Sjen OorgOn AI Ecology, Software & The Good Life.Zola2026-06-28T00:00:00+00:00https://sjen.codeberg.page/atom.xml3 Agentic Coding Principles2026-06-28T00:00:00+00:002026-06-28T00:00:00+00:00
Unknown
https://sjen.codeberg.page/posts/agnetic-coding-security/<p>The world has changed, let's not build software with coding agents like we've built in the last 30 years. We need a new approach, that leverages the advantages that this wondrous new technology brings. Here are 3 principles to help us move software forward:</p>
<ol>
<li><strong>Use no or very few dependencies</strong> - <a rel="external" href="https://www.techtarget.com/searchsecurity/news/366643420/Verizon-DBIR-Key-takeaways-for-CISOs">48% of data breaches</a> are seen to come from the software supply chain. Cut out the legacy tech debt, code it new, with much better structures, standards & tests.</li>
<li><strong>Use AI to greatly reduce & eliminate enterprise complexity</strong>, which is also <a rel="external" href="https://www.paloaltonetworks.com/resources/research/unit-42-incident-response-report">found to be a major security risk for attacks leveraging leaky integration & complexity</a>. Have code be direct, targeted, tested & without ambiguity to its purpose and structure.</li>
<li><strong>Improve responsiveness, efficiency & user experience.</strong> Currently most apps have their own bespoke design language, layout ideas, etc.. Cut it! Use the best of Apple, Google & other design leaders in the industry - align to those structures, and use that language for all apps, and stop with the fancy and supposedly innovative user experience. It is a pure waste of energy, users want apps that work, feel and work like the best of the industry leaders, so let agents just use that language. No more design or UX debates. I could imagine that new, spec-driven design languages will come that help us align and simplify this further. Also in the future maybe more services will be headless through agents, so this prepares us for that future as well.</li>
</ol>
<p>In conclusion, let's leverage this amazing agentic moment to simplify, secure & dramatically improve the structure and quality of all software. My feeling is that the code quality, architecture & user features can be improved proportionally to the reduction in libraries and code quantity, and that would be a win-win for everyone, and most of all USERS.</p>
The AI Gateway2026-06-22T00:00:00+00:002026-06-22T00:00:00+00:00
Unknown
https://sjen.codeberg.page/drafts/ai-gateway-architecture/<h2 id="tldr">TLDR;</h2>
<p>Developers write code. They call models. They build agents and give them tools.
They do this without a proxy.
The keys leak. The bills run high. The data goes out and does not come back.
Old gateways do not understand tokens. They do not know prompts.
You need an AI gateway.</p>
<hr />
<h2 id="the-chaos">The Chaos</h2>
<p>It is the wild west.
Developers hardcode API keys. They send customer data to external servers. They give autonomous agents direct access to databases and shell environments.</p>
<script src=https://sjen.codeberg.page/js/mermaid.js></script>
<script src=https://sjen.codeberg.page/js/main.js></script>
<pre class="mermaid">
graph TD
App1[App] -->|Raw Prompts & Secrets| OpenAI[OpenAI API]
App2[Agent] -->|Direct Raw SQL & Shell| DB[(Company Database)]
App2 -->|Raw Prompts| Gemini[Gemini API]
App3[App] -->|Hardcoded Keys| Anthropic[Anthropic API]
</pre>
<script>
if (typeof mermaidRenderRun === 'undefined') {
window.mermaidRenderRun = true;
function runMermaid() {
const useDark = document.querySelector("html").classList.contains("dark");
mermaidRender(useDark ? "dark" : "light");
}
if (document.readyState === "loading") {
document.addEventListener("DOMContentLoaded", runMermaid);
} else {
runMermaid();
}
}
</script>
<p>A standard gateway does not help. It knows HTTP and REST. It does not know tokens. It cannot read prompts. It does not understand tool calls.</p>
<hr />
<h2 id="the-gateway">The Gateway</h2>
<p>An AI gateway is a clean proxy. It sits in the middle. It sees all the communication.</p>
<script src=https://sjen.codeberg.page/js/mermaid.js></script>
<script src=https://sjen.codeberg.page/js/main.js></script>
<pre class="mermaid">
graph TD
classDef gw fill:#fff9c4,stroke:#fbc02d,stroke-width:2px;
App[AI App] --> GW[AI Gateway]
Agent[Agent] --> GW
subgraph Target ["Target Systems"]
Models[LLM APIs <br/>Northbound]
Tools[Databases & APIs <br/>Southbound]
end
GW -->|Redacted & Cached Request| Models
GW -->|Validated Parameters| Tools
</pre>
<script>
if (typeof mermaidRenderRun === 'undefined') {
window.mermaidRenderRun = true;
function runMermaid() {
const useDark = document.querySelector("html").classList.contains("dark");
mermaidRender(useDark ? "dark" : "light");
}
if (document.readyState === "loading") {
document.addEventListener("DOMContentLoaded", runMermaid);
} else {
runMermaid();
}
}
</script>
<p>Governance requires three distinct proxies inside the gateway.</p>
<h3 id="1-the-model-proxy-northbound">1. The Model Proxy (Northbound)</h3>
<p>This proxy faces the model providers.
The client talks to the gateway. The gateway talks to Gemini, Anthropic, or OpenAI.</p>
<script src=https://sjen.codeberg.page/js/mermaid.js></script>
<script src=https://sjen.codeberg.page/js/main.js></script>
<pre class="mermaid">
sequenceDiagram
App->>Gateway: User Prompt (includes raw email & secret key)
Note over Gateway: Scans content for secrets & email
Note over Gateway: Redacts sensitive data
Note over Gateway: Injects real model key from vault
Gateway->>LLM: Clean Prompt + Secure Key
LLM->>Gateway: Response
Note over Gateway: Logs token usage
Gateway->>App: Response
</pre>
<script>
if (typeof mermaidRenderRun === 'undefined') {
window.mermaidRenderRun = true;
function runMermaid() {
const useDark = document.querySelector("html").classList.contains("dark");
mermaidRender(useDark ? "dark" : "light");
}
if (document.readyState === "loading") {
document.addEventListener("DOMContentLoaded", runMermaid);
} else {
runMermaid();
}
}
</script>
<ul>
<li><strong>Secrets</strong>: The gateway holds the keys. The developer gets an internal token. The real API key never leaves the vault.</li>
<li><strong>Privacy</strong>: The gateway scans the prompt. It redacts emails, passwords, and credit cards before they go to the cloud.</li>
<li><strong>Cost</strong>: It caches responses. If two users ask the same question, the second user gets the cached answer. It is fast, and it costs nothing.</li>
</ul>
<h3 id="2-the-tool-proxy-southbound">2. The Tool Proxy (Southbound)</h3>
<p>Agents use tools. Tools are functions that query databases, read files, or call internal APIs.
An agent with unmonitored tools is dangerous.</p>
<script src=https://sjen.codeberg.page/js/mermaid.js></script>
<script src=https://sjen.codeberg.page/js/main.js></script>
<pre class="mermaid">
sequenceDiagram
Agent->>Gateway: Execute Tool: delete_user(id=99)
Note over Gateway: Gateway checks Client Identity
Note over Gateway: Verifies authorization for 'delete_user'
Gateway--xTools: Blocked (Unauthorized)
Gateway-->>Agent: Error: Tool execution rejected
</pre>
<script>
if (typeof mermaidRenderRun === 'undefined') {
window.mermaidRenderRun = true;
function runMermaid() {
const useDark = document.querySelector("html").classList.contains("dark");
mermaidRender(useDark ? "dark" : "light");
}
if (document.readyState === "loading") {
document.addEventListener("DOMContentLoaded", runMermaid);
} else {
runMermaid();
}
}
</script>
<p>The tool proxy stops the damage:</p>
<ul>
<li><strong>Validation</strong>: The gateway checks the parameters. It ensures the model is not passing malicious SQL or shell commands.</li>
<li><strong>Authentication</strong>: The gateway verifies if this specific client is allowed to run this tool.</li>
<li><strong>Human Gate</strong>: If a tool changes state—like deleting a user or sending money—the gateway pauses. It asks a human for approval. The agent waits.</li>
</ul>
<h3 id="3-the-agent-proxy-east-west">3. The Agent Proxy (East-West)</h3>
<p>Agents talk to other agents. They delegate tasks.
