Welcome
This manual is a practical companion for architects and engineers. Start here to learn how it’s organized, who it’s for, and how to pick a learning path that fits your goals and experience.
Choose your path
Pick a sequence that fits your goals. Each step links to the relevant section so you can follow end‑to‑end.
- Start with basics: Foundational Concepts → Core Design & Programming Principles
- Learn patterns and styles: Design Patterns → Architectural Styles
- Ship safely: Testing Strategy → Observability & Operations
- Add essentials early: Security Architecture
- Foundations: Foundational Concepts → Core Design & Programming Principles
- Patterns & styles: Design Patterns → Architectural Styles
- System design depth: Distributed Systems & Microservices → DDD
- Production readiness: Testing Strategy → Observability & Operations
- Security by default: Security Architecture
- Broaden impact: Architecture Governance & Organization
- Core: Foundational Concepts → Frontend & Mobile Architecture/Frontend Architecture
- Performance & rendering: SSR/SSG/ISR → Performance (Core Web Vitals)
- State & UX quality: State Management → Testing Strategy
- Edge & APIs: API & Interface Design → CDN & Edge
- Observability & security: Observability & Operations → Security (CORS/OAuth)
- Scale the UI: Design Systems → Micro‑Frontends
- System & runtime: Distributed Systems & Microservices → Cloud‑Native & Runtime Topology
- Service networking: Service Mesh → Service Discovery, Ingress, Egress
- Reliability toolbelt: Timeouts/Retry/Backoff → Circuit Breaker → Bulkheads
- Ops excellence: Observability & Operations → Delivery Engineering
- Guardrails & cost: Security Architecture → Cost Controls & Quotas
- Core styles: RESTful API Design → gRPC / RPC → GraphQL
- Quality & evolution: Error Formats & Problem Details → Versioning Strategies
- Platform: API Gateway → API Governance & API First
- Async interfaces: Webhooks → Async APIs
- Verification: Contract (CDC) tests
- Telemetry foundations: Logging → Metrics → Tracing
- SLOs and alerting: SLO/SLI/SLA → Alerting
- Resilience playbook: Retries/Backoff → Circuit Breaker → Load Shedding
- Capacity & performance: Capacity & Performance Ops
- Delivery excellence: Delivery Engineering
- Data foundations: Data Architecture & Persistence → Storage Models
- Modeling & access: Normalization vs Denormalization → Query Patterns
- Consistency & integration: Consistency Models → Outbox/Inbox, CDC
- Streaming & analytics: Data Pipelines & Analytics
- Quality & ops: Testing Strategy/Non‑Functional → Performance → Observability
- Comms & contracts: Messaging → Sync vs. Async
- Data flow patterns: CQRS & Read Models → Transaction Boundaries & Sagas
- Storage & history: Event Sourcing
- Operability: Observability → Metrics/Traces for streams
- Core: Foundational Concepts → Mobile Architecture
- Data & sync: Offline Sync & Conflict Resolution
- Backends: API & Interface Design → Security (auth flows)
- Ops: Background Tasks & Notifications → Release Strategy → Observability
- Device constraints: Battery/Network Constraints
- Data platform: Data Pipelines & Analytics
- Serving & ops: Cloud‑Native Compute Models → Networking & Edge
- Reliability & drift: Observability → SLOs/Error Budgets
- Security & governance: Security Architecture → Data Lifecycle & Compliance
- Governance & org: Architecture Governance & Organization
- Security controls: Security Architecture → Identity & Access → Data Protection
- Risk & audit: Checklists & Templates → Quality Attributes → Availability/Reliability → Compliance & Risk
- Platform policy: Infrastructure as Code → Policy as Code & Guardrails
- Decompose with intent: DDD → Strategic Design → Context Maps
- Execution patterns: Strangler Fig → Branch by Abstraction
- Data safety: Incremental Schema Migrations
- Integrate legacy: ACL for Legacy Integration
- Ship safely: Delivery Engineering → Observability & Operations
- Build the core fast: Foundational Concepts → Architectural Styles (Monolith/Modular)
- Operate lean: Cloud‑Native & Runtime Topology → Delivery Engineering
- Protect early: Security Architecture
- Measure what matters: Observability & Operations → Quality Attributes → Cost Efficiency
- Core security: Security Architecture → Principles & Models
- Design securely: Threat Modeling → Identity & Access
- Protect data & apps: Data Protection → Application Security
- Platform & ops: Network & Platform Security → Security Operations
- Proof & governance: Documentation & Modeling → ADRs → Checklists & Templates
Domain‑specific paths
Pick a domain and follow the most relevant cross‑section topics end‑to‑end.
