This tutorial explains how to obtain a user's IP address from an HttpServletRequest, interpret the IP using the ip2region offline database, and display the corresponding province or country in a Java backend application, including code examples and Maven integration.
A recent Hacker News discussion revealed that Docker’s iptables rule allows containers bound to 127.0.0.1 to be reachable from other hosts, and a step‑by‑step proof‑of‑concept demonstrates the issue while a revised iptables rule is proposed to enforce proper source‑address restrictions.
This article explains the concept of Power over Ethernet (PoE), why it is needed, its advantages, the roles of power‑sourcing and powered devices, power delivery modes, negotiation processes, IEEE standards (802.3af/at/bt), and the types of equipment that can support PoE.
This article analyses the rapid evolution of cloud‑native networking, identifies key challenges across traditional, data‑center, edge, multi‑cluster, financial, and telecom scenarios, and presents open‑source and commercial solutions such as Kube‑OVN, Underlay networks, flexible IPAM, and hardware‑software acceleration.
This guide provides concise English explanations of dozens of essential Linux commands—including compression tools, process utilities, and network utilities—covering their purpose, syntax, key options, and practical usage examples for system administrators and developers.
This article breaks down Kubernetes' networking model by defining key concepts such as network namespaces, veth pairs, iptables, bridges, services, ClusterIP, NodePort, and illustrates intra‑ and inter‑node communication, as well as external access methods like NodePort and Ingress.
This article explains the essential concepts of TCP and UDP, covering the OSI layers, physical and data‑link networking, IP addressing, transport‑layer mechanisms such as sliding windows, congestion control, reliable transmission, connection establishment and termination, and compares the strengths and weaknesses of TCP versus UDP.
This article traces the development of the HTTP protocol from its earliest 0.9 version through 1.0, 1.1, 2.0, and the modern HTTP/3 over QUIC, detailing key features, header compression, multiplexing, caching mechanisms, server push, and the security and performance trade‑offs of each iteration.
This article compiles a comprehensive list of over a hundred Linux, networking, load‑balancing, database, caching, monitoring, container and cloud‑native interview questions, providing candidates with essential knowledge to ace system‑administration and DevOps job interviews.
This article explains Kubernetes' networking model, covering container‑to‑container, pod‑to‑pod (same‑node and cross‑node), pod‑to‑service, and external traffic handling via load balancers and Ingress, while detailing the underlying Linux namespaces, veth pairs, bridges, iptables, and IPVS mechanisms.
This comprehensive guide explains Kubernetes' networking model, covering core concepts such as network namespaces, virtual Ethernet pairs, pod-to-pod and pod-to-service communication, CIDR routing, NAT, iptables, IPVS, DNS, and how traffic flows between pods, services, and the external Internet.
This visual guide presents a detailed mind map of core networking concepts—including transmission media, Ethernet frames, IP addressing, routing protocols, VLANs, NAT, IPv6, DHCP, and VPN technologies—providing concise illustrations for each topic to aid learners in mastering network fundamentals.
This article explains the differences between layer‑2 and layer‑3 switches, their operating principles, ARP handling, collision and broadcast domains, VLAN concepts, configuration commands, and typical use cases, providing a comprehensive overview for networking fundamentals.
The article explains how HTTP/3, standardized as RFC 9114 after five years of work, replaces TCP with the UDP‑based QUIC protocol to overcome HTTP/1.1 and HTTP/2 limitations such as head‑of‑line blocking, improving multiplexing, congestion control, and security.
This article explains the significance of HTTP/3 for web performance, outlines its standardization history, compares it with HTTP/1.1 and HTTP/2, presents benchmark results, and discusses practical adoption considerations such as QUIC, 0‑RTT, and current implementation support.
This article explains the fundamentals of Network Address Translation (NAT), covering public and private IP concepts, various NAT types—including static, dynamic, NAPT, and Easy IP—along with their configurations, advantages, disadvantages, and the role of NAT servers in enabling internal devices to access the Internet.
