awesome-kubernetes/v2-docs/networking.md

# Networking

!!! info "Architectural Context"
    Detailed reference for Networking in the context of Networking & Service Mesh.

## Standard Reference

  - [awesomeopensource.com: The Top 110 Cidr Open Source Projects on Github 🌟](https://awesomeopensource.com/projects/cidr)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [Manage Azure IPAM with Terraform](https://mattias.engineer/blog/2025/azure-ipam-with-terraform)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [Application Network Security in Azure Subnets, Endpoints, DNS, NSGs with Terraform Code](https://medium.com/@codebob75/application-network-security-in-azure-subnets-endpoints-dns-nsgs-with-terraform-code-0bcabdb3a65b)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [Reduce Latency with Azure Proximity Placement Groups](https://hansencloud.com/2025/02/24/reduce-latency-with-azure-proximity-placement-groups)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [Azure Products by Region Table](https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/table)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [Hub-Spoke Network Topology in Azure - Azure Architecture Center](https://learn.microsoft.com/en-us/azure/architecture/networking/architecture/hub-spoke)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [Azure Network Security Perimeter Concepts](https://learn.microsoft.com/en-us/azure/private-link/network-security-perimeter-concepts)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [Introducing Subnet Peering in Azure](https://techcommunity.microsoft.com/blog/azurenetworkingblog/introducing-subnet-peering-in-azure/4383841)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [Which Azure Network is Cheaper?](https://blog.cloudtrooper.net/2026/01/16/which-azure-network-is-cheaper)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [A Guide to Azure Data Transfer Pricing](https://techcommunity.microsoft.com/blog/AzureNetworkingBlog/a-guide-to-azure-data-transfer-pricing/4374538)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [Private Link Reality Bites: Service Endpoints vs Private Link](https://blog.cloudtrooper.net/2025/02/17/private-link-reality-bites-service-endpoints-vs-private-link)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [NFTables mode for kube-proxy in Kubernetes](https://kubernetes.io/blog/2025/02/28/nftables-kube-proxy)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [networkwalks.com: TCP/IP Model](https://networkwalks.com/tcp-ip-model)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [medium.com/javarevisited: 5 Best HTTPS, SSL and TLS Courses for Beginners' in 2022](https://medium.com/javarevisited/best-https-ssl-and-tls-courses-for-beginners-4437661250b3)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [blog.coderco.io: TCP Fundamentals for Software & DevOps Engineers: Building' a Strong Foundation in Networking](https://blog.coderco.io/p/tcp-fundamentals-for-software-and)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [cidr.xyz 🌟](https://cidr.xyz)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [gist.github.com: chadmcrowell/cidr.sh 🌟](https://gist.github.com/chadmcrowell/f3fc3be2ca1fcb887034162c14d77e74)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [opensource.com: A Linux networking guide to CIDR notation and configuration' - sipcalc 🌟](https://opensource.com/article/16/12/cidr-network-notation-configuration-linux)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [pbxbook.com: CIDR Cheat Sheet](https://pbxbook.com/other/cidrcheat.html)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [aelius.com: subnet sheet](https://www.aelius.com/njh/subnet_sheet.html)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [networkproguide.com: CIDR Subnet Mask Cheat Sheet](https://networkproguide.com/cidr-subnet-mask-ipv4-cheat-sheet)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [wisc.edu: CIDR Conversion Table](https://kb.wisc.edu/ns/page.php?id=3493)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [dzone: What Is CIDR (Classless Inter-Domain Routing)](https://dzone.com/articles/what-is-cidr-classless-inter-domain-routing-in-mul)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [cyberciti.biz: Linux: IP Subnet (CIDR) Calculator That Will Help You With' Network Settings](https://www.cyberciti.biz/faq/linux-subnet-calculator-cidr)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [cyberciti.biz: Linux Calculating Subnets with ipcalc and sipcalc Utilities](https://www.cyberciti.biz/tips/perform-simple-manipulation-of-ip-addresse.html)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [tecmint.com: How to Calculate IP Subnet Address with ipcalc Tool](https://www.tecmint.com/calculate-ip-subnet-address-with-ipcalc-tool)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [build5nines.com: IPv4 Address CIDR Range Reference and Calculator](https://build5nines.com/ipv4-address-cidr-range-reference-and-calculator)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [NetBox IPAM 🌟](https://github.com/netbox-community/netbox) <span class='md-tag md-tag--info'>⭐ 20567</span>  <span class='md-tag md-tag--success'>[DE FACTO STANDARD]</span>
  - [netboxlabs.com: An In-Depth Guide to NetBox for IPAM](https://netboxlabs.com/blog/netbox-ipam)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [youtube: NetBox Zero To Hero](https://www.youtube.com/playlist?list=PL7sEPiUbBLo_iTds-NV-9Tu05Gg2Aj8N7)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [wizardzines.com: Request Headers](https://wizardzines.com/comics/request-headers)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [wizardzines.com: Response Headers](https://wizardzines.com/comics/response-headers)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [wikipedia: List of HTTP status codes](https://en.wikipedia.org/wiki/List_of_HTTP_status_codes)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [http.cat 🌟](https://http.cat)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [Wikipedia: HTTP/2](https://en.wikipedia.org/wiki/HTTP/2)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [SPDY & HTTP 2 with Akamai CTO Guy Podjarny](https://www.youtube.com/watch?v=WkLBrHW4NhQ)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [Wikipedia: HTTP/3](https://en.wikipedia.org/wiki/HTTP/3)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [http3-explained.haxx.se: HTTP/3 explained 🌟](https://http3-explained.haxx.se)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [alexandrehtrb.github.io: HTTP/2 and HTTP/3 explained](https://alexandrehtrb.github.io/posts/2024/03/http2-and-http3-explained)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [Improving HTTP with structured header fields 🌟](https://www.fastly.com/blog/improve-http-structured-headers)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [http-sfv: HTTP Structured Field Values in Python](https://pypi.org/project/http-sfv)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [harshityadav95.medium.com: Load Balancing Layer 4 vs Layer 7](https://harshityadav95.medium.com/load-balancing-layer-4-vs-layer-7-f37a839afd9c)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>
  - [media.pearsoncmg.com: Recursive/Iterative Queries in DNS](https://media.pearsoncmg.com/aw/ecs_kurose_compnetwork_7/cw/content/interactiveanimations/recursive-iterative-queries-in-dns/index.html)  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span>

