InfoQ Homepage Articles
-
/articles/gcp-wif-scale/en/smallimage/gcp-wif-scale-thumbnail-1787838950646.jpg)
Eliminating Long-Lived Credentials in GCP with Workload Identity Federation
Long-lived GCP service account keys are secrets that must be managed forever, are hard to rotate, and are easy to leak. Scaling Workload Identity Federation to 120+ production projects shows why it changes how machine identity is approached entirely: keys are secrets to manage, federated identities are trust relationships configured once, gated by attribute conditions.
-
/articles/pqc-in-spring-boot/en/smallimage/pqc-in-spring-boot-thumbnail-1787646727709.jpg)
Post-Quantum Cryptography in Spring Boot: Four Patterns You Can Ship This Sprint
There are four patterns that bring PQC into a Spring Boot fleet: encrypting payloads between services, locking down database fields, signing documents that need to hold up for decades, and moving service tokens off RS256. Along the way, we discuss why Harvest Now, Decrypt Later is already happening, and why none of this is production-safe until KMS or Vault is in place.
-
/articles/beyond-offset-lag-kafka-apache-hudi/en/smallimage/beyond-offset-lag-kafka-apache-hudi-thumbnail-1787577734265.jpg)
Beyond Offset Lag: Computing Time in Queue for Apache Hudi Data Lake Pipelines at Petabyte Scale
In this article, author Srikanth Mamidala discusses the data lake architecture used for analytics, reporting, and machine learning and shows how to manage the consumer lag metrics when using Kafka and Apache Hudi.
-
/articles/rightsizing-platform-engineering/en/smallimage/rightsizing-platform-engineering-thumbnail-1787296955801.jpg)
Rightsizing Platform Engineering: Building the Platform Your Organization Actually Needs
Shift-left and DevOps have impacted how we flow changes from inception to production, but at the cost of increased cognitive load and duplication of effort across testing, security, and maintenance. This article explores the real-world challenges of rightsizing developer platforms and finding a cultural match for engineering teams who use them to reduce cognitive load and deliver change faster.
-
/articles/agentic-fitness-functions-evolutionary-architecture/en/smallimage/thumbnail-1786428822427.jpg)
Agentic Fitness Functions: Extending Evolutionary Architecture Beyond Deterministic Rules
Deterministic rules safeguard hard metrics, but what about architectural intent? Discover how agentic fitness functions combine AI agents and versioned rubrics to evaluate complex, judgment-heavy concerns—such as boundary fidelity, semantic contract drift, and stale ADR assumptions. Elevate evolutionary architecture governance with continuous, calibrated feedback loops.
-
/articles/cloud-devops-trends-2026/en/smallimage/infoq-trends-report-small-logo-1785421405039.jpeg)
InfoQ Cloud and DevOps Trends Report - 2026
InfoQ editorial staff and friends of InfoQ are discussing the current trends in the domain of Cloud and DevOps as part of the process of creating our annual 2026 trends report.
-
/articles/system-comprehension-evolutionary-architecture/en/smallimage/thumbnail-1786087830832.jpg)
Comprehension as an Architectural Characteristic: A System That Is Not Understood Cannot Evolve Safely
As AI commoditizes code output, system comprehension silently decays, creating cognitive debt that threatens safe architectural evolution. This article explores why human understanding must be treated as an essential architectural characteristic, offering actionable strategies, socio-technical metrics, and design checkpoints to preserve intent across modern engineering teams.
-
/articles/culture-trends-2026/en/smallimage/infoq-trends-report-small-logo-1784644382346.jpeg)
InfoQ Culture and Methods Trends Report - 2026
This report summarizes how the InfoQ Culture and Methods editorial team sees the ongoing and emergent trends in the culture and methods space in 2026.
-
/articles/ai-workflow-pattern/en/smallimage/thumbnail-1785766770921.jpg)
Runtime-Agnostic AI Workflows: a Pattern for Production Durability and Fast Eval Iteration
AI workflows have two needs that trade off directly. Running reliably in production requires persisting and distributing every step so it survives crashes, deploys, and restarts. But that same machinery is what makes runs too heavy for the fast, throwaway loop you need to check an LLM's output quality. The properties that buy durability are the ones that kill iteration speed.
-
/articles/evolutionary-architecture-change-locality/en/smallimage/evolutionary-architecture-change-locality-thumbnail-1785239081753.jpg)
Enabling Evolutionary Architecture through the Preservation of Change Locality
Why do simple features suddenly require cross-team negotiations? In this article, explore how boundary drift quietly destroys change locality and increases cognitive load across teams. Learn practical sociotechnical strategies - redistributing mechanics, exposing essential policy, and rehearsing exception paths - to restore domain boundaries and enable a truly evolutionary software architecture.
-
/articles/virtual-threads-after-jdk24/en/smallimage/virtual-threads-after-jdk24-thumbnail-1785232507934.jpg)
Virtual Threads after JDK 24: What Changed for Production Java
JDK 24 removed the monitor-related carrier-thread pinning that stalled Netflix and similar teams on Java 21. What has replaced it on JDK 25 LTS is downstream-resource saturation: the bottleneck moved and now demands explicit bounding in application code. This article maps the failure modes that surface after virtual-thread adoption and gives a practical sequence backed by a public benchmark.
-
/articles/securing-mcp-production-gateway/en/smallimage/securing-mcp-production-gateway-thumbnail-1784884301110.jpg)
Securing MCP in Production: Defense-in-Depth beyond the Gateway
This article presents a defense-in-depth approach for securing Model Context Protocol (MCP) deployments in production. It outlines four architectural control layers: safe execution, management infrastructure, outbound trust, and semantic integrity, arguing that production security requires enforcement beyond the gateway at the earliest trustworthy control points.