This article provides a comprehensive guide to Netty, covering its definition, advantages, key features, application scenarios, performance characteristics, architectural components, threading models, code examples, handling of packet framing, zero‑copy techniques, connection management, object pooling, and supported serialization protocols.
This comprehensive C/C++ knowledge base covers everything from basic syntax, const, static, and this pointers to advanced topics like inline functions, virtual methods, smart pointers, STL containers, data structures, algorithms, operating system concepts, networking layers, and common interview problems, complete with code examples and diagrams.
This article analyzes the rapid evolution of cloud‑native networking, identifies key trends such as the limits of a single CNI, the rise of auxiliary components, emerging technologies and hardware‑software integration, and examines six major application scenarios—from traditional workloads to edge, multi‑cluster, financial‑grade security, and telecom—offering open‑source and commercial solutions for each.
This article provides a comprehensive overview of Kubernetes, covering its revolutionary role in cloud computing, master‑worker architecture, core concepts such as Pods and Controllers, storage and networking models, workload types, and extensibility through CRI, CNI, and CSI standards.
This guide explains Docker's networking fundamentals, covering Linux veth pairs, the default docker0 bridge, container linking with --link, creating custom bridge networks, and connecting containers across networks, complete with command examples and inspection outputs.
This guide covers step‑by‑step methods to recover forgotten root passwords on various Linux distributions, explains common filesystem directories, lists essential commands, details SUID/SGID/sticky bit usage, shows how to configure static IPs in bridge and NAT modes, set up local yum repositories, manage iptables and firewalld rules, and provides basic shell scripting and hardening tips.
DNS translates human‑readable domain names into IP addresses through a hierarchical, distributed system of root, top‑level, and authoritative servers, employing caching and recursive queries, and supports both internal and global load balancing to ensure high availability and low latency for internet users.
This article explains Kubernetes' networking model, covering container‑to‑container, pod‑to‑pod, pod‑to‑service, and external traffic flows, detailing network namespaces, veth pairs, bridges, iptables/IPVS load balancing, and cloud‑provider integrations such as AWS VPC and Ingress controllers.
This article explains the technical distinctions between HTTP GET and POST requests, covering how parameters are transmitted, practical limitations imposed by browsers and servers, differences in caching, security, and packet flow, and why both methods ultimately rely on the same TCP/IP transport.
This article explains what sockets are, how they relate to TCP/IP and HTTP, introduces the origin and purpose of WebSocket, compares it with traditional sockets, and details the WebSocket handshake, data framing, and differences from HTTP for real‑time bidirectional communication.
This article demonstrates how to implement HTTP requests in Java using the built-in HttpURLConnection class, covering request creation, adding parameters, setting headers, handling timeouts, cookies, redirects, and reading responses, including error handling, with complete code examples.
This article introduces the Python Requests library, explains how to install it, demonstrates basic HTTP methods such as GET and POST with code examples, and explores advanced use‑cases like handling JSON, binary data, custom headers, cookies, sessions, SSL verification, proxies, timeouts, and authentication.
This article systematically organizes essential computer‑networking concepts—hosts, links, packets, routing, protocols, OSI layers, addressing, security mechanisms and common services—into clear sections so readers can understand each term’s role and how the layers interact in modern networks.
This article explains Kubernetes service discovery by first covering essential networking concepts, then detailing how Services provide stable endpoints, how they register with cluster DNS, how Endpoints track healthy Pods, and how kube-proxy routes traffic using iptables or IPVS to ensure reliable intra‑cluster communication.
This guide explains why home broadband users need to discover their dynamic public IP, compares browser, cURL, and dig methods for fetching it, and provides a Bash script that intelligently falls back between multiple services to ensure reliable IP retrieval for DDNS and other network tasks.
This article explains Kubernetes service discovery by first covering essential networking concepts, then detailing how Services provide stable endpoints, how they register with cluster DNS, and how kube-proxy and iptables/IPVS route traffic to dynamic Pods.
This article explains Kubernetes service discovery by first covering essential network concepts, then detailing how Services, Endpoints, and kube-proxy work together to provide stable, load‑balanced communication between dynamic Pods in a cloud‑native environment.
