Free chapter — no signup required
Networking & Internet Governance
Core Networking Protocols
The Phonebook of the Internet: DNS
Introduction: Why We Don't Type IP Addresses
How a DNS Query Actually Works: The Resolution Chain
The Basic Records: A, AAAA, and CNAME
Specialized Records: MX, TXT, and SRV
Infrastructure Records: NS and SOA
TTL and Caching: Why DNS Changes Aren't Instant
Advanced Concept: Split-Horizon DNS
Advanced Concept: Anycast DNS
Security: DNSSEC and DNS over HTTPS
Internet Governance: Who Runs the Internet?
The HTTP Stack: Verbs, Headers, and Security
VPC Architecture Fundamentals
Introduction: Your Private Slice of the Cloud
Subnetting & CIDR Math: The Basics
Internet Gateway and Route Tables: The Traffic Directors
Security Groups and Network ACLs: Two Layers of Defense
NAT: Gateways vs. Instances
Bastion Hosts: The Jump Box
VPC Peering and the Transitive Limitation
Availability Zones and Multi-AZ VPC Design
Cloud Connectivity at Scale
Introduction: Beyond the Single VPC
The Transit Gateway: Your Central Cloud Router
VPNs: Connecting Over the Public Internet
IPSec vs. WireGuard: Old Reliable vs. Modern Speed
VPN Types: Route-Based vs. Policy-Based
Direct Connect: Bypassing the Internet
Types of Direct Connect: Dedicated vs. Hosted
MACsec: Securing the Physical Link
Global Internet Routing & Delivery
Introduction: How the Internet Connects
ASNs: Public vs. Private Identity
BGP: The Path Vector Protocol
BGP Attributes: Making the Decision
BGP Attribute: AS-Path
BGP Attribute: Local Preference (Local Pref)
BGP Attribute: MED (Multi-Exit Discriminator)
BGP Communities: Tagging Routes
BGP Route Leaks and Hijacks: When Routing Goes Wrong
Beyond Routing: Geo-DNS
Edge Caching: CDNs and POPs
CDN Architecture: The Origin Shield
CDN Cache Invalidation
Modern Web Protocols: HTTP/2, HTTP/3, and gRPC
Service Mesh Fundamentals
Introduction: The Microservices Headache
The Sidecar Proxy Model (Istio & Envoy)
Control Plane vs. Data Plane
Envoy Internals: The xDS Protocol
The eBPF-based Mesh (Cilium)
Traffic Management: Canary Deployments & Traffic Splitting
Security: Mutual TLS (mTLS)
Identity: SPIFFE IDs
Observability: The Three Pillars in a Mesh
High-Performance Networking
Introduction: When "Fast Enough" Isn't
Kernel Bypass and DPDK: Skipping the Middleman
SR-IOV: High Performance for Virtual Machines
Jumbo Frames: Bigger Boxes, Less Tape
TCP Offloading: Making Hardware Do the Work
Receive Side Scaling (RSS): Spreading the Load
Interrupt Coalescing: Batching the Doorbell Rings
Bare Metal Provisioning
Advanced BGP Security: RPKI & Flowspec
Network Verification (NetDevOps)
Introduction: The "Pray and Deploy" Era
NetDevOps: Applying Software Engineering to Networks
Config as Code vs. Intent-Based Networking
Formal Verification: The Batfish Model
Reachability Analysis: Proving the Negative
Differential Analysis: Semantic Diffs for Networks
The NetDevOps CI/CD Pipeline End-to-End
Overlay Networking Internals: VXLAN & GENEVE
Load Balancing Physics
Introduction: The Traffic Cop
Layer 4 (L4) Balancing: The Packet Shovel
Layer 7 (L7) Balancing: The Application Proxy
Balancing Algorithms: Round Robin, Weighted, and Least Connections
Algorithm: Consistent Hashing and the Thundering Herd
Direct Server Return (DSR): The Asymmetric Triangle
Health Checks: How the LB Knows a Server Is Dead
TCP/IP Performance Tuning
IPv6 Mastery
High-Speed Packet Processing: XDP & eBPF
Egress Cost Engineering
The OSI Model Deep Dive
Office & LAN Networking
SD-WAN and SASE: The Future of Enterprise Networking
Encrypted DNS: DoH & DoT
WireGuard Internals
Anycast Routing
Carrier-Grade NAT (CGNAT)
This is one of 18 chapters
Every chapter is free — Kubernetes, Terraform, SRE, distributed systems, and more — with fast daily review built in.
Sign up free