Cloud-Native Networking Architecture Guide

Understanding how packets traverse physical cables, operating system kernels, virtual network interfaces, overlay networks, and reverse proxies is the most fundamental diagnostic skill in cloud-native infrastructure engineering.

flowchart LR
    Client([Client Browser]) --> L7[Layer 7: HTTP/2 / TLS 1.3]
    L7 --> L4[Layer 4: TCP Handshake / Flow Control]
    L4 --> L3[Layer 3: IP Routing / Next-Hop / BGP]
    L3 --> Overlay[Overlay CNI: VXLAN / Geneve / WireGuard]
    Overlay --> Pod[Target Kubernetes Container]

1. Core Curriculum & Modules

Foundations & Protocols

  • OSI 7-Layer Model: Protocol Data Units (PDUs), packet encapsulation, and layer-by-layer troubleshooting.
  • IP Architecture: 3-way handshake, 4-way close, TIME_WAIT vs CLOSE_WAIT, sliding window flow control, and BBR vs CUBIC congestion algorithms.
  • IP Routing & BGP: Longest Prefix Match (LPM), routing tables, OSPF link-state vs BGP path-vector, and ECMP hash polarization.

Real-Time & Streaming Protocols

Cloud & Kubernetes Networking

  • AWS VPC Networking: Subnets, Route Tables, Internet Gateways, NAT Gateways, Transit Gateway, and PrivateLink.
  • Kubernetes Networking: Pod-to-Pod communication, ClusterIP/NodePort Services, CNI plugins (Cilium, Calico), and Ingress controllers.

More in this section

  • dns over https — DNS over HTTPS (DoH) works by taking the traditional process of looking up a website’s IP address and wrapping it in the same…
  • Packet flow — 1. TCP SYN-ACK Handshake.
  • TCP — TCP (Transmission Control Protocol)

Further reading

Across the wiki