This proxy coordinates the mesh:</p>
<ul>
<li><strong>Integrity</strong>: It signs messages. An unauthorized agent cannot inject instructions.</li>
<li><strong>Loop Control</strong>: Agents can get stuck in infinite discussions. The proxy counts the messages. It stops the loop before the tokens burn your budget.</li>
</ul>
<hr />
<h2 id="a-simple-gateway-in-code">A Simple Gateway in Code</h2>
<p>This is how you start. Here is a simple middleware written in Python. It redacts data, logs tokens, and proxies the call.</p>
<pre class="giallo z-code"><code data-lang="python"><span class="giallo-l"><span class="z-keyword">import</span><span> os</span></span>
<span class="giallo-l"><span class="z-keyword">import</span><span> re</span></span>
<span class="giallo-l"><span class="z-keyword">import</span><span> httpx</span></span>
<span class="giallo-l"><span class="z-keyword">from</span><span> fastapi</span><span class="z-keyword"> import</span><span> FastAPI</span><span>,</span><span> HTTPException</span><span>,</span><span> Request</span></span>
<span class="giallo-l"><span class="z-keyword">from</span><span> fastapi</span><span>.</span><span>responses</span><span class="z-keyword"> import</span><span> JSONResponse</span></span>
<span class="giallo-l"><span class="z-keyword">import</span><span> logging</span></span>
<span class="giallo-l"></span>
<span class="giallo-l"><span>app</span><span class="z-keyword"> =</span><span> FastAPI</span><span>(</span><span>)</span></span>
<span class="giallo-l"><span>logging</span><span>.</span><span>basicConfig</span><span>(</span><span class="z-variable">level</span><span class="z-keyword">=</span><span>logging</span><span>.</span><span class="z-constant">INFO</span><span>)</span></span>
<span class="giallo-l"></span>
<span class="giallo-l"><span class="z-punctuation z-definition z-comment">#</span><span class="z-comment"> Hemingway-style: Simple, concrete rules.</span></span>
<span class="giallo-l"><span class="z-constant">SENSITIVE_PATTERNS</span><span class="z-keyword"> =</span><span> [</span></span>
<span class="giallo-l"><span class="z-storage z-type"> r</span><span class="z-punctuation z-definition z-string">"</span><span class="z-storage">(?i)</span><span class="z-string z-regexp">password</span><span class="z-support">\s</span><span class="z-keyword">*</span><span class="z-string z-regexp">=</span><span class="z-support">\s</span><span class="z-keyword">*</span><span class="z-constant">[</span><span class="z-constant">'</span><span class="z-constant z-character z-escape">\"</span><span class="z-constant">]</span><span class="z-constant">[</span><span class="z-keyword">^</span><span class="z-constant">'</span><span class="z-constant z-character z-escape">\"</span><span class="z-constant">]</span><span class="z-keyword">+</span><span class="z-constant">[</span><span class="z-constant">'</span><span class="z-constant z-character z-escape">\"</span><span class="z-constant">]</span><span class="z-punctuation z-definition z-string">"</span><span>,</span></span>
<span class="giallo-l"><span class="z-storage z-type"> r</span><span class="z-punctuation z-definition z-string">"</span><span class="z-storage">(?i)</span><span class="z-string z-regexp">api</span><span class="z-constant">[</span><span class="z-constant">-</span><span class="z-constant">_</span><span class="z-constant">]</span><span class="z-string z-regexp">key</span><span class="z-support">\s</span><span class="z-keyword">*</span><span class="z-string z-regexp">=</span><span class="z-support">\s</span><span class="z-keyword">*</span><span class="z-constant">[</span><span class="z-constant">'</span><span class="z-constant z-character z-escape">\"</span><span class="z-constant">]</span><span class="z-constant">[</span><span class="z-keyword">^</span><span class="z-constant">'</span><span class="z-constant z-character z-escape">\"</span><span class="z-constant">]</span><span class="z-keyword">+</span><span class="z-constant">[</span><span class="z-constant">'</span><span class="z-constant z-character z-escape">\"</span><span class="z-constant">]</span><span class="z-punctuation z-definition z-string">"</span><span>,</span></span>
<span class="giallo-l"><span class="z-storage z-type"> r</span><span class="z-punctuation z-definition z-string">"</span><span class="z-support">\b</span><span class="z-constant">[</span><span class="z-constant">A</span><span class="z-constant">-</span><span class="z-constant">Z</span><span class="z-constant">a</span><span class="z-constant">-</span><span class="z-constant">z</span><span class="z-constant">0</span><span class="z-constant">-</span><span class="z-constant">9</span><span class="z-constant">.</span><span class="z-constant">_</span><span class="z-constant">%</span><span class="z-constant">+</span><span class="z-constant">-</span><span class="z-constant">]</span><span class="z-keyword">+</span><span class="z-string z-regexp">@</span><span class="z-constant">[</span><span class="z-constant">A</span><span class="z-constant">-</span><span class="z-constant">Z</span><span class="z-constant">a</span><span class="z-constant">-</span><span class="z-constant">z</span><span class="z-constant">0</span><span class="z-constant">-</span><span class="z-constant">9</span><span class="z-constant">.</span><span class="z-constant">-</span><span class="z-constant">]</span><span class="z-keyword">+</span><span class="z-constant z-character z-escape">\.</span><span class="z-constant">[</span><span class="z-constant">A</span><span class="z-constant">-</span><span class="z-constant">Z</span><span class="z-constant">|</span><span class="z-constant">a</span><span class="z-constant">-</span><span class="z-constant">z</span><span class="z-constant">]</span><span class="z-keyword">{2,}</span><span class="z-support">\b</span><span class="z-punctuation z-definition z-string">"</span></span>
<span class="giallo-l"><span>]</span></span>
<span class="giallo-l"></span>
<span class="giallo-l"><span class="z-storage z-type">def</span><span class="z-entity z-name"> clean_prompt</span><span>(</span><span class="z-variable z-parameter z-function">prompt</span><span>:</span><span class="z-support"> str</span><span>)</span><span> -></span><span class="z-support"> str</span><span>:</span></span>
<span class="giallo-l"><span> cleaned</span><span class="z-keyword"> =</span><span> prompt</span></span>
<span class="giallo-l"><span class="z-keyword"> for</span><span> pattern</span><span class="z-keyword"> in</span><span class="z-constant"> SENSITIVE_PATTERNS</span><span>:</span></span>
<span class="giallo-l"><span> cleaned</span><span class="z-keyword"> =</span><span> re</span><span>.</span><span>sub</span><span>(</span><span>pattern</span><span>,</span><span class="z-punctuation z-definition z-string"> "</span><span class="z-string">[REDACTED]</span><span class="z-punctuation z-definition z-string">"</span><span>,</span><span> cleaned</span><span>)</span></span>
<span class="giallo-l"><span class="z-keyword"> return</span><span> cleaned</span></span>
<span class="giallo-l"></span>
<span class="giallo-l"><span class="z-entity z-name">@</span><span class="z-entity z-name">app</span><span class="z-entity z-name">.</span><span class="z-entity z-name">post</span><span>(</span><span class="z-punctuation z-definition z-string">"</span><span class="z-string">/v1/chat/completions</span><span class="z-punctuation z-definition z-string">"</span><span>)</span></span>
<span class="giallo-l"><span class="z-storage z-type">async</span><span class="z-storage z-type"> def</span><span class="z-entity z-name"> proxy</span><span>(</span><span class="z-variable z-parameter z-function">request</span><span>:</span><span> Request</span><span>)</span><span>:</span></span>
