Actuator isn't the problem. The problem is enabling it without a clear exposure policy. A pragmatic guide to using it as an operational tool without turning it into unnecessary public attack surface.
Jul 06 2026 · 8′ · Tutorials · devops · backend
Not every signature error is a cryptographic problem. Most of the time the mess is in the format you picked, the certificate that doesn't fit the required profile, or the validation policy the verifier applies. A guide to understanding each layer before you blame the algorithm.
Jul 02 2026 · 9′ · Tutorials · seguridad · pki
Actuator isn't the problem. Enabling it without a clear exposure policy is. A practical guide to using it as an operational tool without turning it into unnecessary public attack surface.
Jun 17 2026 · 8′ · Tutorials · devops · backend
Actuator isn't the problem. The mistake is adding it to a project with no clear exposure policy. Here I break down which endpoints to enable, which to block, and what decisions to make before the first deploy.
Jun 01 2026 · 7′ · Tutorials · backend · produccion
Auth tutorials show you the happy path. The real problems in digital identity show up in revocation, state-change propagation, and the trust model. A decision guide from the inside.
May 30 2026 · 9′ · Tutorials · backend · seguridad
When a digital signature fails, the instinct is to look at cryptography. Most of the time the problem is format or validation policy. Here I separate the three layers so the next error doesn't cost you hours.
May 29 2026 · 10′ · Tutorials · seguridad · certificados
Same backend, same database, same k6. In the first runs it looked like Embedded GlassFish was on top. When I fixed JDK, warmup, window, heap, and DB attribution, the story changed: Spring Boot ended up with the best local profile for this workload. Payara Micro was the cleanest Jakarta EE by check failures. GlassFish surprised by being viable.
May 28 2026 · 10′ · Experiments · Performance · backend
I built a reproducible lab with Spring Boot 3.5, Java 21, AppCDS, AOT, and GraalVM Native. The conclusion isn't that native wins or that classic JVM loses: it's that in 2026, comparing only startup time is the fastest way to make an architecture decision with incomplete data.
May 17 2026 · 5′ · Experiments · Performance · arquitectura
OpenTelemetry doesn't improve performance. It improves diagnostic quality when a slow request mixes DB, downstream, N+1, and partial errors. This reproducible lab shows which signals stay hidden when you only have logs, and what appears when you look at the trace.
May 16 2026 · 5′ · Experiments · Experimentos · backend
Architecture, real systems, product decisions and technical lessons. Everything reviewed with my own judgment before it ships.
215 articles published