-gc/ The real scope of Rust’s memory safety guarantees, the classes of bugs they eliminate, and the ones they don’t. https://muhammadamal.my.id/blog/ownership-borrowing-in-practice/ Fri, 07 Jul 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/ownership-borrowing-in-practice/ A working mental model for Rust ownership and borrowing built from production backend code, not toy examples. https://muhammadamal.my.id/blog/why-rust-growing-fast-backend/ Tue, 04 Jul 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/why-rust-growing-fast-backend/ Why Rust adoption is accelerating in backend teams in 2023, the real production wins, and the friction points nobody talks about. https://muhammadamal.my.id/blog/cluster-cost-engineering-karpenter-keda/ Tue, 27 Jun 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/cluster-cost-engineering-karpenter-keda/ Cluster autoscaler plus static node groups is the 2019 cost model. Here is how Karpenter and KEDA together turn capacity into a tracked, optimized line item. https://muhammadamal.my.id/blog/advanced-github-actions-reusable-workflows-oidc/ Fri, 23 Jun 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/advanced-github-actions-reusable-workflows-oidc/ How to share CI logic across repos without copy-paste, authenticate to AWS and GCP without long-lived keys, and make matrix builds maintainable. https://muhammadamal.my.id/blog/backstage-internal-developer-platform-backbone/ Tue, 20 Jun 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/backstage-internal-developer-platform-backbone/ Backstage is glue, not a platform. Here is how to wire it to ArgoCD, GitHub Actions, Kubernetes, and Crossplane so it stops being a wiki and starts being a control plane. https://muhammadamal.my.id/blog/progressive-delivery-argo-rollouts-flagger/ Fri, 16 Jun 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/progressive-delivery-argo-rollouts-flagger/ How to build a progressive delivery pipeline that actually rolls back on its own, using Argo Rollouts or Flagger with Prometheus-driven analysis. https://muhammadamal.my.id/blog/fluxcd-vs-argocd-real-comparison/ Tue, 13 Jun 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/fluxcd-vs-argocd-real-comparison/ ArgoCD wins on UX, Flux wins on composability. Here’s how to actually choose between them in 2023 based on team shape and operational appetite. https://muhammadamal.my.id/blog/kubernetes-1-27-multi-tenancy-patterns/ Fri, 09 Jun 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/kubernetes-1-27-multi-tenancy-patterns/ Namespace-as-tenant works for most internal platforms. Here are the controls that make it safe on Kubernetes 1.27 and the failure modes that still demand cluster separation. https://muhammadamal.my.id/blog/argocd-applicationsets-scale-multi-tenant/ Tue, 06 Jun 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/argocd-applicationsets-scale-multi-tenant/ How to structure ArgoCD ApplicationSets, generators, and AppProjects so one platform team can serve dozens of stream teams without becoming a bottleneck. https://muhammadamal.my.id/blog/platform-engineering-team-topologies-idp/ Fri, 02 Jun 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/platform-engineering-team-topologies-idp/ Platform engineering treats the platform as a product. Here is how Team Topologies, golden paths, and a thin-slice IDP actually change how teams ship. https://muhammadamal.my.id/blog/unified-developer-productivity-dashboard/ Tue, 30 May 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/unified-developer-productivity-dashboard/ How to build a developer productivity dashboard people will actually use: data model, ingestion via n8n, metric definitions, and how to avoid the vanity-metrics trap. https://muhammadamal.my.id/blog/n8n-vs-zapier-vs-power-automate-dev-teams/ Thu, 25 May 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/n8n-vs-zapier-vs-power-automate-dev-teams/ Where n8n, Zapier, and Power Automate each make sense for engineering teams in 2023. Pricing math, extensibility, ops burden, governance, and a decision framework that’s served me well. https://muhammadamal.my.id/blog/slack-approval-flows-dev-backlogs/ Tue, 23 May 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/slack-approval-flows-dev-backlogs/ How to keep humans in the loop without breaking flow: Slack-driven approvals for backlog automation. Block Kit, interactivity URLs, signing, and the audit story that matters. https://muhammadamal.my.id/blog/jira-github-issues-two-way-sync/ Thu, 18 May 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/jira-github-issues-two-way-sync/ Designing a two-way Jira <-> GitHub Issues sync that survives webhook loops, conflicting edits, and field-mapping mismatches. The patterns that actually work in production. https://muhammadamal.my.id/blog/auto-triage-pmo-tickets-openai-n8n/ Tue, 16 May 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/auto-triage-pmo-tickets-openai-n8n/ Three months of using GPT-4 to triage incoming tickets in n8n. Prompt patterns, structured output via function calling, cost containment, and where to leave the human in the loop. https://muhammadamal.my.id/blog/github-actions-n8n-webhook-orchestration/ Thu, 11 May 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/github-actions-n8n-webhook-orchestration/ Practical guide to triggering GitHub Actions from n8n: repository_dispatch vs workflow_dispatch, GitHub App auth, webhook signing, and where to draw the orchestration boundary. https://muhammadamal.my.id/blog/linear-graphql-api-backlog-sync/ Tue, 09 May 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/linear-graphql-api-backlog-sync/ How to actually use the Linear GraphQL API for backlog automation: SDK trade-offs, cursor pagination, webhook verification, and sync patterns that don’t deadlock. https://muhammadamal.my.id/blog/jira-rest-api-v3-automation-patterns/ Thu, 04 May 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/jira-rest-api-v3-automation-patterns/ Hard-won