<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Networking on Support Tools</title><link>https://support.tools/tags/networking/</link><description>Recent content in Networking on Support Tools</description><generator>Hugo</generator><language>en-US</language><lastBuildDate>Fri, 23 Oct 2026 00:00:00 -0500</lastBuildDate><atom:link href="https://support.tools/tags/networking/index.xml" rel="self" type="application/rss+xml"/><item><title>Network Function Virtualization (NFV) Implementation: Enterprise Infrastructure Transformation Guide</title><link>https://support.tools/network-function-virtualization-nfv-implementation-enterprise-guide/</link><pubDate>Mon, 05 Oct 2026 00:00:00 -0500</pubDate><guid>https://support.tools/network-function-virtualization-nfv-implementation-enterprise-guide/</guid><description>&lt;p&gt;Network Function Virtualization (NFV) revolutionizes traditional network infrastructure by replacing dedicated hardware appliances with software-based network functions running on commodity hardware. This comprehensive guide explores enterprise NFV implementation, MANO orchestration, VNF development, and advanced service chaining for production environments.&lt;/p&gt;</description></item><item><title>MPLS and Traffic Engineering for Enterprise Networks: Advanced Implementation Guide</title><link>https://support.tools/mpls-traffic-engineering-enterprise-guide/</link><pubDate>Sun, 27 Sep 2026 00:00:00 -0500</pubDate><guid>https://support.tools/mpls-traffic-engineering-enterprise-guide/</guid><description>&lt;p&gt;Multiprotocol Label Switching (MPLS) and Traffic Engineering provide sophisticated mechanisms for optimizing network performance, implementing quality of service, and enabling advanced networking services. This comprehensive guide explores enterprise MPLS implementations, traffic engineering strategies, and production-ready architectures for high-performance networks.&lt;/p&gt;</description></item><item><title>MetalLB BGP Configuration for Bare Metal Kubernetes: Enterprise Load Balancer Guide</title><link>https://support.tools/metallb-bgp-configuration-bare-metal-kubernetes-guide/</link><pubDate>Tue, 22 Sep 2026 00:00:00 -0500</pubDate><guid>https://support.tools/metallb-bgp-configuration-bare-metal-kubernetes-guide/</guid><description>&lt;p&gt;MetalLB brings cloud-provider LoadBalancer functionality to bare metal Kubernetes clusters, enabling the use of LoadBalancer-type Services without relying on external cloud infrastructure. Operating in either Layer 2 (ARP/NDP) or BGP mode, MetalLB provides enterprise-grade load balancing capabilities essential for on-premises and edge Kubernetes deployments.&lt;/p&gt;&#10;&lt;p&gt;This comprehensive guide focuses on BGP mode configuration, which provides superior scalability, true load balancing across multiple nodes, and integration with existing network infrastructure. We&amp;rsquo;ll cover installation, BGP peering configuration, advanced routing scenarios, high availability patterns, and production-tested practices for enterprise bare metal Kubernetes environments.&lt;/p&gt;</description></item><item><title>Gondola: A Lightweight YAML-Based Reverse Proxy for Modern Web Applications</title><link>https://support.tools/gondola-lightweight-yaml-reverse-proxy/</link><pubDate>Tue, 11 Aug 2026 09:00:00 -0500</pubDate><guid>https://support.tools/gondola-lightweight-yaml-reverse-proxy/</guid><description>&lt;p&gt;For many DevOps engineers and site reliability engineers, configuring reverse proxies can be unnecessarily complex. Gondola offers a refreshing alternative - a lightweight, YAML-based reverse proxy written in Go that provides just enough features without the complexity of larger solutions.&lt;/p&gt;</description></item><item><title>IP-Based Pod DNS Resolution in Kubernetes: Advanced Service Mesh Integration and Enterprise Networking Patterns</title><link>https://support.tools/ip-based-pod-dns-kubernetes-service-mesh-advanced-networking-guide/</link><pubDate>Tue, 11 Aug 2026 00:00:00 -0500</pubDate><guid>https://support.tools/ip-based-pod-dns-kubernetes-service-mesh-advanced-networking-guide/</guid><description>&lt;p&gt;IP-based Pod DNS resolution enables direct pod-to-pod communication patterns that are essential for advanced Kubernetes networking architectures, service mesh implementations, and enterprise applications requiring precise control over network connectivity. This comprehensive guide demonstrates production-ready configurations, security patterns, and operational strategies for implementing sophisticated pod networking solutions.&lt;/p&gt;</description></item><item><title>Hybrid Cloud Connectivity with AWS Transit Gateway: Enterprise Architecture Guide</title><link>https://support.tools/hybrid-cloud-connectivity-aws-transit-gateway-enterprise-guide/</link><pubDate>Wed, 05 Aug 2026 00:00:00 -0500</pubDate><guid>https://support.tools/hybrid-cloud-connectivity-aws-transit-gateway-enterprise-guide/</guid><description>&lt;p&gt;Hybrid cloud architectures require robust, scalable networking solutions that can connect on-premises data centers with cloud resources while maintaining security, performance, and manageability. AWS Transit Gateway provides a centralized hub for managing network connectivity across multiple VPCs, regions, and hybrid environments. This comprehensive guide explores enterprise-grade hybrid cloud connectivity patterns using Transit Gateway.&lt;/p&gt;</description></item><item><title>High-Performance CDN Architecture and Edge Computing: Enterprise Content Delivery Guide</title><link>https://support.tools/high-performance-cdn-architecture-edge-computing-enterprise-guide/</link><pubDate>Fri, 31 Jul 2026 00:00:00 -0500</pubDate><guid>https://support.tools/high-performance-cdn-architecture-edge-computing-enterprise-guide/</guid><description>&lt;p&gt;Content Delivery Networks (CDN) and edge computing represent the backbone of modern internet infrastructure, enabling ultra-fast content delivery and reducing latency for global audiences. This comprehensive guide explores advanced CDN architectures, edge computing strategies, and enterprise-grade implementations for high-performance content delivery at scale.&lt;/p&gt;</description></item><item><title>Enterprise Routing and NAT Architecture: Network Address Translation Patterns for Production Infrastructure</title><link>https://support.tools/enterprise-routing-nat-network-address-translation-architecture-guide/</link><pubDate>Fri, 03 Jul 2026 00:00:00 -0500</pubDate><guid>https://support.tools/enterprise-routing-nat-network-address-translation-architecture-guide/</guid><description>&lt;p&gt;Network Address Translation (NAT) and routing form the foundation of modern enterprise network architectures, enabling IP address conservation, security boundary enforcement, and flexible network topology design. This comprehensive guide covers production NAT implementations, routing patterns, and enterprise networking best practices.