ASP.NET Core

  Hosting & Kestrel

Generic host, IHost, lifecycle, Kestrel basics, IHostedService

  Hosted Services & Background Work

IHostedService vs BackgroundService, graceful shutdown, Quartz vs Hangfire vs k8s CronJobs

  HTTP/2, HTTP/3 & Transports

HTTP/2 multiplexing, HTTP/3 over QUIC, ALPN, when each pays off

  Middleware Pipeline

Ordering, branching, custom middleware, terminal handlers, Map/MapWhen

  Dependency Injection

Lifetimes (singleton/scoped/transient), captive deps, keyed services, IServiceProviderIsService, anti-pattern catalog

  Configuration & Options

IOptions/IOptionsSnapshot/IOptionsMonitor, ValidateOnStart, ValidateDataAnnotations, provider chain, secret rotation

  API Versioning & REST Contracts

Asp.Versioning, idempotency keys, ETag/If-Match, RFC 9110/9457

  Minimal APIs

Validation, filters, OpenAPI, MVC parity in .NET 9

  Model Binding & Validation

Binding sources, value providers, custom binders, FluentValidation comparison

  Filters & Action Pipeline

Action / result / exception filters, ordering, when to prefer middleware

  HttpContext & Features

HttpContext, feature collection, server abstractions

  Routing

Endpoint routing, route constraints, fallbacks, route templates

  Output & Response Caching

New output cache (.NET 7+) vs response cache, vary-by, eviction

  Rate Limiting

Built-in middleware, fixed/sliding/token-bucket/concurrency, partitioned limiters

  Health Checks

Liveness vs readiness, custom checks, k8s probe wiring

  ProblemDetails & Error Handling

IExceptionHandler, AddProblemDetails, RFC 7807/9457, request decompression

  Globalization & Localization

IStringLocalizer, CultureInfo.InvariantCulture, RTL, Unicode normalization

  Static Assets & MapStaticAssets

MapStaticAssets (.NET 9), CDN, cache headers, asset fingerprinting

  OpenAPI & Swagger

Built-in OpenAPI in .NET 9+, schema generation, transformers

  Forwarded Headers & Reverse-Proxy Hosting

UseForwardedHeaders, KnownProxies/Networks, App Service shortcut, BREACH-aware HTTPS

  IIS & Windows Service Hosting

In-process vs out-of-process IIS, ANCMv2, web.config, UseWindowsService, UseSystemd

  Identity Endpoints (MapIdentityApi)

.NET 8+ minimal-API Identity, opaque bearer tokens, refresh, vs Duende/OpenIddict

  Request Decompression & Response Compression

UseRequestDecompression, Brotli vs Gzip, BREACH risk, decompression bombs

  Server-Sent Events (.NET 10 Native)

TypedResults.ServerSentEvents, IAsyncEnumerable<SseItem<T>>, AI chat streaming

  Endpoint Filters & Route Group Conventions

IEndpointFilter, MapGroup, conventions, validation/tenant-scope filter patterns

  WebHooks — Sending & Receiving

HMAC signatures, replay protection, idempotency, retries + DLQ, Outbox-driven sender

  Output Formatters & Content Negotiation

[Produces]/[Consumes], custom formatters, ProblemDetails, NDJSON streaming

  Types of Web Projects in ASP.NET Core

dotnet new template tour: Web API, Minimal, MVC, Razor Pages, Blazor Web App, Blazor WASM, MAUI Hybrid, Worker, gRPC, Aspire AppHost — when to pick which

  API Client SDK Generation

Refit interface-first, Kiota OpenAPI-driven, NSwag legacy; CI integration, regen-and-commit trade-offs