惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

V
V2EX - 技术
D
DataBreaches.Net
阮一峰的网络日志
阮一峰的网络日志
Recent Announcements
Recent Announcements
V
V2EX
Hugging Face - Blog
Hugging Face - Blog
T
The Exploit Database - CXSecurity.com
Simon Willison's Weblog
Simon Willison's Weblog
Cisco Talos Blog
Cisco Talos Blog
Microsoft Security Blog
Microsoft Security Blog
C
Cyber Attacks, Cyber Crime and Cyber Security
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
K
Kaspersky official blog
F
Fortinet All Blogs
GbyAI
GbyAI
Forbes - Security
Forbes - Security
The Cloudflare Blog
博客园 - 司徒正美
博客园_首页
量子位
Schneier on Security
Schneier on Security
G
GRAHAM CLULEY
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
P
Proofpoint News Feed
N
News | PayPal Newsroom
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
博客园 - 聂微东
T
Tor Project blog
V
Vulnerabilities – Threatpost
Y
Y Combinator Blog
Jina AI
Jina AI
Help Net Security
Help Net Security
T
Threat Research - Cisco Blogs
Recent Commits to openclaw:main
Recent Commits to openclaw:main
C
Cybersecurity and Infrastructure Security Agency CISA
Project Zero
Project Zero
N
News and Events Feed by Topic
I
Intezer
B
Blog
美团技术团队
C
CERT Recently Published Vulnerability Notes
NISL@THU
NISL@THU
L
LINUX DO - 最新话题
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
Blog — PlanetScale
Blog — PlanetScale
AWS News Blog
AWS News Blog
T
Tailwind CSS Blog
The Last Watchdog
The Last Watchdog
雷峰网
雷峰网
有赞技术团队
有赞技术团队

