Folder: notes/Networking

Apr 13, 2026

Istio TLS Layering: App TLS vs Mesh mTLS, Webhooks, Egress, and DestinationRule TLS Modes

Apr 07, 2026

Istio Service Mesh: Architecture, xDS, Sidecar Injection, Traffic Interception, and Ambient Mode

Apr 07, 2026

Istio: Service Discovery, DNS Resolution, and Envoy Listener Architecture

Mar 20, 2026

TCP Socket Internals: Listening vs Connected Sockets, Socket Buffers, and the Kernel Network Stack

Mar 18, 2026

Istio Traffic Management: VirtualService, DestinationRule, Gateway API, Service Entries, and Network Resilience

Mar 17, 2026

HTTP Connection Behavior, Multiplexing, and gRPC Scaling in Go

Mar 17, 2026

Istio Envoy Proxy: Internals, Threading, Filters, Connection Pooling, and Health Checking

Mar 17, 2026

Istio Observability & Extensibility: Metrics, Tracing, Kiali, WasmPlugin, EnvoyFilter, and Telemetry API

Mar 17, 2026

Istio Security: mTLS, SPIFFE, AuthorizationPolicy, JWT Validation, and External Authorization

Mar 15, 2026

Container Networking Internals: Namespaces, veth Pairs, Bridges, kube-proxy, conntrack, and CNI

Mar 12, 2026

GKE & Cloudflare Networking — Architecture, Packet Flow, TLS & Security

Mar 12, 2026

Cloud NAT & VPC Networking

Mar 12, 2026

GKE SNAT & IP Masquerading: ip-masq-agent, iptables, and Cloud NAT

Mar 12, 2026

GKE Networking - Subnet Allocation Q&A

Mar 12, 2026

HTTP Streaming

Mar 12, 2026

HTTP vs HTTPS Forward Proxy — Complete Q&A Guide

Mar 12, 2026

End-to-End HTTPS Flow: Content-Length vs Chunked vs HTTP/2 Streams

Mar 12, 2026

GCP Private Service Connect & VPC Networking

Mar 12, 2026

Proxies & TLS Termination

Mar 12, 2026

Shared VPC Knowledge

Mar 12, 2026

TLS 1.3 Handshake: Key Exchange, Authentication, and Certificate Chain of Trust

Mar 11, 2026

Docker Proxy Networking in Kubernetes: mitmproxy, DinD & the Bridge Gateway

Mar 11, 2026

The Unix Socket Technical Guide (Go Focus)

Mar 11, 2026

Kubernetes + gRPC Load Balancing, Headless Services, DNS Records, and Anycast (Q&A)

Mar 11, 2026

TURN Server

Mar 03, 2026

TCP Keepalives & Next-Hop Devices

Mar 02, 2026

Constellates

Explorer

Folder: notes/Networking

Istio TLS Layering: App TLS vs Mesh mTLS, Webhooks, Egress, and DestinationRule TLS Modes

Istio Service Mesh: Architecture, xDS, Sidecar Injection, Traffic Interception, and Ambient Mode

Istio: Service Discovery, DNS Resolution, and Envoy Listener Architecture

TCP Socket Internals: Listening vs Connected Sockets, Socket Buffers, and the Kernel Network Stack

Istio Traffic Management: VirtualService, DestinationRule, Gateway API, Service Entries, and Network Resilience

HTTP Connection Behavior, Multiplexing, and gRPC Scaling in Go

Istio Envoy Proxy: Internals, Threading, Filters, Connection Pooling, and Health Checking

Istio Observability & Extensibility: Metrics, Tracing, Kiali, WasmPlugin, EnvoyFilter, and Telemetry API

Istio Security: mTLS, SPIFFE, AuthorizationPolicy, JWT Validation, and External Authorization

Container Networking Internals: Namespaces, veth Pairs, Bridges, kube-proxy, conntrack, and CNI

GKE & Cloudflare Networking — Architecture, Packet Flow, TLS & Security

Cloud NAT & VPC Networking

GKE SNAT & IP Masquerading: ip-masq-agent, iptables, and Cloud NAT

GKE Networking - Subnet Allocation Q&A

HTTP Streaming

HTTP vs HTTPS Forward Proxy — Complete Q&A Guide

End-to-End HTTPS Flow: Content-Length vs Chunked vs HTTP/2 Streams

GCP Private Service Connect & VPC Networking

Proxies & TLS Termination

Shared VPC Knowledge

TLS 1.3 Handshake: Key Exchange, Authentication, and Certificate Chain of Trust

Docker Proxy Networking in Kubernetes: mitmproxy, DinD & the Bridge Gateway

The Unix Socket Technical Guide (Go Focus)

Kubernetes + gRPC Load Balancing, Headless Services, DNS Records, and Anycast (Q&A)

TURN Server

TCP Keepalives & Next-Hop Devices

DNS Zones & Forwarding Rules