<span class="giallo-l"><span> body</span><span class="z-keyword"> =</span><span class="z-keyword"> await</span><span> request</span><span>.</span><span>json</span><span>(</span><span>)</span></span>
<span class="giallo-l"><span> </span></span>
<span class="giallo-l"><span class="z-punctuation z-definition z-comment"> #</span><span class="z-comment"> Clean the input</span></span>
<span class="giallo-l"><span> messages</span><span class="z-keyword"> =</span><span> body</span><span>.</span><span>get</span><span>(</span><span class="z-punctuation z-definition z-string">"</span><span class="z-string">messages</span><span class="z-punctuation z-definition z-string">"</span><span>,</span><span> [</span><span>]</span><span>)</span></span>
<span class="giallo-l"><span class="z-keyword"> for</span><span> msg</span><span class="z-keyword"> in</span><span> messages</span><span>:</span></span>
<span class="giallo-l"><span class="z-keyword"> if</span><span class="z-punctuation z-definition z-string"> "</span><span class="z-string">content</span><span class="z-punctuation z-definition z-string">"</span><span class="z-keyword"> in</span><span> msg</span><span class="z-keyword"> and</span><span class="z-support"> isinstance</span><span>(</span><span>msg</span><span>[</span><span class="z-punctuation z-definition z-string">"</span><span class="z-string">content</span><span class="z-punctuation z-definition z-string">"</span><span>]</span><span>,</span><span class="z-support"> str</span><span>)</span><span>:</span></span>
<span class="giallo-l"><span> msg</span><span>[</span><span class="z-punctuation z-definition z-string">"</span><span class="z-string">content</span><span class="z-punctuation z-definition z-string">"</span><span>]</span><span class="z-keyword"> =</span><span> clean_prompt</span><span>(</span><span>msg</span><span>[</span><span class="z-punctuation z-definition z-string">"</span><span class="z-string">content</span><span class="z-punctuation z-definition z-string">"</span><span>]</span><span>)</span></span>
<span class="giallo-l"><span> </span></span>
<span class="giallo-l"><span> headers</span><span class="z-keyword"> =</span><span> {</span></span>
<span class="giallo-l"><span class="z-punctuation z-definition z-string"> "</span><span class="z-string">Authorization</span><span class="z-punctuation z-definition z-string">"</span><span>:</span><span class="z-storage z-type"> f</span><span class="z-string">"</span><span class="z-string">Bearer </span><span class="z-constant">{</span><span>os</span><span>.</span><span>getenv</span><span>(</span><span class="z-punctuation z-definition z-string">'</span><span class="z-string">OPENAI_API_KEY</span><span class="z-punctuation z-definition z-string">'</span><span>)</span><span class="z-constant">}</span><span class="z-string">"</span><span>,</span></span>
<span class="giallo-l"><span class="z-punctuation z-definition z-string"> "</span><span class="z-string">Content-Type</span><span class="z-punctuation z-definition z-string">"</span><span>:</span><span class="z-punctuation z-definition z-string"> "</span><span class="z-string">application/json</span><span class="z-punctuation z-definition z-string">"</span></span>
<span class="giallo-l"><span> }</span></span>
<span class="giallo-l"><span> </span></span>
<span class="giallo-l"><span class="z-keyword"> async</span><span class="z-keyword"> with</span><span> httpx</span><span>.</span><span>AsyncClient</span><span>(</span><span>)</span><span class="z-keyword"> as</span><span> client</span><span>:</span></span>
<span class="giallo-l"><span class="z-keyword"> try</span><span>:</span></span>
<span class="giallo-l"><span> response</span><span class="z-keyword"> =</span><span class="z-keyword"> await</span><span> client</span><span>.</span><span>post</span><span>(</span></span>
<span class="giallo-l"><span class="z-punctuation z-definition z-string"> "</span><span class="z-string">https://api.openai.com/v1/chat/completions</span><span class="z-punctuation z-definition z-string">"</span><span>,</span><span> </span></span>
<span class="giallo-l"><span class="z-variable"> json</span><span class="z-keyword">=</span><span>body</span><span>,</span><span> </span></span>
<span class="giallo-l"><span class="z-variable"> headers</span><span class="z-keyword">=</span><span>headers</span><span>,</span><span> </span></span>
<span class="giallo-l"><span class="z-variable"> timeout</span><span class="z-keyword">=</span><span class="z-constant">30.0</span></span>
<span class="giallo-l"><span> )</span></span>
<span class="giallo-l"><span> response</span><span>.</span><span>raise_for_status</span><span>(</span><span>)</span></span>
<span class="giallo-l"><span> data</span><span class="z-keyword"> =</span><span> response</span><span>.</span><span>json</span><span>(</span><span>)</span></span>
<span class="giallo-l"><span> </span></span>
<span class="giallo-l"><span class="z-punctuation z-definition z-comment"> #</span><span class="z-comment"> Log the cost</span></span>
<span class="giallo-l"><span> usage</span><span class="z-keyword"> =</span><span> data</span><span>.</span><span>get</span><span>(</span><span class="z-punctuation z-definition z-string">"</span><span class="z-string">usage</span><span class="z-punctuation z-definition z-string">"</span><span>,</span><span> {</span><span>}</span><span>)</span></span>
<span class="giallo-l"><span> logging</span><span>.</span><span>info</span><span>(</span></span>
<span class="giallo-l"><span class="z-storage z-type"> f</span><span class="z-string">"</span><span class="z-string">Client: </span><span class="z-constant">{</span><span>request</span><span>.</span><span>client</span><span>.</span><span>host</span><span class="z-constant">}</span><span class="z-string"> | </span><span class="z-string">"</span></span>
<span class="giallo-l"><span class="z-storage z-type"> f</span><span class="z-string">"</span><span class="z-string">Tokens: </span><span class="z-constant">{</span><span>usage</span><span>.</span><span>get</span><span>(</span><span class="z-punctuation z-definition z-string">'</span><span class="z-string">total_tokens</span><span class="z-punctuation z-definition z-string">'</span><span>,</span><span class="z-constant"> 0</span><span>)</span><span class="z-constant">}</span><span class="z-string">"</span></span>
<span class="giallo-l"><span> )</span></span>
<span class="giallo-l"><span> </span></span>
<span class="giallo-l"><span class="z-keyword"> return</span><span> JSONResponse</span><span>(</span><span class="z-variable">content</span><span class="z-keyword">=</span><span>data</span><span>)</span></span>
<span class="giallo-l"><span> </span></span>
<span class="giallo-l"><span class="z-keyword"> except</span><span class="z-support"> Exception</span><span class="z-keyword"> as</span><span> e</span><span>:</span></span>
<span class="giallo-l"><span> logging</span><span>.</span><span>error</span><span>(</span><span class="z-storage z-type">f</span><span class="z-string">"</span><span class="z-string">Failed: </span><span class="z-constant">{</span><span class="z-support">str</span><span>(</span><span>e</span><span>)</span><span class="z-constant">}</span><span class="z-string">"</span><span>)</span></span>
<span class="giallo-l"><span class="z-keyword"> raise</span><span> HTTPException</span><span>(</span><span class="z-variable">status_code</span><span class="z-keyword">=</span><span class="z-constant">500</span><span>,</span><span class="z-variable"> detail</span><span class="z-keyword">=</span><span class="z-punctuation z-definition z-string">"</span><span class="z-string">Gateway Error</span><span class="z-punctuation z-definition z-string">"</span><span>)</span></span></code></pre>
<hr />
<h2 id="deployment">Deployment</h2>
<p>Deploy the gateway close to your code. Use a sidecar.
Store your cache in Redis. It must be fast.