The Practical Developer

The Libuv Thread Pool Trap: Why Node.js Async APIs Stall Under Load Postgres Covering Indexes with INCLUDE: Eliminate Heap Fetches on Read-Heavy Workloads Postgres DISTINCT ON: The Fastest Way to Get the Latest Row Per Group Postgres Transaction Isolation: The Anomalies Your App Actually Faces in Production Linux TCP Tuning for Node.js Microservices: The Kernel Settings That Stop Silent Connection Drops Under Load Postgres HOT Updates and Fillfactor: Why Not All Writes Are Created Equal Database Connection Pool Leaks: Finding the Promise That Never Returns Its Seat Linux OOM Killer in Production: Why Your Node.js Containers Die Without a Stack Trace Postgres Materialized Views: Refresh Strategies That Do Not Lock Your Dashboards API Dependency Health Checks: Why /health Is Not Enough Authorization with Zanzibar Tuples: How Google Manages Permissions and How To Build the Same Check in Node.js Postgres Advisory Locks: The 20-Character Primitive That Replaces Redis for Coordination Dead Letter Queues: The Message Queue Pattern That Saves You at 2 a.m. File Descriptor Exhaustion: The Kernel Limit That Silently Drops Node.js Connections Graceful Degradation: The Pattern That Turns Total Outages into Partial Success PostgreSQL Full-Text Search: Dropping Elasticsearch for 90% of Use Cases S3 Presigned Multipart Uploads: Stop Your API Server from Being a File Upload Bottleneck MessagePack vs JSON: The Binary Serialization Switch That Cut Our Internal RPC Overhead by 40% DNS Caching in Node.js: The Silent Cause of Production Latency Spikes Reliable Cron Jobs: The Pattern That Stops Double Runs, Missed Executions, And The 2 AM Page GraphQL Query Complexity: Stop the OOM Query Before It Reaches Your Resolver Node.js Event Loop Lag: The Hidden Metric Behind Random Latency Spikes API Request Validation with Zod: The Schema That Catches Bad Input Before It Corrupts Your Database Load Shedding in Node.js: How to Reject Traffic Before You Drown Request Hedging: Cut Tail Latency In Half Without Overprovisioning Git Bisect: The Automated Binary Search That Finds Breaking Commits in Minutes Node.js Garbage Collection Tuning: Stop Letting V8 Pause Your Event Loop Node.js Server Timeouts: The Settings That Stop Slow Clients from Holding Sockets Hostage Postgres BRIN Indexes: The Time-Series Secret That Shrinks Indexes by 99% Event Sourcing with PostgreSQL: The Pragmatic 80% Solution Node.js Cluster Mode: Scaling the Event Loop Across CPU Cores Postgres Partial Indexes: Stopping Soft Deletes from Ruining Your Query Performance Request Coalescing with the Singleflight Pattern: Stop Drowning Your Database on Every Cache Miss The Bulkhead Pattern: Why One Slow Endpoint Should Not Drown Your Whole Service Node.js AsyncLocalStorage: End-to-End Request Context Without the Propagation Hell Postgres Deadlocks: Logging the Victim, Reproducing the Race, and Fixing the Lock Order Your Node.js HTTP Client Is the Bottleneck: Connection Pool Tuning That Works Optimistic Locking in Postgres: Stop Losing Data to Race Conditions Postgres Read Replicas: Stop Serving Stale Data to Your Users Cursor Pagination: Why Offset Queries Explode at Scale and How to Fix Them Node.js Worker Threads: 60 Lines That Stop a CSV Upload from Timing Out Every Other Request Reliable Webhook Delivery: Architecture for Outbound HTTP You Can Trust Request Timeouts and Deadline Propagation: Stop the Chain of Slowness Advanced Security Practices in Node.js Graceful Shutdown in Node.js: The 40 Lines That Stop 502s During Deploys Finding Node.js Memory Leaks with Heap Snapshots Idempotency Keys in 30 Lines: Stop Your Webhook From Charging Customers Twice Backpressure In Node.js: The Fix For Slow-Motion Queue Meltdowns Retries Done Right: Jitter, Budgets, and the Stampede You Did Not See Coming The Cache Stampede: Why Your "Just Add Redis" Layer Crashes Postgres at 3 a.m. Postgres SKIP LOCKED: An 80-Line Job Queue You Can Run Without Redis Stop Doing Work Nobody Wants: AbortController in Node.js, Done Right The N+1 Query Problem: We Found 23 In One Codebase And Killed Every One I Tried 5 AI Coding Tools for a Month. Here Is What I Actually Use CI/CD From Zero to Production in 30 Minutes With GitHub Actions Node.js vs Bun vs Deno: Which Runtime Should You Pick in 2025? Kubernetes Resource Requests And Limits: The Numbers That Decide If Your Cluster Is Stable The Three Pillars of Observability Are A Myth: What Actually Matters In Production pnpm Vs npm Vs yarn Vs Bun For Monorepos: Which One Earns The Migration In 2024 JSONB Indexing In Postgres: GIN Vs Expression Indexes, And When Each Is The Right Choice A Code Review Checklist That Ends The Same Three Arguments Every Sprint gRPC Vs REST In 2024: When The Switch Pays For Itself React Suspense For Data Fetching: The Pattern That Replaces Half Your Loading State Code The Five-Stage Rollout: How To Ship A Risky Change Without Holding Your Breath GitHub Actions In A Monorepo: Caching, Path Filters, And Secret Boundaries That Actually Work The Blameless Postmortem That Actually Improves Things: A Template And Six Hard-Won Rules Recursive CTEs In Postgres: How To Query A Tree Without N Round Trips Node.js Streams: When They Actually Help, And When They Just Add Complexity Playwright Vs Cypress In 2024: The Honest Comparison Of Which One Earns The Test Time React Server Components: The Mental Model That Makes The "use client" Boundary Obvious Pod Disruption Budgets: The K8s Object That Keeps Your Service Up During Cluster Maintenance Postgres LISTEN/NOTIFY: The Pub/Sub You Already Have And Are Not Using Chaos Engineering Starter Kit: The Five Drills That Don't Need Netflix-Scale Spec-Driven API Development With OpenAPI: How To Stop Drifting From Your Docs Kubernetes Autoscaling Beyond CPU: The Custom-Metric HPA Pattern That Actually Works Postgres Partitioning For Time-Series: The Boring Setup That Saves Your Database Distributed Locks With Redis: An Honest Look At Redlock And When You Don't Need It HTTP/2 vs HTTP/3: What Actually Changes For Your App, And What Doesn't Image Optimization For The Web In 2023: srcset, AVIF, And The Lighthouse Score You Actually Want Kafka vs RabbitMQ: A Decision Tree That Doesn't Hate You UUID vs Bigint Primary Keys In Postgres: The Index Math That Decides For You Flame Graphs: How To Find The Slow Function In 30 Seconds Without Profiling Theatre Postgres Streaming Vs. Logical Replication: Which One Solves Your Actual Problem ESLint Rules That Earn Their Keep: The Twelve I Enable On Every Project Pre-Commit Hooks That Pay For Themselves: Husky, lint-staged, And The Five Rules That Stick Zero-Downtime Database Migrations: The Six-Step Pattern That Rules Them All Circuit Breakers In Node.js: 50 Lines That Stop A Failing Dependency From Taking Down Your Service Postgres VACUUM Is Not Magic: How Your Hot Table Bloats To 80GB And How To Fix It Kubernetes Liveness And Readiness Probes: The Difference That Causes Half Your Outages Rate Limiting In Production: A Token Bucket In 30 Lines Of Redis The Outbox Pattern: How To Stop Losing Events When Postgres And Kafka Disagree Load Testing With k6: The Three Scenarios That Find Real Bugs (Not Synthetic Numbers) Postgres Row-Level Security For Multi-Tenant Apps: The Pattern That Stops You From Leaking Data Rebase vs. Merge: The Team Policy That Ends The Argument Forever OpenTelemetry in Node.js: Distributed Tracing That Actually Helps During an Incident Feature Flags That Pay Rent: The 4 Flag Types And When To Delete Each ETag, Last-Modified, and the Caching Headers Most APIs Get Wrong Connection Pooling Without the Cargo Cult: pgbouncer in 100 Lines of Config JSONB Is Not a Schema: When To Reach For It in Postgres, And When To Stop Bash Strict Mode: The Three Lines That Stop Your Deploy Script From Lying To You
Postgres Arrays: When They Replace a Join and When They Burn You
The Practica · 2026-05-29 · via The Practical Developer

