惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Stack Overflow Blog
Stack Overflow Blog
酷 壳 – CoolShell
酷 壳 – CoolShell
P
Proofpoint News Feed
Apple Machine Learning Research
Apple Machine Learning Research
T
Tailwind CSS Blog
罗磊的独立博客
F
Future of Privacy Forum
The Register - Security
The Register - Security
MyScale Blog
MyScale Blog
P
Privacy & Cybersecurity Law Blog
V
Visual Studio Blog
T
Tenable Blog
F
Fortinet All Blogs
D
Docker
V
Vulnerabilities – Threatpost
Cyberwarzone
Cyberwarzone
A
Arctic Wolf
T
Threat Research - Cisco Blogs
I
Intezer
T
Tor Project blog
大猫的无限游戏
大猫的无限游戏
MongoDB | Blog
MongoDB | Blog
博客园 - 司徒正美
AWS News Blog
AWS News Blog
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
G
GRAHAM CLULEY
T
Threatpost
美团技术团队
K
Kaspersky official blog
F
Fox-IT International blog
Hugging Face - Blog
Hugging Face - Blog
Vercel News
Vercel News
P
Palo Alto Networks Blog
Google DeepMind News
Google DeepMind News
T
The Blog of Author Tim Ferriss
S
Schneier on Security
腾讯CDC
Cisco Talos Blog
Cisco Talos Blog
C
Check Point Blog
博客园 - 叶小钗
I
InfoQ
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
Blog — PlanetScale
Blog — PlanetScale
F
Full Disclosure
T
True Tiger Recordings
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
E
Exploit-DB.com RSS Feed
L
LINUX DO - 热门话题
J
Java Code Geeks
C
CERT Recently Published Vulnerability Notes

