Learn · Networking
Networking
Treat routing as a chain: controller → rule → service → endpoints → pods → policy. Prove each hop before you blame the CNI.
What this module covers
Traffic flow, discovery, and boundaries.
- Services: selectors, EndpointSlices, readiness gating, and port alignment.
- Ingress: edge routing as a controller contract; common misconceptions and failure modes.
- DNS: search domains, ndots behavior, CoreDNS posture, and how policy/egress failures masquerade as DNS.
- Boundaries: NetworkPolicy as containment, not as paperwork.
Readings
The doctrine of routing, stated plainly.
Tenet
TenetTenet IV: Service and Network
Service discovery, ingress, trust boundaries, and disciplined communication.
Text
Codex GigasNetwork Policy and the Discipline of Isolation
Containment, blast radius, and practical boundary thinking.
Atlas
AtlasIngress Returns 502/503
Upstream missing/unhealthy/slow: endpoints, readiness, and timeouts.
Practice
Make routing diagnostics reflexive.
Next
Continue with configuration discipline.