Backend Architecture
Blocking vs non-blocking I/O: two ways to wait
Time a typical request handler and the surprise is how little of it is your code. It reads a row from Postgres, calls a payment API, writes a log line — and spends 95% of its wall-clock time doing nothing but waiting for those to come back. The whole game of backend concurrency is: what does the program do while it waits? Two answers split the entire field. One parks a thread on every wait. The other refuses to park anyone and asks the kernel to tap it on the shoulder when data is ready.
Waiting is the job
A backend is mostly an I/O machine. Disk reads, database queries, outbound HTTP, socket writes — each is slow relative to the CPU (microseconds to milliseconds, while the CPU runs billions of instructions a second). So the design question is never “how fast is my code” first; it is “how does the runtime spend the wait.” Two I/O models give opposite answers, and the choice shapes how the server scales, how much memory it eats, and how it fails under load.
Blocking I/O: one thread per connection
In the blocking model, a thread calls read() and the operating system suspends that thread until bytes arrive. The thread is parked — consuming its stack and a scheduler slot — doing nothing useful. To serve a second connection concurrently you need a second thread, a third needs a third, and so on: thread-per-connection.
This is simple and easy to reason about — the code reads top to bottom, each line waits for the last — but it scales by adding threads, and threads are not free. Each OS thread reserves roughly 1–2 MB of stack, so 10,000 concurrent connections imply on the order of 10+ GB of memory just for stacks, plus thousands of context switches per second as the scheduler shuffles parked threads. The model trades memory for simplicity.
Non-blocking I/O: one thread, many sockets
In the non-blocking model, a socket is set to non-blocking mode and read() returns immediately — either with data or with “not ready yet.” Instead of parking, the thread registers interest in many sockets with a kernel facility — epoll on Linux, kqueue on BSD/macOS — and asks one question: “which of these thousands of file descriptors are ready right now?” The kernel returns only the ready ones, in roughly O(1) time regardless of how many are being watched. The thread services those, then asks again. That loop is the event loop.
One thread can therefore drive tens of thousands of connections, because it only ever touches sockets that have actual work. The cost is a different shape of code: you cannot read top-to-bottom and “wait” — you register a callback (or await) and the loop calls you back later. Logic that was a straight line becomes a set of continuations.
Why this works
Why does the kernel facility matter so much? The naive way to watch many sockets is to loop over all of them asking “ready? ready? ready?” — that is select/poll, and it costs O(n) per pass, so watching 10,000 sockets means scanning 10,000 every time even if one is ready. epoll/kqueue invert this: you register the set once, and the kernel hands back only the descriptors that became ready, so the cost tracks the number of active connections, not total connections. This is the mechanism that makes “one thread, 50,000 idle keep-alive connections” actually cheap — the idle ones cost almost nothing because the loop never visits them until they have data.
The C10k framing and the real tradeoff
This split was named by the C10k problem (~1999): how do you serve 10,000 concurrent clients on one box? Thread-per-connection hit a memory and context-switch wall; the event-loop model — Nginx, Node.js, Netty, Redis — was the answer. The honest summary:
- Blocking / thread-per-connection trades memory and context-switch overhead for simplicity. Great when connection counts are modest or work is CPU-heavy; the code stays linear.
- Non-blocking / event loop trades code complexity (callbacks, continuations, no parking) for scalability under many concurrent, mostly-idle connections.
Neither is universally “faster.” For I/O-bound workloads with high concurrency, the event loop wins decisively on memory and connection count. For CPU-bound work, a single event-loop thread is no faster than any other single thread — a limit the next lessons make sharp.
| Blocking (thread-per-connection) | Non-blocking (event loop) | |
|---|---|---|
| Waiting | Thread parked by OS | Kernel watches FDs, thread moves on |
| 10k connections | ~10+ GB stacks, many context switches | One thread, memory ~ active conns |
| Code shape | Linear, top-to-bottom | Callbacks / await, continuations |
| Scales by | Adding threads | Adding ready-event throughput |
| Best for | Modest concurrency, CPU-heavy | High concurrency, I/O-bound |
Why does a thread-per-connection server struggle to hold 50,000 mostly-idle keep-alive connections?
What does `epoll`/`kqueue` give the event loop that a naive `select`/`poll` scan does not?