This article explains in detail how Linux handles local network I/O for 127.0.0.1, comparing it with cross‑machine communication, describing the routing, device subsystem, driver code, and soft‑interrupt processing, and concluding with performance considerations and a discussion on eBPF acceleration.
This article provides an in‑depth tutorial on TCP, covering its header structure, three‑way handshake, reasons for three handshakes, four‑way termination, TIME_WAIT, SYN attacks, Linux kernel parameters, and practical socket programming examples, all illustrated with diagrams and code snippets.
This article breaks down Kubernetes' networking model by defining key terms, explaining Service abstractions, IP and port concepts, detailing intra‑cluster communication, and outlining external access methods such as NodePort and Ingress, all supported by practical YAML and command examples.
This article explains how Linux handles local network I/O for 127.0.0.1, detailing the differences from cross‑machine communication, the routing decisions, the loopback device driver, soft‑interrupt processing, and the complete kernel execution flow for both sending and receiving packets.
This article explains how Redis uses the simple text‑based RESP protocol for client‑server communication, details each reply type, shows how to capture traffic with tcpdump, and dives into the internal C structures and error codes that power Redis commands.
This article explains why Go programs may pick unusable link‑local addresses on machines with multiple network interfaces, shows how to filter them out, and presents three practical solutions—including per‑NIC binding, Docker container isolation, and DNAT/SNAT rules—to control inbound and outbound traffic.
This article explains what DNS root servers are, how they function in the hierarchical name‑resolution process, why there are only thirteen IPv4 root addresses, where they are located worldwide—including China’s nodes—and lists common public DNS services for both IPv4 and IPv6.
This article provides a comprehensive overview of Kubernetes, covering its purpose for container operations, key functions, core components, multi‑center deployment, service discovery methods, pod resource sharing, common CNI plugins, load‑balancing layers, isolation dimensions, network model principles, and IP address classifications.
This guide shows how to modify a Go custom DNS resolver to perform simple load balancing by predefining IP addresses and randomly selecting one for each new connection, including full code examples and test output.
This article explains the fundamentals of Kubernetes networking, compares popular CNI implementations such as Flannel, Calico, and Weave Net, and details the key networking scenarios—including container‑to‑container, pod‑to‑pod, pod‑to‑service, and Internet‑to‑service—required for reliable and secure cluster operation.
This article explains the definitions, relationships, and components of URI, URL, and URN, illustrating how they locate resources on the web, detailing protocol, domain, port, path, and filename rules, and providing references to the relevant RFC specifications.
This article explains the definitions and relationships of URI, URL, and URN, illustrates how URLs are composed of protocol, domain, port, path and filename, and provides examples and RFC references to help readers grasp how web addresses locate resources.
This article explains why the default InMemoryDnsResolver cannot provide load balancing, shows how to create a custom SystemDefaultDnsResolver that randomly selects IPs, and demonstrates single‑thread, multi‑thread, and single‑connection pool tests to verify the behavior.
This article provides a thorough introduction to the Domain Name System (DNS), covering its hierarchical design, query workflow, caching mechanisms, message structure, resource record types, and common security threats along with mitigation techniques, offering essential knowledge for networking fundamentals.
This article provides a comprehensive reference of essential Linux commands and procedures, covering system shutdown and reboot, hardware and environment inspection, file and directory management, user and permission handling, networking utilities, performance monitoring tools, and common text processing techniques for administrators and developers.
This guide explains why IPVS outperforms iptables for large Kubernetes clusters, then walks through installing ipvsadm, loading kernel modules on master and worker nodes, configuring kube-proxy to use IPVS, cleaning iptables rules, and verifying network and DNS functionality with a BusyBox pod.
This article explains what DNS root servers are, how they function in the hierarchical name resolution process, why there are only 13 of them, their global distribution—including China’s nodes—and provides a list of public DNS services, highlighting their critical role in internet stability and security.
This article explains the fundamentals of the Domain Name System, how DNS queries work, the role of DNS servers, hierarchical name resolution, record types, and useful command‑line tools such as dig, host, and nslookup, providing clear examples and diagrams for each concept.