Enforce schemas on your tools.</p>
<p>If you build with AI, stop calling models directly. Use a gateway. It is the only safe way.</p>
The Massive Danger & Opportunity of Agentic Coding2026-06-20T00:00:00+00:002026-06-20T00:00:00+00:00
Unknown
https://sjen.codeberg.page/posts/agentic-coding/<h2 id="tldr"><a class="zola-anchor" href="#tldr" aria-label="Anchor link for: tldr">TLDR;</a></h2>
<p>Coding agents can help us product <strong>much, much less code</strong> to solve our problems, with higher security & lower complexity. This seems counterintuitive, since vibe coding seems to be letting people create much more code with possibly lower quality, but it doesn't have to be that way. Read on for details...</p>
<h2 id="introduction"><a class="zola-anchor" href="#introduction" aria-label="Anchor link for: introduction">Introduction</a></h2>
<p>Coding agents can create large amounts of code in seconds, based on any prompt from anyone. It is truly a revolution in software development and systems organization.</p>
<p>Some people are advocating for new frameworks or engineering practicies to deal with the mass of new code that will be coming. This talk from Google I/O 2026 sums it up.</p>
<iframe width="560" height="315" src="https://www.youtube.com/embed/2n41YjR5QfU?si=CeUQp32ScEOzTP9h" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe>
<h2 id="solutions"><a class="zola-anchor" href="#solutions" aria-label="Anchor link for: solutions">Solutions</a></h2>
<p>I understand and agree with the problem, however have a different take on the best solution. This is a chance to improve and reduce our software footprint, to finally get software under control and running efficiently to help solve problems more directly, and not create layers and layers of abstractions just so we humans can understand and work with the systems.</p>
<p>This is a chance to get back to simplicity, performance & targeted implementations, without all of the bloat & misguided abstraction layers. Think about your favorite apps & CLI tools - they are fast, snappy, efficient & self-contained. They don't break, and are robust and trustworthy.</p>
<p>Agnetic coding can help us bring all software up to that level. This means:</p>
<ul>
<li>New software should have <strong>significantly less lines of code</strong> and abstraction layers than our typical software today.</li>
<li>We should now be creating significantly less code and <strong>no technical debt</strong> - the agents code and test almost perfectly, as long as we keep them guided & targeted in their tasks.</li>
<li>New software engineers should train on <strong>efficient coding solutions</strong> from agents, analyzing the right prompts to get secure, practical & tested solutions from agents that should require much less operational & development overhead to deploy, update & run. Agentic engineers need to still understand performance, resource management & software architecture to correctly coach, prompt & validate the agent's output, but they no longer need to code everything or most things themselves. But they need <strong>to understand</strong> the code, and what makes a good solution compared to a sloppy or leaky solution, so cultivating <strong>good taste</strong> in software design and execution is critical (like today, but just not coded with our own fingers).</li>
</ul>
<h2 id="conclusion"><a class="zola-anchor" href="#conclusion" aria-label="Anchor link for: conclusion">Conclusion</a></h2>
<p>My feeling is that some companies want to sell teams on a story of increased complexity and code bloat through vibe coding. This is misguided and dangerous, in my opinion. We should be focusing on <strong>less but better code</strong>, and much simpler, faster & more secure software solutions, starting now. It is a new age for software engineering, and if we can follow these principles, it can be much better than the bloated & overly expensive stacks that we have today.</p>
AI Portals2026-06-20T00:00:00+00:002026-06-20T00:00:00+00:00
Unknown
https://sjen.codeberg.page/projects/ai-portals/Flatpak is One of My 'Desert Island Apps'2026-05-15T00:00:00+00:002026-05-15T00:00:00+00:00
Unknown
https://sjen.codeberg.page/posts/flatpak/<h2 id="tldr"><a class="zola-anchor" href="#tldr" aria-label="Anchor link for: tldr">TLDR;</a></h2>
<p>What is a <strong>Desert Island App</strong>? They are the apps that I truly rely on, that I would take on my laptop to a desert island (with internet), and are just core to my digital life and work. <strong><a rel="external" href="https://flathub.org">Flatpak and Flathub</a></strong> is for sure one of my <strong>Desert Island Apps</strong>.</p>
<hr />
<h2 id="introduction"><a class="zola-anchor" href="#introduction" aria-label="Anchor link for: introduction">Introduction</a></h2>
<p>Linux desktop app distribution has had different approaches over the years - from Debian (deb), Fedora (rpm), Arch (PKGBUILD), and others, but all dealing with varying library versions across different distributions. Users were often stuck between outdated "stable" repositories or risking system breakage by adding third-party repos (the dreaded "dependency hell").</p>
<p>Then came <strong>Flatpak</strong> (originally known as <code>xdg-app</code> when Alexander Larsson first started working on it).</p>
<p>Today, Flatpak is not just another package format—it is for me the gold standard for desktop software distribution on Linux. It represents a beautifully engineered compromise that respects both security and user experience, running seamlessly on everything from SteamOS to Debian and Fedora Silverblue.</p>
<hr />
<h2 id="achieving-balance"><a class="zola-anchor" href="#achieving-balance" aria-label="Anchor link for: achieving-balance">Achieving Balance</a></h2>
<p>What makes Flatpak truly special is how it solves the tension between <strong>isolation</strong> (for security) and <strong>integration</strong> (for usability).</p>
<p>In other environments, sandboxing is often an all-or-nothing affair. If you sandbox an application too tightly, it can't open a file chooser, print a document, or share your screen. If you integrate it too deeply, you lose security.</p>
<p>Flatpak solves this with a two-pronged architecture:</p>
<ol>
<li><strong>The Sandbox (Bubblewrap):</strong> Flatpak uses <code>bubblewrap</code> under the hood to create isolated unprivileged user namespaces. Applications run with their own view of the filesystem, network, and process space.</li>
<li><strong>The Portal (XDG Desktop Portals):</strong> This is the secret. Instead of giving an application direct access to your microphone, camera, or home directory, the application talks to a <strong>Portal</strong> API. When the app wants to open a file, the system pops up a native file chooser <em>outside</em> the sandbox. Once you select the file, the portal passes only that specific file descriptor back to the app.</li>
</ol>
<p>This means you get modern, granular macOS/Android-style permissions on Linux without breaking the desktop experience. It just works.</p>
<hr />
<h2 id="comparing-the-competitors"><a class="zola-anchor" href="#comparing-the-competitors" aria-label="Anchor link for: comparing-the-competitors">Comparing the Competitors</a></h2>
<p>How does Flatpak hold up against other software management systems? Let's look at the pros and cons of each.</p>
<h3 id="1-flatpak"><a class="zola-anchor" href="#1-flatpak" aria-label="Anchor link for: 1-flatpak">1. Flatpak</a></h3>
<ul>
<li><strong>Pros:</strong>
<ul>
<li><strong>True Sandbox Security:</strong> Granular control over permissions with portal integration.</li>
<li><strong>OSTree Deduplication:</strong> Uses OSTree (like "Git for OS binaries") to share common runtimes (GNOME, KDE, Freedesktop), saving massive amounts of disk space.</li>
<li><strong>Decentralized but United:</strong> Anyone can host a Flatpak repository, but <a rel="external" href="https://flathub.org/">Flathub</a> serves as a fantastic, semi-official hub.</li>
<li><strong>Consistent Across Distros:</strong> A Flatpak built today runs identically on Ubuntu, Fedora, Arch, or openSUSE.</li>
</ul>
</li>
<li><strong>Cons:</strong>
<ul>
<li><strong>Not for CLI/System Services:</strong> Flatpak is intentionally designed only for desktop (GUI) applications.</li>
<li><strong>Disk Footprint:</strong> If you only have one Flatpak app, downloading the entire runtime might feel heavy (though this cost amortizes quickly as you add more apps).</li>