&lt;/p&gt;</description></item><item><title>Enterprise MetalLB Implementation: Advanced Bare-Metal Load Balancing for Production Kubernetes</title><link>https://support.tools/enterprise-metallb-bare-metal-load-balancing-kubernetes/</link><pubDate>Wed, 01 Jul 2026 00:00:00 -0500</pubDate><guid>https://support.tools/enterprise-metallb-bare-metal-load-balancing-kubernetes/</guid><description>&lt;p&gt;Bare-metal Kubernetes clusters lack cloud provider load balancer integration, creating challenges for exposing services externally. MetalLB bridges this gap by providing native load balancer capabilities for on-premises deployments. This comprehensive guide demonstrates enterprise-grade MetalLB implementation with advanced BGP routing, Layer 2 failover, multi-protocol support, and production monitoring strategies for mission-critical infrastructure.&lt;/p&gt;</description></item><item><title>Enterprise Docker Networking on macOS: Advanced Development Environment Configuration and Cross-Platform Compatibility</title><link>https://support.tools/enterprise-docker-macos-networking-development-environments/</link><pubDate>Thu, 25 Jun 2026 00:00:00 -0500</pubDate><guid>https://support.tools/enterprise-docker-macos-networking-development-environments/</guid><description>&lt;p&gt;Docker networking on macOS presents unique challenges for enterprise development teams due to virtualization layer complexities and platform-specific networking behaviors. Unlike Linux environments where Docker runs natively, macOS implementations require sophisticated configuration to achieve seamless localhost connectivity, cross-platform compatibility, and production-parity networking. This comprehensive guide demonstrates advanced networking patterns, troubleshooting methodologies, and enterprise development environment optimization strategies for macOS-based Docker deployments.&lt;/p&gt;</description></item><item><title>Enterprise LoadBalancer DNS with CoreDNS: Advanced Service Discovery and Network Architecture for Kubernetes Production Environments</title><link>https://support.tools/coredns-loadbalancer-service-discovery-enterprise-networking-kubernetes-guide/</link><pubDate>Wed, 27 May 2026 00:00:00 -0500</pubDate><guid>https://support.tools/coredns-loadbalancer-service-discovery-enterprise-networking-kubernetes-guide/</guid><description>&lt;p&gt;CoreDNS serves as the cornerstone of modern Kubernetes networking, providing sophisticated DNS resolution and service discovery capabilities that enable enterprise-grade LoadBalancer implementations. This comprehensive guide demonstrates advanced CoreDNS deployment patterns, custom service discovery architectures, and production-ready networking strategies for large-scale Kubernetes environments.&lt;/p&gt;</description></item><item><title>Cilium eBPF Networking Deep Dive: Advanced Kubernetes CNI Implementation</title><link>https://support.tools/cilium-ebpf-networking-deep-dive/</link><pubDate>Tue, 12 May 2026 00:00:00 -0500</pubDate><guid>https://support.tools/cilium-ebpf-networking-deep-dive/</guid><description>&lt;p&gt;Cilium represents a paradigm shift in Kubernetes networking by leveraging eBPF (extended Berkeley Packet Filter) technology to provide high-performance, secure, and observable networking capabilities. This comprehensive guide explores advanced Cilium implementation patterns, performance optimization techniques, and enterprise-grade configurations for production Kubernetes clusters.&lt;/p&gt;</description></item><item><title>AWS EKS Advanced Networking with VPC CNI: Enterprise Production Guide</title><link>https://support.tools/aws-eks-advanced-networking-vpc-cni-enterprise-guide/</link><pubDate>Mon, 04 May 2026 00:00:00 -0500</pubDate><guid>https://support.tools/aws-eks-advanced-networking-vpc-cni-enterprise-guide/</guid><description>&lt;p&gt;AWS Elastic Kubernetes Service (EKS) uses the Amazon VPC Container Network Interface (CNI) plugin as its default networking solution. While the basic setup is straightforward, enterprise production environments require advanced networking configurations to optimize IP address utilization, implement fine-grained security controls, and ensure high performance at scale. This comprehensive guide explores advanced VPC CNI features, custom networking patterns, and production-ready configurations for enterprise EKS deployments.&lt;/p&gt;</description></item><item><title>Advanced VPN Technologies: WireGuard vs IPSec Performance Enterprise Guide</title><link>https://support.tools/advanced-vpn-technologies-wireguard-ipsec-performance-guide/</link><pubDate>Sun, 19 Apr 2026 00:00:00 -0500</pubDate><guid>https://support.tools/advanced-vpn-technologies-wireguard-ipsec-performance-guide/</guid><description>&lt;p&gt;Advanced VPN technologies provide secure, high-performance connectivity for enterprise networks. This comprehensive guide explores modern VPN implementations, comparing WireGuard and IPSec performance characteristics, security features, and enterprise deployment strategies for production environments.&lt;/p&gt;</description></item><item><title>QinQ (802.1ad) on Linux: Stacked VLANs for VMs and Bridges</title><link>https://support.tools/advanced-vlan-network-virtualization-enterprise-guide/</link><pubDate>Sat, 18 Apr 2026 00:00:00 -0500</pubDate><guid>https://support.tools/advanced-vlan-network-virtualization-enterprise-guide/</guid><description>&lt;p&gt;IEEE 802.1ad (QinQ, or stacked VLANs) puts a second VLAN tag in front of the normal 802.1Q tag, so a provider or a virtualization host can carry each tenant&amp;rsquo;s full VLAN range inside one outer &amp;ldquo;service&amp;rdquo; VLAN. This page shows the Linux commands for QinQ on a plain interface, on a Linux bridge and on Open vSwitch, then covers the wider VLAN and overlay design for multi-tenant networks.&lt;/p&gt;</description></item><item><title>Advanced Load Balancing Algorithms and Implementation: Enterprise High-Performance Guide</title><link>https://support.tools/advanced-load-balancing-algorithms-implementation-enterprise-guide/</link><pubDate>Wed, 08 Apr 2026 00:00:00 -0500</pubDate><guid>https://support.tools/advanced-load-balancing-algorithms-implementation-enterprise-guide/</guid><description>&lt;p&gt;Advanced load balancing forms the cornerstone of modern distributed systems, ensuring optimal resource utilization, high availability, and superior performance. This comprehensive guide explores sophisticated load balancing algorithms, implementation strategies, and enterprise-grade architectures for production environments handling massive traffic volumes.&lt;/p&gt;</description></item><item><title>Advanced Firewall Automation and Configuration Management: Enterprise Security Guide</title><link>https://support.tools/advanced-firewall-automation-configuration-management-enterprise-guide/</link><pubDate>Wed, 01 Apr 2026 00:00:00 -0500</pubDate><guid>https://support.tools/advanced-firewall-automation-configuration-management-enterprise-guide/</guid><description>&lt;p&gt;Advanced firewall automation and configuration management enable enterprises to maintain consistent security policies, reduce human error, and scale security operations effectively. This comprehensive guide explores automated firewall management, policy orchestration, and production-ready frameworks for enterprise security environments.&lt;/p&gt;</description></item><item><title>Advanced DNS Infrastructure and Security: Enterprise Implementation Guide</title><link>https://support.tools/advanced-dns-infrastructure-security-enterprise-guide/</link><pubDate>Mon, 30 Mar 2026 00:00:00 -0500</pubDate><guid>https://support.tools/advanced-dns-infrastructure-security-enterprise-guide/</guid><description>&lt;p&gt;Advanced DNS infrastructure forms the foundation of enterprise network services, requiring sophisticated security measures, high availability, and optimal performance. This comprehensive guide explores enterprise DNS implementation, DNSSEC deployment, modern DNS security protocols, and production-ready architectures for mission-critical environments.