Software Architecture and System Design News
Latest curated articles from top engineering blogs
Shopify
AWS454 articles
Scaling Vendor Payments: Lessons from Stripe's Global Payouts Migration
This article details Stripe's internal migration of $1 billion in vendor payments to their Global Payouts product, highlighting key architectural and operational lessons learned. It focuses on the challenges of managing diverse banking integrations at scale and the benefits of standardizing payment processing through a unified API, improving data validation, payment visibility, and handling high-value transactions. The experience underscores the importance of a robust, scalable payment orchestration layer.
Architectural Trends for Embedded and Always-On Financial Services
This article discusses emerging trends in financial services focusing on embedding financial capabilities into existing applications and enabling 24/7 operations using stablecoins. It highlights architectural considerations for abstracting complex financial infrastructure from end-users, facilitating real-time transactions, and designing agentic payment systems that preserve consumer intent and security controls.
Architecting for Localized Compliance: Cloudflare's ISMS-P Certification
This article discusses Cloudflare's process of achieving South Korea's ISMS-P certification, highlighting the architectural changes and considerations made to localize user consent flows and data handling. It emphasizes how global systems must adapt to specific regional legal and privacy requirements, demonstrating a practical approach to building compliance into core system functionality rather than as an afterthought.
Decoupling Components with the Observer Pattern in System Design
This article explores the Observer Pattern as a behavioral design pattern to achieve loose coupling between components in a system. It defines the subject-observer relationship, illustrating how it enables one-to-many communication where changes in a subject automatically notify interested observers without tight dependencies. The pattern helps in designing systems where multiple parts need to react to a single event independently, improving maintainability and extensibility.
Sacrificial Architecture: Designing for Evolvability and Planned Obsolescence
Sacrificial architecture is a strategic approach in system design that involves deliberately building components or services with the explicit intention of replacing them in the future. This pattern acknowledges the evolutionary nature of systems and business requirements, advocating for temporary solutions that are right for the current moment, rather than over-engineered "forever" versions. Key principles include isolating sacrificial components behind stable interfaces and protecting durable assets like the core domain model and data.
Enhancing WAF Security with Full Transaction Detection
Cloudflare introduces full transaction detection and response rules for its Web Application Firewall (WAF). This new capability evaluates both HTTP requests and their corresponding responses to identify complex exploitation patterns, moving beyond request-only analysis. It allows for more precise detection of vulnerabilities like data exposure or successful exploits, improving overall application security by enabling real-time blocking of malicious responses.
Architectural Decision Points in AI-Assisted Development
This article discusses three critical architectural decision points that often arise, even with AI coding assistance: managing file growth by identifying and extracting responsibilities, justifying service separation based on clear requirements, and considering hardware-software constraints in system planning. It emphasizes that AI tools can help by providing prompts for these decisions rather than making them automatically.
Designing a Scalable SVG Icon Platform
This article explores the architectural considerations and design decisions behind building a robust platform for managing and delivering SVG icons across various digital products, including websites, mobile applications, and design systems. It highlights the challenges of consistency, performance, and maintenance when dealing with a large library of visual assets.
Designing an Arbitration Layer for Routing Requests to Specialized AI Models
This article discusses the architectural challenges and trade-offs of using an arbitration layer to route requests across multiple smaller, specialized AI models instead of a single generalist model. It highlights the complexities of managing permissions, sequencing multi-step tasks as DAGs, and the hidden coordination costs, offering insights into building robust AI-driven systems with modular components.
Building a Robust AI Gateway with a Plugin Architecture in Rust
Respan re-architected their AI gateway in Rust, adopting a small core and plugin-based approach after facing maintenance challenges with a large wrapper around LiteLLM. This new design emphasizes modularity, allowing developers to extend functionality for model providers, routing, and security through compile-time plugins, enhancing resilience and simplifying updates.
Designing Identity and Access Governance Systems: Key Architectural Considerations
This article explores the foundational ideas behind Haseen, a project aimed at simplifying identity and access governance (IAG). It delves into the architectural challenges of managing permissions, roles, and temporary access in a growing organization, emphasizing the importance of a robust data model and backend enforcement for security and reliability.
Distributed Systems Archetypes: Pattern Recognition for Recurring Design Problems
This article extends a framework for recognizing recurring design problems and architectural patterns in distributed systems. It helps engineers identify common solutions to complex challenges, promoting efficient and robust system design. Understanding these archetypes is crucial for making informed architectural decisions and avoiding common pitfalls.