lessons from wiring Jira Cloud into n8n and Node automations. Auth, ADF documents, JQL pagination, webhook signatures, and the gotchas that ate my week. https://muhammadamal.my.id/blog/n8n-self-hosted-dev-teams/ Tue, 02 May 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/n8n-self-hosted-dev-teams/ A pragmatic guide to deploying n8n self-hosted for dev teams: Docker Compose, Postgres backend, queue mode with Redis, and the gotchas nobody warns you about. https://muhammadamal.my.id/blog/testing-grpc-services-golang-testcontainers/ Thu, 30 Mar 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/testing-grpc-services-golang-testcontainers/ Unit, integration, and contract testing for Go gRPC services — bufconn, testcontainers-go, and where the lines belong. https://muhammadamal.my.id/blog/observability-grpc-opentelemetry-golang/ Mon, 27 Mar 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/observability-grpc-opentelemetry-golang/ Traces, metrics, and logs in a Go gRPC service with OpenTelemetry — propagation, conventions, and sampling that scale. https://muhammadamal.my.id/blog/connection-pooling-grpc-postgres-golang/ Mon, 20 Mar 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/connection-pooling-grpc-postgres-golang/ Right-sizing pgx pools and gRPC client connections in Go — the tuning, lifecycle, and math that survives real traffic. https://muhammadamal.my.id/blog/grpc-interceptors-middleware-golang/ Thu, 16 Mar 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/grpc-interceptors-middleware-golang/ Unary and stream interceptors in gRPC-Go — the middleware patterns for auth, logging, and recovery you’ll actually run in prod. https://muhammadamal.my.id/blog/context-deadlines-grpc-microservices/ Mon, 13 Mar 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/context-deadlines-grpc-microservices/ Context propagation across gRPC boundaries — deadlines, cancellation, and the subtle bugs that hide between services. https://muhammadamal.my.id/blog/golang-goroutine-patterns-microservices/ Thu, 09 Mar 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/golang-goroutine-patterns-microservices/ Worker pools, fan-out/fan-in, errgroup, and rate-limited dispatch — Go concurrency patterns that survive real load. https://muhammadamal.my.id/blog/grpc-streaming-rpcs-golang/ Mon, 06 Mar 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/grpc-streaming-rpcs-golang/ The four RPC types in gRPC explained with Go 1.20 examples — when streaming helps and when it just adds complexity. https://muhammadamal.my.id/blog/grpc-basics-golang-microservices/ Thu, 02 Mar 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/grpc-basics-golang-microservices/ A pragmatic walkthrough of gRPC fundamentals in Go 1.20: protobuf schemas, code generation, and server setup. https://muhammadamal.my.id/blog/typescript-5-0-beta-preview-decorators/ Mon, 27 Feb 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/typescript-5-0-beta-preview-decorators/ TypeScript 5.0 beta preview — new decorators, const type parameters, bundler resolution, and the speed improvements from the migration to ES modules. https://muhammadamal.my.id/blog/type-safe-api-routes-nextjs-13/ Thu, 23 Feb 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/type-safe-api-routes-nextjs-13/ Building type-safe API routes in Next.js 13 with Zod, inferred types, and the new route handler conventions in app router. https://muhammadamal.my.id/blog/typescript-strict-mode-config-worth-it/ Mon, 20 Feb 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/typescript-strict-mode-config-worth-it/ A flag-by-flag tour of TypeScript strict mode in 2023 — what each setting prevents, what it costs, and what to add on top. https://muhammadamal.my.id/blog/react-server-components-nextjs-13/ Thu, 16 Feb 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/react-server-components-nextjs-13/ How to think about React Server Components in Next.js 13. Composition rules, the client/server boundary, and where they break. https://muhammadamal.my.id/blog/nextjs-13-app-router-first-impressions/ Mon, 13 Feb 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/nextjs-13-app-router-first-impressions/ Next.js 13 app router from a backend dev’s view: server components, data fetching, the still-beta status, and what production-ready looks like. https://muhammadamal.my.id/blog/typescript-4-9-satisfies-operator-patterns/ Thu, 09 Feb 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/typescript-4-9-satisfies-operator-patterns/ The satisfies operator in TypeScript 4.9 unlocks better config, routing, and enum-like patterns. Real production examples. https://muhammadamal.my.id/blog/migrating-large-javascript-codebase-typescript/ Mon, 06 Feb 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/migrating-large-javascript-codebase-typescript/ Migrating a large JS codebase to TypeScript without freezing features. Incremental rollout, JSDoc bridges, CI gates, real timelines. https://muhammadamal.my.id/blog/why-typescript-winning-over-javascript-2023/ Thu, 02 Feb 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/why-typescript-winning-over-javascript-2023/ Why TypeScript adoption keeps growing in 2023. The 4.9 sweet spot, real team wins, and where JS holdouts still have a point. https://muhammadamal.my.id/blog/engineering-productivity-metrics-2022/ Fri, 23 Dec 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/engineering-productivity-metrics-2022/ Engineering productivity metrics 2022: DORA, SPACE, what changes with AI. Anti-patterns. https://muhammadamal.my.id/blog/november-retro-api-security/ Wed, 30 Nov 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/november-retro-api-security/ November retro: API security audits. What changed, what’s still open, reader notes. https://muhammadamal.my.id/blog/backend-audit-logging/ Mon, 28 Nov 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/backend-audit-logging/ Backend audit logging: what to log, what not, immutable