&lt;/p&gt;</description></item><item><title>Advanced BGP Routing and Multi-Homing Strategies: Enterprise Network Resilience Guide</title><link>https://support.tools/advanced-bgp-routing-multi-homing-strategies-enterprise-guide/</link><pubDate>Mon, 23 Mar 2026 00:00:00 -0500</pubDate><guid>https://support.tools/advanced-bgp-routing-multi-homing-strategies-enterprise-guide/</guid><description>&lt;p&gt;Border Gateway Protocol (BGP) serves as the backbone of internet routing, enabling autonomous systems to exchange routing information and implement sophisticated traffic engineering policies. This comprehensive guide explores advanced BGP configurations, multi-homing strategies, and enterprise-grade network resilience patterns for production environments.&lt;/p&gt;</description></item><item><title>Configuring Docker Daemon HTTP Proxy: A Complete Guide</title><link>https://support.tools/docker-daemon-http-proxy/</link><pubDate>Sun, 01 Mar 2026 09:00:00 -0600</pubDate><guid>https://support.tools/docker-daemon-http-proxy/</guid><description>&lt;p&gt;Master the art of configuring HTTP proxy settings for Docker daemon to ensure smooth container operations in enterprise environments.&lt;/p&gt;</description></item><item><title>Configuring IPv4 and IPv6 Preferences in Linux: A Comprehensive Guide</title><link>https://support.tools/configuring-ipv4-ipv6-preferences/</link><pubDate>Sun, 15 Feb 2026 09:00:00 -0600</pubDate><guid>https://support.tools/configuring-ipv4-ipv6-preferences/</guid><description>&lt;p&gt;Master the art of configuring IPv4 and IPv6 preferences in Linux systems to optimize network performance and reliability.&lt;/p&gt;</description></item><item><title>Cilium BGP Control Plane for Kubernetes: Complete Enterprise Implementation Guide</title><link>https://support.tools/cilium-bgp-control-plane-kubernetes-enterprise-guide/</link><pubDate>Tue, 10 Feb 2026 09:00:00 -0500</pubDate><guid>https://support.tools/cilium-bgp-control-plane-kubernetes-enterprise-guide/</guid><description>&lt;p&gt;Bare-metal and on-premises Kubernetes clusters face a fundamental networking challenge that cloud providers solve transparently: making Services and Pods reachable from outside the cluster. In cloud environments, a LoadBalancer Service automatically provisions an external IP and programs the cloud provider&amp;rsquo;s network fabric. On bare metal, that integration does not exist. &lt;strong&gt;Border Gateway Protocol (BGP)&lt;/strong&gt; fills this gap by enabling Kubernetes nodes to advertise routes for Pod CIDRs, LoadBalancer IPs, and custom prefixes directly to the upstream network infrastructure.&lt;/p&gt;&#10;&lt;p&gt;Cilium&amp;rsquo;s &lt;strong&gt;BGP Control Plane&lt;/strong&gt; integrates this capability directly into the CNI layer. Built on the &lt;strong&gt;GoBGP&lt;/strong&gt; routing library, the BGP Control Plane runs a BGP speaker on each selected node, advertising routes to configured peers without requiring an external component like MetalLB. Combined with Cilium&amp;rsquo;s &lt;strong&gt;LB-IPAM&lt;/strong&gt; (LoadBalancer IP Address Management), this provides a complete, single-stack solution for bare-metal service exposure — from IP allocation through route advertisement to eBPF-accelerated packet forwarding.&lt;/p&gt;</description></item><item><title>Advanced Docker Container Debugging: A Comprehensive Guide for Troubleshooting Production Issues</title><link>https://support.tools/docker-container-debugging-comprehensive-guide/</link><pubDate>Thu, 15 Jan 2026 09:00:00 -0500</pubDate><guid>https://support.tools/docker-container-debugging-comprehensive-guide/</guid><description>&lt;p&gt;&lt;img src="https://support.tools/images/posts/docker/docker-debugging-workflow.svg" alt="Docker Container Debugging"&gt;&lt;/p&gt;&#10;&lt;p&gt;Master the art of Docker container debugging with this comprehensive guide. Learn advanced techniques for troubleshooting container issues in production environments, from analyzing logs and interactive debugging to resolving networking problems, optimizing resource usage, and implementing automated debugging workflows.&lt;/p&gt;</description></item><item><title>Building a Production-Ready Load Balancer in Go</title><link>https://support.tools/building-load-balancer-golang/</link><pubDate>Tue, 21 Oct 2025 09:00:00 -0500</pubDate><guid>https://support.tools/building-load-balancer-golang/</guid><description>&lt;p&gt;Load balancers are critical components in modern distributed systems, ensuring reliability, scalability, and high availability. This guide walks through building a robust load balancer in Go, from fundamental concepts to advanced features and optimizations.&lt;/p&gt;</description></item><item><title>Endianness in Modern Computing: Why Byte Order Still Matters</title><link>https://support.tools/endianness-deep-dive/</link><pubDate>Wed, 02 Jul 2025 21:35:00 -0500</pubDate><guid>https://support.tools/endianness-deep-dive/</guid><description>&lt;p&gt;Endianness remains one of those fundamental computer architecture concepts that can bite developers when they least expect it. Whether you&amp;rsquo;re debugging network protocols, working with binary file formats, or developing cross-platform applications, understanding byte order is crucial for avoiding subtle and frustrating bugs.&lt;/p&gt;</description></item><item><title>Advanced Linux Network Programming: Custom Protocol Stack Development and High-Performance Networking</title><link>https://support.tools/advanced-linux-network-programming-protocol-stack/</link><pubDate>Mon, 28 Apr 2025 10:00:00 -0500</pubDate><guid>https://support.tools/advanced-linux-network-programming-protocol-stack/</guid><description>&lt;p&gt;Advanced Linux network programming requires deep understanding of the kernel networking stack, protocol implementation, and high-performance packet processing techniques. This comprehensive guide explores building custom network protocols, implementing kernel-level networking components, and utilizing modern technologies like eBPF/XDP and DPDK for maximum performance.&lt;/p&gt;</description></item><item><title>Leveraging Kubernetes Endpoints to Connect to External Services</title><link>https://support.tools/kubernetes-endpoints-external-services/</link><pubDate>Wed, 23 Apr 2025 00:00:00 -0500</pubDate><guid>https://support.tools/kubernetes-endpoints-external-services/</guid><description>&lt;p&gt;Learn how Kubernetes Endpoints facilitate communication between your in-cluster applications and services residing outside the Kubernetes environment.&lt;/p&gt;</description></item><item><title>CKA Prep: Part 4 – Services &amp; Networking</title><link>https://support.tools/training/cka-prep/04-services-networking/</link><pubDate>Fri, 04 Apr 2025 00:00:00 +0000</pubDate><guid>https://support.tools/training/cka-prep/04-services-networking/</guid><description>&lt;h2 id="kubernetes-networking-fundamentals"&gt;Kubernetes Networking Fundamentals&lt;/h2&gt;&#10;&lt;p&gt;Kubernetes networking can be complex, but understanding it is crucial for the CKA exam. This section covers essential Kubernetes networking concepts.