DEV Community

Σωκράτης
Σωκράτης

Posted on

How a Go `scratch` container absorbed 1,000+ probes on Day 1 with $0 infra cost

Modern web development has become bloated. A simple web application today often requires hundreds of megabytes of node_modules, complex JavaScript bundlers, heavy virtual DOM abstractions, and cloud infrastructure bills that scale out of control.

To solve this, I designed FGOTHS — an architectural stack and framework engineered from First Principles to deliver 100/100 PageSpeed scores, 0ms Total Blocking Time (TBT), and sub-millisecond backend execution times while running in a minimal footprint.

Here is a deep dive into the technical design decisions, data serialization choices, and database access patterns that make FGOTHS fast, secure, and cost-effective.


The Core Philosophy: First Principles Engineering

The primary goal of FGOTHS is to eliminate runtime overhead by shifting as much work as possible to compile time and leveraging native OS/hardware capabilities.


1. Server-Driven UI: Templ + HTMX

Instead of shipping megabytes of client-side JavaScript that parse JSON and reconstruct DOM trees in the browser, FGOTHS compiles user interfaces directly into Go code.

Templ (Type-Safe HTML in Go)

  • Compile-Time Safety: Templates are written in .templ files and compiled into strongly-typed Go functions. If a variable or component prop is missing, the build fails at compile time.
  • Zero Runtime Parsing: Unlike traditional HTML templating engines that parse strings at runtime, Templ components are compiled directly into Go bytes buffers.
  • Extreme Memory Efficiency: Rendering a component allocates almost zero additional heap memory compared to standard string concatenation.

HTMX (Interactivity Without JS Frameworks)

  • HTML over the Wire: The client requests small HTML fragments instead of heavy JSON payloads.
  • Zero Main-Thread Blocking: Because there is no JavaScript hydration or complex reconciliation loop running in the browser, Total Blocking Time (TBT) drops to 0ms.

2. High-Throughput Data Transport: FlatBuffers

For high-performance data serialization, internal messaging, or RPC-like communication between services, FGOTHS uses Google’s FlatBuffers instead of JSON or Protocol Buffers.

Why FlatBuffers over JSON?

  • Zero-Copy Deserialization: FlatBuffers represents data in a flat binary format. Accessing data fields requires zero parsing and zero memory allocations — the program simply reads values directly from the memory buffer offset.
  • Forward/Backward Compatibility: Schema evolution is supported seamlessly without breaking existing binary buffers.
  • Minimal CPU Cycles: Eliminates JSON string parsing CPU overhead, which is often a major bottleneck in high-throughput Go web services.

3. Database Layer: SQLite in WAL Mode

Rather than introducing network latency and cloud infrastructure costs with external database clusters, FGOTHS embraces embedded database performance.

SQLite Configurations for Concurrency

  • Write-Ahead Logging (WAL): Enabled by default via PRAGMA journal_mode=WAL;. Readers do not block writers, and writers do not block readers.
  • Synchronous Normal: PRAGMA synchronous=NORMAL; guarantees data integrity while avoiding blocking disk I/O on every write transaction.
  • Busy Timeout & Connection Pooling: Configured to handle concurrent read/write access smoothly under peak loads.
  • Zero Network Hop: Queries execute directly in the same process memory space, yielding single-digit microsecond response times.

4. Deployment: Static Binaries in scratch Containers

The entire stack compiles down to a single static Go binary:

# Compilation flags for stripping debug information and symbols
CGO_ENABLED=0 go build -ldflags="-s -w" -o app .

FROM scratch
COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
COPY --from=builder /usr/share/zoneinfo /usr/share/zoneinfo
COPY app /app
USER 65532:65532
ENTRYPOINT ["/app"]
Enter fullscreen mode Exit fullscreen mode

No Shell / No OS: Without /bin/sh, package managers, or extra binaries, attackers cannot execute shell payloads or perform command injection.
Microscopic Container Size: The entire image consists strictly of the compiled binary and necessary CA certs.
R$ 0,00 ($0.00) Infra Overhead: Runs self-hosted on bare metal or small instances behind a Cloudflare Tunnel with zero open inbound ports.