storage, retention. https://muhammadamal.my.id/blog/input-validation-owasp-top-10/ Fri, 25 Nov 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/input-validation-owasp-top-10/ Input validation + OWASP Top 10: SQLi, XSS, SSRF, command injection. The discipline. https://muhammadamal.my.id/blog/csrf-defense-patterns/ Wed, 23 Nov 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/csrf-defense-patterns/ CSRF defense: synchronizer tokens, double-submit, SameSite, custom headers. Layered approach. https://muhammadamal.my.id/blog/cors-security/ Mon, 21 Nov 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/cors-security/ CORS demystified: same-origin policy, what it protects, preflight, safe configurations. https://muhammadamal.my.id/blog/api-keys-vs-oauth/ Fri, 18 Nov 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/api-keys-vs-oauth/ API keys vs OAuth for third-party access: use cases, security, scopes, rotation. https://muhammadamal.my.id/blog/redis-rate-limiting-distributed/ Wed, 16 Nov 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/redis-rate-limiting-distributed/ Distributed rate limiting in Redis: token bucket via Lua, sliding window via sorted sets. https://muhammadamal.my.id/blog/rate-limiting-algorithms/ Mon, 14 Nov 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/rate-limiting-algorithms/ Rate limit algos: token bucket, leaky bucket, fixed + sliding window. When each wins. https://muhammadamal.my.id/blog/oauth-21-vs-20/ Fri, 11 Nov 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/oauth-21-vs-20/ OAuth 2.1: PKCE always, no implicit, no password grant. Aligning your implementation. https://muhammadamal.my.id/blog/refresh-tokens-revocation/ Wed, 09 Nov 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/refresh-tokens-revocation/ Refresh tokens correctly: short access + long refresh, rotation, revocation lists, defeat theft. https://muhammadamal.my.id/blog/jwt-for-sessions-usually-wrong/ Mon, 07 Nov 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/jwt-for-sessions-usually-wrong/ JWT vs server sessions. When JWT pays off, when it costs. Migration paths. https://muhammadamal.my.id/blog/jwt-done-right/ Fri, 04 Nov 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/jwt-done-right/ JWT done right: RS256/ES256, expiry, audience, JWKS rotation. Patterns that prevent disaster. https://muhammadamal.my.id/blog/backend-api-security-2022/ Wed, 02 Nov 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/backend-api-security-2022/ Backend API security threat model 2022: real threats, working mitigations, priority order. https://muhammadamal.my.id/blog/october-retro-etl/ Mon, 31 Oct 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/october-retro-etl/ October retro: lightweight ETL shipped. What worked, what bounced. https://muhammadamal.my.id/blog/etl-monitoring-lag-errors/ Fri, 28 Oct 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/etl-monitoring-lag-errors/ ETL monitoring: lag, row counts, errors, throughput. Metrics + dashboards + alerts. https://muhammadamal.my.id/blog/etl-backfill-historical/ Wed, 26 Oct 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/etl-backfill-historical/ Backfill safely: chunked, rate-limited, parallel, merge with live data. https://muhammadamal.my.id/blog/postgres-bulk-loading-copy/ Mon, 24 Oct 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/postgres-bulk-loading-copy/ Postgres bulk loading: COPY beats INSERT 100x. UNLOGGED, index management, fast ETL writes. https://muhammadamal.my.id/blog/debezium-postgres-cdc/ Fri, 21 Oct 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/debezium-postgres-cdc/ Debezium 2.0: Postgres → Kafka CDC setup, config, snapshot, ops gotchas. https://muhammadamal.my.id/blog/kafka-sync-backbone/ Wed, 19 Oct 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/kafka-sync-backbone/ Kafka 3.2 as sync backbone: topic-per-table, consumers, when it pays off vs simpler tools. https://muhammadamal.my.id/blog/etl-schema-drift/ Mon, 17 Oct 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/etl-schema-drift/ ETL schema drift: detect, additive vs breaking, flexible patterns that don’t lose data. https://muhammadamal.my.id/blog/etl-idempotent-watermarks/ Fri, 14 Oct 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/etl-idempotent-watermarks/ Idempotent ETL: watermarks, upsert dedup, exactly-once, double-write failure modes. https://muhammadamal.my.id/blog/go-etl-pipeline/ Wed, 12 Oct 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/go-etl-pipeline/ Go ETL: pgx, COPY bulk, concurrent ETL stages. When Go beats Python. https://muhammadamal.my.id/blog/python-etl-pipeline/ Mon, 10 Oct 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/python-etl-pipeline/ Python ETL: SQLAlchemy, Polars, BigQuery client. Incremental sync, errors, monitoring. https://muhammadamal.my.id/blog/postgres-logical-replication-cdc/ Fri, 07 Oct 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/postgres-logical-replication-cdc/ Postgres logical replication for CDC: publications, slots, wal2json / pgoutput consumption. https://muhammadamal.my.id/blog/cdc-vs-polling/ Wed, 05 Oct 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/cdc-vs-polling/ CDC vs polling for data sync. When each wins, ops trade-offs, hybrid approach. https://muhammadamal.my.id/blog/lightweight-etl-vs-big-data/ Mon, 03 Oct 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/lightweight-etl-vs-big-data/ Lightweight ETL: Python/Go beats Spark/Airflow for most teams. When ‘big data’ is overkill. https://muhammadamal.my.id/blog/september-retro-observability/ Fri, 30 Sep 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/september-retro-observability/ September retro: full obs stack for factory. Wins, costs, cuts. https://muhammadamal.my.id/blog/prometheus-cardinality-cost/ Wed, 28 Sep 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/prometheus-cardinality-cost/ Control Prometheus cost: cardinality limits, drop high-card metrics, recording rules, retention