&lt;/p&gt;&#10;&lt;h3 id="kubernetes-network-model"&gt;Kubernetes Network Model&lt;/h3&gt;&#10;&lt;p&gt;The Kubernetes network model imposes the following requirements:&lt;/p&gt;&#10;&lt;ol&gt;&#10;&lt;li&gt;&lt;strong&gt;Pod-to-Pod Communication&lt;/strong&gt;: All pods can communicate with all other pods without NAT&lt;/li&gt;&#10;&lt;li&gt;&lt;strong&gt;Node-to-Pod Communication&lt;/strong&gt;: Nodes can communicate with all pods without NAT&lt;/li&gt;&#10;&lt;li&gt;&lt;strong&gt;Pod-to-Node Communication&lt;/strong&gt;: Pods can communicate with all nodes without NAT&lt;/li&gt;&#10;&lt;/ol&gt;&#10;&lt;p&gt;These requirements are implemented by Container Network Interface (CNI) plugins like Calico, Cilium, Flannel, and others.&lt;/p&gt;</description></item><item><title>RKE2 the Hard Way: Part 8 – Installing Cilium CNI</title><link>https://support.tools/training/rke2-hard-way/08-installing-cilium-cni/</link><pubDate>Tue, 01 Apr 2025 00:00:00 +0000</pubDate><guid>https://support.tools/training/rke2-hard-way/08-installing-cilium-cni/</guid><description>&lt;h2 id="part-8--installing-cilium-cni"&gt;Part 8 – Installing Cilium CNI&lt;/h2&gt;&#10;&lt;p&gt;In this part of the &lt;strong&gt;&amp;ldquo;RKE2 the Hard Way&amp;rdquo;&lt;/strong&gt; training series, we will install and configure the &lt;strong&gt;Cilium CNI&lt;/strong&gt; (Container Network Interface). Cilium is a powerful, open-source CNI solution that provides advanced networking, security, and observability features for Kubernetes clusters.&lt;/p&gt;&#10;&lt;p&gt;At this point in our tutorial series, we have:&lt;/p&gt;&#10;&lt;ul&gt;&#10;&lt;li&gt;Set up all the core Kubernetes components (etcd, kube-apiserver, kube-controller-manager, kube-scheduler)&lt;/li&gt;&#10;&lt;li&gt;Configured kubelet and kube-proxy on our nodes&lt;/li&gt;&#10;&lt;/ul&gt;&#10;&lt;p&gt;However, our cluster network is not yet functional for pod-to-pod communication. The CNI plugin is essential for implementing the Kubernetes networking model, which requires that:&lt;/p&gt;</description></item><item><title>Configuring IPv4 and IPv6 Preferences in Linux Systems</title><link>https://support.tools/configure-ipv4-ipv6-preference/</link><pubDate>Sun, 30 Mar 2025 09:00:00 -0600</pubDate><guid>https://support.tools/configure-ipv4-ipv6-preference/</guid><description>&lt;p&gt;A comprehensive guide to managing IPv4 and IPv6 preferences in Linux systems, helping you optimize network connectivity and resolve common issues.&lt;/p&gt;</description></item><item><title>Advanced Networking and Protocol Implementation: Building High-Performance Network Stacks</title><link>https://support.tools/advanced-networking-protocol-implementation/</link><pubDate>Wed, 19 Mar 2025 10:00:00 -0500</pubDate><guid>https://support.tools/advanced-networking-protocol-implementation/</guid><description>&lt;p&gt;Advanced networking programming requires deep understanding of protocol stacks, packet processing, and high-performance networking techniques. This comprehensive guide explores building custom protocols, implementing network stacks from scratch, and optimizing network performance for demanding applications.&lt;/p&gt;</description></item><item><title>Advanced Cilium Troubleshooting Guide for 2025</title><link>https://support.tools/post/cilium-troubleshooting-2025/</link><pubDate>Fri, 14 Mar 2025 14:00:00 -0500</pubDate><guid>https://support.tools/post/cilium-troubleshooting-2025/</guid><description>&lt;p&gt;Troubleshooting Cilium in Kubernetes environments remains challenging, especially as Cilium continues to evolve with more features and capabilities. This advanced guide expands on our &lt;a href="../cilium-troubleshooting"&gt;previous troubleshooting guide&lt;/a&gt; with deeper insights, more detailed diagnostic approaches, and comprehensive resolution paths for complex Cilium issues in 2025.&lt;/p&gt;</description></item><item><title>How to Configure Network Interfaces in K3s Using NMState and Multus CNI</title><link>https://support.tools/configuring-network-nmstate-k3s/</link><pubDate>Sat, 01 Mar 2025 00:00:00 -0500</pubDate><guid>https://support.tools/configuring-network-nmstate-k3s/</guid><description>&lt;p&gt;Managing network interfaces in Kubernetes can be challenging, especially when dealing with multiple networks or complex configurations. This comprehensive guide demonstrates how to use the NMState Operator and Multus CNI in K3s to implement advanced networking configurations, create network bridges, and manage multiple network interfaces effectively.&lt;/p&gt;</description></item><item><title>Linux Network Programming Mastery: From Sockets to High-Performance Servers</title><link>https://support.tools/linux-network-programming-mastery/</link><pubDate>Sun, 09 Feb 2025 10:00:00 -0500</pubDate><guid>https://support.tools/linux-network-programming-mastery/</guid><description>&lt;p&gt;Network programming is at the heart of modern distributed systems. Linux provides powerful APIs and kernel features for building everything from simple TCP clients to massive-scale web servers. This guide explores advanced network programming techniques, performance optimization strategies, and the latest kernel innovations like io_uring.&lt;/p&gt;</description></item><item><title>Using Kubernetes Ephemeral Debug Containers for Easy Troubleshooting</title><link>https://support.tools/kubernetes-ephemeral-debug-containers/</link><pubDate>Fri, 10 Jan 2025 12:00:00 -0500</pubDate><guid>https://support.tools/kubernetes-ephemeral-debug-containers/</guid><description>&lt;p&gt;&lt;strong&gt;Kubernetes Ephemeral Debug Containers: A Game-Changer for Troubleshooting&lt;/strong&gt;&lt;/p&gt;&#10;&lt;p&gt;If you&amp;rsquo;ve ever needed to spin up a debug container in Kubernetes, you know the pain of deploying temporary pods or adding tools to your production containers. Thankfully, Kubernetes ephemeral debug containers offer a better approach.&lt;/p&gt;</description></item><item><title>CNI Deep Dive: Architecture and Implementation</title><link>https://support.tools/training/networking/cni-deep-dive/</link><pubDate>Wed, 01 Jan 2025 00:00:00 -0500</pubDate><guid>https://support.tools/training/networking/cni-deep-dive/</guid><description>&lt;p&gt;This guide provides a detailed exploration of Container Network Interface (CNI) architecture, implementation details, and internal workings. Understanding these concepts is crucial for advanced networking configurations and troubleshooting.&lt;/p&gt;</description></item><item><title>CNI Implementation Lab Guide</title><link>https://support.tools/training/networking/cni-lab/</link><pubDate>Wed, 01 Jan 2025 00:00:00 -0500</pubDate><guid>https://support.tools/training/networking/cni-lab/</guid><description>&lt;p&gt;This hands-on lab guide walks through the implementation and testing of different CNI plugins in a Kubernetes environment. You&amp;rsquo;ll learn how to deploy, configure, and troubleshoot various CNI solutions.&lt;/p&gt;</description></item><item><title>Container Network Security</title><link>https://support.tools/training/networking/container-security/</link><pubDate>Wed, 01 Jan 2025 00:00:00 -0500</pubDate><guid>https://support.tools/training/networking/container-security/</guid><description>&lt;p&gt;Container networking introduces unique security challenges that require specific approaches and tools. This guide covers essential concepts and best practices for securing container networks.