## Azure

### Hybrid Infrastructure

  - **(2025)** [**Azure ExpressRoute Resiliency: Best Practices for Production-Critical Workloads**](https://techcommunity.microsoft.com/blog/AzureInfrastructureBlog/azure-expressroute-resiliency-best-practices-for-production-critical-workloads/4394842) <span class='md-tag md-tag--warning'>[NONE CONTENT]</span> <span class='md-tag md-tag--critical'>[ADVANCED LEVEL]</span> 🌟🌟🌟🌟 <span class='md-tag md-tag--info'>[ENTERPRISE-STABLE]</span> — Deeply examines resiliency patterns for Azure ExpressRoute connectivity connecting on-premises data centers to Azure. It covers active-active configuration, secondary ExpressRoute failovers, and VPN backup strategies to prevent downtime during link outages. Indispensable for designing highly available hybrid cloud foundations.
### Multi-Tenant

  - **(2025)** [**Deploying Virtual Networks Across Tenants Using Azure Virtual Network Manager**](https://techcommunity.microsoft.com/blog/azurenetworkingblog/deploying-virtual-networks-across-tenants-using-azure-virtual-network-manager-ip/4410161) <span class='md-tag md-tag--warning'>[NONE CONTENT]</span> <span class='md-tag md-tag--critical'>[ADVANCED LEVEL]</span> 🌟🌟🌟🌟 <span class='md-tag md-tag--info'>[ENTERPRISE-STABLE]</span> — Explains how to construct secure virtual network topologies across multiple enterprise Azure tenants using Azure Virtual Network Manager (AVNM). Details centralized mesh-network architectures, security admin rules, and policy distribution. This resource is highly practical for organizations managing complex multi-tenant landing zones.
## HTTP

### Fundamentals

  - **(2015)** [slideshare: Http Status Code Errors in SEO](http://www.slideshare.net/AdelaRoger/http-status-code-errors-in-seo) <span class='md-tag md-tag--warning'>[NONE CONTENT]</span> 🌟🌟 <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span> — Slide presentation illustrating HTTP status codes (2xx, 3xx, 4xx, 5xx) and their impact on search engines indexing and crawling profiles. Details strategies for resolving redirect loops and handling server-side downtime. It provides basic context on HTTP error definitions but is largely focused on search marketing rather than modern container architectures.
## IP Tools

