network-fundamentals-cloud

Solid

Networking fundamentals as they apply to cloud infrastructure — virtual networks, subnets, routers, NAT, floating IPs, security groups, VLAN/VXLAN segmentation, load balancing, SDN concepts, and how Neutron-style cloud networks sit on top of physical topology. Covers TCP behavior at scale, congestion control, tail latency, overlay networks, and the operational gotchas that come from network layering. Use when designing cloud network topology, debugging cross-AZ latency, or reviewing a proposed VPC/SG design.

DevOps & Infrastructure 69 stars 9 forks Updated 1 weeks ago NOASSERTION

Install

View on GitHub

Quality Score: 79/100

Stars 20%
61
Recency 20%
90
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
50
License 10%
100
Description 5%
100

Skill Content

# Network Fundamentals for Cloud The cloud's network is physical hardware pretending to be software. Virtual networks, subnets, security groups, and load balancers are abstractions over a datacenter's actual wires and switches — and every abstraction leaks at the operational layer. This skill covers the networking concepts a cloud-systems practitioner needs to design, debug, and reason about cloud network topology, and the places where the underlying physical reality surfaces as a surprise. **Agent affinity:** hamilton-cloud (datacenter network economics), vogels (service-oriented network boundaries), dean (high-performance intra-datacenter networking) **Concept IDs:** cloud-neutron-networking, cloud-security-groups-policies, cloud-multi-service-coordination ## The OSI Layers, Minus the Nonsense Cloud networking mostly lives at four layers: - **L2 (link).** MAC addresses, Ethernet frames, VLAN tags, ARP. The layer virtual switches speak. - **L3 (network).** IP addresses, routing, subnets. Where SDN controllers live. - **L4 (transport).** TCP, UDP, QUIC. Where load balancers often terminate. - **L7 (application).** HTTP, gRPC, database protocols. Where service meshes live. The cloud network is a stack of overlays: your L2 frames are encapsulated in L3 IP packets that traverse the physical network, unwrapped at the other end, and delivered as if they were on the same switch. Understanding that the overlay and underlay are distinct helps when debugging "this ping should w...

Details

Author
Tibsfox
Repository
Tibsfox/gsd-skill-creator
Created
5 months ago
Last Updated
1 weeks ago
Language
TypeScript
License
NOASSERTION

Integrates with

Similar Skills

Semantically similar based on skill content — not just same category

AI & Automation Listed

cloud-network-architecture-desk

design cloud network architecture, covering the address allocation register and cidr planning, virtual network and subnet layout across availability zones, hub-and-spoke or transit topology and its routing consequences, segmentation with security group and firewall policy structure, the egress model and centralized inspection, private service endpoints, load balancer and ingress tiers, and the reachability matrix stating which segments may reach which. use for vpc and vnet design, address planning, subnet sizing, transit routing, microsegmentation, egress inspection, and private endpoint placement.

2 Updated 3 days ago
MadewellRD
DevOps & Infrastructure Listed

cloud-infrastructure-command-desk

orchestrate cloud infrastructure work across landing zones, account and subscription structure, cloud iam and federation, vpc and cidr network topology, hybrid connectivity and dns, compute and managed kubernetes platforms, object storage and managed databases, multi-region resilience and disaster recovery, infrastructure as code and state backends, provisioning pipelines and plan approval, key management and secret rotation, cloud security posture and cis benchmarks, tagging and resource inventory, cost allocation rightsizing and savings commitments, drift detection, migration waves, and decommissioning. use when the user wants to design, provision, harden, reconcile, rightsize, migrate, or retire cloud infrastructure in one or more providers.

2 Updated 3 days ago
MadewellRD
Code & Development Solid

cloud-identity-and-auth

Identity, authentication, authorization, and token management for cloud platforms. Covers Keystone-style scoped tokens, OAuth 2.0 flows, OpenID Connect, JWT structure and pitfalls, federation with SAML/OIDC, service-to-service auth with mTLS and SPIFFE, principle of least privilege, IAM role design, and the service catalog pattern (public/internal/admin endpoints). Use when designing authn/authz for a multi-tenant cloud service, integrating with an identity provider, or reviewing IAM policies for over-privilege.

69 Updated 1 weeks ago
Tibsfox