&lt;/p&gt;</description></item><item><title>Deep Dive: Kubernetes Proxy (kube-proxy)</title><link>https://support.tools/training/kubernetes-deep-dive/kube-proxy/</link><pubDate>Wed, 01 Jan 2025 00:00:00 -0500</pubDate><guid>https://support.tools/training/kubernetes-deep-dive/kube-proxy/</guid><description>&lt;p&gt;Kube-proxy is responsible for implementing the Kubernetes Service concept, providing network proxying and load balancing. This deep dive explores its architecture, proxy modes, and internal workings.&lt;/p&gt;</description></item><item><title>Network Security Fundamentals</title><link>https://support.tools/training/networking/security/</link><pubDate>Wed, 01 Jan 2025 00:00:00 -0500</pubDate><guid>https://support.tools/training/networking/security/</guid><description>&lt;p&gt;Network security is fundamental to protecting modern infrastructure. This guide covers essential security concepts, tools, and best practices for securing network communications.&lt;/p&gt;</description></item><item><title>Understanding Container Network Interface (CNI)</title><link>https://support.tools/training/networking/cni/</link><pubDate>Wed, 01 Jan 2025 00:00:00 -0500</pubDate><guid>https://support.tools/training/networking/cni/</guid><description>&lt;p&gt;Container Network Interface (CNI) is a specification and set of libraries for configuring network interfaces in Linux containers. This guide explores different CNI plugins, their architectures, and how to choose the right one for your environment.&lt;/p&gt;</description></item><item><title>What is DNS? A Beginner's Guide</title><link>https://support.tools/dns-basics-2/</link><pubDate>Tue, 10 Dec 2024 18:00:00 -0500</pubDate><guid>https://support.tools/dns-basics-2/</guid><description>&lt;p&gt;By &lt;strong&gt;Matthew Mattox&lt;/strong&gt;&lt;br&gt;&#10;Contact: &lt;strong&gt;&lt;a href="mailto:mmattox@support.tools"&gt;mmattox@support.tools&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;&#10;&lt;p&gt;DNS (Domain Name System) is often described as the &amp;ldquo;phonebook of the internet.&amp;rdquo; It translates human-readable domain names (like &lt;code&gt;google.com&lt;/code&gt;) into IP addresses that computers use to communicate. While DNS works seamlessly most of the time, its occasional failures can lead to some of the most frustrating troubleshooting scenarios.&lt;/p&gt;&#10;&lt;p&gt;In this post, we’ll explore the basics of DNS, how it works, its structure, and why it’s such a fundamental part of modern networking.&lt;/p&gt;</description></item><item><title>Adventures in IPv6 Part 2</title><link>https://support.tools/ipv6-adventures-part-2/</link><pubDate>Sun, 08 Dec 2024 12:00:00 -0500</pubDate><guid>https://support.tools/ipv6-adventures-part-2/</guid><description>&lt;p&gt;As the world inches toward IPv6, my quest to run this blog on IPv6-only infrastructure continues. While progress has been made, challenges abound—from SMTP configurations to Nodemailer quirks and Docker networking.&lt;/p&gt;</description></item><item><title>IPv6 Is A Disaster (but we can fix it)</title><link>https://support.tools/ipv6-adventures-part-1/</link><pubDate>Wed, 04 Dec 2024 12:00:00 -0500</pubDate><guid>https://support.tools/ipv6-adventures-part-1/</guid><description>&lt;p&gt;With IPv4 costs rising and availability shrinking, the shift to IPv6 seems inevitable. But as this blog reveals, transitioning to IPv6 is fraught with challenges and broken dependencies. Here&amp;rsquo;s an exploration of what works, what doesn&amp;rsquo;t, and how to bridge the gap.&lt;/p&gt;</description></item><item><title>HostAliases in Kubernetes: Enhancing Networking for Better Performance</title><link>https://support.tools/kubernetes-hostaliases-networking/</link><pubDate>Tue, 26 Nov 2024 01:00:00 -0500</pubDate><guid>https://support.tools/kubernetes-hostaliases-networking/</guid><description>&lt;p&gt;Kubernetes clusters often host multiple projects and domains on shared infrastructure, creating challenges in optimizing communication and reducing latency between services. &lt;strong&gt;HostAliases&lt;/strong&gt; offer a simple yet powerful way to improve networking performance by bypassing DNS resolution and enabling direct hostname-to-IP mappings within Pods. In this post, we’ll dive into the use of HostAliases, their benefits, and how to implement them.&lt;/p&gt;</description></item><item><title>Benchmarking Kubernetes CNI Plugins on 40Gbit/s Networks</title><link>https://support.tools/benchmark-kubernetes-cni-40Gbit/</link><pubDate>Wed, 30 Oct 2024 10:00:00 -0500</pubDate><guid>https://support.tools/benchmark-kubernetes-cni-40Gbit/</guid><description>&lt;h2 id="introduction"&gt;Introduction&lt;/h2&gt;&#10;&lt;p&gt;Understanding network performance within a &lt;strong&gt;Kubernetes cluster&lt;/strong&gt; is critical for scaling applications efficiently. With a growing array of &lt;strong&gt;Container Network Interface (CNI)&lt;/strong&gt; plugins available, finding the right one for your workloads can be challenging. This post covers the &lt;strong&gt;latest benchmark&lt;/strong&gt; results of CNI plugins, leveraging &lt;strong&gt;Kubernetes 1.26&lt;/strong&gt; with &lt;strong&gt;RKE2&lt;/strong&gt; on Ubuntu 22.04, and tests conducted over &lt;strong&gt;40Gbit/s networks&lt;/strong&gt;.&lt;/p&gt;&#10;&lt;hr&gt;&#10;&lt;h2 id="why-benchmark-kubernetes-cnis"&gt;Why Benchmark Kubernetes CNIs?&lt;/h2&gt;&#10;&lt;p&gt;The networking layer is integral to any Kubernetes cluster, as it manages &lt;strong&gt;pod-to-pod communication&lt;/strong&gt; and ensures traffic flows seamlessly between services. Selecting a &lt;strong&gt;CNI plugin&lt;/strong&gt; impacts cluster performance, resource consumption, and even energy efficiency. This benchmark provides insights into how different &lt;strong&gt;CNI configurations&lt;/strong&gt; perform in &lt;strong&gt;real-world scenarios&lt;/strong&gt;, including encryption with &lt;strong&gt;WireGuard&lt;/strong&gt;, advanced routing with &lt;strong&gt;eBPF&lt;/strong&gt;, and more.&lt;/p&gt;</description></item><item><title>Networking</title><link>https://support.tools/training/networking/</link><pubDate>Fri, 25 Oct 2024 00:00:00 +0000</pubDate><guid>https://support.tools/training/networking/</guid><description>&lt;p&gt;Welcome to our comprehensive networking training section. Here you&amp;rsquo;ll find detailed guides and tutorials covering everything from basic networking concepts to advanced topics in modern cloud-native networking.