All 55 articles, sorted alphabetically
Anycast DNS Explained
How one IP serves traffic from multiple data centers.
Read article →Anycast Explained
How one IP is served from many places.
Read article →BBR Congestion Control
Google's BBR vs CUBIC.
Read article →BGP Basics for Application Developers
Why your packets take weird paths.
Read article →DNS in 2026
DoH, DoT, DNSSEC, and the centralization debate.
Read article →DNS in Microservices
Discovery caching and the TTL story.
Read article →Edge Routing
Cloudflare Fastly Akamai routing models.
Read article →HTTP/3 (QUIC) in Production
Real-world performance gains and operational gotchas.
Read article →IPv6 in 2026
What's deployed, what's not, what to support.
Read article →L4 vs L7 Load Balancing
When IP-only routing beats application-aware.
Read article →mTLS Certificate Rotation
How to do it without outages.
Read article →Anycast architecture
Deep-dive on anycast: announcing one prefix from many PoPs, BGP path selection and catchment behavior, health-gated withdrawal as the drain mechanism,…
Read article →BBR congestion control architecture
Deep-dive on BBR: min RTT + max BW filters, BDP, pacing, STARTUP/DRAIN/PROBE_BW/PROBE_RTT phases, comparison with CUBIC.
Read article →BGP
How BGP (Border Gateway Protocol) routes traffic between autonomous systems that make up the internet.
Read article →BGP architecture
Deep-dive on BGP: eBGP/iBGP peers, best-path selection, policy, communities, convergence timers, RPKI validation, and safety measures.
Read article →CDN Architecture
How CDNs (Content Delivery Networks) place content close to users via distributed edge caches.
Read article →Connection pooling architecture
Deep-dive on connection pooling: why reuse and — more importantly — concurrency limiting matter against a finite backend, the acquire path and its thr…
Read article →Linux conntrack architecture
Deep-dive on nf_conntrack: the 5-tuple hash table, reply tuples and NAT bindings, per-state timeouts as the real capacity knob, table-full drops vs ev…
Read article →DNS
How DNS translates names to IPs via hierarchical distributed lookup, caching, and record types.
Read article →DNS architecture
Deep-dive on DNS: client, stub, recursive resolver, authoritative NS, cache, negative cache, DoH/DoT, DNSSEC, failover.
Read article →eBPF and XDP
Deep-dive on eBPF and XDP: sandboxed verified kernel programs, the verifier and JIT, XDP earliest-hook packet processing, maps for kernel-user state, …
Read article →ECMP routing architecture
Deep-dive on ECMP: how routers spread flows across equal-cost paths with a stateless header hash, next-hop groups and resilient hashing, flowlet switc…
Read article →Explicit Congestion Notification (ECN) architecture
Deep-dive on ECN, the mechanism that lets the network signal congestion by marking packets instead of dropping them: an ECN-capable router experiencin…
Read article →gRPC Architecture in Depth
A 2500-word walkthrough of gRPC architecture: HTTP/2, Protobuf, stubs, interceptors, four RPC patterns, load balancing, deadline propagation.
Read article →Happy Eyeballs architecture
Deep-dive on Happy Eyeballs (RFC 8305): why sequential IPv6-then-IPv4 fallback stalls users, concurrent AAAA/A resolution, address interleaving and RF…
Read article →HTTP/2
How HTTP/2 fixes HTTP/1.1 pitfalls with multiplexing, header compression, and server push.
Read article →HTTP/3 and QUIC Architecture in Depth
A 2500-word walkthrough of HTTP/3 and QUIC: transport, streams, TLS 1.3, 0-RTT, connection migration, congestion control, middlebox challenges, adopti…
Read article →HTTP/3 and QUIC
How HTTP/3 uses QUIC (over UDP) to eliminate TCP head-of-line blocking and speed up connections.
Read article →IPv6
Why IPv6 was designed, its 128-bit addresses, and slow adoption reasons.