Order what a non-blocking server does to serve a read on one of many sockets:
- 1 Set the socket to non-blocking mode and register it with epoll/kqueue
- 2 Ask the kernel which of the watched descriptors are ready
- 3 Kernel returns only the ready descriptors
- 4 Run the callback for each ready socket, reading the available bytes
- 5 Loop back and ask the kernel again
- 01Why is 'how the runtime spends the wait' the central question for a backend, rather than raw code speed?
- 02How does blocking thread-per-connection work and what is its scaling cost?
- 03How does non-blocking I/O with an event loop serve many connections on one thread, and what does epoll/kqueue contribute?
A backend spends most of its life waiting on I/O, so the model for how it waits decides everything downstream. Blocking I/O parks a thread on each wait: linear, easy code, but each thread costs roughly 1–2 MB and a scheduler slot, so thread-per-connection turns 10,000 connections into 10+ GB of stacks and a storm of context switches — memory traded for simplicity. Non-blocking I/O sets sockets non-blocking, returns immediately, and registers them with epoll or kqueue so one thread asks the kernel which descriptors are ready and services only those — scaling to tens of thousands of connections because idle ones cost almost nothing, at the price of callback- or await-shaped code. The C10k problem named this divide, and the event loop became the standard answer for high-concurrency I/O-bound servers. The next lesson opens that loop up: the ordered phases it runs, the microtask queue it drains between them, and why this concurrency is cooperative rather than parallel.
appears again in185
- Tasks, microtasks, and scheduler.yield()middle
- Timer accuracy, throttling, and idle workmiddle
- Node.js event loop: phases, nextTick, and loop lagsenior
- Rendering strategies: SSG, SSR, ISR, streaming, and hydrationjunior
- SSG, SSR, ISR, streaming, and RSC — how each worksmiddle
- Hydration cost: selective, progressive, islands, resumabilitymiddle
- Core Web Vitals: what LCP, INP, and CLS measurejunior
- LCP: four phases, one dominant costmiddle
- INP: input delay, processing, presentationmiddle
- Lab vs field: why the two disagree and how to use eachmiddle
- Metric tradeoffs, RUM attribution, and the CI+field loopsenior
- The full picture: URL to LCP to INP as a relay racejunior
- Eight layers traced: from the service worker to the second navigationmiddle
- Five canonical breaks: where production reliably diessenior
- The three-track method: reading traces and building a monitored systemsenior
- What an index is and how it speeds up queriesjunior
- The leading-column rule and composite index designmiddle
- Partial, expression, and covering indexesmiddle
- Index types: GIN, GiST, BRIN, Hash, Bloom, and HOT updatesmiddle
- Index-only scans, the Visibility Map, and INCLUDEsenior
- Production failure modes and the index audit playbooksenior
- Index design exercise: full-text search strategysenior
- EXPLAIN and execution plans: what the planner decides and whyjunior
- Scan types: Seq, Index, Bitmap, Index-Onlymiddle
- Join algorithms and the row-estimate cascademiddle
- pg_statistic, ANALYZE, and production observabilitymiddle
- Extended statistics: fixing correlated-column estimate failuressenior
- Plan cache, cost-constant tuning, and planner internalssenior
- Production failure modes and plan stabilitysenior
- Connection pools: amortising the cost of a Postgres backendjunior
- PgBouncer session, transaction, and statement modesmiddle
- Pool sizing: the (cores × 2) + spindles formula and the two-layer stackmiddle
- Pool exhaustion and idle-in-transaction: the 3 AM failure modemiddle
- Migrating to transaction mode: rollout playbook and PgBouncer 1.21 prepared statementsmiddle
- The Postgres process model and why raising max_connections degrades throughputsenior
- Pooler landscape 2026, serverless connection storms, and the full failure-mode taxonomysenior
- ADD COLUMN: instant in PG 11+ vs rewrite in older Postgresjunior
- The lock-queue failure mode: why instant DDL can freeze the databasemiddle
- Safe DDL patterns: NOT VALID, CONCURRENTLY, and unsafe-op fixesmiddle
- Migration failure taxonomy and production disciplinesenior
- Shard-key selection: hash, range, list, and directory strategiesmiddle
- Co-location and Citus: the invariant that makes sharding usablemiddle
