A framework for choosing the right metrics What are “lamp post metrics”? If you lose your keys between the restaurant and the car on a dark night, when you go back to look for them, where are you going to look? Of course, you are going to first look where there is light — under…

You don’t always want to maintain state in durable object instance properties, but if you do, you need to rehydrate them when your durable object (DO) is reinstantiated. This is because an inactive DO can be ejected from memory at any time. Cloudflare’s documentation describes using state.blockConcurrencyWhile() in your constructor…

This is what the Durable Object Runtime API Documentation says about transactions: Explicit transactions are no longer necessary. Any series of write operations with no intervening await will automatically be submitted atomically, and the system will prevent concurrent events from executing while awaiting a read operation (unless you use allowConcurrency…

You are forecasting that your choice is going to have better outcomes for you or your organization than the alternatives. I’ve often spoken on this topic but this is the first time I’ve put it into a long-form post and this version is going to have a decidedly engineering spin…

Correct me if I got this wrong, but you seem to be arguing against WASI and in favor of keeping WASM isolated. Your primary reasons seem to be security and bloat. Did I get that right? I am targeting WASM in Cloudflare's edge environment for a few of use cases…

I have a tendency to live in the future but I get it right more often than I get it wrong and on this front, I see containers as a transitional technology. The AWS Fargate offerings (ECS vs EKS) are the next step forward and you don't really need to know anything about Kubernetes to get load balancing, auto-scaling, etc. I believe that functions as a service combined with message bus architectures and storage as a service will win out in the end. I don't care what the OS base image is for my Lambda apps so it eliminates that maintenance among many others I still have to deal with using containers. It's possible today to build highly scalable apps completely in something like Lambda today.

The bad guys don’t break in through the highly secure bank vault door; they attack the crumbly bricks and mortar of the vault walls. The same is true for application security. The vast majority of incidents don’t target security features like encryption, authentication, and authorization… the bank vault door. Rather…