</ul>
</li>
</ul>
<h3 id="2-snap-canonical-ubuntu"><a class="zola-anchor" href="#2-snap-canonical-ubuntu" aria-label="Anchor link for: 2-snap-canonical-ubuntu">2. Snap (Canonical / Ubuntu)</a></h3>
<ul>
<li><strong>Pros:</strong>
<ul>
<li><strong>Versatile:</strong> Can package CLI tools, system daemons (like databases), and desktop apps alike.</li>
<li><strong>Canonical Backing:</strong> Deeply integrated into Ubuntu with a massive enterprise ecosystem.</li>
</ul>
</li>
<li><strong>Cons:</strong>
<ul>
<li><strong>Proprietary/Centralized Backend:</strong> The Snap Store backend is closed-source and owned exclusively by Canonical. You cannot host your own independent Snap repository easily.</li>
<li><strong>Performance:</strong> Snaps use compressed SquashFS loops, leading to notoriously slow cold-startup times (especially for complex apps like browsers).</li>
<li><strong>Intrusive Updates:</strong> Auto-updates can sometimes be forced on the user with limited control.</li>
</ul>
</li>
</ul>
<h3 id="3-appimage"><a class="zola-anchor" href="#3-appimage" aria-label="Anchor link for: 3-appimage">3. AppImage</a></h3>
<ul>
<li><strong>Pros:</strong>
<ul>
<li><strong>Zero Install:</strong> Just download a single file, make it executable, and run it. No daemons, no root, no setup.</li>
<li><strong>Ultra-Portable:</strong> Perfect for offline use or quick trials of an application.</li>
</ul>
</li>
<li><strong>Cons:</strong>
<ul>
<li><strong>No Sandbox by Default:</strong> AppImages run with full user privileges. If an AppImage is compromised, your whole home directory is vulnerable.</li>
<li><strong>No Centralized Updates:</strong> Updating an AppImage usually requires downloading a whole new file manually, unless the developer implements a custom updater.</li>
<li><strong>Poor Desktop Integration:</strong> Does not automatically integrate with your system's application launcher or file associations without third-party helpers.</li>
</ul>
</li>
</ul>
<h3 id="4-native-package-managers-apt-dnf-pacman"><a class="zola-anchor" href="#4-native-package-managers-apt-dnf-pacman" aria-label="Anchor link for: 4-native-package-managers-apt-dnf-pacman">4. Native Package Managers (APT, DNF, Pacman)</a></h3>
<ul>
<li><strong>Pros:</strong>
<ul>
<li><strong>Peak Efficiency:</strong> Native compilation, shared dynamic libraries, and zero overhead.</li>
<li><strong>System Integrity:</strong> Keeps the entire operating system consistent and minimal.</li>
</ul>
</li>
<li><strong>Cons:</strong>
<ul>
<li><strong>Dependency Hell:</strong> Upgrading one application can force upgrades on system libraries, potentially breaking other software.</li>
<li><strong>Slow Update Cycles:</strong> Stable distributions (like Debian or Ubuntu LTS) often have outdated versions of user-facing desktop applications.</li>
</ul>
</li>
</ul>
<hr />
<h2 id="a-massive-kudos-to-the-pioneers"><a class="zola-anchor" href="#a-massive-kudos-to-the-pioneers" aria-label="Anchor link for: a-massive-kudos-to-the-pioneers">A Massive Kudos to the Pioneers</a></h2>
<p>Flatpak did not happen by accident. It is the result of years of dedicated work by some of the most brilliant minds in the free software ecosystem.</p>
<p>We owe a massive thank you to:</p>
<ul>
<li><strong>Alexander Larsson (Red Hat):</strong> The original architect who pioneered <code>xdg-app</code> and laid down the core concepts of OSTree runtimes and Bubblewrap integration. His vision of a decoupled desktop application layer has transformed how we use Linux.</li>
<li><strong>The Red Hat & Fedora Teams:</strong> For providing the engineering muscle, sponsoring developers, and proving that immutable base systems (like Silverblue) combined with Flatpaks are the future of stable computing.</li>
<li><strong>The Endless OS Team:</strong> An early adopter that pushed Flatpak to its limits, ensuring that the packaging format worked flawlessly in offline, low-bandwidth, and education-focused deployments around the world.</li>
<li><strong>Collabora:</strong> For their continuous contributions to <code>bubblewrap</code>, pressure testing the sandbox, and ensuring Flatpak's enterprise-grade reliability.</li>
<li><strong>The GNOME and KDE Communities:</strong> For embracing Flatpak fully, updating their toolkits to natively support XDG Desktop Portals, and making sandboxed apps look and feel native on any desktop environment.</li>
<li><strong>The Flathub Maintainers & Contributors:</strong> For creating an open, community-driven application hub that has become the de facto app store for Linux, making app publishing incredibly straightforward for developers.</li>
</ul>
<p>A huge <strong>THANK YOU</strong> to everyone who has worked on Flatpak, it is a marvel and an amazing platform that helps me, and millions of other Linux users, every day.</p>
<p>For those reasons, <strong>Flatpak</strong> is definitely one of my <strong>Desert Island Apps</strong>. What are yours?</p>
MCP Tool Authorization at Scale2026-04-28T00:00:00+00:002026-04-28T00:00:00+00:00
Unknown
https://sjen.codeberg.page/talks/apigee-mcp-at-scale/Powering Retail Agents with ADK, UCP & Apigee2026-02-24T00:00:00+00:002026-02-24T00:00:00+00:00
Unknown
https://sjen.codeberg.page/talks/powering-retail-agents/Favorite Books & Films of 20252026-01-04T00:00:00+00:002026-01-04T00:00:00+00:00
Unknown
https://sjen.codeberg.page/posts/favorite-2025/<p>These books and films really stood out for me last year.</p>
<h2 id="books"><a class="zola-anchor" href="#books" aria-label="Anchor link for: books">Books</a></h2>
<ul>
<li><strong>The Maniac (2023)</strong> - Benjamin Labatut
What an engrossing tail of the enigmatic character of John von Neumann, a shaper of the 20th century who is relatively unknown today. But what a tale it is, with his origins in theoretical mathematics in Hungary, Berlin and then America, ending with the atomic bomb and geopolitical game theory. The books concludes with the story of Demis Hassabis and the AI AlphaGo journey at DeepMind, which while not quite as engrossing, is also quite interesting as a new generation of computational achievements.</li>
<li><strong>The Price of Peace: Money, Democracy, and the Life of John Maynard Keynes (2020)</strong> - Zachary D. Carter
Absolutely engrossing story of John Maynard Keynes and his contributions to monetary policy, economics, and human society. From financing England during WWI to Roosevelt and the formation of the World Bank after WWII. Absolutely inspiring and eye opening about how our new world of fluid money was created out of the ruins of the old regime.</li>
<li><strong>East West Street: On the Origins of "Genocide" and "Crimes Against Humanity" (2016)</strong> - Philippe Sands
After doing some traveling in Krakow and Warsaw, I loved this personal look into the origins of genocide, and the humanity that was erased by the Nazis in Poland and eastern Europe.</li>
<li><strong>Schindler's List (1982)</strong> - Thomas Keneally -
On the same themes, this book is such a beautiful and enriching look into the lost humanity and suffering of Jews and other outcast groups in Krakow, and how one very average businessman fought back within the system.</li>
<li><strong>Wind, Sand and Stars (1939)</strong> - Antoine de Saint-Exupéry -
After watching a new film based on this book, I wanted to read the source, and really enjoyed the tales of living, flying and ruminating about life and death in North Africa during the early years of aviation.</li>
<li><strong>God's Fury, England's Fire (2008)</strong> - Michael Braddick - This story of how a country chaotically came to beheading a King and asserting the will of Parliament was utterly engrossing to me. Also how the battles were relatively civilized compared to the destruction on the continent during the Thirty Years War (thinking of the burning of Magdeburg), and how protestant calvinist thought and political theory came to topple a king, 140 years before the French Revolution.</li>
<li><strong>Winter of the World (2012)</strong> - Ken Follett - Ken Follett can always get me with his historical tales, and this one about the human journey through WWII from several different perspectives was extremely touching to me. The existential relief of the residents of Berlin when the Berlin Air Lift started to bring in food and fuel after years of starvation, for example, or the story of how one american scientist was convinced to hand over critical information about the atomic bomb to a Russian agent. Human, engrossing & fascinating looks into history and the individuals living through it.</li>