- The hot-shard failure mode: detection, isolation, and durable policymiddle
- Online resharding, 2PC, and the operational cost of shardingsenior
- The seven acts: from CREATE TABLE to Citusjunior
- Acts 1–3 in depth: schema, indexes, and planner statisticsmiddle
- Acts 4–6 in depth: MVCC bloat, connection pooling, and safe migrationsmiddle
- Act 7 in depth: sharding, co-location, and the seven-tier tradeoff cascademiddle
- Observability, anti-patterns, and production triagesenior
- Bits on the wirejunior
- Latency mathmiddle
- Bufferbloat and congestionsenior
- The physical frontiersenior
- Sequence numbers and connection statemiddle
- Flow control and congestion controlmiddle
- BBR, production observability, and beyond TCPsenior
- CDN: putting content next doorjunior
- Anycast and GeoDNS: routing to the nearest edgemiddle
- Tiered cache and Cache-Controlmiddle
- Vary header and cache keysmiddle
- Stale-while-revalidate and cache stampedesenior
- Edge workers and edge-side compositionsenior
- CDN operations and observabilitysenior
- WebSocket: the HTTP upgrade handshakejunior
- WebSocket vs SSE vs long-polling: choosing the right transportmiddle
- WebSocket backpressure: when clients can''''t keep upmiddle
- Reconnection: jittered backoff, thundering herd, message resumptionsenior
- WebSocket at scale: HTTP/2 multiplexing, permessage-deflate, C10Msenior
- WebSocket in production: proxies, security, and distributed architecturesenior
- What reverse proxies dojunior
- Balancing algorithms: round-robin to power-of-two-choicesmiddle
- L4 vs L7 load balancing and client-IP preservationmiddle
- Health checks, connection draining, and slow startmiddle
- Retry storms, circuit breakers, and load sheddingsenior
- Resilient LB architecture: anycast, zone-aware routing, and observabilitysenior
- Why QUIC and not TCP+TLSjunior
- QUIC streams and head-of-line blockingjunior
- Integrated handshake and 1-RTTmiddle
- Connection IDs and network migrationmiddle
- Loss detection and congestion controlmiddle
- 0-RTT resumption and packet encryptionsenior
- Deployment tradeoffs and CPU costsenior
- DDoS: what it is and why it worksjunior
- Amplification attacks and state exhaustionmiddle
- Rate limiting: algorithms and architecturemiddle
- WAFs, firewalls, mTLS, and HSTSmiddle
- DNS cache poisoning and BGP hijackingsenior
- Defense-in-depth architecture and attack economicssenior
- The twelve layers: one URL, seven actorsjunior
- DNS, TCP, TLS in sequence: where the milliseconds gomiddle
- Critical render path and Core Web Vitalsmiddle
- Proxy intercepts and security gates: rate limiters, WAF, mTLSmiddle
- Alternate paths: QUIC 0-RTT, WebSocket upgrade, connection migrationmiddle
- Observability: distributed traces, USE/RED, and samplingsenior
- Resilience: cascading retries, circuit breakers, and error budgetssenior
- What the three signals are: logs, metrics, and tracesjunior
- Metrics and cardinality: the cost model of a time-series databasemiddle
- Logs and volume: the cost model of structured loggingmiddle
- Traces and sampling: the cost model of distributed tracingmiddle
- Join keys and exemplars: making the three signals composemiddle
- Observability 2.0: wide events and the cost shiftsenior
- Failure modes and engineering practice: cardinality budgets, PII, and samplingsenior
- Why structured logs exist: the diary vs the spreadsheetjunior
- The production log schema: fields every line must carrymiddle
- Log levels and alert routingmiddle
- Sampling strategies and log costmiddle
- PII redaction and log injectionsenior
- Trace context propagation in logssenior
- OTel Logs Data Model and audit logs as a subsystemsenior
- OTel signals, Semantic Conventions, and the OTLP wire formatmiddle
- Auto-instrumentation and manual spans: the 80/20 of OTelmiddle
- The OTel Collector: receivers, processors, exporters, and deployment patternsmiddle
- Sampling strategies: head, tail, and parent-basedmiddle
- Vendor neutrality, eBPF instrumentation, the Operator, and browser/serverless OTelsenior
- Operating the OTel Collector: reliability, version skew, failure modes, and governancesenior
- RED and USE: two checklists, one triage disciplinejunior
- Instrumenting RED in Prometheus: counters, histograms, and cardinality disciplinemiddle
- USE on Linux: CPU, memory, disk, network, and PSImiddle