math. https://muhammadamal.my.id/blog/error-budgets-burn-rate/ Mon, 26 Sep 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/error-budgets-burn-rate/ Error budgets + burn rate alerts. Multi-window math, dashboards, action policies. https://muhammadamal.my.id/blog/slo-practice/ Fri, 23 Sep 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/slo-practice/ SLOs in practice: SLIs, targets, error budgets from Prometheus, org dynamics. https://muhammadamal.my.id/blog/tempo-distributed-tracing/ Wed, 21 Sep 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/tempo-distributed-tracing/ Tempo 1.5: distributed tracing, OTel SDK for Go/Node, sampling, exploration in Grafana. https://muhammadamal.my.id/blog/promtail-pipelines-parsing/ Mon, 19 Sep 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/promtail-pipelines-parsing/ Promtail pipelines: JSON parse, label extraction, dropping, Docker + journald. https://muhammadamal.my.id/blog/loki-log-aggregation/ Fri, 16 Sep 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/loki-log-aggregation/ Loki 2.6: self-hosted logs, label index, LogQL, retention. Cheaper than ELK; where it doesn’t fit. https://muhammadamal.my.id/blog/prometheus-alertmanager/ Wed, 14 Sep 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/prometheus-alertmanager/ Alertmanager: routing, grouping, inhibition, silencing, Slack/PD. Useful, not noisy. https://muhammadamal.my.id/blog/grafana-dashboards-that-help/ Mon, 12 Sep 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/grafana-dashboards-that-help/ Grafana dashboards engineers use, not just look at. RED/USE, hierarchy, 6-panel rule. https://muhammadamal.my.id/blog/node-prometheus-instrumentation/ Fri, 09 Sep 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/node-prometheus-instrumentation/ Node + Prometheus via prom-client: defaults, HTTP middleware, business metrics, Express/Fastify. https://muhammadamal.my.id/blog/go-prometheus-instrumentation/ Wed, 07 Sep 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/go-prometheus-instrumentation/ Go + Prometheus: client_golang, counters, histograms, HTTP middleware, runtime metrics. https://muhammadamal.my.id/blog/prometheus-101-metrics-promql/ Mon, 05 Sep 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/prometheus-101-metrics-promql/ Prometheus 2.37 basics: metric types, scraping, labels, PromQL with backend examples. https://muhammadamal.my.id/blog/observability-stack-2022/ Fri, 02 Sep 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/observability-stack-2022/ Self-host obs stack 2022: Prometheus + Grafana + Loki + Tempo + Alertmanager. Metrics, logs, traces. https://muhammadamal.my.id/blog/august-retro-iiot/ Mon, 29 Aug 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/august-retro-iiot/ August retro: IIoT lessons. Where web-backend instincts misled, what’s next. https://muhammadamal.my.id/blog/mqtt-security-acls-certificates/ Fri, 26 Aug 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/mqtt-security-acls-certificates/ MQTT security: TLS, per-device creds, ACLs, cert rotation. Real threats + mitigations. https://muhammadamal.my.id/blog/iiot-anomaly-alerting/ Wed, 24 Aug 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/iiot-anomaly-alerting/ IIoT anomaly alerting: threshold, rate-of-change, missing-data. Grafana 9, Alertmanager. https://muhammadamal.my.id/blog/grafana-iiot-dashboards/ Mon, 22 Aug 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/grafana-iiot-dashboards/ Grafana 9 dashboards for IIoT: panels, live queries, MQTT streaming, shop-floor displays. https://muhammadamal.my.id/blog/opc-ua-mqtt-bridge/ Fri, 19 Aug 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/opc-ua-mqtt-bridge/ OPC UA → MQTT bridge in 2022. Gateways, custom code, node selection, gotchas. https://muhammadamal.my.id/blog/sparkplug-b-industrial-ot/ Wed, 17 Aug 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/sparkplug-b-industrial-ot/ Sparkplug B: MQTT spec for industrial OT. Birth/death, metrics, when to use. https://muhammadamal.my.id/blog/mqtt-timescaledb-ingest/ Mon, 15 Aug 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/mqtt-timescaledb-ingest/ MQTT → TimescaleDB consumer in Go. Hypertables, COPY inserts, retention, backpressure. https://muhammadamal.my.id/blog/go-sensor-reader-edge/ Fri, 12 Aug 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/go-sensor-reader-edge/ Go edge service: read sensors, publish to MQTT, handle disconnects. Working code. https://muhammadamal.my.id/blog/sensor-data-schemas-json-protobuf-cbor/ Wed, 10 Aug 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/sensor-data-schemas-json-protobuf-cbor/ Sensor data formats: JSON, Protobuf, CBOR. When each wins on IIoT MQTT. https://muhammadamal.my.id/blog/self-host-mosquitto-tls-auth/ Mon, 08 Aug 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/self-host-mosquitto-tls-auth/ Mosquitto 2.0 production setup. TLS, auth, ACLs, persistence, Compose stack. https://muhammadamal.my.id/blog/mqtt-broker-comparison-mosquitto-emqx-hivemq/ Fri, 05 Aug 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/mqtt-broker-comparison-mosquitto-emqx-hivemq/ MQTT broker picks: Mosquitto, EMQX, HiveMQ, VerneMQ. Capacity, clustering, license, ops. https://muhammadamal.my.id/blog/mqtt-101-pub-sub-edge/ Wed, 03 Aug 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/mqtt-101-pub-sub-edge/ MQTT for backend devs: topics, QoS, retained, will, MQTT 5. How it differs from Kafka/AMQP. https://muhammadamal.my.id/blog/why-industrial-iot-2022/ Mon, 01 Aug 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/why-industrial-iot-2022/ IIoT in 2022 from a web-backend POV. MQTT, sensors, edge, what’s different. https://muhammadamal.my.id/blog/july-retro-docker-compose/ Fri, 29 Jul 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/july-retro-docker-compose/ July retro: Compose patterns shipped. Mac perf, dev loop, where Compose ends. https://muhammadamal.my.id/blog/docker-compose-vs-kubernetes-local/ Wed, 27 Jul 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/docker-compose-vs-kubernetes-local/ Compose vs k3d/minikube/Kind for local dev. When each wins, parity vs simplicity, hybrid approach. https://muhammadamal.my.id/blog/docker-compose-ci-ephemeral-stacks/ Mon, 25 Jul 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/docker-compose-ci-ephemeral-stacks/ Compose in CI: ephemeral stacks per run, isolation, parallel safety, teardown, GH Actions. https://muhammadamal.my.id/blog/docker-compose-resource-limits/ Fri, 22 Jul 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/docker-compose-resource-limits/ Compose resource limits: memory + CPU caps. deploy.resources syntax, tuning for JVM/Node/Go. https://muhammadamal.my.id/blog/docker-compose-build-vs-image/ Wed, 20 Jul 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/docker-compose-build-vs-image/ Compose build vs image: build local vs pull, multi-stage targets, build args, caching. https://muhammadamal.my.id/blog/docker-compose-networking/ Mon, 18 Jul 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/docker-compose-networking/ Compose networking: bridge, aliases, external networks, cross-stack shared DBs. https://muhammadamal.my.id/blog/docker-volumes-vs-bind-mounts/ Fri, 15 Jul 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/docker-volumes-vs-bind-mounts/ Volumes vs bind mounts vs tmpfs: how each works, perf, when to use each. https://muhammadamal.my.id/blog/docker-compose-watch-live-reload/ Wed, 13 Jul 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/docker-compose-watch-live-reload/ Compose v2.6 watch: file-watch live reload, no bind mounts. Sync, rebuild, restart. Go/Node/Python. https://muhammadamal.my.id/blog/compose-healthchecks-depends-on/ Mon, 11 Jul 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/compose-healthchecks-depends-on/ Compose healthchecks + depends_on conditions: service_healthy, started, completed_successfully. https://muhammadamal.my.id/blog/docker-compose-env-secrets/ Fri, 08 Jul 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/docker-compose-env-secrets/ Compose env vars + secrets: .env, env_file, secrets top-level. Safe vs leaky patterns. https://muhammadamal.my.id/blog/docker-compose-profiles/ Wed, 06 Jul 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/docker-compose-profiles/ Compose profiles: opt-in services, gotchas, depends_on combinations, patterns for big stacks. https://muhammadamal.my.id/blog/multi-service-compose-polyglot/ Mon, 04 Jul 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/multi-service-compose-polyglot/ Compose for polyglot dev: Go + Node + Python in one stack. Cross-repo build contexts, conventions. https://muhammadamal.my.id/blog/beyond-docker-compose-up-2022-patterns/ Fri, 01 Jul 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/beyond-docker-compose-up-2022-patterns/ Compose v2.6 patterns: profiles, watch, secrets, healthchecks, depends-on. Scale past the README example. https://muhammadamal.my.id/blog/june-retro-clean-architecture/ Wed, 29 Jun 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/june-retro-clean-architecture/ June retro: Clean Arch in Go + Laravel. Where it paid off, where it overkilled. https://muhammadamal.my.id/blog/clean-architecture-testing/ Mon, 27 Jun 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/clean-architecture-testing/ Test strategy for Clean Architecture: pure unit (domain), fast use case (fakes), integration (adapters). https://muhammadamal.my.id/blog/eloquent-vs-domain-models/ Fri, 24 Jun 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/eloquent-vs-domain-models/ Eloquent vs domain models in Clean Architecture: when to use as-is, when to wrap, conversion patterns. https://muhammadamal.my.id/blog/laravel-service-container-di/ Wed, 22 Jun 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/laravel-service-container-di/ Laravel service container for DI: bindings, singletons, contextual, explicit + testable wiring. https://muhammadamal.my.id/blog/laravel-9-clean-architecture/ Mon, 20 Jun 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/laravel-9-clean-architecture/ Clean Architecture in Laravel 9: layout, Domain/UseCase/Repository, Eloquent at edges, framework compromises. https://muhammadamal.my.id/blog/go-adapter-pattern/ Fri, 17 Jun 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/go-adapter-pattern/ Adapters in Go: HTTP, gRPC, workers. Translate between transport DTOs and use cases. Frameworks at edges. https://muhammadamal.my.id/blog/go-use-case-pattern/ Wed, 15 Jun 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/go-use-case-pattern/ Use cases in Go: one per operation, DTOs, dependency wiring, fast unit tests. https://muhammadamal.my.id/blog/go-repository-pattern/ Mon, 13 Jun 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/go-repository-pattern/ Repository pattern in Go. Ports in use-case layer, Postgres implementations, transactions. https://muhammadamal.my.id/blog/go-domain-entities/ Fri, 10 Jun 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/go-domain-entities/ Domain entities in Go: identity, invariants, constructors, value objects. Keep business logic out of frameworks. https://muhammadamal.my.id/blog/go-dependency-injection-no-framework/ Wed, 08 Jun 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/go-dependency-injection-no-framework/ Go DI without a framework. Constructor injection, interfaces, manual wire, when google/wire earns it. https://muhammadamal.my.id/blog/clean-architecture-go-layout/ Mon, 06 Jun 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/clean-architecture-go-layout/ Pragmatic Go layout for Clean Architecture. Folders, package boundaries, naming, Go-native patterns. https://muhammadamal.my.id/blog/clean-architecture-layers/ Fri, 03 Jun 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/clean-architecture-layers/ Four layers of Clean Architecture: domain, use case, adapter, infra. What goes where + dependency