Production Benchmarks & Telemetry
PageSpeed Score: 100/100 (Mobile & Desktop)
Total Blocking Time (TBT): 0ms
First Contentful Paint (FCP): 0.4s
Memory Footprint: Less than 15MB RSS at idle
Live Audit Telemetry: https://srars.tech/audit
GitHub Repository: https://github.com/WhoseBiasDoYallSeek/fgoths-framework


Architecture Overview

Instead of client-side hydration, heavy SPAs, and bloated container operating systems, FGOTHS shifts computational overhead to compile time and uses a zero-allocation pipeline:

graph TD
    subgraph Client["Edge & Client Layer"]
        A[Browser / Mobile Client] -->|HTML over the wire / HTMX| B[Cloudflare Edge & Tunnel]
    end

    subgraph Host["Secure Host - Container FROM scratch (uid 65532)"]
        B -->|Encrypted Egress / Zero Open Ports| C[Go Static Binary]

        subgraph Core["FGOTHS Core Engine"]
            C --> D[Templ Engine<br/>Type-safe Compiled HTML]
            C --> E[FlatBuffers Codec<br/>Zero-Copy Binary RPC/I-O]
            C --> F[Audit & Telemetry<br/>Immutable Probe Logger]
        end

        subgraph Storage["Embedded High-Throughput DB"]
            C --> G[(SQLite Engine<br/>WAL Mode + Sync NORMAL)]
        end
    end

    D -.->|Zero-Alloc Byte Stream| A
    G -.->|Microsecond In-Memory Reads| C

    classDef edge fill:#f8fafc,stroke:#94a3b8,stroke-width:1px,color:#0f172a;
    classDef host fill:#0f172a,stroke:#38bdf8,stroke-width:2px,color:#f8fafc;
    classDef core fill:#1e293b,stroke:#ee5d43,stroke-width:2px,color:#f8fafc;
    classDef storage fill:#1e293b,stroke:#22c55e,stroke-width:2px,color:#f8fafc;

    class A,B edge;
    class C host;
    class D,E,F core;
    class G storage;
  1. Server-Driven UI: Templ + HTMX
    Instead of shipping megabytes of client-side JavaScript that parse JSON and reconstruct DOM trees in the browser, FGOTHS compiles user interfaces directly into Go code.
    Templ (Type-Safe HTML in Go)
    Compile-Time Safety: Templates are written in .templ files and compiled into strongly-typed Go functions. If a variable or component prop is missing, the build fails at compile time.
    Zero Runtime Parsing: Unlike traditional HTML templating engines that parse strings at runtime, Templ components are compiled directly into Go byte buffers.
    Extreme Memory Efficiency: Rendering a component allocates almost zero additional heap memory compared to standard string concatenation.
    HTMX (Interactivity Without JS Frameworks)
    HTML over the Wire: The client requests small HTML fragments instead of heavy JSON payloads.
    Zero Main-Thread Blocking: Because there is no JavaScript hydration or complex reconciliation loop running in the browser, Total Blocking Time (TBT) drops to 0ms.

  2. High-Throughput Data Transport: FlatBuffers
    For high-performance data serialization, internal messaging, or RPC-like communication between services, FGOTHS uses Google’s FlatBuffers instead of JSON or Protocol Buffers.


sequenceDiagram
    autonumber
    participant C as Client
    participant R as Go HTTP Router
    participant F as FlatBuffers
    participant D as SQLite WAL

    C->>R: Binary Stream Request
    R->>F: Direct Pointer Read
    F->>D: Query Execution <10us
    D-->>F: Memory Row Fetch
    F-->>R: Byte Slice Response
    R-->>C: Streamed HTML or Binary

Why FlatBuffers over JSON?
Zero-Copy Deserialization: FlatBuffers represents data in a flat binary format. Accessing data fields requires zero parsing and zero memory allocations — the program simply reads values directly from the memory buffer offset.
Forward/Backward Compatibility: Schema evolution is supported seamlessly without breaking existing binary buffers.
Minimal CPU Cycles: Eliminates JSON string parsing CPU overhead, which is often a major bottleneck in high-throughput Go web services.

  1. Database Layer: SQLite in WAL Mode Rather than introducing network latency and cloud infrastructure costs with external database clusters, FGOTHS embraces embedded database performance. SQLite Configurations for Concurrency Write-Ahead Logging (WAL): Enabled by default via PRAGMA journal_mode=WAL;. Readers do not block writers, and writers do not block readers. Synchronous Normal: PRAGMA synchronous=NORMAL; guarantees data integrity while avoiding blocking disk I/O on every write transaction. Busy Timeout & Connection Pooling: Configured to handle concurrent read/write access smoothly under peak loads. Zero Network Hop: Queries execute directly in the same process memory space, yielding single-digit microsecond response times.

Conclusion & Discussion
Discussion for Gophers & DevOps Engineers
Have you experimented with compile-time HTML tools like Templ in Go?
What are your thoughts on using FlatBuffers over JSON for high-throughput Go services?
Let me know in the comments!

Top comments (0)