- Golden signals, dashboard layout, and service mesh auto-REDmiddle
- Cardinality as a cost driver: labels, PII, exemplars, and samplingmiddle
- Native histograms, SLO tie-in, and production failure patternsmiddle
- Choosing SLIs and SLO targets: ratios, not feelingsmiddle
- Multi-window multi-burn-rate alerting: why AND beats ORmiddle
- Error budget policy, latency SLOs, and composite journeysmiddle
- Iceberg SLIs, composite SLO math, and SLA vs SLOsenior
- Flame graphs: reading the picture that shows where time goesjunior
- Sampling vs instrumentation profiling: why 99 Hz wins in productionmiddle
- Profile types: CPU, memory, off-CPU, mutex — which one to reach formiddle
- Continuous profiling: always-on flame graphs with eBPF and trace-id correlationmiddle
- How flame graphs are built from samples, and the production workflows that use themmiddle
- Linux perf, eBPF internals, PGO, and the limits of samplingsenior
- Profiling in production: security, war stories, OTel profiles, and the infrastructure designsenior
- The debugging funnel: SLO → RED → trace → profilejunior
- OTel architecture: one SDK, four signals, one wire formatmiddle
- Cost discipline: keeping observability under 5% of infra spendmiddle
- Scale, security, and the ROI of observable systemssenior
- Why profile first: measure where time actually goesjunior
- Amdahl''''s law and self-time: the ceiling on every speedup you can shipmiddle
- The measurement loop: microbench, macrobench, prod profile, observer effectmiddle
- Reading flame graphs: shapes, per-language profilers, and the 60-second scanmiddle
- Statistical baselines: why one run is not a measurementmiddle
- Profiler history and microbenchmark pitfalls: Knuth to GWPsenior
- Hardware counters, cold-start profiles, and profile securitysenior
- Continuous profiling at scale: costs, CI gates, trace correlation, and anti-patternssenior
- What makes a hot path: symptom vs causejunior
- Five shapes of hotspot: CPU, alloc, cache, lock, syscallmiddle
- Reading parent and child chains: where to apply the fixmiddle
- JIT deopt, the fix-and-verify loop, and PR-time profilingmiddle
- Hardware counters and Intel TMA: sub-category diagnosissenior
- False sharing and native-bridge hot pathssenior
- Hot paths in production: security, tail latency, and tooling lineagesenior
- Memory hierarchy: why the same O(N) loop can be 17x slowerjunior
- Row-major vs column-major: access order and the 9x gapjunior
- Branch prediction and branchless codemiddle
- Hardware prefetcher, TLB, and memory-level parallelismsenior
- GC basics: what the runtime taxes you forjunior
- GC algorithms: generational, concurrent, and per-runtimemiddle
- GC tradeoffs: pause, throughput, heap — and object poolingmiddle
- GC tuning: pacing, heap shape, and allocation observabilitymiddle
- GC internals: tri-color invariant, write barriers, and per-runtime deep-divessenior
- GC in production: observability, security, edge cases, and fleet governancesenior
- N+1: one logical operation, many round-tripsjunior
- Fix families: JOIN, IN, preload, and DataLoadermiddle
- Detecting N+1: query logs, APM traces, and CI gatesmiddle
- DataLoader: batching across resolver treesmiddle
- Cross-protocol N+1: HTTP fan-out and Redis MGETmiddle
- N+1 at scale: pool exhaustion, plan changes, and denormalisationsenior
- Batching: amortize fixed cost per operationjunior
- The batching window: size and wait timemiddle
- Batching in Kafka and Postgresmiddle
- io_uring and observability of batchingmiddle
- From Nagle to io_uring: evolution of batchingmiddle
- Backpressure, failure isolation, and batch security in productionsenior
- What a bundle actually costs: download, parse, compile, executejunior
- Core Web Vitals: LCP, INP, and CLSmiddle
- Code splitting: route-level, component-level, vendor splittingmiddle
- Tree shaking and compression: removing what you don''''t usemiddle
- Third-party scripts: the silent budget killermiddle
- CI enforcement and RUM: making budgets stickmiddle
- V8 JIT pipeline, HTTP priorities, and bundle securitysenior
- The performance loop: discipline, not a projectjunior
- Classify and fix: matching bottleneck families to remediesmiddle
- Observability stack and CI gates: catching regressions before they shipmiddle
- Incident to enforcement: SLO burn to verified fix in 35 minutesmiddle
- Culture, economics, and org-scale performancesenior