Network

• TCP
  • TCP Windows
    • Understanding Throughput and TCP Windows
      • Receive Window
      • Send Window
        • Bytes in Flight
        • Congestion Window
        • Send Buffer
        • Summary
        • Analysis
  • TCP Ephemeral port
    • Linux 默认 TCP Ephemeral port 范围
    • Load balancer 应对 Ephemeral port 用尽的方法
    • Ref.
      • How to stop running out of ephemeral ports and start to love long-lived connections
        • Outgoing connections on Linux part 1 - TCP
        • Long-lived connections
        • Basics - how port allocation works
        • Vanilla TCP is a happy case
        • Manually selecting source IP address
        • IP_BIND_ADDRESS_NO_PORT
        • Explicitly selecting a source port
        • Userspace connectx implementation
        • Outgoing connections on Linux - part 2 - UDP
        • Vanilla UDP is limited
        • SO_REUSEADDR is hard
        • Detecting socket conflicts with eBPF
        • Socket traversal - SOCK_DIAG ss way
        • SO_REUSEADDR as a lock
        • Faking source IP and port discovery
        • Putting it all together
        • Summary
      • Ephemeral port exhaustion and how to avoid it
      • A story of a production incident
        • The theoretical limit on the number of ports
        • The real limit
        • Getting visibility into the problem
        • What to do if you are near the limit?
        • Conclusion
    • Linux Ref.
      • WILS: Load Balancing and Ephemeral Port Exhaustion
  • Challenge ACK
    • Background
    • The Case of the Challenge ACK
  • RFC 5961 - Improving TCP’s Robustness to Blind In-Window Attacks
    • 3. Blind Reset Attack Using the RST Bit
      • 3.1. Description of the Attack
      • 3.2. Mitigation
    • 4. Blind Reset Attack Using the SYN Bit
• TLS
  • TLS Handshake
  • 测试工具
    • TESTSSL
  • ALPN
    • Use Case
      • ACME
  • Cipher Suite(密码套件)
    • 命名规范
      • IANA 格式
    • key exchange algorithm(密钥交换算法)
      • key exchange algorithm(密钥交换算法)
        • key exchange algorithm(密钥交换算法) 列举简介
          • Diffie–Hellman(DH) key exchange
          • Elliptic-curve Diffie–Hellman(ECDH)
        • key exchange algorithm 与 TLS 版本
        • forward secrecy(前向保密)
    • Data integrity(数据完整性校验)
  • TLS Close Alert: close_notify
    • Alert protocol
  • Library
    • boringssl
      • Cipher Suite
      • Envoy 相关的 Github Issues
      • 错误码列表
      • 实现支持 Cipher Suites 列表
  • Dump
    • Dump TLS(TLS 抓包)
      • SSLKEYLOGFILE
      • Using tshark to Decrypt SSL/TLS Packets
• Troubleshooting Tools
  • tcpdump
    • 指定 ip:port 组合
    • 指定 port
    • 根据 RST FIN SYN 过滤
    • subnet 过滤
    • 抓取的 packet 大小限制
    • 注意事项
      • 抓包 位置与 iptable/netfilter/conntrack 的关系
    • 杂项技巧
      • 本地 IP 变量
    • Ref.
  • Wireshark
    • Wireshark User’s Guide
      • DisplayFilters
      • Building Display Filter Expressions
    • Protocol field name
      • tcp field name
    • Common script
      • 用 Wireshark 分析 TCP Segmentation Offload (TSO)
        • Analyzing TCP Segmentation Offload (TSO) with Wireshark
        • How Can the Packet Size Be Greater than the MTU?
        • TCP Segmentation Offload (TSO) 的配置
          • Ref
• HTTP
  • http 1.1
    • HTTP/1.1 Connection
      • Negotiation(谈判)
      • Race condition(竞态条件)
      • Client side 对连接失效的处理
      • Client side 应对服务端过早关闭连接(Client Behavior if Server Prematurely Closes Connection)
      • Connection HEADER field definition
      • Graceful shutdown HTTP/1.1 server
      • Close order
        • TCP close and reset errors
        • Graceful close