backend-engineer

Compare original and translation side by side

🇺🇸

Original

English

🇨🇳

Translation

Chinese

Backend Engineer

后端工程师

Production-ready backend development with modern technologies, best practices, and proven patterns.

使用现代技术、最佳实践和成熟模式进行生产级后端开发。

When to Use

适用场景

Designing RESTful, GraphQL, or gRPC APIs
Building authentication/authorization systems
Optimizing database queries and schemas
Implementing caching and performance optimization
OWASP Top 10 security mitigation
Designing scalable microservices
Testing strategies (unit, integration, E2E)
CI/CD pipelines and deployment
Monitoring and debugging production systems

设计RESTful、GraphQL或gRPC API
构建认证/授权系统
优化数据库查询与架构
实现缓存与性能优化
缓解OWASP Top 10安全风险
设计可扩展的微服务
测试策略（单元测试、集成测试、端到端测试）
CI/CD流水线与部署
生产系统的监控与调试

Technology Selection Guide

技术选型指南

Languages: Node.js/TypeScript (full-stack), Python (data/ML), Go (concurrency), Rust (performance) Frameworks: NestJS, FastAPI, Django, Express, Gin Databases: PostgreSQL (ACID), MongoDB (flexible schema), Redis (caching) APIs: REST (simple), GraphQL (flexible), gRPC (performance)

See:

references/technologies.md

for detailed comparisons

编程语言： Node.js/TypeScript（全栈）、Python（数据/机器学习）、Go（高并发）、Rust（高性能） 框架： NestJS、FastAPI、Django、Express、Gin 数据库： PostgreSQL（ACID事务）、MongoDB（灵活架构）、Redis（缓存） API类型： REST（简单易用）、GraphQL（灵活）、gRPC（高性能）

详情请见：

references/technologies.md

中的详细对比

Reference Navigation

参考文档导航

Core Technologies:

```
references/technologies.md
```
- Languages, frameworks, databases, message queues, ORMs
```
references/api-design.md
```
- REST, GraphQL, gRPC patterns and best practices

Security & Authentication:

```
references/security.md
```
- OWASP Top 10, security best practices, input validation
```
references/authentication.md
```
- OAuth 2.1, JWT, RBAC, MFA, session management

Performance & Architecture:

```
references/performance.md
```
- Caching, query optimization, load balancing, scaling
```
references/architecture.md
```
- Microservices, event-driven, CQRS, saga patterns

Quality & Operations:

```
references/testing.md
```
- Testing strategies, frameworks, tools, CI/CD testing
```
references/devops.md
```
- Docker, Kubernetes, deployment strategies, monitoring
```
references/implementation-workflow.md
```
- Unified implementation workflow

核心技术：

```
references/technologies.md
```
- 编程语言、框架、数据库、消息队列、ORM
```
references/api-design.md
```
- REST、GraphQL、gRPC的模式与最佳实践

安全与认证：

```
references/security.md
```
- OWASP Top 10、安全最佳实践、输入验证
```
references/authentication.md
```
- OAuth 2.1、JWT、RBAC、MFA、会话管理

性能与架构：

```
references/performance.md
```
- 缓存、查询优化、负载均衡、扩容
```
references/architecture.md
```
- 微服务、事件驱动、CQRS、Saga模式

质量与运维：

```
references/testing.md
```
- 测试策略、框架、工具、CI/CD测试
```
references/devops.md
```
- Docker、Kubernetes、部署策略、监控
```
references/implementation-workflow.md
```
- 统一实施工作流

Key Best Practices

核心最佳实践

Security: Argon2id passwords, parameterized queries, OAuth 2.1 + PKCE, rate limiting, security headers

Performance: Redis caching (90% DB load reduction), database indexing, CDN, connection pooling

Testing: 70-20-10 pyramid (unit-integration-E2E), contract testing for microservices

DevOps: Blue-green/canary deployments, feature flags, Kubernetes, Prometheus/Grafana monitoring, OpenTelemetry tracing

安全： Argon2id密码哈希、参数化查询、OAuth 2.1 + PKCE、速率限制、安全头

性能： Redis缓存（降低90%数据库负载）、数据库索引、CDN、连接池

测试： 70-20-10测试金字塔（单元-集成-端到端）、微服务契约测试

DevOps： 蓝绿/金丝雀部署、功能开关、Kubernetes、Prometheus/Grafana监控、OpenTelemetry链路追踪

Quick Decision Matrix

快速决策矩阵

Need	Choose
Fast development	Node.js + NestJS
Data/ML integration	Python + FastAPI
High concurrency	Go + Gin
Max performance	Rust + Axum
ACID transactions	PostgreSQL
Flexible schema	MongoDB
Caching	Redis
Internal services	gRPC
Public APIs	GraphQL/REST
Real-time events	Kafka

需求	选择方案
快速开发	Node.js + NestJS
数据/机器学习集成	Python + FastAPI
高并发场景	Go + Gin
极致性能	Rust + Axum
ACID事务	PostgreSQL
灵活架构	MongoDB
缓存需求	Redis
内部服务	gRPC
公开API	GraphQL/REST
实时事件	Kafka

Implementation Checklist

实施检查清单

API: Choose style → Design schema → Validate input → Add auth → Rate limiting → Documentation → Error handling

Database: Choose DB → Design schema → Create indexes → Connection pooling → Migration strategy → Backup/restore → Test performance

Security: OWASP Top 10 → Parameterized queries → OAuth 2.1 + JWT → Security headers → Rate limiting → Input validation → Argon2id passwords

Testing: Unit 70% → Integration 20% → E2E 10% → Load tests → Migration tests → Contract tests (microservices)

Deployment: Docker → CI/CD → Blue-green/canary → Feature flags → Monitoring → Logging → Health checks

API： 选择风格 → 设计架构 → 输入验证 → 添加认证 → 速率限制 → 文档编写 → 错误处理

数据库： 选择数据库 → 设计架构 → 创建索引 → 连接池配置 → 迁移策略 → 备份/恢复 → 性能测试

安全： OWASP Top 10防护 → 参数化查询 → OAuth 2.1 + JWT → 安全头配置 → 速率限制 → 输入验证 → Argon2id密码哈希

测试： 单元测试70% → 集成测试20% → 端到端测试10% → 负载测试 → 迁移测试 → 微服务契约测试

部署： Docker容器化 → CI/CD流水线 → 蓝绿/金丝雀部署 → 功能开关 → 监控配置 → 日志收集 → 健康检查

Implementation Workflow

实施工作流

When implementing backend code, follow unified implementation workflow patterns. See

references/implementation-workflow.md

for details.

在实现后端代码时，请遵循统一的实施工作流模式。详情请见

references/implementation-workflow.md

。