Networking
17 guides tagged “Networking”.
- How to Restrict What an Agent Can Reach on the Network Give the agent an allowlist, not the internet: proxy the calls it needs, block metadata endpoints, and log every destination.
- 502 vs 503 vs 504: What's the Difference? 502 is a bad upstream response, 503 means the service cannot serve now, and 504 is a proxy timeout. Each points somewhere different.
- DNS Propagation: Why Your Domain Still Points Elsewhere DNS changes apply immediately on the authoritative server. What looks like propagation is resolvers serving cached answers until the TTL expires.
- Does Cloudflare Work in China? Cloudflare's global network has no mainland PoPs, so traffic is served from nearby regions. Its China Network is an enterprise product tied to ICP filing.
- What Is an SSL/TLS Handshake (and Why Does It Fail)? TLS agrees on a version and cipher, verifies the certificate, and derives keys. Most failures are a name, a chain, or a protocol mismatch.
- Egress vs Ingress Bandwidth: What's the Difference? Ingress is data coming in and is usually free; egress is data going out and is billed. Direction, not volume, is what shows up on the invoice.
- What Is DNS? DNS is the internet's phone book, turning names into IP addresses. Learn how a lookup works, the record types you need, and why changes take time.
- What Is HSTS (and Why Your HTTPS Isn't Enough)? HSTS tells browsers to always use HTTPS for your domain, closing the downgrade window. Learn how it works and how to enable it safely.
- What Is a Kubernetes Ingress (and Why Is My App Unreachable)? An Ingress routes external HTTP traffic to Services by hostname and path, and usually terminates TLS. What it is, how a request reaches your app, and why it 404s.
- What Is Egress Bandwidth (and Why It Shows Up on the Bill)? Cloud providers meter traffic leaving their network far more strictly than traffic entering it. Egress is the line item that turns a free app into a monthly bill.
- Don't Let Your Domain Expire: Monitoring Domain and Certificate Renewals Expired domains and certificates take sites down silently. Set up expiry alerts so you renew before the outage, not after.
- What Is a Reverse Proxy? A reverse proxy is a server that sits in front of your app and forwards requests to it. Learn what it does, why you need one, and how to add one.
- How to Add HTTPS to a Static Site Add HTTPS to any static site with Let's Encrypt and certbot, or skip it entirely by using a managed host. Steps for both paths.
- What Is Web Cache Poisoning? Web cache poisoning tricks a CDN or proxy into serving an attacker-controlled response to everyone. Learn how it works and how to prevent it.
- How to Set Up Cloudflare for a Small Project Point a domain at Cloudflare in 15 minutes: change nameservers, proxy your DNS records, and get free CDN, TLS, and DDoS protection.
- What Is a CDN and Do You Need One? A CDN caches your site on servers near your visitors, making it load faster worldwide. When it matters, when it's overkill, and what it costs.
- What Is a Kubernetes Network Policy? By default every pod can reach every other pod. A network policy restricts that traffic to explicit flows, containing a compromise instead of letting it spread.