&lt;/p&gt;&#10;&lt;h2 id="core-networking-concepts"&gt;Core Networking Concepts&lt;/h2&gt;&#10;&lt;ul&gt;&#10;&lt;li&gt;&lt;a href="https://support.tools/training/networking/networking-101/"&gt;Networking 101&lt;/a&gt;: TCP/IP, subnets, and fundamental concepts&lt;/li&gt;&#10;&lt;li&gt;&lt;a href="https://support.tools/training/networking/vxlan/"&gt;Understanding VXLAN&lt;/a&gt;: Deep dive into Virtual Extensible LAN&lt;/li&gt;&#10;&lt;li&gt;&lt;a href="https://support.tools/training/networking/security/"&gt;Network Security Fundamentals&lt;/a&gt;: Firewalls, encryption, and security best practices&lt;/li&gt;&#10;&lt;/ul&gt;&#10;&lt;h2 id="container-and-cloud-networking"&gt;Container and Cloud Networking&lt;/h2&gt;&#10;&lt;ul&gt;&#10;&lt;li&gt;&lt;a href="https://support.tools/training/networking/kubernetes-vxlan/"&gt;Kubernetes VXLAN Networking&lt;/a&gt;: How Kubernetes uses VXLAN for overlay networks&lt;/li&gt;&#10;&lt;li&gt;&lt;a href="https://support.tools/training/networking/cni/"&gt;Container Network Interface (CNI)&lt;/a&gt;: Understanding Kubernetes networking plugins&lt;/li&gt;&#10;&lt;li&gt;&lt;a href="https://support.tools/training/networking/service-mesh/"&gt;Service Mesh Architecture&lt;/a&gt;: Modern microservices networking&lt;/li&gt;&#10;&lt;/ul&gt;&#10;&lt;h2 id="advanced-topics"&gt;Advanced Topics&lt;/h2&gt;&#10;&lt;ul&gt;&#10;&lt;li&gt;&lt;a href="https://support.tools/training/networking/troubleshooting/"&gt;Network Troubleshooting&lt;/a&gt;: Tools and techniques for debugging network issues&lt;/li&gt;&#10;&lt;li&gt;&lt;a href="https://support.tools/training/networking/performance/"&gt;Network Performance&lt;/a&gt;: Optimization and monitoring&lt;/li&gt;&#10;&lt;li&gt;&lt;a href="https://support.tools/training/networking/sdn/"&gt;Software-Defined Networking&lt;/a&gt;: Modern approaches to network management&lt;/li&gt;&#10;&lt;/ul&gt;&#10;&lt;h2 id="hands-on-labs"&gt;Hands-on Labs&lt;/h2&gt;&#10;&lt;ul&gt;&#10;&lt;li&gt;&lt;a href="https://support.tools/training/networking/vxlan-lab/"&gt;Setting up a VXLAN Network&lt;/a&gt;&lt;/li&gt;&#10;&lt;li&gt;&lt;a href="https://support.tools/training/networking/kubernetes-cni-lab/"&gt;Kubernetes CNI Implementation&lt;/a&gt;&lt;/li&gt;&#10;&lt;li&gt;&lt;a href="https://support.tools/training/networking/monitoring-lab/"&gt;Network Monitoring Lab&lt;/a&gt;&lt;/li&gt;&#10;&lt;/ul&gt;&#10;&lt;p&gt;Each section includes practical examples, diagrams, and real-world scenarios to help you understand and implement networking concepts effectively.&lt;/p&gt;</description></item><item><title>How Kubernetes Uses VXLAN for Overlay Networking</title><link>https://support.tools/training/networking/kubernetes-vxlan/</link><pubDate>Thu, 24 Oct 2024 00:00:00 +0000</pubDate><guid>https://support.tools/training/networking/kubernetes-vxlan/</guid><description>&lt;h1 id="how-kubernetes-uses-vxlan-for-overlay-networking"&gt;How Kubernetes Uses VXLAN for Overlay Networking&lt;/h1&gt;&#10;&lt;p&gt;Kubernetes needs to create a &lt;strong&gt;virtual network&lt;/strong&gt; that connects pods across multiple nodes seamlessly. Since these pods reside in isolated networks, &lt;strong&gt;overlay networks&lt;/strong&gt;—like those implemented with &lt;strong&gt;VXLAN&lt;/strong&gt;—allow them to communicate over a physical Layer 3 infrastructure.&lt;/p&gt;&#10;&lt;p&gt;In this post, we explore &lt;strong&gt;how Kubernetes uses VXLAN&lt;/strong&gt; to build an overlay network, enabling communication between pods across nodes.&lt;/p&gt;&#10;&lt;hr&gt;&#10;&lt;h2 id="1-what-is-an-overlay-network"&gt;1. What is an Overlay Network?&lt;/h2&gt;&#10;&lt;p&gt;In Kubernetes, an &lt;strong&gt;overlay network&lt;/strong&gt; abstracts the physical network, allowing &lt;strong&gt;pods on different nodes&lt;/strong&gt; to communicate as if they were on the &lt;strong&gt;same Layer 2 network&lt;/strong&gt;. VXLAN is one of the most popular protocols for building this overlay.&lt;/p&gt;</description></item><item><title>Networking 101</title><link>https://support.tools/training/networking/networking-101/</link><pubDate>Thu, 24 Oct 2024 00:00:00 +0000</pubDate><guid>https://support.tools/training/networking/networking-101/</guid><description>&lt;h1 id="introduction-to-networking-101"&gt;Introduction to Networking 101&lt;/h1&gt;&#10;&lt;p&gt;Networking is a foundational component of modern technology, enabling communication between devices and systems. In this post, we will explore key networking concepts and provide the knowledge needed to understand how devices interact in a networked environment.&lt;/p&gt;&#10;&lt;hr&gt;&#10;&lt;h2 id="1-what-is-tcpip"&gt;1. What is TCP/IP?&lt;/h2&gt;&#10;&lt;p&gt;TCP/IP (Transmission Control Protocol/Internet Protocol) is the backbone of the internet and most local networks. It defines how data is broken into packets, transmitted, and reassembled at the destination.&lt;/p&gt;</description></item><item><title>Understanding VXLAN</title><link>https://support.tools/training/networking/vxlan/</link><pubDate>Thu, 24 Oct 2024 00:00:00 +0000</pubDate><guid>https://support.tools/training/networking/vxlan/</guid><description>&lt;h1 id="understanding-vxlan-virtual-extensible-lan"&gt;Understanding VXLAN: Virtual Extensible LAN&lt;/h1&gt;&#10;&lt;p&gt;Virtual Extensible LAN (VXLAN) is a network virtualization technology that helps extend Layer 2 networks over Layer 3 infrastructure. It’s a key enabler in modern data centers, especially in cloud environments, providing scalable overlay networks for virtual machines and containers.&lt;/p&gt;&#10;&lt;hr&gt;&#10;&lt;h2 id="1-what-is-vxlan"&gt;1. What is VXLAN?&lt;/h2&gt;&#10;&lt;p&gt;VXLAN is a &lt;strong&gt;network overlay protocol&lt;/strong&gt; that allows you to create a virtual Layer 2 network over a physical Layer 3 network. It encapsulates Ethernet frames in UDP packets, enabling the deployment of virtual networks across large, distributed environments.&lt;/p&gt;</description></item><item><title>Find the Correct MTU With ping on Linux (ping -M do -s)</title><link>https://support.tools/ping-mtu-linux/</link><pubDate>Tue, 22 Oct 2024 08:45:00 -0500</pubDate><guid>https://support.tools/ping-mtu-linux/</guid><description>&lt;h2 id="using-the-ping-command-to-help-determine-the-correct-mtu-setting-for-your-network"&gt;Using the &lt;code&gt;ping&lt;/code&gt; Command to Help Determine the Correct MTU Setting for Your Network&lt;/h2&gt;&#10;&lt;p&gt;In network environments, ensuring that all devices, including nodes and switches, have matching &lt;strong&gt;MTU (Maximum Transmission Unit)&lt;/strong&gt; settings is critical for optimal performance. Mismatched MTU settings can lead to packet fragmentation, which reduces efficiency and can impact application performance. This guide will show how to use the &lt;code&gt;ping&lt;/code&gt; command on Linux to verify that the correct MTU is set for your network.&lt;/p&gt;</description></item><item><title>Subnet Mask Cheat Sheet</title><link>https://support.tools/subnet-mask-cheat-sheet/</link><pubDate>Sat, 19 Oct 2024 14:00:00 -0500</pubDate><guid>https://support.tools/subnet-mask-cheat-sheet/</guid><description>&lt;h2 id="subnet-mask-cheat-sheet"&gt;Subnet Mask Cheat Sheet&lt;/h2&gt;&#10;&lt;p&gt;Understanding subnet masks is crucial for anyone managing networks, especially when dealing with IP address allocation and routing. In this cheat sheet, we’ll go over various subnet masks, their corresponding address ranges, host counts, and how they relate to a Class C network. If you&amp;rsquo;re working with network segmentation, this guide will serve as a handy reference.&lt;/p&gt;</description></item><item><title>All Required Domain Controller Ports</title><link>https://support.tools/required-domain-controller-ports/</link><pubDate>Mon, 14 Oct 2024 19:26:00 -0500</pubDate><guid>https://support.tools/required-domain-controller-ports/</guid><description>&lt;p&gt;In an Active Directory (AD) environment, &lt;strong&gt;Domain Controllers (DCs)&lt;/strong&gt; must communicate over a variety of ports to provide services such as authentication, replication, and management. Properly configuring network firewalls to allow these ports is critical to ensure the domain operates smoothly without disruptions.