This article explains step‑by‑step how a request to www.baidu.com travels from a local PC through the LAN, across subnets, and through NAT, detailing IPv4 addressing, MAC resolution via ARP, routing table lookups, and the OSI‑model layers involved.
This article compiles 15 common interview topics—from sorting linked lists and encryption differences to TCP reliability, I/O models, Hystrix, delayed tasks, HTTPS flow, transaction isolation, index pitfalls, virtual memory, ranking with Redis, distributed locks, zero‑copy techniques, synchronized internals, and Snowflake ID generation—providing concise explanations, code examples, and diagrams for each.
This article explains Docker’s built‑in network drivers, the construction and external exposure of the default bridge network, and then dives into Kubernetes networking challenges, illustrating how Flannel provides cross‑node Pod communication through subnet allocation, virtual interfaces, and packet encapsulation.
This article explains the total number of IPv4 addresses worldwide, details China's allocated IPv4 blocks, shows how to extract and sum them using a script, and compares the IP holdings of major Chinese cloud providers and global giants like Amazon.
This article explains VLAN fundamentals, why they are needed, how they differ from subnets, the role of VLAN tags and IDs, various interface types, practical deployment scenarios, related protocols, and the challenges VLANs face in modern cloud environments.
This article explains DNS fundamentals, its distributed hierarchical structure, TCP/UDP usage, top‑level domains, resolution workflow, caching, smart geo‑aware routing, BIND server setup, zone file syntax, DNS load balancing, sub‑domain delegation, debugging tools, and the risk of DNS amplification attacks.
This article walks through Docker's built‑in network drivers—including bridge, host, none, overlay, macvlan and plugins—then dives into Kubernetes networking, detailing Pod communication, the Flannel CNI workflow, and how data traverses virtual bridges and physical interfaces.
The article provides an in‑depth analysis of NVIDIA’s BlueField DPU series—detailing the roadmap from BlueField‑2 to BlueField‑4, the technical capabilities of BlueField‑3 across networking, security, and storage, and the DOCA ecosystem that enables programmable, hardware‑accelerated data‑center services, positioning DPUs as a core pillar of modern cloud infrastructure.
This article explores the evolution of BPF from its origins as a packet‑filtering mechanism to the modern eBPF engine, detailing its architecture, security and performance benefits, core features such as hooks, maps and helper functions, and real‑world cloud‑native use cases like Cilium, Falco and kubectl‑trace.
This article explains the fundamentals of load balancing, covering why it is needed for high‑traffic services, the difference between vertical and horizontal scaling, various load‑balancing techniques (DNS, HTTP, IP, link‑layer, hybrid), common algorithms, and the trade‑offs of software versus hardware solutions.
This article provides a comprehensive overview of Kubernetes networking, explaining key concepts such as network namespaces, veth pairs, iptables, services, ClusterIP, NodePort, Ingress, and the role of CNI plugins, while illustrating internal and external communication with practical YAML and kubectl examples.
This article breaks down Kubernetes' internal networking model, explaining key concepts such as network namespaces, veth pairs, iptables, services, ClusterIP, NodePort, and Ingress, and illustrates how pods communicate within a node, across nodes, and how external traffic reaches the cluster.
This article traces the evolution of HTTP from its early TCP‑based origins through HTTP/1.0, 1.1, SPDY, HTTP/2, and finally to HTTP/3, explaining how QUIC over UDP addresses latency, head‑of‑line blocking, and security challenges of previous versions.
This comprehensive guide presents essential Linux commands for system shutdown, reboot, hardware inspection, file manipulation, user management, networking, performance monitoring, and troubleshooting, offering clear examples and code snippets to help administrators efficiently manage and diagnose Linux servers.
When a Go TCP proxy splits socket I/O into separate read and write goroutines, closing the connection can cause "use of closed network connection" errors, and this article shows how to use context cancellation and SetReadDeadline to make both loops exit cleanly.
This article explains the fundamentals of DNS, covering its role as a translator between domain names and IP addresses, the hierarchical structure of domains, query methods, caching mechanisms, step‑by‑step resolution process, and common DNS resource record types.
