Cloud Infrastructure in Practice: Lessons From Real Deployments

Edge Caching: The interesting number is not the average, it is the 99th percentile. Edge Caching: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Edge Caching: Every abstraction you add is a place where behaviour can differ from intent.

Serving static bytes is the cheapest thing you can do at the edge. The same reasoning holds for monitoring alerts. For monitoring alerts, the constraint matters more than the feature list. A schema is an interface; changing it is a migration, not an edit. Teams working on monitoring alerts usually discover this the hard way. Track the denominator as carefully as the numerator.

Schema Migration: Configurations should be reviewable in a diff, not only in a console. Schema Migration: The best time to add an index is before the table gets large. Schema Migration: Failures are usually correlated, so plan for the shared dependency.

Edge Caching: A queue smooths spikes but also hides how far behind you are. Retries without jitter turn a small outage into a large one. That applies to edge caching as well. In practice, edge caching behaves differently: Separating the reads from the writes buys room to change either side.

Consider load balancing specifically. Serving static bytes is the cheapest thing you can do at the edge. Load Balancing: A schema is an interface; changing it is a migration, not an edit. Track the denominator as carefully as the numerator. That applies to load balancing as well.

Use statements about your own needs rather than trying to guess your partner’s intentions. You might say, “I’m comfortable with this, but not with that,” or, “I need us to stop if I say pause.” Be specific about what you mean by words such as “slow down” or “check in.” Ask your partner what they are comfortable with, and leave room for an answer without interrupting or arguing.

For schema migration, the constraint matters more than the feature list. Periodic jobs should be safe to run twice, because they will be. Teams working on schema migration usually discover this the hard way. You rarely need a new component to fix a boundary problem. The signal you want is often already logged, just not aggregated. This is most visible in schema migration.

Configurations should be reviewable in a diff, not only in a console. This is most visible in crawl budget. Consider crawl budget specifically. The best time to add an index is before the table gets large. Crawl Budget: Failures are usually correlated, so plan for the shared dependency.

For rate limiting, the constraint matters more than the feature list. Configurations should be reviewable in a diff, not only in a console. Teams working on rate limiting usually discover this the hard way. The best time to add an index is before the table gets large. Failures are usually correlated, so plan for the shared dependency. This is most visible in rate limiting.

Consider storage tiers specifically. You can often replace a coordination problem with an idempotency key. Storage Tiers: Anything that grows without a bound will eventually hit one. Documentation that is not tested tends to describe the previous version. That applies to storage tiers as well.

Access Control: The interesting number is not the average, it is the 99th percentile. Access Control: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Access Control: Every abstraction you add is a place where behaviour can differ from intent.

Serving static bytes is the cheapest thing you can do at the edge. That applies to cost controls as well. In practice, cost controls behaves differently: A schema is an interface; changing it is a migration, not an edit. Track the denominator as carefully as the numerator. The same reasoning holds for cost controls.

Edge Caching: You can often replace a coordination problem with an idempotency key. Edge Caching: Anything that grows without a bound will eventually hit one. Edge Caching: Documentation that is not tested tends to describe the previous version.

Consider rate limiting specifically. If the rollback plan needs a meeting, it is not a rollback plan. Rate Limiting: Small pages that stay small are easier to keep fast than large ones made fast. Write the invariant down; otherwise it lives only in someone's memory. That applies to rate limiting as well.

Observability: A design that cannot be rolled back is a design that cannot be changed safely. Observability: Latency budgets are easier to defend when every hop has a stated ceiling. Observability: Caching helps only until the invalidation rules become the bottleneck.

Observability: The first thing to settle is the failure mode, not the happy path. Observability: Measurements taken once are anecdotes; you need a baseline that repeats. Observability: Costs usually concentrate in a small number of operations, so find those first.

Release Process: A design that cannot be rolled back is a design that cannot be changed safely. Release Process: Latency budgets are easier to defend when every hop has a stated ceiling. Release Process: Caching helps only until the invalidation rules become the bottleneck.

Monitoring Alerts: You can often replace a coordination problem with an idempotency key. Monitoring Alerts: Anything that grows without a bound will eventually hit one. Monitoring Alerts: Documentation that is not tested tends to describe the previous version.

Configurations should be reviewable in a diff, not only in a console. This is most visible in load balancing. Consider load balancing specifically. The best time to add an index is before the table gets large. Load Balancing: Failures are usually correlated, so plan for the shared dependency.

A check-up does not necessarily include a physical examination. Many screening visits rely on questions, urine or swab samples, and blood tests; an examination is considered when it is relevant to the person’s concerns or clinical assessment. Patients can ask what an examination involves and discuss consent before it begins.

Schema Markup: The first thing to settle is the failure mode, not the happy path. Schema Markup: Measurements taken once are anecdotes; you need a baseline that repeats. Schema Markup: Costs usually concentrate in a small number of operations, so find those first.

Separate a boundary from a preference where you can. A preference describes something you like or would choose; a boundary describes what you are not willing to do, or what you need in order to feel comfortable. Both are useful information, but a boundary should not be treated as an opening offer to negotiate. You can say, “I’m not comfortable with that,” without supplying a detailed reason.

Load Balancing: Serving static bytes is the cheapest thing you can do at the edge. Load Balancing: A schema is an interface; changing it is a migration, not an edit. Load Balancing: Track the denominator as carefully as the numerator.

Queue Design: A design that cannot be rolled back is a design that cannot be changed safely. Queue Design: Latency budgets are easier to defend when every hop has a stated ceiling. Queue Design: Caching helps only until the invalidation rules become the bottleneck.