DEV Community

How I self-hosted my Flask app on an old laptop for almost free I built a free DSA interview prep site because I was tired of the existing options I built an AI agent that migrates Next.js Pages Router to App Router Prisma Query Logging and PostgreSQL: Where the ORM Ends and the Database Begins Prisma query logging y PostgreSQL: dónde termina el ORM y empieza la base Santa Augmentcode Intent Ep.6 I Benchmarked 17 ESLint Security Plugins. Only One Found Every Vulnerability. How to Build a High-Performance Image Optimization Pipeline in 5 Minutes 50 Linux Commands Every DevOps Engineer Must Know Less Toil, More Flow - Automating the Path from Request to Implementation The Code Review Checklist I Actually Use How I run a small blog on Astro 5 + Content Collections Git: Best Practices for Professionals How IBM Bob Became My Everyday Coding Companion Solana Passkey Wallet: Replacing Seed Phrases with SIMD-0075 I built a small browser puzzle game about arrows I wrapped Claude Code in a zsh function. Here's every decision I almost got wrong. Mobile Game Optimization: A Unity Developer's Checklist Git: Best Practices for Beginners Three days I lost chasing a ghost that was already dead on disk Why Too Many Parts Hurt ClickHouse Performance Guardrails for Agent Output: Pluggable Validation Before and After LLM Calls Gemma Forge: Local AI Without the Setup Wall From Half‑dead Prototype to Local‑Only AI Medical Assistant: Rewiring MedClinic with GitHub Copilot Runninig a forkbomb in Jenkins What’s Actually Happening When You Use Git Preventing Recursive Tool Loops in LangChain Agents Building a Rock-Paper-Scissors CLI with TypeScript — Union Types, Conditionals, and Jest Your AI Coding Agent Wastes 80% of Its Context. Fixed That with Graph Theory. Why Flutter Has Become the Go-To Framework for Fintech App Development We built a scripting language just for AI agents. Here's why. Stop building AI inboxes. Build decision layers instead. Meme Monday Why I Built @editora/ui-react? Are AI tools the next level of abstraction in software development? Identity on Solana: Your Wallet Is Your Account One API Call Changed Everything The Internet Career Nobody Talks About Enough: What Is DevRel? Solar Panel Wiring Diagram: Series vs Parallel Hello everyone! Glad to join the dev.to community I Built an AI Agent That Tailors My Resume - Here's How Agents Actually Work I Built a WhatsApp OTP + AI Chatbot Platform for African Businesses MTP Explained — And Why It Matters for Android on Mac Most Beginners Learn Full-Stack Development Backwards GitHub Glow-Up: Open Source, READMEs, Badges, Streaks, Git and gh CLI System Design Cheat Sheet: Concepts Every Developer Should Know Are Junior Developer Roles Actually Dying? A Fresher's Honest Take Using DigitalOcean Droplets as Ephemeral Sandboxes for AI Agents I built a VSCode extension that visualises your code navigation as a call tree — made for legacy codebase pain Vite predev/prebuild: chaining scripts without losing your mind A website to save you from messy browser tabs Dear Web2 Developer... Solana is here calling Postgres JSONB indexes: GIN vs BTREE on the same column The $5 AI That Remembers Everything What are your goals for the week? #180 Zettelkasten for Developers: A Practical Method That Works OpenClaw vs Hermes Agent: Stars, Downloads & Usage 2026 `act` vs. `waitFor` Global Teams Don’t Struggle With Time Zones. They Struggle With Context Python as a JavaScript Dev $5.4 Billion in Damage. 8.5 Million Machines Down. Three YAML Controls Would Have Prevented It. Here's the Structural Analysis. 🚫 Stop Using PN532 V1 for Your NFC Projects (Real Debugging Experience) Probabilistic Graph Neural Inference for smart agriculture microgrid orchestration for extreme data sparsity scenarios Inference Is Becoming the New Steady-State Cost Center Why AI-Generated Code Is Always Good Enough — And Never Great I built a dark admin dashboard template in HTML — no React, no npm, just pure HTML What is the Difference Between Lattice-Based and Hash-Based Signatures? Next.js App Router caching: revalidate, dynamic, and no-store without the folklore Next.js App Router caching: revalidate, dynamic y no-store sin folklore I built Stashly — a full-stack content manager with a rich text editor published: false tags: react, node, mongodb, typescript Why I Started Building React Projects Instead of Just Watching Tutorials ? Every Tool Eventually Becomes Tuesday Nobody Warns You That Real Software Engineering Feels Chaotic Tích hợp VNPay, Stripe trong Odoo 19 BeautifulSoup and Requests for Web Scraping With Python: When Simple Still Works I Was Stuck Debugging React — Then Developer Tools Changed It Buck Converter Ripple: Sizing the Inductor and Capacitor With Confidence AWS Just Made Its MCP Server Generally Available. Here's What It Actually Gives AI Agents. RAMPART Tests Your AI Agents in Dev. What Catches Malicious Tool Calls in Production? Vibe Team Software Engineering: What a Real AI Human Dev Team Workflow Actually Looks Like An npm Package for AI Agent Orchestration Just Shipped With Its Front Door Unlocked. Here's What the CVE Actually Reveals. Microsoft Foundry Just Added CI/CD for AI Agents. Here's What That Actually Changes. The Best Career Insurance Is a Tech Event You Don't Want to Attend Your GitHub Profile Already Tells Recruiters More Than Your Resume. Most Devs Just Don't Surface It. How to Add Execution Budgets to OpenAI Agents SDK Binary Tree Interview Problems: 6 Traversal Patterns, 15 Problems We trained a personal voice DoRA on Qwen3-8B for $1.50 — beat stock model 100% in blind A/B Stop Leaking API Keys: Why I Built a Local-First Vault for Developers 🔐 RAG Explained: How Retrieval-Augmented Generation Actually Works I Built a Fast Async JioSaavn API Wrapper in Python 🎧 chown & chgrp Deploying Your First App on Kubernetes: A Beginner's Guide (Minikube & Kind) Logs in code It's called a PR "review" for a reason DePIN GPU Market: The Failed Job Receipt Developers Should Demand Why Your AI Agent Monitoring is Wrong (And How to Fix It) Lock Down Your Cloud Shares: A Beginner’s Guide to Azure Files Security. Building a Multi-Channel Content Syndication Pipeline with EmDash Plugins Turn Your Phone Into Voice Input for Any React Text Field Which package is bloating your Docker image?
From Browser to Server : The Journey of an HTTP Request (Demystifying the Web’s Infrastructure)
Emmanuel Onu · 2026-05-25 · via DEV Community

What Actually Happens When You Press Enter?

You type www.google.com and press Enter. Half a second later, a fully rendered page appears. Nobody taught you to find that remarkable. But as a developer, that half second is your responsibility.

It takes 0.5 seconds. But it touches 7 layers of infrastructure.
Here is every layer, in order.

Step 1: DNS Lookup; The Internet’s Phonebook

Humans remember names. Computers understand numbers. DNS translates google.com into 142.250.190.46.
The lookup chain: your browser cache → OS cache → Recursive Resolver → Root Server → TLD Server → Authoritative Server.
The whole chain completes in milliseconds.
When DNS fails, no website loads at all. It is so foundational that its failure looks like the entire internet is broken.

Step 2: TCP Connection; The 3-Way Handshake

Having the IP address is not enough. Your device and the server need to confirm they are both ready to communicate reliably. TCP handles this with three messages before a single byte of your request moves:
•SYN: “can we talk?”
•SYN-ACK: “yes, let’s talk”
•ACK: “connection open”

On a Lagos to Frankfurt connection, this round trip is 100 to 150ms. On a local server, under 5ms. That gap is why CDN edge nodes matter because they bring the handshake closer to your users.