### Fundamentals (1)

  - **(2022)** [matt-rickard.com: How to Calculate a CIDR](https://mattrickard.com/how-to-calculate-a-cidr) <span class='md-tag md-tag--warning'>[NONE CONTENT]</span> 🌟🌟🌟 <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span> — Breaks down the math of Classless Inter-Domain Routing (CIDR) configuration, highlighting subnet masking and bitwise representation. Demonstrates how to divide network ranges to match Kubernetes pod and service address space requirements. Great educational reading for understanding IP boundaries and avoiding IP collisions in routing designs.
### IP Generation

  - **(2020)** [magic-cookie.co.uk/iplist.html](http://magic-cookie.co.uk/iplist.html) <span class='md-tag md-tag--warning'>[C CONTENT]</span> 🌟🌟 <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span> — A web-based utility tool, IPLIST, used for computing and generating ranges of IP addresses and translating formats. Helps networks administrators quickly construct complex network configurations and resolve subnets. Acts as a simple utility for local testing of IP block definitions.
## IPAM

### Ansible

  - **(2024)** [==docs.ansible.com: Netbox Ansible Modules 🌟==](https://docs.ansible.com/projects/ansible/latest/collections/netbox/netbox/index.html) <span class='md-tag md-tag--warning'>[PYTHON CONTENT]</span> <span class='md-tag md-tag--primary'>[DOCUMENTATION]</span> 🌟🌟🌟🌟🌟 <span class='md-tag md-tag--success'>[DE FACTO STANDARD]</span> — Documentation on Ansible collections for Netbox, the open-source infrastructure resource model and IPAM system. Details modules for programmatically managing IP addresses, subnets, racks, and device inventories directly from GitOps execution pipelines. Enables fully automated source-of-truth orchestration across mixed networks.
## Infrastructure

### Web Servers

  - **(2016)** [5 Tips to Boost the Performance of Your Apache Web Server](http://www.tecmint.com/apache-performance-tuning) <span class='md-tag md-tag--warning'>[NONE CONTENT]</span> 🌟🌟🌟 <span class='md-tag md-tag--info'>[LEGACY]</span> — Outlines 5 performance-tuning optimization steps for Apache HTTP server installations, focusing on Multi-Processing Modules (MPM), KeepAlive configurations, and caching rules. This guide helps legacy operations maximize concurrency on system resources before migrating web workloads to container environments.
## Security

### Infrastructure Security

#### Network Protection

  - [Building a DDoS Response Plan with Azure DDoS Protection](https://techcommunity.microsoft.com/blog/azurenetworksecurityblog/building-a-ddos-response-plan/4372256) <span class='md-tag md-tag--warning'>[EN CONTENT]</span>  <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span> — Curator Insight: Architecture plan to withstand high-volume distributed denial-of-service attempts. Live Grounding: Focuses heavily on cloud-native patterns like rate-limiting, load-balancer protection, and Edge integration on Azure platforms.
## Software Development

### Java

#### Application Servers

  - **(2015)** [HTTP/2 With JBoss EAP 7 - Tech Preview](http://blog.eisele.net/2015/11/http2-with-jboss-eap-7.html) <span class='md-tag md-tag--warning'>[JAVA CONTENT]</span> 🌟🌟 <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span> — Reviews the technology preview of HTTP/2 protocol support within JBoss Enterprise Application Platform (EAP) 7. It covers ALPN requirements, connection multiplexing over TCP, and header compression designed to optimize application loading. Historical reference for configuring early HTTP/2 pathways in enterprise Java environments.
### Performance

#### Web Development

  - **(2016)** [simple-talk.com: Script Loading between HTTP/1.1 and HTTP/2](https://www.red-gate.com/simple-talk/development/dotnet-development/script-loading-between-http1-1-and-http2) <span class='md-tag md-tag--warning'>[JAVASCRIPT CONTENT]</span> 🌟🌟🌟 <span class='md-tag md-tag--info'>[COMMUNITY-TOOL]</span> — Contrasts asset packaging and loading strategies under HTTP/1.1 (bundling, domain sharding) with the multiplexing capabilities of HTTP/2. Analyzes network request profiles to demonstrate how request prioritization and header compression alter client-side performance. Shows that old performance hacks can become anti-patterns with modern network specifications.

---
💡 **Explore Related:** [Cloudflare](./cloudflare.md) | [Kubernetes Networking](./kubernetes-networking.md) | [Servicemesh](./servicemesh.md)