SignalR is great, but sometimes you want raw WebSockets or support for other languages (Python, Java clients). **Azure Web PubSub** is a managed WebSocket service that supports native WebSocket clients and the PubSub subprotocol. Architecture The service handles the massive concurrent connections. Your server only handles events (Connect, Message) via Webhooks. Key Takeaways Supports standard […]
Read more βAuthor: Nithin Mohan TK
TypeScript 4.3: Template String Types
TypeScript 4.3 turns the type system into a programming language itself. Template Literal Types You can now concatenate types! This is incredibly useful for typing strings that follow a specific pattern, like CSS classes or Event names.
Read more βHardening Kubernetes: Moving away from Pod Security Policies
Pod Security Policies (PSP) are deprecated in K8s 1.21. The industry is moving to Pod Security Standards (PSS) and Admission Controllers like OPA Gatekeeper or Kyverno. The New Standard Kubernetes now has built-in labels for namespaces to enforce security levels: Setting this label automatically rejects any Pod that tries to run as Root or mount […]
Read more βAzure SQL Database Ledger: Blockchain power in SQL
Ledger functionality adds tamper-evidence to Azure SQL. It cryptographically links blocks of transactions together (like a blockchain), creating an immutable history. If a DBA tries to modify a row in the history table directly, the cryptographic verification fails. Creating a Ledger Table Verification You can run a stored procedure to verify the integrity of the […]
Read more βWebpack 5 vs Vite: The Bundler Wars
Webpack has dominated for years. But Vite (powered by esbuild) is 100x faster. Why Vite is Fast Webpack bundles your entire application before serving it. Vite serves source files over native ESM (ES Modules). The browser does the importing. On a large React project, our startup time went from 45 seconds (Webpack) to 300ms (Vite). […]
Read more βContainer Security: Running as Non-Root
By default, Docker containers run as `root`. If an attacker compromises the app, they have root access to the container (and potentially the host). Running as a non-root user is a critical security best practice, mandated by policies like Azure Policy for Kubernetes. The Dockerfile Fix Key Takeaways You cannot bind to ports < 1024 […]
Read more β