Portfolio ↗

Subnetting

Tiering, zone binding, and sizing for an address-hungry platform.

3Questions
9Flashcards
3Terms
Drill this topic All of Networking
Questions

3 to work through

  1. intermediate Multiple choice

    A new cluster must schedule 60000 pods. The only free allocation inside the corporate 10.0.0.0/8 is one /20, and the network team will not issue more. The platform team requires per-pod firewall rules and flow logs from the cloud provider's own networking. Which address strategy fits?

    2 min answer
  2. intermediate

    A platform's cloud subnets are running out of addresses because container workloads consume one IP per pod. What happens as exhaustion approaches, and what are the options?

    2 min answer
  3. intermediate

    Pods have stopped scheduling on a cluster that has plenty of free CPU and memory. What do you check?

    2 min answer
Terminology

3 terms in this topic

concept

Route Table

The set of rules deciding where traffic leaving a subnet is sent, and the thing that actually makes a subnet public or private.

 practice

Subnet Sizing

Choosing subnet prefix lengths with enough headroom, given that subnets cannot be resized and cloud providers reserve several addresses in each.

 practice

Subnetting and Address Planning

Dividing address space across zones and tiers, and the exhaustion failures that appear only at container density.
Networking

Neighbouring topics

Networking

General material on the network path underneath an architecture.

4 quiz 13 cards 14 terms

TCP/IP

Handshakes, congestion control, head-of-line blocking and connection reuse.

3 quiz 9 cards 2 terms

HTTP/1.1, HTTP/2 & HTTP/3

Multiplexing, prioritisation and the transport each is built on.

4 quiz 11 cards 5 terms

DNS

Resolution, TTL behaviour, traffic steering and failover latency.

5 quiz 7 cards 3 terms

TLS & Certificates

Encryption, integrity, authentication, termination points and expiry.

6 quiz 7 cards 5 terms

Layer 4 vs Layer 7

Connection-level versus request-level balancing, and what each unlocks.

4 quiz 10 cards 3 terms

Reverse Proxies

One place for TLS, routing, caching, compression and rate limiting.

3 quiz 9 cards 5 terms

Content Delivery Networks

Edge caching, origin offload, spike absorption and dynamic content.

8 quiz 11 cards 6 terms

Firewalls & Security Groups

Default-deny, stateful rules, and restricting egress as well as ingress.

5 quiz 8 cards 3 terms

NAT & Egress

Outbound-only connectivity, its per-gigabyte cost and its zone binding.

4 quiz 11 cards 4 terms

VPC Design

Address planning, peering and the ranges you can never resize.

3 quiz 9 cards 3 terms

Routing & BGP

How traffic finds you, anycast, and route withdrawal as a failure mode.

2 quiz 8 cards 5 terms

Service Mesh Networking

Sidecar proxies supplying mTLS, retries and traffic policy.

4 quiz 11 cards 3 terms

WebSockets & Realtime

Persistent bidirectional connections and the capacity model they impose.

6 quiz 13 cards 6 terms

gRPC Transport

HTTP/2 multiplexing, binary encoding and streaming semantics.

4 quiz 12 cards 3 terms

API Gateways

The single entry point, and the business logic that must stay out of it.

3 quiz 10 cards 4 terms

Network Performance

Latency floors, bandwidth-delay product, and what no code change fixes.

5 quiz 13 cards 5 terms

Private Connectivity

Private endpoints, peering and dedicated links to managed services.

4 quiz 7 cards 3 terms

Network Troubleshooting

Flow logs, packet paths, and localising a problem to a hop.

6 quiz 8 cards 3 terms