Blog
Notes on GraphQL caching, security and performance at the edge.
-
Resolver-level GraphQL security isn't enough on its own
Depth and cost limits written only in your resolvers tend to fire late and sit scattered. Why GraphQL's first line of defense often belongs at the edge, in front of the origin, while deep business authorization stays in your app.
#graphql #security #edge #dos #authorization -
Why you can't just put a CDN in front of GraphQL
A GraphQL CDN sounds simple, but GraphQL breaks the assumptions that make HTTP caching simple. Why invalidation, not key generation, is the real problem, and what changes at the edge.
#graphql #caching #edge #performance #cdn