<li><strong>Why England Slept (1940)</strong> - John F. Kennedy - Fascinating look into why England took so long to react to Hitler and the threats coming from Germany leading up to WWII.</li>
<li><strong>Sternstunden der Menschheit - Decisive Moments in History (1927)</strong> - Stefan Zweig -
Beautiful small stories of dramatic decisions and moments through history, from the fall of Constantinople to the story of the composer Handel struggling in London, truly inspiring and wonderful.</li>
<li><strong>I, Claudius & Claudius the God (1986)</strong> - Robert Graves -
Deeply fascinating look into the life of a Roman historian, emperor and human. The story of the invasion of England was amazing.</li>
<li><strong>The Stoic Challenge (2019)</strong> - William B. Irvine -
Very useful and interesting look into stoic philosophy for living.</li>
<li><strong>Millennium (2008)</strong> - Tom Holland - Fascinating story and journey of Europe & Christianity fighting to survive around the year 1000.</li>
<li><strong>How the World Really Works: A Scientist’s Guide to Our Past, Present and Future (2022)</strong> - Vaclav Smil - Thought provoking guide to the scientific discoveries that really power our modern world: steel, aluminum, concrete, & fertilizer. Chips & digital don't even come close to that impact, and are decidedly "virtual" compared to the real impact of transportation and food that those earlier discoveries provide. Interesting!</li>
</ul>
<h2 id="films"><a class="zola-anchor" href="#films" aria-label="Anchor link for: films">Films</a></h2>
<ul>
<li><strong>Pan's Labyrinth (2007)</strong> - Guillermo del Toro
Beautiful little fairy tale and story.</li>
<li><strong>Predator: Badlands (2025)</strong> - Dan Trachtenberg
Simple and great little predator film.</li>
<li><strong>Frost/Nixon (2009)</strong> - Ron Howard
A good simple movie with moving characters.</li>
<li><strong>Ghostlight (2024)</strong> - Alex Thompson, Kelly O'Sullivan
Beautiful little film about life and theater.</li>
<li><strong>A Real Pain (2024)</strong> - Jesse Eisenberg
After taking my own trips around Poland in the last few years, I really enjoyed this character portrait (except for the last shot, but it didn't ruin the film).</li>
<li><strong>Judgement at Nuremberg (1961)</strong> - Stanley Kramer
What a masterpiece.</li>
<li><strong>Oddity (2024)</strong> - Damian Mc Carthy
Wow, what a great suspense film.</li>
<li><strong>Maria (2024)</strong> - Pablo Larraín
This film paints a full picture of an artist's life, tragedy and all.</li>
<li><strong>Companion (2025)</strong> - Drew Hancock
Fun romp through the future world of lifelike robots.</li>
<li><strong>The Brutalist (2025)</strong> - Brady Corbet
Full portrait of a life, which I very much enjoyed.</li>
<li><strong>Spotlight (2015)</strong> - Tom McCarthy
Great newspaper film.</li>
<li><strong>Black Bag (2025)</strong> - Steven Soderbergh
Great spy caper.</li>
<li><strong>The Big Sleep (1946)</strong> - Howard Hawks
Classic great film.</li>
<li><strong>Henry V (1989)</strong> - Kenneth Branagh
Really enjoyed this adaptation, always wanted to get around to watching it, was worth the wait.</li>
</ul>
Cost to Profit Center – Building AI & API Monetization Platforms2025-10-22T00:00:00+00:002025-10-22T00:00:00+00:00
Unknown
https://sjen.codeberg.page/talks/cost-to-profit-center/Building API First products in 2025 Panel2025-10-22T00:00:00+00:002025-10-22T00:00:00+00:00
Unknown
https://sjen.codeberg.page/talks/nordic-2025-panel/Agentic Portals2025-09-20T00:00:00+00:002025-09-20T00:00:00+00:00
Unknown
https://sjen.codeberg.page/projects/agentic-portals/API Tester2025-09-20T00:00:00+00:002025-09-20T00:00:00+00:00
Unknown
https://sjen.codeberg.page/projects/api-tester/Apigee Templater2024-03-15T00:00:00+00:002024-03-15T00:00:00+00:00
Unknown
https://sjen.codeberg.page/projects/apigee-templater/Rust Performance on Google Cloud Run2022-07-11T00:00:00+00:002022-07-11T00:00:00+00:00
Unknown
https://sjen.codeberg.page/posts/rust-cloud-run/<p>Based on <a rel="external" href="https://seroter.com/2022/04/18/measuring-container-size-and-startup-latency-for-serverless-apps-written-in-c-node-js-go-and-java/">this comparison</a> of different programming language's size and performance on Google Cloud Run, I decided to do the same test with some more languages. So in this post it's Rust.</p>
<h2 id="demo-rust-service"><a class="zola-anchor" href="#demo-rust-service" aria-label="Anchor link for: demo-rust-service">Demo Rust Service</a></h2>
<p>For this test of microservice deployment size and speed, I created a pretty identical service to Richard's example.</p>
<p>Here's my employee.rs file with a DTO struct for the employee data. Source code is here.</p>
<pre class="giallo z-code"><code data-lang="rust"><span class="giallo-l"><span class="z-keyword">use</span><span class="z-entity z-name"> serde</span><span class="z-keyword">::</span><span>{</span><span class="z-entity z-name">Deserialize</span><span>,</span><span class="z-entity z-name"> Serialize</span><span>}</span><span>;</span></span>
<span class="giallo-l"></span>
<span class="giallo-l"><span>#</span><span>[</span><span>derive</span><span>(</span><span class="z-entity z-name">Debug</span><span>,</span><span class="z-entity z-name"> Deserialize</span><span>,</span><span class="z-entity z-name"> Serialize</span><span>)</span><span>]</span></span>
<span class="giallo-l"><span class="z-keyword">pub</span><span class="z-storage z-type"> struct</span><span class="z-entity z-name"> Employee</span><span> {</span></span>
<span class="giallo-l"><span class="z-keyword"> pub</span><span class="z-entity z-name"> Id</span><span class="z-keyword">:</span><span class="z-entity z-name"> String</span><span>,</span></span>
<span class="giallo-l"><span class="z-keyword"> pub</span><span class="z-entity z-name"> FullName</span><span class="z-keyword">:</span><span class="z-entity z-name"> String</span><span>,</span></span>
<span class="giallo-l"><span class="z-keyword"> pub</span><span class="z-entity z-name"> Location</span><span class="z-keyword">:</span><span class="z-entity z-name"> String</span><span>,</span></span>
<span class="giallo-l"><span class="z-keyword"> pub</span><span class="z-entity z-name"> JobTitle</span><span class="z-keyword">:</span><span class="z-entity z-name"> String</span><span>,</span></span>
<span class="giallo-l"><span>}</span></span></code></pre>
<p>And here are two functions in main.rs that serve the employee data, and run the web service.</p>
<pre class="giallo z-code"><code data-lang="rust"><span class="giallo-l"><span class="z-keyword">async</span><span class="z-keyword"> fn</span><span class="z-entity z-name"> employees</span><span>(</span><span class="z-variable z-other">_req</span><span class="z-keyword">:</span><span class="z-entity z-name"> Request</span><span><</span><span class="z-entity z-name">Body</span><span>></span><span>)</span><span class="z-keyword"> -></span><span class="z-entity z-name"> Result</span><span><</span><span class="z-entity z-name">Response</span><span><</span><span class="z-entity z-name">Body</span><span>></span><span>,</span><span class="z-entity z-name"> Infallible</span><span>></span><span> {</span></span>
<span class="giallo-l"><span class="z-storage z-type"> let</span><span class="z-variable z-other"> v</span><span class="z-keyword">:</span><span class="z-entity z-name"> Vec</span><span><</span><span class="z-variable z-other">employee</span><span class="z-keyword">::</span><span class="z-entity z-name">Employee</span><span>></span><span class="z-keyword"> =</span><span class="z-entity z-name"> vec!</span><span>[</span></span>
<span class="giallo-l"><span class="z-entity z-name"> employee</span><span class="z-keyword">::</span><span class="z-entity z-name">Employee</span><span> {</span></span>
<span class="giallo-l"><span class="z-entity z-name"> Id</span><span class="z-keyword">:</span><span class="z-entity z-name"> String</span><span class="z-keyword">::</span><span class="z-entity z-name">from</span><span>(</span><span class="z-punctuation z-definition z-string">"</span><span class="z-string">100</span><span class="z-punctuation z-definition z-string">"</span><span>)</span><span>,</span></span>
