Production Rate Limiting in ASP.NET Core
Most ASP.NET Core rate-limiting examples stop after registering a fixed window. That is enough to demonstrate the middleware, but it is not enough for a production policy.
Read Blog Post
Tag: ASP.NET Core
Blog Posts with tag "ASP.NET Core"
ASP.NET Core guides on APIs, authentication, middleware, dependency injection and error handling, with practical C# examples by Benjamin Abt.
Hands-on workshop on this topic: ASP.NET Modernization Assessment
Problem Details in ASP.NET Core and .NET 11
builder.Services.AddProblemDetails() registers infrastructure. It does not create an error contract. An ASP.NET Core request can fail during binding, validation, authentication, authorization, endpoint execution, …
Read Blog Post
Resilience in .NET with Microsoft.Extensions.Resilience
Retries are the most visible resilience strategy and the easiest one to misuse. Repeating a failing call can recover from a short network problem. It can also multiply load, repeat a write and keep working long after the …
Read Blog Post
What Matters in ASP.NET Core 11
ASP.NET Core 11 has no single feature that fundamentally changes how web applications are built. That is not a criticism. Mature frameworks improve by removing custom infrastructure, tightening defaults and making common …
Read Blog Post
Building Production MCP Servers with ASP.NET Core
An MCP server can look deceptively small. A package is installed, a method receives an attribute and ASP.NET Core maps an endpoint. That is enough for a demonstration. It is not enough for a server that is allowed to …
Read Blog Post
Telemetry, Logging and Auditing in .NET: Designing the Right Data Path
Telemetry, logging and auditing are often implemented through the same API because all three produce timestamped records. That similarity is superficial. They answer different questions, tolerate different failure modes …
Read Blog Post
Custom Password Hashing in ASP.NET Core: A Versioned, Upgradeable Design
Applications that do not use ASP.NET Core Identity still need a disciplined password-storage design. This often leads to a requirement phrased as “password encryption.” That phrase is dangerous because encryption is …
Read Blog Post
ASP.NET Modernization Assessment
Legacy ASP.NET applications often carry years of accumulated dependencies, custom infrastructure and undocumented assumptions. This assessment provides a structured, evidence-based view of an existing application’s …
Read Blog Post
MCP C# SDK 2.0: Stateless HTTP, Interactive Tools and a Practical Migration Path
The 2.0 release of the official Model Context Protocol (MCP) C# SDK is more than a version increment. It implements the 2026-07-28 MCP specification revision, which changes the default shape of MCP over HTTP. The …
Read Blog Post
Handle time correctly in .NET: TimeProvider
Time is an external dependency. That may sound unusual at first because DateTime.UtcNow is available anywhere without configuration. This convenience becomes a problem as soon as business rules depend on the current …
Read Blog Post