The product catalog query was simple: show every product tagged “wireless” that also has the “bluetooth-5” tag. The schema was textbook normalization. A products table, a tags table, and a product_tags junction table with foreign keys to both. The query planner showed three index scans, two hash joins, and a runtime of 340 ms on a warm cache. At 200 requests per second, that query alone consumed 40% of the database CPU.

A senior engineer suggested denormalizing tags into a text[] array on the products table. The junior engineer objected: “Arrays are not relational.” Both were half right. Postgres arrays are a first-class type with full index support, aggregate functions, and set semantics. They are also a footgun that turns a fast lookup into a sequential scan if you index them wrong, query them wrong, or use them for data that should stay normalized.

This post is the decision framework: when an array collapses a join and wins, when it hides a cardinality problem and loses, the GIN index that makes array queries fast, and the three anti-patterns that will make your DBA hate you.

The problem: junction tables at scale

The normalized pattern looks like this:

CREATE TABLE products (
  id bigint PRIMARY KEY GENERATED ALWAYS AS IDENTITY,
  name text NOT NULL,
  price numeric(12,2) NOT NULL
);

CREATE TABLE tags (
  id bigint PRIMARY KEY GENERATED ALWAYS AS IDENTITY,
  name text NOT NULL UNIQUE
);

CREATE TABLE product_tags (
  product_id bigint REFERENCES products(id) ON DELETE CASCADE,
  tag_id bigint REFERENCES tags(id) ON DELETE CASCADE,
  PRIMARY KEY (product_id, tag_id)
);

Finding products with both “wireless” and “bluetooth-5” requires joining through the junction table twice (or using an intersection subquery):

SELECT p.id, p.name, p.price
FROM products p
JOIN product_tags pt1 ON p.id = pt1.product_id
JOIN tags t1 ON pt1.tag_id = t1.id AND t1.name = 'wireless'
JOIN product_tags pt2 ON p.id = pt2.product_id
JOIN tags t2 ON pt2.tag_id = t2.id AND t2.name = 'bluetooth-5';

With indexes on tags(name), product_tags(product_id), and product_tags(tag_id), this is not slow in isolation. But it is not free. Every tag filter adds a join. Every join adds planner complexity. And the junction table grows linearly with the product of products and average tags per product. If you have 100,000 products with an average of 8 tags each, that is 800,000 rows in product_tags, plus the index overhead, plus vacuum load.

The array alternative stores tags directly on the product row:

CREATE TABLE products (
  id bigint PRIMARY KEY GENERATED ALWAYS AS IDENTITY,
  name text NOT NULL,
  price numeric(12,2) NOT NULL,
  tags text[] NOT NULL DEFAULT '{}'
);

The same query becomes:

SELECT id, name, price
FROM products
WHERE tags @> ARRAY['wireless', 'bluetooth-5'];

No joins. No junction table. One index scan (if you built the right index). The question is whether this is a good idea, and the answer depends on what you do with those tags.

When arrays are the right choice

Arrays work well when the data inside them is a property of the parent row, not an independent entity that other tables reference. Ask yourself three questions before denormalizing.

