The free-tier trap: the cache that almost DoS'd my own app
I added a cache to save money. It nearly took the app down, and the alert looked like an attack. A postmortem on reading the fine print.
Every dispatch, newest first. 7 issues to date.
I added a cache to save money. It nearly took the app down, and the alert looked like an attack. A postmortem on reading the fine print.
Turnstile is genuinely unlimited and free. The catch isn’t the price — it’s knowing where your bill actually comes from.
Cost is a security property. Map the surfaces that spend money, then cap every one of them — and prove the cap actually caps.
Restraint is a senior skill nobody blogs about. Three hardening ideas that were correct in theory and would have broken production.
You do not need an enterprise logging tier to know when something is off. Three free parts, wired into a daily report and an hourly alarm.
A one-time code stops password theft. It does not stop disposable inboxes from farming accounts — each one with a fresh set of cost caps.
The full free-tier security map — and the one architectural fact that reorders every priority on it.