InfoQ Homepage Architecture Content on InfoQ
-
/articles/api-security-zero-trust/en/smallimage/logo-1669651461014.jpg)
API Security: from Defense-in-Depth (DiD) to Zero Trust
Nearly all companies have experienced security incidents but few have an API security policy that includes dedicated API testing and protection. A defense-in-depth approach that includes boundary defense, observability, and authentication is recommended.
-
/articles/josh-long-spring-6/en/smallimage/logo-1669141674434.jpg)
Java Champion Josh Long on Spring Framework 6 and Spring Boot 3
Microservices show where Java lags behind other languages. Reactive programming provides a concise DSL to express the movement of state and to write concurrent, multithreaded code with better scaling. Developing in Spring Boot works well even without special tooling support. Josh Long is excited about Project Loom, Java optimization in Project Leyden, and Foreign-Function access in Project Panama.
-
/articles/craftleadership-developers-craft-code/en/smallimage/small-1669118526409.jpg)
Craftleadership: Craft Your Leadership as Developers Craft Code
Learning software craftership made me reconsider how I wrote code. Being an experienced software team manager, I try to reevaluate my management practices in the same way: what could test-driven management or pair-management be? Here I propose different insights on how software craftership tools and mindset are transposable to the management domain.
-
/articles/value-streams-stuck-past/en/smallimage/logo-1667912804986.jpg)
Are Your “Value Streams” Keeping You Stuck in the Past?
The essence of business agility is being able to respond quickly and systematically to feedback. As a means of achieving business agility, value stream management falls short, and ends up being not very different from what organizations have done for a long time: using program management practices to coordinate work across different teams in a large organization.
-
/articles/devops-future-no-code/en/smallimage/logo-1667467513378.jpg)
The Future of DevOps is No-Code
The need for high-quality DevOps personnel is skyrocketing, but it is harder than ever to find enough staff. It is possible to augment your DevOps organization using no-code and low-code tooling. Low-code and no-code tools can free up existing developers by reducing the time spent on integrating and administering DevOps toolsets.
-
/articles/build-deploy-scalable-golang-api/en/smallimage/logo-1667248748960.jpg)
Build, Test, and Deploy Scalable REST APIs in Go
In this article, we'll look at how to use the gin framework to create a simple Go application. We will also learn how to use CircleCI, a continuous deployment tool, to automate testing and deployment.
-
/articles/monitor-digital-experience-feature-effectiveness/en/smallimage/monitoring-digital-experience-to-determine-feature-effectiveness-small-1666951981148.jpg)
Are They Really Using It? Monitoring Digital Experience to Determine Feature Effectiveness
This article reflects on the challenges of determining user experience and effectiveness and how modern techniques such as Real User Monitoring and Application Performance Monitoring can determine the true effectiveness of features. It includes stories from banking to show which measures can help agile teams determine not only if features are being used, but diagnose other common issues too.
-
/articles/remote-agile-governance/en/smallimage/using-remote-agile-governance-to-create-the-culture-organisations-need-small-1666608335110.jpg)
Using Remote Agile Governance to Create the Culture Organisations Need
Governance and culture are inextricably intertwined, and creating an environment where people thrive is the most important governance responsibility. Sadly, in many organisations governance is perceived as slowing things down and impeding progress, yet effective governance is an enabler that removes blockages and enables flow.
-
/articles/polygot-microservices-dapr-aks/en/smallimage/logo-1666079703389.jpg)
Polyglot Microservices Communication Using Dapr on AKS
Dapr is a useful tool for solving several challenges engineers might face. It allows engineering organizations to gain productivity by training developers on a common set of tools and techniques. It also helps adopt standardization in development, deployment, and debugging.
-
/articles/business-impact-code-quality/en/smallimage/logo-1665740739711.jpg)
Code Red: the Business Impact of Code Quality
Everyone in the software industry “knows” that code quality is important, yet we never had any data or numbers to prove it. In this article, we explore the impact by diving into recent research on code quality. With twice the development speed, 15 times fewer bugs, and a significant reduction of uncertainty in completion times, the business advantage of code quality is unmistakably clear.
-
/articles/ebpf-service-mesh/en/smallimage/ebpf-service-mesh-small-logo-1665571213645.jpg)
eBPF and the Service Mesh: Don't Dismiss the Sidecar Yet
While eBPF looks promising to improve service mesh sidecar proxy performance, there are other, simplier ways to improve performance. The layer 7 processing needed for service meshes is unlikely to be feasible in eBPF for the foreseeable future, which means that meshes will still need proxies.
-
/articles/shift-left-api-standardization/en/smallimage/GettyImages-1059510610-1664896147152.jpg)
Shift Left Approach for API Standardization
Descriptions about API standardization using common tools like OpenAPI and Zally, to simplify re-use across microservices between teams. Reviews against best practices such as an API stylebook and guidelines from Microsoft and Google.