Chapter 5 References

Books

• Designing Data-Intensive Applications by Martin Kleppmann — data systems, replication, partitioning, transactions, and stream processing.
• Site Reliability Engineering by Betsy Beyer, Chris Jones, Jennifer Petoff, and Niall Richard Murphy — service-level objectives, monitoring, capacity, and operational reliability.
• Building Secure and Reliable Systems by Charbel Aridi, Jessica Twombly, and John Ward — secure design patterns, dependency risk, and operational controls.
• Network Security: Private Communication in a Public World by Ross Anderson — transport security, authentication, and protocol design.

Websites

• Google SRE Workbook: Service Level Objectives — SLI eligibility, SLO design, and error budgets.
• RFC 9110: HTTP Semantics and RFC 9114: HTTP/3 — HTTP methods, status semantics, and HTTP/3.
• RFC 9000: QUIC and RFC 6455: The WebSocket Protocol — transport and full-duplex protocol mechanics.
• gRPC documentation — RPC calls, deadlines, metadata, status codes, and streaming.
• Envoy load balancing documentation — health, balancing policies, and traffic distribution.
• Traefik dynamic configuration — routers, services, entry points, and TLS configuration.
• tRPC documentation — TypeScript procedure definitions, routers, clients, and validation.
• OpenAPI specification and AsyncAPI specification — HTTP and event-driven contract descriptions.
• AWS Key Management Service best practices — key policies, grants, rotation, and separation of duties.
• OWASP Top 10 and OWASP Cheat Sheet Series — application-security risks and defensive controls.
• SLSA specification and GitHub secure use reference — build provenance and CI supply-chain controls.
• Sigstore Cosign documentation — image signing, verification, and attestations.