Step 3: The HTTP Request

With the connection open, your browser sends a structured request. Three parts:

Part Purpose Example
Request Line The verb and path GET /index.html HTTP/1.1
Headers Context about the request Host, User-Agent, Cookie
Body Payload (POST/PUT only) JSON data, form fields

HTTP methods define intent: GET retrieves, POST creates, PUT/PATCH updates, DELETE removes. Using the wrong method breaks caching. GET requests are cached by default; POST requests are not. If you are using POST to fetch data, you are bypassing the entire caching layer unnecessarily.

Step 4: Client-Server Architecture

Right, so the request has arrived somewhere. But where exactly? And who is allowed to touch what?
The Rule: the client is never allowed inside the kitchen. They must ask the waiter, who asks the kitchen on their behalf.

Think of it like a restaurant. You are the customer. You can read the menu and place an order, but you do not walk into the kitchen yourself. The waiter (the network) carries your request. The kitchen (the server) does the actual work. And the pantry (the database) holds all the ingredients.

Most production systems follow the 3-tier model:

Layer Role Technologies
Presentation What the user sees HTML, CSS, JavaScript, React
Application Business logic and rules Node.js, Python, Go, Java
Data Persistent storage PostgreSQL, MongoDB, Redis

Each layer talks only to the layer immediately next to it. The browser never touches the database directly. This boundary is a security constraint, not just a convention.

Step 5: Server Processing and REST

So the request has made it past the front door. Now your application server actually does something with it. Here is the typical flow:

  • The web server (Nginx, Apache) receives the raw request and routes it inward
• Middleware runs: authentication checks, rate limiting, request logging
• The router matches the URL and HTTP method to a specific handler function
• The handler runs your business logic, queries the database if needed, and builds a response

  This is where REST comes in. REST is the set of conventions that makes this process predictable and consistent. The four rules:

  • URLs are nouns, not verbs. Use /users/123, not /getUser?id=123
• Use HTTP methods correctly and consistently
• Every request is stateless, it carries everything the server needs to process it
• Structure is consistent: /users returns a list, /users/123 returns one record

  A well-designed REST API is one your teammates can read without a dictionary. A poorly designed one is a support ticket waiting to happen.

GET    /users          // List all users
GET    /users/123      // Get one user
POST   /users          // Create a user
DELETE /users/123      // Remove a user

Enter fullscreen mode Exit fullscreen mode

Step 6: The HTTP Response

The server has done its job. Now it sends back what it found or what went wrong. Every response has a status code, headers, and a body.

  Status codes are the internet’s traffic lights. Every developer needs these internalized:

Range Meaning Key Codes
2xx Success 200 OK, 201 Created, 204 No Content
3xx Redirect 301 Permanent, 302 Temporary, 304 Not Modified
4xx Client Error 400 Bad Request, 401 Unauthorized, 403 Forbidden, 404 Not Found
5xx Server Error 500 Internal Error, 502 Bad Gateway, 503 Unavailable

One mistake that drives everyone mad: Returning 200 OK when an error occurs is one of the most common API mistakes. It breaks clients, breaks monitoring, and makes debugging painful. Return the right code every time.

Step 7: Browser Rendering; Code into Pixels

The response is sitting in your browser. It is raw HTML, CSS, and JavaScript. None of it is visible yet. What happens next is actually one of the most impressive things your computer does silently, several times a day.

  The browser runs through the Critical Rendering Path:

  • Parse HTML → build the DOM tree
• Parse CSS → build the CSSOM
• Combine into a Render Tree (visible elements only)
• Layout: calculate exact positions and sizes for everything on the page
• Paint and Composite: pixels hit the screen

  JavaScript can interrupt this pipeline at any point. A 200kb render-blocking script sitting in the wrong place is the difference between a 0.5 second load and a 3 second one. On a 3G connection in Kano or Benin City, that delay is not a minor inconvenience. It is the difference between a user who waits and one who closes the tab.

  HTML is the blueprint. CSS is the paint bucket. JavaScript is the interior designer rearranging furniture after the house is built. The browser does all of it in under 200 milliseconds.

The Full Journey at a Glance

Step Layer What Happens
1 DNS Lookup Domain name resolved to IP address
2 TCP Connection 3-way handshake establishes reliable channel
3 HTTP Request Browser sends method, headers, and body
4 Client-Server Request routed through 3-tier architecture
5 Server Processing Business logic runs; database queried; response built
6 HTTP Response Status code, headers, and payload returned
7 Browser Rendering HTML, CSS, JS converted to pixels

What’s Next?
You now know what happens every time a user hits your app. DNS finds the address, TCP builds the connection, HTTP carries the message, your server does the work, and the browser makes it visible. Seven layers, half a second.

  The next question is: what happens when a million users do all of that simultaneously? Look out for my next post.