Portfolio ↗

VPC Design

Address planning, peering and the ranges you can never resize.

3Questions
9Flashcards
3Terms
Drill this topic All of Networking
Questions

3 to work through

  1. intermediate

    You are designing the network for a platform expected to run for a decade, spanning multiple regions, with acquisitions likely. What do you decide on day one and why?

    2 min answer
  2. advanced

    A large enterprise is designing its cloud network for dozens of business units with connectivity back to on-premises data centres. Which decisions are irreversible, and what is the most common expensive mistake?

    2 min answer
  3. advanced

    Two companies merge. Both use 10.0.0.0/16 for production and the networks must be connected. What are your options?

    2 min answer
Terminology

3 terms in this topic

practice

CIDR Planning

Allocating non-overlapping address ranges across an estate in advance, because ranges cannot be resized and overlaps prevent connectivity.

 practice

VPC Design

How virtual networks, subnets and connectivity are structured — decisions that are cheap now and extremely expensive to change later.

 concept

VPC Peering

A direct network connection between two VPCs, which is simple, cheap and non-transitive — the last property being the one that shapes topology.
Networking

Neighbouring topics

Networking

General material on the network path underneath an architecture.

4 quiz 13 cards 14 terms

TCP/IP

Handshakes, congestion control, head-of-line blocking and connection reuse.

3 quiz 9 cards 2 terms

HTTP/1.1, HTTP/2 & HTTP/3

Multiplexing, prioritisation and the transport each is built on.

4 quiz 11 cards 5 terms

DNS

Resolution, TTL behaviour, traffic steering and failover latency.

5 quiz 7 cards 3 terms

TLS & Certificates

Encryption, integrity, authentication, termination points and expiry.

6 quiz 7 cards 5 terms

Layer 4 vs Layer 7

Connection-level versus request-level balancing, and what each unlocks.

4 quiz 10 cards 3 terms

Reverse Proxies

One place for TLS, routing, caching, compression and rate limiting.

3 quiz 9 cards 5 terms

Content Delivery Networks

Edge caching, origin offload, spike absorption and dynamic content.

8 quiz 11 cards 6 terms

Firewalls & Security Groups

Default-deny, stateful rules, and restricting egress as well as ingress.

5 quiz 8 cards 3 terms

NAT & Egress

Outbound-only connectivity, its per-gigabyte cost and its zone binding.

4 quiz 11 cards 4 terms

Subnetting

Tiering, zone binding, and sizing for an address-hungry platform.

3 quiz 9 cards 3 terms

Routing & BGP

How traffic finds you, anycast, and route withdrawal as a failure mode.

2 quiz 8 cards 5 terms

Service Mesh Networking

Sidecar proxies supplying mTLS, retries and traffic policy.

4 quiz 11 cards 3 terms

WebSockets & Realtime

Persistent bidirectional connections and the capacity model they impose.

6 quiz 13 cards 6 terms

gRPC Transport

HTTP/2 multiplexing, binary encoding and streaming semantics.

4 quiz 12 cards 3 terms

API Gateways

The single entry point, and the business logic that must stay out of it.

3 quiz 10 cards 4 terms

Network Performance

Latency floors, bandwidth-delay product, and what no code change fixes.

5 quiz 13 cards 5 terms

Private Connectivity

Private endpoints, peering and dedicated links to managed services.

4 quiz 7 cards 3 terms

Network Troubleshooting

Flow logs, packet paths, and localising a problem to a hop.

6 quiz 8 cards 3 terms