This article explains how Kubernetes implements service discovery by detailing the underlying pod network, the role of Services as stable endpoints, the registration process via CoreDNS, the creation of Endpoints objects, and how kube-proxy routes traffic using iptables or IPVS.
This article explains the relationship between URLs, IP addresses, and domain names, detailing how the DNS system resolves human‑readable addresses to numeric IPs, the structure of URLs, the history and hierarchy of DNS, and the step‑by‑step process of domain name resolution.
This article reviews the core structure of Kubernetes pods, explains how pods expose services externally, details load‑balancing mechanisms using Services and kube‑proxy, and illustrates the role of selectors, VIPs, and iptables/ipvs in dynamic pod discovery and traffic routing.
This article explains the core principles of Kubernetes networking, detailing how each pod receives a unique IP, how intra‑node and inter‑node communication occurs via virtual Ethernet pairs, bridges, and routing, and illustrates packet flow with diagrams to help troubleshoot network issues.
This article explains the origins of QoS, its key performance metrics such as bandwidth, latency, jitter and packet loss, compares the Best‑Effort, IntServ and DiffServ service models, and describes how DiffServ components are deployed in enterprise networks to manage traffic and improve service quality.
This article demystifies Kubernetes networking by explaining the fundamental design of unique Pod IPs, intra‑node communication via veth pairs and bridges, and inter‑node packet routing across CIDR blocks, providing clear step‑by‑step illustrations of how containers talk within and between nodes.
This article explains the historical development of the HTTP protocol—from the simple HTTP/0.9 version through HTTP/1.0, 1.1, the binary‑based HTTP/2, and the emerging HTTP/3—highlighting each version's features, limitations, and the motivations behind their upgrades.
This article explains Kubernetes service discovery by first covering the underlying pod network concepts, then detailing how Services provide stable endpoints, how they register with cluster DNS, the role of Endpoints and kube-proxy, and the iptables/IPVS mechanisms that route traffic to pods.
This article provides a comprehensive collection of essential Linux command-line instructions covering system shutdown and reboot, hardware and process inspection, file manipulation, networking utilities, performance monitoring, and common administrative tasks, all organized for quick reference by developers and system administrators.
This article provides a systematic overview of the SDP (Session Description Protocol) used in WebRTC, covering its historical background, syntax, key fields, media descriptions, Plan B vs Unified Plan styles, and numerous extensions such as codec parameters, ICE candidates, DTLS, and simulcast, with practical examples and code snippets.
This guide explains how to combine the open‑source tools Keepalived and HAProxy to create a highly available software load‑balancing solution, covering the underlying concepts, installation steps, configuration files, health‑check scripts, session persistence, SSL offloading, and traffic routing techniques.
This guide compiles over 300 interview-style questions covering Python fundamentals, network programming, concurrency, databases, caching, frontend frameworks, DevOps tools, and system design, along with code snippets and brief explanations to help candidates prepare for technical interviews.
This article dives deep into the Linux kernel implementation of the TCP three‑way handshake, explaining the roles of listen, connect, SYN/ACK processing, queue management, timers, and accept, while providing concrete code snippets and diagrams to help backend engineers master the underlying mechanics.
This comprehensive guide answers 19 core networking interview questions, covering the TCP/IP five‑layer model, HTTP fundamentals, GET vs POST, ping, status codes, differences among HTTP/1.0, 1.1, 2, 3, HTTPS, TCP connection handshake and teardown, sliding windows, flow control, half‑ and full‑connection queues, packet framing, and the browser request lifecycle.
This article provides a detailed Docker tutorial covering container fundamentals, installation steps, basic commands, image lifecycle, volume handling, Dockerfile creation, image layering, Zabbix deployment, private registry setup, Docker‑Compose orchestration, networking modes, and best‑practice recommendations for container operations.
Power over Ethernet (PoE) enables simultaneous data transmission and DC power delivery over Ethernet cables, detailing its necessity, operation modes, negotiation processes, IEEE standards (802.3af/at/bt), TLV structures, and the types of devices that can act as power sources or powered endpoints.