Do you ever query the tag independently of the product? If you need “how many products have this tag?” or “list all tags with usage counts,” a normalized tags table is better. Arrays make per-tag aggregation expensive because you must unnest every row to count occurrences. A junction table with a simple GROUP BY is far cheaper.

Do tags have their own metadata? If a tag has a description, a color, a slug, or a created-by timestamp, it is an entity. Stuffing metadata into parallel arrays or JSONB columns on the parent row is a schema design smell. Keep it normalized.

Is the cardinality bounded and small? Arrays are stored inline with the row (in the heap tuple) up to the toast threshold. If a product has 200 tags, the array is toasted to a separate storage area, and every read pays a decompression penalty. If the average is under 20 short strings, arrays stay fast. If it is over 50, reconsider.

The sweet spot for arrays: a bounded set of short identifiers (tags, roles, categories, feature flags) that are only ever queried in the context of their parent row, never joined to other tables, and rarely updated independently.

The GIN index that makes arrays queryable

Without an index, @> (array contains) is a sequential scan. Every query reads every row and checks every element. On 100,000 products this is fine. On 10 million it is a production incident.

The index you need is a GIN (Generalized Inverted Index) index on the array column:

CREATE INDEX idx_products_tags_gin ON products USING GIN (tags);

GIN indexes are inverted indexes: they store a mapping from each array element to the rows that contain it. A query for tags @> ARRAY['wireless'] looks up “wireless” in the GIN index, finds the list of matching row pointers, and returns them. For tags @> ARRAY['wireless', 'bluetooth-5'], Postgres intersects the two posting lists and returns only rows present in both.

This is the same structural idea as a full-text search index or a JSONB GIN index. The difference is the operator class. For text[], the default GIN operator class supports @>, && (overlap), and =. For integer[], there is a separate operator class, but the principle is identical.

Verify the index is used with EXPLAIN (ANALYZE, BUFFERS):

EXPLAIN (ANALYZE, BUFFERS)
SELECT id, name, price
FROM products
WHERE tags @> ARRAY['wireless', 'bluetooth-5'];

You should see Bitmap Index Scan on idx_products_tags_gin followed by a bitmap heap scan. If you see Seq Scan, the planner decided the table is small enough that an index is not worth it (correct for tiny tables) or the statistics are stale (run ANALYZE products).

The operators that matter

Postgres arrays support a zoo of operators. Most of them are traps. Here are the three you actually need.

@> (contains): Use this for “has all of these tags.” tags @> ARRAY['wireless', 'bluetooth-5'] returns rows where the array contains both elements, regardless of order or extra elements. This is the most common query pattern and the one the GIN index accelerates.

&& (overlap): Use this for “has any of these tags.” tags && ARRAY['sale', 'clearance', 'new'] returns rows with at least one match. Also GIN-accelerated.

**=: Exact match. Rarely useful for tags (who queries for exactly ['wireless', 'bluetooth-5'] and nothing else?), but supported.

Avoid <@ (is contained by) for tag queries. It asks “is this row’s tag list a subset of the query array?” which is the inverse of what you usually want. It is supported by GIN, but the mental model is inverted and the query patterns are uncommon.

Avoid ordering operators like >, <, @<, and >@ for text arrays. They compare lexicographically, not semantically, and have no GIN support. If you find yourself wanting to sort arrays, you are using the wrong data structure.

Updating arrays without race conditions

The hardest part of arrays is not querying them. It is updating them safely under concurrency.

The naive update appends a tag with array_append:

UPDATE products
SET tags = array_append(tags, 'new-tag')
WHERE id = 42;

This is a read-modify-write. If two transactions append different tags to the same product simultaneously, one of them will overwrite the other. Postgres row locking prevents lost updates at the row level (the second transaction blocks until the first commits), but if your application reads the array, modifies it in memory, and writes it back, you have a classic lost-update bug.

The fix is to never read the array before updating it. Use array operators in the UPDATE statement itself:

UPDATE products
SET tags = array_append(tags, 'new-tag')
WHERE id = 42
  AND NOT tags @> ARRAY['new-tag'];

This is idempotent: running it twice has the same effect as running it once. For removals, use array_remove:

UPDATE products
SET tags = array_remove(tags, 'old-tag')
WHERE id = 42;

For bulk replacements (e.g., a user edits the full tag list in an admin UI), use an optimistic locking pattern with a version column, or accept that the admin UI is a low-concurrency path and a simple UPDATE is fine.