rule. https://muhammadamal.my.id/blog/why-clean-architecture-in-2022/ Wed, 01 Jun 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/why-clean-architecture-in-2022/ Clean Architecture in 2022: why now, what it buys, what it costs. Pragmatic take. https://muhammadamal.my.id/blog/may-retro-workflow-automation/ Mon, 30 May 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/may-retro-workflow-automation/ May retro: n8n automations in prod. Numbers, wins, surprises, what to skip. https://muhammadamal.my.id/blog/n8n-monitoring-production/ Fri, 27 May 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/n8n-monitoring-production/ Monitor n8n in prod: health checks, execution rates, Prometheus, log aggregation, useful dashboards. https://muhammadamal.my.id/blog/n8n-security-credentials-oauth/ Wed, 25 May 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/n8n-security-credentials-oauth/ Secure n8n: credentials manager, OAuth, encryption key mgmt, network exposure, audit checklist. https://muhammadamal.my.id/blog/n8n-slack-standup-bot/ Mon, 23 May 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/n8n-slack-standup-bot/ Standup bot in n8n + Slack: 9 AM DMs, collect, post summary. Modals + working workflow. https://muhammadamal.my.id/blog/n8n-error-handling-retries/ Fri, 20 May 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/n8n-error-handling-retries/ n8n error handling: retries, error trigger workflows, dead-letters, alerting on consecutive failures. https://muhammadamal.my.id/blog/webhooks-101-engineering-workflows/ Wed, 18 May 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/webhooks-101-engineering-workflows/ Webhooks for engineering automation. How they work, signatures, retries, idempotency, replay protection. https://muhammadamal.my.id/blog/notion-jira-sync-n8n/ Mon, 16 May 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/notion-jira-sync-n8n/ Notion → Jira sync with n8n. One-way and two-way patterns, dedup, conflict rules to prevent loops. https://muhammadamal.my.id/blog/slack-slash-commands-n8n/ Fri, 13 May 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/slack-slash-commands-n8n/ Slack slash commands via n8n: app setup, signature verification, response handling, interactive responses. https://muhammadamal.my.id/blog/jira-auto-assignment-github-events/ Wed, 11 May 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/jira-auto-assignment-github-events/ n8n workflow: GitHub PR events → auto-assign + transition Jira tickets. Webhook → parser → Jira API. https://muhammadamal.my.id/blog/n8n-jira-rest-api-v3/ Mon, 09 May 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/n8n-jira-rest-api-v3/ Connect n8n to Jira REST API v3. API token, built-in node, JQL, HTTP fallback for missing operations. https://muhammadamal.my.id/blog/n8n-workflow-basics-triggers-nodes/ Fri, 06 May 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/n8n-workflow-basics-triggers-nodes/ n8n workflows: triggers, nodes, connections, expressions, Code node, where the visual model ends. https://muhammadamal.my.id/blog/self-host-n8n-docker-compose/ Wed, 04 May 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/self-host-n8n-docker-compose/ Self-host n8n with Docker Compose + Postgres + reverse proxy. Env vars + production setup. https://muhammadamal.my.id/blog/why-build-internal-tools-with-n8n/ Mon, 02 May 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/why-build-internal-tools-with-n8n/ n8n vs Zapier vs scripts for engineering internal tools. Self-hosted, OSS, code-friendly, no per-task billing. https://muhammadamal.my.id/blog/april-retro-react-18-nextjs/ Fri, 29 Apr 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/april-retro-react-18-nextjs/ April retro: React 18 + Next.js 12 in production. Wins, surprises, bugs caught, what’s next. https://muhammadamal.my.id/blog/nextjs-deployment-vercel-vs-self-hosted/ Wed, 27 Apr 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/nextjs-deployment-vercel-vs-self-hosted/ Next.js 12 deployment: Vercel vs self-hosted on Node/Docker/k8s. Feature parity, cost, when each wins. https://muhammadamal.my.id/blog/nextjs-image-optimization/ Mon, 25 Apr 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/nextjs-image-optimization/ next/image in Next.js 12. Layouts, sizes, lazy loading, WebP/AVIF, remote patterns, perf wins. https://muhammadamal.my.id/blog/nextjs-middleware-auth-redirects/ Fri, 22 Apr 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/nextjs-middleware-auth-redirects/ Next.js 12 middleware. Edge auth, redirects, A/B tests, bot blocking. Patterns + limits. https://muhammadamal.my.id/blog/nextjs-data-fetching-ssg-ssr-isr/ Wed, 20 Apr 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/nextjs-data-fetching-ssg-ssr-isr/ Next.js 12 data fetching: SSG, SSR, ISR. getStaticProps, getServerSideProps, getStaticPaths, ISR. When each wins. https://muhammadamal.my.id/blog/nextjs-routing-pages-dynamic/ Mon, 18 Apr 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/nextjs-routing-pages-dynamic/ Next.js 12 routing. File-based, dynamic, catch-all, optional, nested layouts, useRouter idioms. https://muhammadamal.my.id/blog/cra-to-nextjs-12-migration/ Fri, 15 Apr 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/cra-to-nextjs-12-migration/ CRA → Next.js 12 in 2022. Pages, routing, env vars, build, what breaks. https://muhammadamal.my.id/blog/upgrading-react-17-to-react-18/ Wed, 13 Apr 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/upgrading-react-17-to-react-18/ Concrete walkthrough: React 17 → 18 upgrade. Packages, createRoot, TS types, Strict Effects, library compat. https://muhammadamal.my.id/blog/react-18-useid-usesyncexternalstore/ Mon, 11 Apr 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/react-18-useid-usesyncexternalstore/ React 18 new hooks: useId for SSR-safe IDs, useSyncExternalStore for external state, useInsertionEffect for CSS-in-JS. https://muhammadamal.my.id/blog/react-18-automatic-batching/ Fri, 08 Apr 