<span class="giallo-l"><span class="z-entity z-name"> FullName</span><span class="z-keyword">:</span><span class="z-entity z-name"> String</span><span class="z-keyword">::</span><span class="z-entity z-name">from</span><span>(</span><span class="z-punctuation z-definition z-string">"</span><span class="z-string">Jack Donaghy</span><span class="z-punctuation z-definition z-string">"</span><span>)</span><span>,</span></span>
<span class="giallo-l"><span class="z-entity z-name"> JobTitle</span><span class="z-keyword">:</span><span class="z-entity z-name"> String</span><span class="z-keyword">::</span><span class="z-entity z-name">from</span><span>(</span><span class="z-punctuation z-definition z-string">"</span><span class="z-string">Writer</span><span class="z-punctuation z-definition z-string">"</span><span>)</span><span>,</span></span>
<span class="giallo-l"><span class="z-entity z-name"> Location</span><span class="z-keyword">:</span><span class="z-entity z-name"> String</span><span class="z-keyword">::</span><span class="z-entity z-name">from</span><span>(</span><span class="z-punctuation z-definition z-string">"</span><span class="z-string">NYC</span><span class="z-punctuation z-definition z-string">"</span><span>)</span><span>,</span></span>
<span class="giallo-l"><span> }</span><span>,</span></span>
<span class="giallo-l"><span class="z-entity z-name"> employee</span><span class="z-keyword">::</span><span class="z-entity z-name">Employee</span><span> {</span></span>
<span class="giallo-l"><span class="z-entity z-name"> Id</span><span class="z-keyword">:</span><span class="z-entity z-name"> String</span><span class="z-keyword">::</span><span class="z-entity z-name">from</span><span>(</span><span class="z-punctuation z-definition z-string">"</span><span class="z-string">101</span><span class="z-punctuation z-definition z-string">"</span><span>)</span><span>,</span></span>
<span class="giallo-l"><span class="z-entity z-name"> FullName</span><span class="z-keyword">:</span><span class="z-entity z-name"> String</span><span class="z-keyword">::</span><span class="z-entity z-name">from</span><span>(</span><span class="z-punctuation z-definition z-string">"</span><span class="z-string">Liz Lemon</span><span class="z-punctuation z-definition z-string">"</span><span>)</span><span>,</span></span>
<span class="giallo-l"><span class="z-entity z-name"> JobTitle</span><span class="z-keyword">:</span><span class="z-entity z-name"> String</span><span class="z-keyword">::</span><span class="z-entity z-name">from</span><span>(</span><span class="z-punctuation z-definition z-string">"</span><span class="z-string">Executive</span><span class="z-punctuation z-definition z-string">"</span><span>)</span><span>,</span></span>
<span class="giallo-l"><span class="z-entity z-name"> Location</span><span class="z-keyword">:</span><span class="z-entity z-name"> String</span><span class="z-keyword">::</span><span class="z-entity z-name">from</span><span>(</span><span class="z-punctuation z-definition z-string">"</span><span class="z-string">NYC</span><span class="z-punctuation z-definition z-string">"</span><span>)</span><span>,</span></span>
<span class="giallo-l"><span> }</span><span>,</span></span>
<span class="giallo-l"><span> ]</span><span>;</span></span>
<span class="giallo-l"></span>
<span class="giallo-l"><span class="z-entity z-name"> Ok</span><span>(</span><span class="z-entity z-name">Response</span><span class="z-keyword">::</span><span class="z-entity z-name">new</span><span>(</span><span class="z-entity z-name">serde_json</span><span class="z-keyword">::</span><span class="z-entity z-name">to_string</span><span>(</span><span class="z-keyword">&</span><span class="z-variable z-other">v</span><span>)</span><span class="z-keyword">.</span><span class="z-entity z-name">unwrap</span><span>(</span><span>)</span><span class="z-keyword">.</span><span class="z-entity z-name">into</span><span>(</span><span>)</span><span>)</span><span>)</span></span>
<span class="giallo-l"><span>}</span></span></code></pre>
<p>Here's our main function with the listener configuration.</p>
<pre class="giallo z-code"><code data-lang="rust"><span class="giallo-l"><span>#</span><span>[</span><span>tokio</span><span class="z-keyword">::</span><span>main</span><span>]</span></span>
<span class="giallo-l"><span class="z-keyword">async</span><span class="z-keyword"> fn</span><span class="z-entity z-name"> main</span><span>(</span><span>)</span><span> {</span></span>
<span class="giallo-l"><span class="z-storage z-type"> let</span><span class="z-variable z-other"> addr</span><span class="z-keyword"> =</span><span class="z-entity z-name"> SocketAddr</span><span class="z-keyword">::</span><span class="z-entity z-name">from</span><span>(</span><span>(</span><span>[</span><span class="z-constant">0</span><span>,</span><span class="z-constant"> 0</span><span>,</span><span class="z-constant"> 0</span><span>,</span><span class="z-constant"> 0</span><span>]</span><span>,</span><span class="z-constant"> 8080</span><span>)</span><span>)</span><span>;</span></span>
<span class="giallo-l"></span>
<span class="giallo-l"><span class="z-storage z-type"> let</span><span class="z-variable z-other"> make_svc</span><span class="z-keyword"> =</span><span class="z-entity z-name"> make_service_fn</span><span>(</span><span class="z-keyword">|</span><span class="z-variable z-other">_conn</span><span class="z-keyword">|</span><span class="z-keyword"> async</span><span> {</span><span class="z-entity z-name"> Ok</span><span class="z-keyword">::</span><span><</span><span class="z-variable z-other">_</span><span>,</span><span class="z-entity z-name"> Infallible</span><span>></span><span>(</span><span class="z-entity z-name">service_fn</span><span>(</span><span class="z-variable z-other">employees</span><span>)</span><span>)</span><span> }</span><span>)</span><span>;</span></span>
<span class="giallo-l"></span>
<span class="giallo-l"><span class="z-storage z-type"> let</span><span class="z-variable z-other"> server</span><span class="z-keyword"> =</span><span class="z-entity z-name"> Server</span><span class="z-keyword">::</span><span class="z-entity z-name">bind</span><span>(</span><span class="z-keyword">&</span><span class="z-variable z-other">addr</span><span>)</span><span class="z-keyword">.</span><span class="z-entity z-name">serve</span><span>(</span><span class="z-variable z-other">make_svc</span><span>)</span><span>;</span></span>
<span class="giallo-l"></span>
<span class="giallo-l"><span class="z-keyword"> if</span><span class="z-storage z-type"> let</span><span class="z-entity z-name"> Err</span><span>(</span><span class="z-variable z-other">e</span><span>)</span><span class="z-keyword"> =</span><span class="z-variable z-other"> server</span><span class="z-keyword">.</span><span class="z-keyword">await</span><span> {</span></span>
<span class="giallo-l"><span class="z-entity z-name"> eprintln!</span><span>(</span><span class="z-punctuation z-definition z-string">"</span><span class="z-string">server error: </span><span class="z-string">{</span><span class="z-string">}</span><span class="z-punctuation z-definition z-string">"</span><span>,</span><span class="z-variable z-other"> e</span><span>)</span><span>;</span></span>
<span class="giallo-l"><span> }</span></span>
<span class="giallo-l"><span>}</span></span></code></pre>
<p>And that's it, after running cargo run locally this service spins up and answers requests for employee data on port 8080.</p>
<h2 id="build-and-deploy-to-cloud-run"><a class="zola-anchor" href="#build-and-deploy-to-cloud-run" aria-label="Anchor link for: build-and-deploy-to-cloud-run">Build and deploy to Cloud Run</a></h2>
<p>So now let's build a docker image and deploy to Cloud Run, see the file deploy_gcp.sh for details.</p>
<pre class="giallo z-code"><code data-lang="shellscript"><span class="giallo-l"><span class="z-punctuation z-definition z-comment">#</span><span class="z-comment"> Build and publish image to our cloud registry</span></span>
<span class="giallo-l"><span class="z-entity z-name">gcloud</span><span class="z-string"> builds</span><span class="z-string"> submit</span><span class="z-constant"> -</span><span class="z-constant">-tag</span><span class="z-string"> gcr.io/</span><span class="z-variable">$</span><span class="z-variable">1</span><span class="z-string">/rustservice</span></span>
<span class="giallo-l"></span>
