Skip to main content
Vibgrate Graph: over 24% fewer tokens, same results
Back to Tags

Network Protocol

30 items tagged with "network-protocol"

Filter by type:

Patterns1

Pattern

Zero Trust Segmentation

Eliminates implicit network trust by authenticating and authorizing every request and dividing the network into fine-grained, individually protected segments.

Anti-Patterns2

Anti-Pattern

Head-of-Line Blocking

A single slow or stuck item at the front of a strictly ordered queue holds up everything behind it, even when the later items are unrelated and ready to proceed.

Anti-Pattern

Disabled TLS Certificate Verification

Turning off certificate validation in HTTPS clients to silence errors, removing the protection TLS provides against man-in-the-middle attacks.

Reference Architectures6

Reference Architecture

Hub-and-Spoke Cloud Network on Azure

Centralized hub virtual network for shared services with isolated spoke networks for workloads, connected by peering.

Reference Architecture

WAF and DDoS Edge Protection on Google Cloud

Edge security design combining a web application firewall, DDoS mitigation, and a CDN to protect public applications.

Reference Architecture

PKI and Certificate Lifecycle Management

Private public-key infrastructure for issuing, renewing, and revoking TLS certificates automatically across services.

Reference Architecture

Service Mesh with mTLS on Kubernetes

Istio-based service mesh providing mutual TLS, traffic management, and observability for microservices.

Reference Architecture

Global Edge and CDN Architecture

Multi-CDN edge design that caches content, runs logic at the edge, and routes users to the nearest healthy origin.

Reference Architecture

Hybrid Cloud Connectivity Network

Resilient private connectivity between on-premises data centers and cloud using dedicated links and redundant VPNs.

Checklists1

Checklist

Zero-Trust Readiness Checklist

Assess readiness to adopt a zero-trust architecture where no user, device, or network is implicitly trusted.

Comparisons1

Comparison

NGINX vs Envoy

NGINX is a battle-tested web server and reverse proxy; Envoy is a modern, dynamically configurable proxy built for cloud-native service mesh and observability.

Benchmarks3

Benchmark

iperf Network Benchmark

Active network measurement tool that generates TCP, UDP, and SCTP traffic between two hosts to measure achievable bandwidth, jitter, and packet loss.

Benchmark

netperf Network Benchmark

Network performance tool measuring both bulk-transfer throughput and request/response transaction rates, used to characterize latency-sensitive workloads.

Benchmark

CDN Latency Benchmark

Measures content delivery network performance from many geographic vantage points, including edge latency, cache hit ratio, and origin offload.

FAQs5

FAQ

What is DNS and how does it work?

The Domain Name System (DNS) translates human-readable names like example.com into the IP addresses machines use to route traffic. A resolver queries ...

FAQ

What is the difference between TCP and UDP?

TCP is a connection-oriented transport protocol that guarantees ordered, reliable delivery using handshakes, acknowledgments, retransmission, and flow...

FAQ

What is a CDN?

A content delivery network (CDN) is a geographically distributed set of edge servers that cache and serve content close to users, reducing latency and...

FAQ

What is a reverse proxy?

A reverse proxy is a server that sits in front of backend servers and forwards client requests to them, returning the responses as if it were the orig...

FAQ

What is a load balancer?

A load balancer distributes incoming network traffic across multiple servers so no single instance becomes a bottleneck, improving availability and sc...

Glossaries11

Glossary

Ingress

Ingress is a Kubernetes resource that defines rules for routing external HTTP and HTTPS traffic to internal services, typically based on hostnames and URL paths.

Glossary

Service (Kubernetes)

A Kubernetes Service is an abstraction that exposes a logical set of pods as a single stable network endpoint, providing service discovery and load balancing across them.

Glossary

WebSocket

WebSocket is a protocol that provides a persistent, full-duplex communication channel over a single TCP connection, enabling real-time two-way data exchange between client and server.

Glossary

Server-Sent Events

Server-Sent Events (SSE) is a web standard that lets a server push a continuous, one-way stream of text updates to a client over a single long-lived HTTP connection.

Glossary

HTTP/2

HTTP/2 is a major revision of the HTTP protocol that adds request multiplexing, header compression, and server push over a single connection to improve web performance.

Glossary

HTTP/3

HTTP/3 is the third major version of HTTP, running over the QUIC transport on UDP to eliminate transport-level head-of-line blocking and speed up connection setup.

Glossary

TCP

TCP (Transmission Control Protocol) is a core transport protocol that provides reliable, ordered, connection-oriented delivery of a byte stream between two hosts.

Glossary

UDP

UDP (User Datagram Protocol) is a lightweight, connectionless transport protocol that sends datagrams without delivery guarantees, favoring low latency over reliability.

Glossary

DNS

DNS (Domain Name System) is the internet's distributed naming system that translates human-readable domain names into the IP addresses needed to locate servers.

Glossary

TLS

TLS (Transport Layer Security) is a cryptographic protocol that secures network communication by providing encryption, integrity, and authentication between two parties.

Glossary

Latency

Latency is the time delay between a request being made and the corresponding response beginning to arrive, typically measured as round-trip time in milliseconds.