Having 12+ Years of Experience in Software Development
Understanding the Linux OOM Killer The Out-Of-Memory (OOM) Killer is a crucial component of the Linux kernel designed to prevent a system from crashing entirely when it runs out of available memory. When the kernel detects that memory pressure is too high and cannot satisfy new memory allocation requests, it invokes the OOM Killer. This […]
Establishing a Highly Available MySQL Cluster with Orchestrator For a Magento 2 deployment, a robust and highly available MySQL infrastructure is paramount. We’ll architect an automated failover solution using Orchestrator, a popular MySQL replication topology manager. This setup will involve a primary (leader) instance and at least two replicas (followers), with Orchestrator monitoring their health […]
Assessing Lightweight WordPress Themes: Beyond the Hype For e-commerce operations, particularly those sensitive to operational expenditure and user experience, the choice of a WordPress theme is a critical architectural decision. Beyond aesthetic appeal, a theme’s codebase directly impacts server load, response times, and ultimately, conversion rates. This analysis focuses on themes that demonstrably minimize HTTP […]
Leveraging Custom WordPress Walkers for Asynchronous Asset Loading Optimizing asset loading, particularly under high concurrency, is paramount for maintaining performant WordPress sites. Traditional methods often involve enqueuing scripts and styles synchronously, which can block the rendering path. This section details how to build custom walker classes to defer or asynchronously load JavaScript and CSS, ensuring […]
Understanding Broken Object Level Authorization (BOLA) in API Gateway Endpoints Broken Object Level Authorization (BOLA), also known as Insecure Direct Object References (IDOR) in certain contexts, is a critical security vulnerability where an API endpoint allows a user to access or manipulate objects they are not authorized to. In a Ruby monolith exposed via an […]
Identifying Insecure File Upload Vulnerabilities in Magento 2 Remote Code Execution (RCE) via insecure file uploads remains a persistent threat, particularly in complex e-commerce platforms like Magento 2. Attackers exploit vulnerabilities in how the platform handles user-submitted files, bypassing intended restrictions to upload malicious scripts that can then be executed on the server. This often […]
Leveraging PostgreSQL’s Built-in Caching and External Solutions for High-Throughput C++ APIs Scaling PostgreSQL to handle high-throughput API requests, particularly those served by C++ applications, necessitates a multi-pronged approach. This involves optimizing PostgreSQL’s internal caching mechanisms, implementing external caching layers, and fine-tuning the interaction between the C++ client and the database. I. PostgreSQL Shared Buffers: The […]
Diagnosing PHP-FPM OOM Killer Events The Linux Out-Of-Memory (OOM) Killer is a kernel mechanism designed to reclaim memory when the system is critically low. While essential for system stability, it can be a disruptive force when it targets user-space processes like PHP-FPM workers, especially in legacy Laravel applications where memory leaks or inefficient resource management […]
Initial Stack Assessment and OVH Environment Deep Dive Our engagement began with a comprehensive audit of a high-traffic Magento 2 Enterprise Edition (now Adobe Commerce) stack hosted on OVHcloud’s dedicated server infrastructure. The primary concern was a potential XML External Entity (XXE) injection vulnerability, suspected to be present in legacy SOAP integrations that were still […]
Example: Indexing documents with a `tenant_id` field and using it for routing. Indexing with routing (using `_bulk` API): POST /my-index/_bulk { “index” : { “_routing” : “tenant_123” } } { “field1” : “value1”, “tenant_id” : “tenant_123” } { “index” : { “_routing” : “tenant_456” } } { “field1” : “value2”, “tenant_id” : “tenant_456” } Querying […]