Proxies, caches and request smuggling
4 guides tagged Proxies, caches and request smuggling, grouped by topic, with the SDLC phase and role each is written for.
- SDLC phases
Runtime, cloud & APIs
4 guidesMaintain an API inventory and prevent gateway bypass
Connect documented routes, deployed listeners and backend trust so retired or direct paths do not bypass the intended controls.
Development, Maintenance · Developers, Platform engineers and SREs
Keep HTTP request boundaries consistent across intermediaries
Trace framing disagreements, reject ambiguous requests and verify what reaches the origin with a real loopback proxy project.
Maintenance · Developers, Platform engineers and SREs
Prevent shared-cache poisoning and private-response deception
Define lookup and storage policy, trace cache/origin interpretation differences and verify both public reuse and private isolation.
Design, Maintenance · Developers, Platform engineers and SREs
Keep HTTP services up under application-layer DDoS
Bound every phase of an HTTP request, patch for the HTTP/2 attack classes, rate limit at the edge and the origin, and shed load deliberately, with nginx, Envoy and Node.js settings tested against slow clients and bursts.
Development, Maintenance · Platform engineers and SREs