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/react-18-automatic-batching/ React 18 batches all state updates, not just event handlers. flushSync to opt out. Free perf win for most apps. https://muhammadamal.my.id/blog/react-suspense-data-fetching-2022/ Wed, 06 Apr 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/react-suspense-data-fetching-2022/ React 18 Suspense for data fetching today. SWR 1.3, React Query 4, working patterns, effect-related gotchas. https://muhammadamal.my.id/blog/react-concurrent-rendering-usetransition/ Mon, 04 Apr 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/react-concurrent-rendering-usetransition/ React 18 concurrent rendering. useTransition for non-urgent updates, useDeferredValue for derived values. When each wins. https://muhammadamal.my.id/blog/react-18-changes-for-app-devs/ Fri, 01 Apr 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/react-18-changes-for-app-devs/ React 18 shipped Mar 2022. Concurrent rendering, automatic batching, new hooks, Suspense data fetching, Strict Effects. https://muhammadamal.my.id/blog/march-retro-rust-backend/ Wed, 30 Mar 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/march-retro-rust-backend/ One month of backend Rust. What stuck, what bounced, where it fits, what to warn the next person about. https://muhammadamal.my.id/blog/rust-vs-go-backend-api/ Mon, 28 Mar 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/rust-vs-go-backend-api/ Rust vs Go for backend APIs in 2022. Compile times, perf, ergonomics, ecosystem, hiring. Honest after shipping both. https://muhammadamal.my.id/blog/rust-docker-image-small-distroless/ Fri, 25 Mar 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/rust-docker-image-small-distroless/ Sub-25 MB Rust image. cargo-chef, musl static linking, distroless, BuildKit cache. Full Dockerfile + CI. https://muhammadamal.my.id/blog/rust-structured-logging-tracing/ Wed, 23 Mar 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/rust-structured-logging-tracing/ Rust structured logging with tracing. Spans, events, request context, JSON output, production patterns. https://muhammadamal.my.id/blog/rust-serde-json-patterns/ Mon, 21 Mar 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/rust-serde-json-patterns/ Practical serde JSON patterns. Tagged enums, rename_all, flatten, custom serializers — handle real APIs cleanly. https://muhammadamal.my.id/blog/rust-sqlx-postgres/ Fri, 18 Mar 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/rust-sqlx-postgres/ Postgres in Rust with sqlx 0.5. Compile-time SQL checking, query macros, migrations, transactions, gotchas. https://muhammadamal.my.id/blog/rust-json-api-axum/ Wed, 16 Mar 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/rust-json-api-axum/ JSON API in Rust with Axum 0.4. Router, extractors, state, error handling, tower middleware. Minimal real backend. https://muhammadamal.my.id/blog/async-rust-tokio-2022/ Mon, 14 Mar 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/async-rust-tokio-2022/ Async Rust with Tokio. What async/await compiles to, picking a runtime, tasks vs threads, maintainable async patterns. https://muhammadamal.my.id/blog/cargo-workspaces-backend-services/ Fri, 11 Mar 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/cargo-workspaces-backend-services/ Cargo workspaces for Rust backends. Layout, shared crates, per-binary builds, compile-time wins. https://muhammadamal.my.id/blog/rust-error-handling-result-thiserror/ Wed, 09 Mar 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/rust-error-handling-result-thiserror/ Rust error handling. Result, ?, thiserror for libs, anyhow for apps. Patterns that replace try/catch. https://muhammadamal.my.id/blog/rust-lifetimes-without-fear/ Mon, 07 Mar 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/rust-lifetimes-without-fear/ Rust lifetimes demystified. Why they exist, what ‘a means, elision, and the three patterns that cover 95% of code. https://muhammadamal.my.id/blog/rust-ownership-borrowing-for-go-devs/ Fri, 04 Mar 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/rust-ownership-borrowing-for-go-devs/ Rust ownership for people who know pointers. Move semantics, &T vs &mut T, three rules, patterns that click. https://muhammadamal.my.id/blog/why-learn-rust-in-2022/ Wed, 02 Mar 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/why-learn-rust-in-2022/ A Go dev picks up Rust in 2022. Where it wins, where it doesn’t, and what the first month feels like. https://muhammadamal.my.id/blog/github-actions-deploy-docker-staging/ Mon, 28 Feb 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/github-actions-deploy-docker-staging/ GitHub Actions deploy to staging: build + push to GHCR + kubectl/SSH apply. OIDC over long-lived secrets. Working workflow. https://muhammadamal.my.id/blog/github-actions-matrix-parallel-tests/ Fri, 25 Feb 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/github-actions-matrix-parallel-tests/ Matrix builds in GitHub Actions. Multi-version, multi-OS, parallel test sharding, fail-fast trade-offs. https://muhammadamal.my.id/blog/github-actions-cache-buildkit/ Wed, 23 Feb 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/github-actions-cache-buildkit/ GitHub Actions cache strategies. actions/cache@v3 keys, BuildKit registry cache for Docker, and the fixes that cut builds 6× faster. https://muhammadamal.my.id/blog/github-actions-go-monorepo/ Mon, 21 Feb 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/github-actions-go-monorepo/ GitHub Actions for Go monorepos. Path filters, module cache, golangci-lint, race tests, sub-3-min CI. https://muhammadamal.my.id/blog/postgres-multi-column-index-order/ Fri, 18 Feb 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/postgres-multi-column-index-order/ Multi-column index column order in Postgres. Leftmost prefix, INCLUDE, and the three patterns that decide useful vs useless. https://muhammadamal.my.id/blog/postgres-partial-indexes/ Wed, 16 Feb 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/postgres-partial-indexes/ Postgres partial indexes — index only the rows that matter. Four patterns that catch most production wins. https://muhammadamal.my.id/blog/postgres-index-types-btree-gin-gist-brin/ Mon, 14 Feb 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/postgres-index-types-btree-gin-gist-brin/ Postgres index types compared. B-tree, GIN, GiST, BRIN, Hash. When each wins, with real queries and trade-offs. https://muhammadamal.my.id/blog/pgbouncer-connection-pooling-postgres/ Fri, 11 Feb 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/pgbouncer-connection-pooling-postgres/ PgBouncer in front of Postgres 14. Transaction pooling, pool sizing, prepared-statement gotchas, deploy patterns. https://muhammadamal.my.id/blog/postgres-autovacuum-tuning/ Wed, 09 Feb 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/postgres-autovacuum-tuning/ Autovacuum defaults fail on write-heavy tables. Spot the bloat, set per-table overrides, prove it works with metrics. https://muhammadamal.my.id/blog/postgres-memory-shared-buffers-work-mem/ Mon, 07 Feb 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/postgres-memory-shared-buffers-work-mem/ Four Postgres memory settings that decide whether queries fit in RAM or spill. shared_buffers, work_mem, effective_cache_size, maintenance_work_mem. https://muhammadamal.my.id/blog/postgres-query-planner-explain/ Fri, 04 Feb 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/postgres-query-planner-explain/ Read Postgres EXPLAIN ANALYZE without faking it. Plan nodes, cost vs actual, trouble patterns, and the fix per pattern. https://muhammadamal.my.id/blog/postgres-performance-tuning-checklist/ Wed, 02 Feb 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/postgres-performance-tuning-checklist/ Practical Postgres 14 performance checklist. Memory, autovacuum, indexes, pooling, and the metrics that prove it worked. https://muhammadamal.my.id/blog/lessons-containerizing-11-services/ Mon, 31 Jan 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/lessons-containerizing-11-services/ End-of-month retro on containerizing a monolith + extracting Go microservices. What worked, what failed, what I’d skip. https://muhammadamal.my.id/blog/shared-database-monolith-microservices/ Fri, 28 Jan 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/shared-database-monolith-microservices/ Sharing Postgres between monolith and microservices without coupling them. Schemas, roles, FK boundaries, ownership migration. https://muhammadamal.my.id/blog/go-docker-image-small-distroless/ Wed, 26 Jan 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/go-docker-image-small-distroless/ Shipping a Go service in 14 MB with distroless + static linking + Buildx. Full Dockerfile, CVE wins, CI cache wins. https://muhammadamal.my.id/blog/go-graceful-shutdown-health-checks/ Mon, 24 Jan 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/go-graceful-shutdown-health-checks/ Liveness vs readiness, signal handling, draining in-flight requests. The Go shutdown pattern that plays nice with Kubernetes. https://muhammadamal.my.id/blog/go-structured-logging-zap/ Fri, 21 Jan 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/go-structured-logging-zap/ Structured logging in Go with zap. JSON output, request-scoped fields, sampling, and the pattern that survives production. https://muhammadamal.my.id/blog/go-config-management-viper-env-flags/ Wed, 19 Jan 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/go-config-management-viper-env-flags/ Viper vs env vars vs flags for Go services. Trade-offs, the boring default that wins, and a 60-line loader you can copy-paste. https://muhammadamal.my.id/blog/docker-compose-polyglot-microservices/ Mon, 17 Jan 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/docker-compose-polyglot-microservices/ Docker Compose v2.2 for local microservices dev. Polyglot stack, healthchecks, profiles, ten-minute onboarding. https://muhammadamal.my.id/blog/grpc-vs-rest-go-microservices/ Fri, 14 Jan 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/grpc-vs-rest-go-microservices/ REST vs gRPC for Go microservices. Real benchmarks, ergonomics, the hidden cost of HTTP/JSON at scale, and what we picked for billing. https://muhammadamal.my.id/blog/microservice-boundaries-billing-module/ Wed, 12 Jan 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/microservice-boundaries-billing-module/ Drawing the boundary when extracting a billing module. Aggregate roots, event contracts, and the questions to answer before you write any code. https://muhammadamal.my.id/blog/monolith-to-first-go-microservice/ Mon, 10 Jan 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/monolith-to-first-go-microservice/ Carving the first Go microservice out of a PHP monolith. Pragmatic cutover, traffic shadowing, and the boring service to start with. https://muhammadamal.my.id/blog/multi-stage-docker-build-image-size/ Fri, 07 Jan 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/multi-stage-docker-build-image-size/ Multi-stage Docker builds, real numbers. 70% smaller images with Buildx, distroless, and Alpine. CI cache layers that actually save time. https://muhammadamal.my.id/blog/production-dockerfile-php-monolith/ Wed, 05 Jan 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/production-dockerfile-php-monolith/ Line-by-line production Dockerfile for a legacy PHP monolith. Composer caching, opcache, FPM tuning, and the trade-offs nobody documents. https://muhammadamal.my.id/blog/why-im-containerizing-my-monolith-in-2022/ Mon, 03 Jan 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/why-im-containerizing-my-monolith-in-2022/ Three years of putting it off. Now the monolith goes in a container. Here is why 2022 is the year the tooling finally got out of the way. https://muhammadamal.my.id/about/ Sat, 01 Jan 2022 00:00:00 +0700 https://muhammadamal.my.id/about/ Muhammad Amal, AI-Native Engineer. Backend, LLM apps, agentic systems, production-grade software since 2014.