This article presents a Kotlin‑based technique for removing the repetitive BaseResponse wrapper from Retrofit calls by introducing a custom Converter.Factory and annotation‑driven ConvexTransformer that automatically extracts the data payload.
The article investigates a puzzling Kubernetes issue where using hostPort caused MySQL traffic to be redirected to the wrong pod, explains how iptables rules inserted by the CNI portmap plugin override Service rules, and provides reproducible experiments and practical recommendations to avoid such problems in production.
This article explains the core principles of Kubernetes networking, covering pod IP allocation, intra‑node communication via veth pairs and bridges, and inter‑node packet routing using CIDR blocks and cloud provider routes, all illustrated with diagrams.
A college freshman discovered that by repurposing a single Ethernet cable and cleverly wiring it through his dorm room, he could create a broadcast storm that shut down the entire building's network, illustrating the dangers of looped LAN connections and the importance of proper VLAN and STP configuration.
This article explains the Linux kernel's process for selecting a client-side TCP port during connect() and bind(), covering the relevant source code, random port selection algorithm, conflict checks, and common error scenarios such as "Cannot assign requested address".
This article explains the TCP three‑handshake process, the roles of the full‑connection (accept) and half‑connection (SYN) queues, how to inspect their lengths on Linux, and practical solutions for queue overflow including kernel parameters and socket options.
This article provides a comprehensive overview of TCP networking fundamentals, covering the OSI seven‑layer model, TCP header fields, the three‑way handshake and four‑way termination, connection limits, packet fragmentation and reassembly, flow‑control mechanisms, HTTP/HTTPS differences, encryption methods and useful analysis tools.
This article explains the shortcomings of HTTP/1.x, introduces the key innovations of HTTP/2 such as binary framing, multiplexing, server push, header compression, request priority, stream reset and flow control, and shows why mastering these concepts is essential for modern web development and interview preparation.
A college student wired a neighbor's Ethernet cable into his dorm room, unintentionally creating a network loop that triggered a broadcast storm across the entire building, and then explored why loops cause storms, how STP mitigates them, and improvised covert switching solutions.
This article provides a thorough overview of the HTTP protocol, covering its basic format, workflow, request and response message structures, common methods, status codes, and URL composition, complete with examples and code snippets to help developers understand and use HTTP effectively.
This article explains how eBPF evolved from classic packet filtering to a powerful, programmable kernel virtual machine that enables high‑performance networking, hardware offload, and flexible security, making it increasingly vital for operators, system administrators, and enterprise solution providers.
The article examines edge computing hardware architecture, discussing diverse use cases, evolving server and processor trends—including ARM, Intel, Nvidia, AMD, FPGA, and DPU—open hardware standards, reliability, virtual networking, and storage innovations, highlighting how these developments shape the future of cloud and edge infrastructures.
This article explains TCP’s connection establishment and termination processes, details the roles of half‑ and full‑connection queues in Linux, demonstrates how to simulate and detect queue overflows using tools like netstat, ss, hping3 and ab, and provides kernel tuning parameters to mitigate SYN flood and TIME_WAIT issues.
The article analyzes how the widening gap between CPU compute growth and network bandwidth drives the rapid emergence of smart NICs, outlines their functions, market forecasts, industry chain, key technologies such as EDA and IP cores, and compares global leaders with Chinese vendors, highlighting technical challenges and future trends.
This article explains the complete kernel‑level implementation of the TCP three‑way handshake, covering server listen queue allocation, client connect state handling, SYN/SYN‑ACK processing, syncookie protection, timer management, socket creation, and the accept path, with detailed code examples.
This article explains the principles and implementation of content‑based request distribution in Linux IPVS and the kernel‑mode KTCPVS, covering TCP gateway vs. migration, scheduling algorithms, high‑availability mechanisms, and performance benefits such as improved cache hit rates and scalability.
This comprehensive tutorial walks you through Linux fundamentals, covering VMware installation, network configuration, essential command usage, user management, software installation methods, shell scripting basics, process management, cron jobs, and awk text processing, all illustrated with step‑by‑step screenshots and code examples.