Read article →IPv6 architecture
Deep-dive on IPv6: address plan, dual stack, SLAAC, Neighbor Discovery, DHCPv6, NAT64/DNS64, MTU/PMTUD, security.
Read article →Load balancer architecture
Deep-dive on load balancers: L4 vs L7, health checks, algorithms, sticky sessions, connection draining, TLS termination.
Read article →Multipath TCP architecture
Deep-dive on Multipath TCP: MP_CAPABLE/MP_JOIN subflow establishment, dual sequence numbers (subflow SEQ and connection-level DSN), the path manager a…
Read article →NAT
How NAT enables many private IPs to share few public IPs, and its implications for connectivity.
Read article →NAT traversal -- connecting peers behind NATs
Deep-dive on NAT traversal: the NAT problem for P2P, STUN public-address discovery, hole punching, TURN relay fallback, cone vs symmetric NAT types, I…
Read article →NTP -- keeping clocks in sync across a network
Deep-dive on NTP (Network Time Protocol): the synchronized-time need, the stratum hierarchy, offset and round-trip-delay estimation, gradual clock dis…
Read article →Path MTU Discovery architecture
Deep-dive on Path MTU Discovery: how a sender emits full-size don't-fragment packets and shrinks when a smaller link returns …
Read article →QUIC architecture
Deep-dive on QUIC transport: TLS 1.3 handshake, 0-RTT resumption, streams, congestion, loss recovery, connection migration, HTTP/3.
Read article →RDMA architecture
Deep-dive on RDMA: the verbs API and queue pairs, memory registration and kernel bypass, one-sided remote read/write and the completion queue, and the…
Read article →Service Mesh Architecture in Depth
A 2500-word walkthrough of a modern service mesh: sidecar proxies, control plane, mTLS, traffic policy, config distribution, and observability.
Read article →SRv6 architecture
Deep-dive on SRv6: the Segment Routing Header and segments-left, SID structure as locator:function, endpoint behaviors (End, End.X, End.DT4/6), flex-a…
Read article →TLS/SSL architecture
Deep-dive on TLS/SSL: handshake, certs, PKI chain, cipher suites, session resumption + 0-RTT, OCSP, SNI/ALPN.
Read article →TCP architecture
Deep-dive on TCP: 3WHS, sequence + ack, congestion control (CUBIC/BBR), window scaling, slow start, fast retransmit, Nagle, tuning.
Read article →TCP Fast Open architecture
Deep-dive on TCP Fast Open: how a per-destination cryptographic cookie lets a client carry request data in the SYN for a zero-RTT open, how cookies ar…
Read article →TCP/IP
How TCP/IP layers work: IP for packet routing, TCP for reliable streams, and where they fit versus UDP.
Read article →TLS
How TLS provides encryption, authentication, and integrity on top of TCP, powering HTTPS.
Read article →UDP
How UDP provides low-overhead, unreliable datagram delivery, and why real-time apps prefer it.
Read article →VXLAN architecture
Deep-dive on VXLAN overlays: encapsulation and the 24-bit VNI, VTEP data path, EVPN Type-2/Type-3 routes, ARP suppression, MAC mobility, BUM replicati…
Read article →WireGuard architecture
Deep-dive on WireGuard: static-key identity and cryptokey routing, the 1-RTT Noise IK handshake, ChaCha20-Poly1305 transport with anti-replay, the tim…
Read article →Service Mesh Traffic Management
Istio Linkerd Cilium meshes.
Read article →TCP vs UDP
When packet loss tolerance matters more than reliability.
Read article →TLS 1.3 Internals
1-RTT handshake, 0-RTT, and what got removed.
Read article →TLS Handshake Optimization
Session resumption 0-RTT and OCSP stapling.
Read article →Understanding MTU and Fragmentation
Why your packets get dropped on certain paths.
Read article →Understanding TCP Window Scaling
Tuning send/receive buffers for high-bandwidth links.
Read article →