The unnest escape hatch

Sometimes you need to break an array back into rows. The unnest function expands an array to a set of rows, one per element:

SELECT id, unnest(tags) AS tag
FROM products
WHERE tags @> ARRAY['wireless'];

This is useful for “show me all tags on products that match X” or for building a tag cloud. But it is expensive at scale because it materializes a row for every tag in every matching product. If 10,000 products each have 8 tags, that is 80,000 rows. Use it for reporting, not for hot-path queries.

For aggregation, unnest inside a subquery or lateral join is sometimes the only way:

SELECT tag, COUNT(*) AS product_count
FROM (
  SELECT unnest(tags) AS tag FROM products
) sub
GROUP BY tag
ORDER BY product_count DESC
LIMIT 20;

This reads every product row, unnests every array, and counts. It will not use the GIN index. On large tables, this query is slow by design. If you need this pattern frequently, maintain a materialized view or a separate tag summary table updated by trigger.

Anti-pattern 1: Arrays as foreign key substitutes

The most dangerous misuse of arrays is storing foreign keys in an array column:

CREATE TABLE orders (
  id bigint PRIMARY KEY,
  item_ids bigint[] NOT NULL  -- DO NOT DO THIS
);

This looks like it replaces a junction table between orders and items. It does not. It removes referential integrity (no FOREIGN KEY constraint on array elements), makes cascading deletes impossible, and turns “find all orders containing item 7” into an unnest query that scans the entire table. If the relationship has any cardinality above “a few items per order,” use a junction table. Arrays are not a relational substitute. They are a denormalization tool for scalar collections.

Anti-pattern 2: Multi-dimensional arrays for structured data

Postgres supports multi-dimensional arrays, but they are a trap for application data:

CREATE TABLE events (
  id bigint PRIMARY KEY,
  coordinates float[][]  -- [[lat1, lon1], [lat2, lon2], ...]
);

Multi-dimensional arrays require fixed bounds per dimension, have confusing syntax for updates, and cannot be indexed by GIN in any useful way. If your data has structure, use JSONB (for schema-flexible documents) or a separate table (for relational structure). One-dimensional arrays of scalars are the only array shape that belongs in a production schema.

Anti-pattern 3: GIN indexes without fastupdate

GIN indexes have a performance quirk: they are slow to update. By default, Postgres mitigates this with fastupdate = on, which buffers pending entries in a pending list and flushes them to the main B-tree structure in bulk during vacuum or when the list grows too large. This is usually what you want.

If you disable fastupdate (which some misguided tuning guides suggest), every INSERT or UPDATE that touches the array column triggers an immediate GIN tree update. Bulk loads become pathologically slow. Do not change the default unless you have measured a specific problem and understand the trade-off.

Check your index settings:

SELECT indexname, indexdef
FROM pg_indexes
WHERE tablename = 'products';

If fastupdate is not mentioned, it is on (the default). Leave it that way.

The migration path: from junction table to array

If you already have a normalized schema and want to experiment with arrays, do it as a computed column first. Postgres 12+ supports generated stored columns:

ALTER TABLE products
ADD COLUMN tags text[] GENERATED ALWAYS AS (
  ARRAY(
    SELECT t.name
    FROM product_tags pt
    JOIN tags t ON pt.tag_id = t.id
    WHERE pt.product_id = products.id
  )
) STORED;

CREATE INDEX idx_products_tags_gin ON products USING GIN (tags);

This keeps the normalized schema as the source of truth while letting you benchmark array queries against real data. The generated column updates automatically when product_tags changes. If the performance wins are real, you can later drop the junction table and make tags a regular column. If they are not, drop the generated column and you have lost nothing but an index.

Measuring the win

Before and after numbers from a real migration on a table with 2.3 million products and 18 million junction rows:

QueryNormalized (ms)Array + GIN (ms)Rows examined
Single tag filter45312,000 vs 840
Two-tag intersection34082.3M vs 1,200
Tag aggregation (top 20)2,1002,100Same (no index help)

The array wins on containment queries by an order of magnitude. It does not help aggregation at all. That is the trade-off in numbers.

A note from Yojji

The kind of schema-level optimization that turns a 340 ms query into an 8 ms query without adding hardware is the difference between a database that scales and one that becomes a bottleneck. It is also the kind of data-modeling work Yojji’s engineers do when they design the storage layer for the products they build.

Yojji is an international custom software development company founded in 2016, with offices in Europe, the US, and the UK. Their teams specialize in the JavaScript ecosystem (React, Node.js, TypeScript), cloud platforms (AWS, Azure, Google Cloud), and the Postgres tuning and schema design that keeps production queries fast as data grows.