- Domain focus: E‑Commerce (catalog, order, checkout, promotions)
- Data & access: Modeling & Access → Indexing & Hotspots
- Read performance: Caching Patterns → Search Offloading & Aggregations → Read Replicas & Fan‑Out
- Consistency & workflows: Consistency Models → CQRS & Read Models
- Payments/webhooks: Webhooks → Idempotency
- Quality & ops: Performance & Scalability → SLO/SLI/SLA
- Domain focus: FinTech/Payments (idempotency, reconciliation)
- Safety rails: Idempotency → Outbox/Inbox, CDC → Sagas
- Security & trust: Identity & Access → Data Protection
- Governance & audit: Compliance & Risk → Logging for Security
- Reliability: Retries/Backoff → Circuit Breaker
- Domain focus: Social/Communication (feeds, fanout, moderation)
- Delivery & scale: Messaging → Sync vs. Async
- Read models at scale: CQRS & Read Models → Sharding Strategies → Read Replicas
- Client delivery: API Styles → CDN & Edge
- Observability: Golden Signals → Tracing
- Domain focus: Real‑Time Systems (latency, determinism)
- Performance envelope: Latency Budgets, SLAs, SLOs → Profiling & Bottlenecks
- Stability under load: Load/Stress/Spike/Soak Testing → Load Shedding & Backpressure
- Edge delivery: CDN & Edge
- Domain focus: Streaming & Event Processing (exactly/at‑least‑once)
- Pipelines: Messaging → Outbox/Inbox, CDC
- State & history: Event Sourcing
- Operability: Metrics → SLOs/Error Budgets
- Domain focus: IoT & Edge (connectivity, OTA updates, constraints)
- Device sync & offline: Offline Sync & Conflict Resolution
- Network & delivery: Service Discovery, Ingress, Egress → CDN & Edge
- Security: Network Policies, mTLS → Identity & Access
- Fleet ops: Environments & Releases
- Domain focus: ML Systems (feature stores, model serving, drift)
- Data platform: Pipelines & Analytics → Storage Models
- Serving: Compute Models → Networking
- Quality & drift: Observability → SLOs/Error Budgets
- Governance: Security Architecture → Data Lifecycle & Compliance
- Domain focus: Gaming/Graphics (loops, ECS patterns – conceptual)
- Real‑time constraints: Real‑Time Systems
- Performance: Performance & Scalability
- Delivery: CDN & Edge → Delivery Engineering
- Domain focus: Embedded & Firmware (resource constraints)
- Constraints & quality: Performance & Scalability
- Release & safety: Environments & Releases → Security Architecture
- Domain focus: High‑Compliance Systems (audit, segregation of duties)
- Security & controls: Identity & Access → Data Protection
- Governance & audit: Compliance & Risk → Logging for Security
Tip: If you have an immediate problem (e.g., resilience, data consistency, observability), jump directly to that area, then circle back to the foundations to solidify your decision-making.
📄️ Audience & Scope
Who this handbook is for, what it covers, and how to get the most from it.
📄️ Learning Order
Recommended progression path through the handbook for building strong foundations.
📄️ Notation & Cross-References
Learn how to read this handbook—components, difficulty levels, diagrams, and conventions.
📄️ Cross-References
Understand how sections connect and key linkages between topics across the handbook.
📄️ Prerequisites & Getting Started
Minimal skills and toolkit needed to master this architecture handbook. Includes setup, learning paths, and self-assessment.