&lt;/p&gt;&#10;&lt;p&gt;This post outlines all the required ports for Domain Controllers to function correctly in a secure and reliable AD environment.&lt;/p&gt;</description></item><item><title>Kubernetes DNS Optimization</title><link>https://support.tools/kubernetes-dns-optimization/</link><pubDate>Mon, 14 Oct 2024 19:26:00 -0500</pubDate><guid>https://support.tools/kubernetes-dns-optimization/</guid><description>&lt;p&gt;DNS plays a critical role in Kubernetes clusters by enabling service discovery and communication between Pods and services. However, poor DNS performance can lead to high latency, timeouts, and a degraded user experience. &lt;strong&gt;Optimizing DNS&lt;/strong&gt; in Kubernetes is essential for maintaining high performance, especially in large-scale environments with dynamic workloads.&lt;/p&gt;&#10;&lt;p&gt;In this post, we will explore key strategies for optimizing DNS in Kubernetes clusters, focusing on improving both &lt;strong&gt;reliability&lt;/strong&gt; and &lt;strong&gt;latency&lt;/strong&gt;.&lt;/p&gt;</description></item><item><title>Session Affinity and Kubernetes—Proceed With Caution!</title><link>https://support.tools/session-affinity-kubernetes/</link><pubDate>Wed, 09 Oct 2024 19:26:00 -0500</pubDate><guid>https://support.tools/session-affinity-kubernetes/</guid><description>&lt;p&gt;When deploying applications on Kubernetes, maintaining user sessions is crucial for delivering consistent and reliable user experiences, especially in stateful applications. While &lt;strong&gt;session affinity&lt;/strong&gt; can help ensure that user sessions are routed to the same backend Pod, it comes with several challenges that, if not addressed, could lead to performance degradation and even downtime.&lt;/p&gt;&#10;&lt;p&gt;In this post, we will explore &lt;strong&gt;session affinity&lt;/strong&gt; in Kubernetes, the risks associated with using it, and how to proceed with caution when implementing it in your cluster.&lt;/p&gt;</description></item><item><title>OpenVPN Server on Kubernetes</title><link>https://support.tools/openvpn-server-kubernetes/</link><pubDate>Tue, 01 Oct 2024 19:26:00 -0500</pubDate><guid>https://support.tools/openvpn-server-kubernetes/</guid><description>&lt;p&gt;Setting up an OpenVPN server on Kubernetes allows you to secure your network traffic and provide remote access to resources within your cluster. By deploying OpenVPN as a containerized service, you can easily manage and scale your VPN infrastructure within a Kubernetes environment. In this post, we’ll walk through the steps to deploy an OpenVPN server on Kubernetes and configure clients to connect securely.&lt;/p&gt;</description></item><item><title>Avoiding Service Port Mismatches in Kubernetes</title><link>https://support.tools/kubernetes-service-port-mismatches/</link><pubDate>Wed, 21 Aug 2024 00:00:00 -0500</pubDate><guid>https://support.tools/kubernetes-service-port-mismatches/</guid><description>&lt;p&gt;Similarly, it’s important to make sure your services route traffic to the correct port on your Pods. Incorrect service port definitions can make it look like a Pod has failed, when in fact your traffic simply isn’t reaching it.&lt;/p&gt;&#10;&lt;p&gt;The following manifest contains an example of this problem. The service listens on port 9000 and forwards traffic to port 8080 on its Pods, but the container actually expects traffic to hit port 80:&lt;/p&gt;&#10;&lt;div class="code-block" data-copy-label="Copy yaml code, block 1"&gt;&#10; &lt;div class="code-block-header" data-pagefind-ignore&gt;&lt;span class="code-block-lang"&gt;yaml&lt;/span&gt;&lt;/div&gt;&#10; &lt;div class="highlight"&gt;&lt;pre tabindex="0" class="chroma"&gt;&lt;code class="language-yaml" data-lang="yaml"&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="nt"&gt;apiVersion&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="l"&gt;v1&lt;/span&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="nt"&gt;kind&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="l"&gt;Pod&lt;/span&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="nt"&gt;metadata&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="nt"&gt;name&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="l"&gt;demo-pod&lt;/span&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="nt"&gt;labels&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="nt"&gt;app&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="l"&gt;demo-app&lt;/span&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="nt"&gt;spec&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="nt"&gt;image&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="l"&gt;nginx:latest&lt;/span&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="nt"&gt;ports&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="w"&gt; &lt;/span&gt;- &lt;span class="nt"&gt;containerPort&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="m"&gt;80&lt;/span&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="nn"&gt;---&lt;/span&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="nt"&gt;apiVersion&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="l"&gt;v1&lt;/span&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="nt"&gt;kind&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="l"&gt;Service&lt;/span&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="nt"&gt;metadata&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="nt"&gt;name&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="l"&gt;demo-service&lt;/span&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="nt"&gt;spec&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="nt"&gt;ports&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="w"&gt; &lt;/span&gt;- &lt;span class="nt"&gt;port&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="m"&gt;9000&lt;/span&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="nt"&gt;protocol&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="l"&gt;TCP&lt;/span&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="nt"&gt;targetPort&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="m"&gt;8080&lt;/span&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="nt"&gt;selector&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt;&#10;&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="nt"&gt;app&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="l"&gt;demo-app&lt;/span&gt;&lt;/span&gt;&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;&lt;/div&gt;&#10;&lt;/div&gt;</description></item><item><title>Navigating the Depths of Kubernetes Networking with Cilium: A Comprehensive Guide</title><link>https://support.tools/post/cilium-deepdive/</link><pubDate>Wed, 27 Mar 2024 10:00:00 -0500</pubDate><guid>https://support.tools/post/cilium-deepdive/</guid><description>&lt;p&gt;This guide embarks on a journey to unravel the complexities of Kubernetes networking and spotlights Cilium&amp;rsquo;s transformative role in the container orchestration landscape. Through an in-depth exploration, we&amp;rsquo;ll navigate the challenges and opportunities presented by integrating advanced Container Network Interface (CNI) solutions, focusing on Cilium&amp;rsquo;s capabilities and symbiotic relationship with eBPF technology.