<span class="giallo-l"><span class="z-punctuation z-definition z-comment">#</span><span class="z-comment"> Deploy image to Cloud Run and allow unauthenticated traffic to service</span></span>
<span class="giallo-l"><span class="z-entity z-name">gcloud</span><span class="z-string"> run</span><span class="z-string"> deploy</span><span class="z-string"> rustservice</span><span class="z-constant"> -</span><span class="z-constant">-image</span><span class="z-string"> gcr.io/</span><span class="z-variable">$</span><span class="z-variable">1</span><span class="z-string">/rustservice</span><span class="z-string"> /</span></span>
<span class="giallo-l"><span class="z-entity z-name"> --platform</span><span class="z-string"> managed</span><span class="z-constant"> -</span><span class="z-constant">-project</span><span class="z-variable"> $</span><span class="z-variable">1</span><span class="z-constant"> -</span><span class="z-constant">-region</span><span class="z-string"> us-central1</span><span class="z-string"> /</span></span>
<span class="giallo-l"><span class="z-entity z-name"> --allow-unauthenticated</span></span></code></pre>
<p>Now we have our image published to our registry, at a pretty compact 10.9 MB using the Google's Distroless CC base image (extra compact just for running applications, the build is done using the full 1.6 GB Rust image).</p>
<p>We also already have our service deployed to cloud run, and can test the service with curl.</p>
<pre class="giallo z-code"><code data-lang="shellscript"><span class="giallo-l"><span class="z-entity z-name">curl</span><span class="z-string"> https://rustservice2-qtw3rvj3ya-uc.a.run.app</span><span class="z-keyword"> |</span><span class="z-entity z-name"> jq</span></span></code></pre>
<p>And which returns our test data.</p>
<pre class="giallo z-code"><code data-lang="json"><span class="giallo-l"><span>[</span></span>
<span class="giallo-l"><span> {</span></span>
<span class="giallo-l"><span class="z-support"> "</span><span class="z-support">Id</span><span class="z-support">"</span><span>:</span><span class="z-punctuation z-definition z-string"> "</span><span class="z-string">100</span><span class="z-punctuation z-definition z-string">"</span><span>,</span></span>
<span class="giallo-l"><span class="z-support"> "</span><span class="z-support">FullName</span><span class="z-support">"</span><span>:</span><span class="z-punctuation z-definition z-string"> "</span><span class="z-string">Jack Donaghy</span><span class="z-punctuation z-definition z-string">"</span><span>,</span></span>
<span class="giallo-l"><span class="z-support"> "</span><span class="z-support">Location</span><span class="z-support">"</span><span>:</span><span class="z-punctuation z-definition z-string"> "</span><span class="z-string">NYC</span><span class="z-punctuation z-definition z-string">"</span><span>,</span></span>
<span class="giallo-l"><span class="z-support"> "</span><span class="z-support">JobTitle</span><span class="z-support">"</span><span>:</span><span class="z-punctuation z-definition z-string"> "</span><span class="z-string">Writer</span><span class="z-punctuation z-definition z-string">"</span></span>
<span class="giallo-l"><span> }</span><span>,</span></span>
<span class="giallo-l"><span> {</span></span>
<span class="giallo-l"><span class="z-support"> "</span><span class="z-support">Id</span><span class="z-support">"</span><span>:</span><span class="z-punctuation z-definition z-string"> "</span><span class="z-string">101</span><span class="z-punctuation z-definition z-string">"</span><span>,</span></span>
<span class="giallo-l"><span class="z-support"> "</span><span class="z-support">FullName</span><span class="z-support">"</span><span>:</span><span class="z-punctuation z-definition z-string"> "</span><span class="z-string">Liz Lemon</span><span class="z-punctuation z-definition z-string">"</span><span>,</span></span>
<span class="giallo-l"><span class="z-support"> "</span><span class="z-support">Location</span><span class="z-support">"</span><span>:</span><span class="z-punctuation z-definition z-string"> "</span><span class="z-string">NYC</span><span class="z-punctuation z-definition z-string">"</span><span>,</span></span>
<span class="giallo-l"><span class="z-support"> "</span><span class="z-support">JobTitle</span><span class="z-support">"</span><span>:</span><span class="z-punctuation z-definition z-string"> "</span><span class="z-string">Executive</span><span class="z-punctuation z-definition z-string">"</span></span>
<span class="giallo-l"><span> }</span></span>
<span class="giallo-l"><span>]</span></span></code></pre><h2 id="cold-run"><a class="zola-anchor" href="#cold-run" aria-label="Anchor link for: cold-run">Cold run</a></h2>
<p>Now let's do the same performance test using hey that was done with the other frameworks.</p>
<pre class="giallo z-code"><code data-lang="shellscript"><span class="giallo-l"><span class="z-entity z-name">hey</span><span class="z-constant"> -</span><span class="z-constant">n</span><span class="z-constant"> 200</span><span class="z-constant"> -</span><span class="z-constant">c</span><span class="z-constant"> 10</span><span class="z-string"> https://rustservice2-qtw3rvj3ya-uc.a.run.app</span></span></code></pre>
<p>Here are the cold start results (calling from a VM running in the same us-central1 (Iowa) region).</p>
<p>Summary:
Total: 0.8240 secs
Slowest: 0.6409 secs
Fastest: 0.0051 secs
Average: 0.0271 secs
Requests/sec: 242.7116</p>
<p>Total data: 30600 bytes
Size/request: 153 bytes</p>
<p>Response time histogram:
0.005 [1] |
0.069 [189] |■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■
0.132 [0] |
0.196 [0] |
0.259 [0] |
0.323 [2] |
0.387 [6] |■
0.450 [0] |
0.514 [0] |
0.577 [0] |
0.641 [2] |</p>
<p>Latency distribution:
10% in 0.0060 secs
25% in 0.0064 secs
50% in 0.0072 secs
75% in 0.0087 secs
90% in 0.0127 secs
95% in 0.3021 secs
99% in 0.6339 secs</p>
<p>Details (average, fastest, slowest):
DNS+dialup: 0.0012 secs, 0.0051 secs, 0.6409 secs
DNS-lookup: 0.0004 secs, 0.0000 secs, 0.0078 secs
req write: 0.0000 secs, 0.0000 secs, 0.0012 secs
resp wait: 0.0258 secs, 0.0050 secs, 0.6152 secs
resp read: 0.0001 secs, 0.0000 secs, 0.0062 secs</p>
<p>Status code distribution:
[200] 200 responses</p>
<h2 id="hot-run"><a class="zola-anchor" href="#hot-run" aria-label="Anchor link for: hot-run">Hot run</a></h2>
<p>Now running again with the hot instances resulted in these numbers.</p>
<p>Summary:
Total: 0.1737 secs
Slowest: 0.0300 secs
Fastest: 0.0059 secs
Average: 0.0084 secs
Requests/sec: 1151.3049</p>
<p>Total data: 30600 bytes
Size/request: 153 bytes</p>
<p>Response time histogram:
0.006 [1] |
0.008 [177] |■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■
0.011 [11] |■■
0.013 [1] |
0.016 [0] |
0.018 [0] |
0.020 [0] |
0.023 [0] |
0.025 [0] |
0.028 [0] |
0.030 [10] |■■</p>
<p>Latency distribution:
10% in 0.0064 secs
25% in 0.0068 secs
50% in 0.0073 secs
75% in 0.0078 secs
90% in 0.0083 secs
95% in 0.0282 secs
99% in 0.0291 secs</p>
<p>Details (average, fastest, slowest):
DNS+dialup: 0.0010 secs, 0.0059 secs, 0.0300 secs
DNS-lookup: 0.0002 secs, 0.0000 secs, 0.0045 secs
req write: 0.0000 secs, 0.0000 secs, 0.0003 secs
resp wait: 0.0072 secs, 0.0058 secs, 0.0107 secs
resp read: 0.0000 secs, 0.0000 secs, 0.0006 secs</p>
<p>Status code distribution:
[200] 200 responses</p>
<h2 id="results-summary"><a class="zola-anchor" href="#results-summary" aria-label="Anchor link for: results-summary">Results summary</a></h2>
<p>Here's a table of the 95% responses based on runtime & client location.</p>
<p>Call type Service running locally Service running on Cloud Run us-central1</p>
<p>Cold start 0.0009 secs 0.3021 secs</p>
<p>Hot start 0.0008 secs 0.0282 secs</p>
<p>And the full table with Dotnet, Go, Node, Java and Rust, averaging both cold and hot start 95% percentile results.</p>
<p>Language 95th percentile</p>
<p>dotnet 1.01s</p>
<p>go 0.33s</p>
<p>nodejs 1.32s</p>
<p>java 5.97s</p>
<p>rust 0.17s</p>
<p>And of course at the end, it all depends on which platform you are comfortable with and can use most effectively. But some basic performance expectations are of course important to consider. In a next step I would like to add Bun to this test, which uses a new Zig-based runtime for javascript.</p>
Enable Innovation Everywhere | No-Code App Development with AppSheet2021-01-10T00:00:00+00:002021-01-10T00:00:00+00:00
Unknown
https://sjen.codeberg.page/talks/no-code-innovation/