Field notes from the SSH Yazılım team on SAP, enterprise application development, integration and digitalization.
Spring Boot security hardening with lessons from Log4Shell and Spring4Shell: Actuator risk table, defense-in-depth architecture, security headers, SBOM and a production checklist.
Read the article →
Integrating LLMs into enterprise applications: RAG architecture, data privacy and KVKK/GDPR boundaries, prompt injection risk, cost/latency management and production eval discipline.
Read the article →
Building the three pillars of observability — metrics, logs, distributed traces — in the Spring ecosystem: Micrometer, OpenTelemetry, structured logging, correlation and alert design.
Read the article →
The BFF (Backend for Frontend) pattern between a React frontend and Spring backend: when it is needed, identity and session management, aggregation, contract discipline and comparison with alternatives.
Read the article →
A methodology for Spring Boot performance work: measurement and profiling tools (JFR, async-profiler), the recurring bottleneck classes, connection pool and cache tuning, GC and heap configuration.
Read the article →
Stock, price and order synchronization between ERP and e-commerce: integration patterns, idempotency, outbox, reconciliation and fault-tolerance design.
Read the article →
Data isolation in multi-tenant SaaS: comparing database-per-tenant, schema-per-tenant and row-level models; tenant resolution with Spring, the noisy neighbor problem and enterprise requirements.
Read the article →
The headless/composable commerce decision: a real cost comparison of monolithic storefronts vs API-first architecture, the Hybris + OCC path, migration signals and a decision table.
Read the article →
SAP Commerce (Hybris) performance: FlexibleSearch discipline, region cache tuning, Solr indexing strategy, cronjob scheduling and a bottleneck diagnosis methodology.
Read the article →