&lt;/p&gt;</description></item><item><title>How to Free Up a TCP/IP Port</title><link>https://support.tools/post/freeing-up-tcp-ip-port-guide/</link><pubDate>Fri, 13 Oct 2023 08:15:00 -0500</pubDate><guid>https://support.tools/post/freeing-up-tcp-ip-port-guide/</guid><description>&lt;h2 id="how-to-free-up-a-tcpip-port"&gt;How to Free Up a TCP/IP Port&lt;/h2&gt;&#10;&lt;p&gt;If you need to free up a TCP/IP port your application has previously bound to, there are a few essential steps to follow. This is crucial to make the port available for reuse. However, there is a catch: when an application closes a socket, it enters what&amp;rsquo;s known as the TIME_WAIT state. This is done to detect any packets that might arrive from the peer afterward and respond with resets.&lt;/p&gt;</description></item><item><title>Simulating Delayed and Dropped Packets in Linux</title><link>https://support.tools/post/simulating-delayed-dropped-packets-linux-guide/</link><pubDate>Thu, 12 Oct 2023 23:59:00 -0500</pubDate><guid>https://support.tools/post/simulating-delayed-dropped-packets-linux-guide/</guid><description>&lt;h2 id="simulating-delayed-and-dropped-packets-in-linux"&gt;Simulating Delayed and Dropped Packets in Linux&lt;/h2&gt;&#10;&lt;p&gt;If you&amp;rsquo;re wondering how to simulate delayed and dropped packets in Linux, the standard method involves using the &lt;code&gt;netem&lt;/code&gt; scheduling policy. This can be applied to any network device, whether a network interface or a bridge, using the &lt;code&gt;tc&lt;/code&gt; command from the &lt;code&gt;iproute2&lt;/code&gt; suite of tools.&lt;/p&gt;&#10;&lt;p&gt;You can find more information about &lt;code&gt;iproute2&lt;/code&gt; here: &lt;a href="https://wiki.linuxfoundation.org/networking/iproute2"&gt;iproute2 Documentation&lt;/a&gt;&lt;/p&gt;&#10;&lt;p&gt;Here are a few examples of how to achieve this:&lt;/p&gt;</description></item><item><title>Can Multiple Applications Share the Same Port?</title><link>https://support.tools/post/can-multiple-applications-share-a-port/</link><pubDate>Thu, 12 Oct 2023 23:45:00 -0500</pubDate><guid>https://support.tools/post/can-multiple-applications-share-a-port/</guid><description>&lt;p&gt;This article explores whether multiple applications can listen on the same port.&lt;/p&gt;</description></item><item><title>Checking Port Status on a Remote Host</title><link>https://support.tools/post/how-can-i-check-the-status-of-a-given-port-on-a-remote-host/</link><pubDate>Thu, 12 Oct 2023 23:29:00 -0500</pubDate><guid>https://support.tools/post/how-can-i-check-the-status-of-a-given-port-on-a-remote-host/</guid><description>&lt;h2 id="checking-port-status-on-a-remote-host"&gt;Checking Port Status on a Remote Host&lt;/h2&gt;&#10;&lt;p&gt;When you need to determine the status of a port on a remote host, it usually means finding out whether the port is open (listening for connections) or closed. This process varies depending on whether you&amp;rsquo;re dealing with TCP or UDP ports.&lt;/p&gt;&#10;&lt;h2 id="tcp-ports"&gt;TCP Ports&lt;/h2&gt;&#10;&lt;p&gt;For TCP ports, you can use tools like &lt;code&gt;curl&lt;/code&gt;, a versatile command-line tool for working with web-based interfaces. Here&amp;rsquo;s how to check the status of TCP port 12345 on host 10.0.0.1 using &lt;code&gt;curl&lt;/code&gt;:&lt;/p&gt;</description></item><item><title>Kubernetes Ingress vs Service Mesh</title><link>https://support.tools/post/kubernetes-ingress-vs-service-mesh/</link><pubDate>Thu, 14 Jul 2022 23:22:00 -0500</pubDate><guid>https://support.tools/post/kubernetes-ingress-vs-service-mesh/</guid><description>&lt;p&gt;Getting your network up and running in Kubernetes is no easy task. No matter if you work on the operations or application side, you need to think about networking. Whether it is connecting clusters, control planes, and workers, or connecting Kubernetes Services and Pods, ensuring connectivity is a task that requires attention and effort.&lt;/p&gt;&#10;&lt;p&gt;You will learn what a service mesh is, what ingress is, and why you need both in this post.&lt;/p&gt;</description></item><item><title>Exposing Services in Kubernetes Using External IPs</title><link>https://support.tools/post/kubernetes-external-ip/</link><pubDate>Fri, 20 Dec 2019 08:00:00 -0500</pubDate><guid>https://support.tools/post/kubernetes-external-ip/</guid><description>&lt;p&gt;Exposing services in Kubernetes effectively and securely is a common challenge, especially when working with bare metal deployments. NodePort might be the go-to solution for many, but it comes with its own set of limitations, such as the need to expose high-numbered ports and adjust firewall rules accordingly. Fortunately, Kubernetes offers another way to expose services using their original port numbers through the External IP service type. This post dives into how to leverage External IPs for service exposure in a Kubernetes cluster.&lt;/p&gt;</description></item><item><title>Updating the docker bridge for Rancher managed clusters</title><link>https://support.tools/post/docker-bridge-for-rancher-clusters/</link><pubDate>Wed, 20 Nov 2019 13:18:00 +0000</pubDate><guid>https://support.tools/post/docker-bridge-for-rancher-clusters/</guid><description>&lt;p&gt;The docker0 bridge network has a default IP range of 172.17.0.0/16 (with an additional docker-sys bridge for system-docker using 172.18.0.0/16 by default on RancherOS). These ranges will be routed to these interfaces, per the below example of the route output. If the range(s) overlap with the internal IP space usage in your own network, the host will not be able to route packets to other hosts in your network that lie within these ranges. As a result you may wish to change the bridge range(s) to enable successful routing to hosts within these.&lt;/p&gt;</description></item><item><title>K3s</title><link>https://support.tools/training/k3s/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://support.tools/training/k3s/</guid><description>&lt;p&gt;Learn how to deploy, manage, and operate K3s lightweight Kubernetes clusters. Explore our training resources, tutorials, and guides, including:&lt;/p&gt;&#10;&lt;ul&gt;&#10;&lt;li&gt;&lt;a href="https://support.tools/training/k3s/k3s-architecture/"&gt;K3s architecture and components&lt;/a&gt;&lt;/li&gt;&#10;&lt;li&gt;&lt;a href="https://support.tools/training/k3s/installation/"&gt;Installation and deployment&lt;/a&gt;&lt;/li&gt;&#10;&lt;li&gt;&lt;a href="https://support.tools/training/k3s/high-availability/"&gt;High availability setup&lt;/a&gt;&lt;/li&gt;&#10;&lt;li&gt;&lt;a href="https://support.tools/training/k3s/load-balancer/"&gt;Built-in load balancer&lt;/a&gt;&lt;/li&gt;&#10;&lt;li&gt;&lt;a href="https://support.tools/training/k3s/networking-storage/"&gt;Networking and storage&lt;/a&gt;&lt;/li&gt;&#10;&lt;li&gt;&lt;a href="https://support.tools/training/k3s/security-authentication/"&gt;Security and authentication&lt;/a&gt;&lt;/li&gt;&#10;&lt;li&gt;&lt;a href="https://support.tools/training/k3s/upgrade-strategies/"&gt;Upgrade strategies&lt;/a&gt;&lt;/li&gt;&#10;&lt;li&gt;&lt;a href="https://support.tools/training/k3s/troubleshooting-maintenance/"&gt;Troubleshooting and maintenance&lt;/a&gt;&lt;/li&gt;&#10;&lt;/ul&gt;</description></item></channel></rss>