CORS: What is it protecting?
CORS is a browser security mechanism, not a server one. What the Origin header and preflight checks actually do, what CORS protects against, and why it is not CSRF protection.
Engineering Notes
Backend engineer writing about distributed systems, scalability, observability, DevOps, and backend architecture.
Latest posts
Nginx as a Reverse Proxy
How Nginx works as a reverse proxy, from its worker architecture to rate limiting, HTTP/2, security headers, and tuning workers to match the server.
Docker Networking Explained
A practical guide to Docker networking through localhost, bridge networks, service DNS, published ports, Compose networking, and debugging container connection issues.