Skip to main content
Ctrl+K
Mark's DevOps 雜碎 - Home Mark's DevOps 雜碎 - Home
  • GitHub
  • 前言

目录

  • Linux 内核
    • Interrupt Context and Process Context
    • Namespace
      • pid namespace
        • PID Namespace 的 Main process 结束 与 zombie child process
        • PID1 in containers
      • Network Namespace
        • Fun with network namespaces, part 1
    • Kernel Network
      • Kernel Network Data Struct
      • kernel network stack
        • Network Receive Path
        • bpf-trace-net-stack
        • TCP IP Architecture Design - Sameer Seth
        • Linux Network Stack Instrumentation Points
        • Understanding TCP/IP Network Stack & Writing Network Apps
      • Kernel TCP
        • tcp implementation
        • TCP Socket 缓存、接收窗口参数
        • tcp keepalive
        • TCP Reset 的原因
        • SYN Cookies
        • TCP Inspect
        • SO_LINGER socket opt
        • TCP TIME-WAIT
        • PMTU
        • TCP MSS
        • tcp retransmit
      • Socket
        • Socket 相关数据结构
        • Socket Buffer Queue
        • socket listen queues
        • Socket Close/Shutdown 的临界状态与异常逻辑
      • Kernel Routing
      • Netfilter
        • Nftables - Packet flow and Netfilter hooks in detail
        • [译] 深入理解 iptables 和 netfilter 架构
        • Netfilter Mark Concept
        • iptables commands
      • conntrack
        • Connection tracking (conntrack) - Part 1: Modules and Hooks
        • Connection tracking (conntrack) - Part 2: Core Implementation
        • Connection tracking (conntrack) - Part 3: State and Examples
        • 连接跟踪(conntrack):原理、应用及 Linux 内核实现
        • Network address translation part 4 – Conntrack troubleshooting
        • Out of Window Invalid Packet
        • NAT local port collision and SYN retransmit (NAT 分配端口冲突与 SYN 重传)
        • iptables Troubleshooting
        • Conntrack tales - one thousand and one flows
        • 定位 conntrack TCP RESET 问题
      • IPVS
      • MTU
        • Check MTU
      • ========= IP Sysctl
      • Documentation for /proc/sys/net/
    • Scheduler(调度器)
      • 调度点(Scheduler Point)
      • Completely Fair Scheduler(CFS)
        • CFS调度器(1)-基本原理
        • CFS调度器(3)-组调度
        • CFS调度器(5)-带宽控制
        • Linux进程调度-组调度及带宽控制
        • Linux进程调度-CFS调度器
        • Linux CFS 调度器:原理、设计与内核实现(2023)
    • Storage
    • Syscall
      • Syscall Table
      • LINUX SYSTEM CALLS UNDER THE HOOD - CROSSING THE BORDER BETWEEN USERLAND AND THE KERNEL
  • Kubernetes
    • Kubernetes Eviction
      • Out-of-memory (OOM) in Kubernetes – Part 4: Pod evictions, OOM scenarios and flows leading to them
    • Kubernetes Network
      • Kube Proxy
        • Cracking Kubernetes Node Proxy (aka kube-proxy)
    • Destructive test
      • What happens when one of your Kubernetes nodes fails?
    • Monitoring
      • Resource Monitoring
        • How to alert for Pod Restart & OOMKilled in Kubernetes
    • Pod
      • pod phase
    • Persistent Volumes
    • CSI
      • K8s CSI & ceph 构架图解,还有一些闲话
      • CSI Spec
    • HPA
    • Container
      • container shim stack
        • Implementing Container Runtime Shim: runc
      • containerd
        • containerd-shim-runc-v2
      • Introducing Container Runtime Interface (CRI) in Kubernetes
      • What Is a Standard Container: Diving Into the OCI Runtime Spec Containers Aren’t Linux Processes
        • OCI Runtime Specification( reference implmentation: runc )
      • hot swap restart container process
        • k8s 中不停容器热替换/重启主进程 - gdb exec 法
        • exec hot swap gdb exec simple way
    • K8s metrics
      • Container Metrics
  • 可观察性 - Observability
    • Prometheus
      • Prometheus 基础知识
        • METRIC TYPES
        • Histograms 与 Summary 比较
        • Step and query_range - 步长与查询范围
        • Rate - 秒增量
        • Top
        • Metrics Design
        • rate vs increase functions
    • Log
      • Filebeat
      • Fluent Bit
        • 图解 Fluent Bit 内部设计
    • Node Exporter
      • Time metric - 发现时钟漂移
      • CPU frequency scaling metrics from the node exporter
      • Disk
    • Dashboard Best Practices
    • Java GC
    • eBPF based monitoring
  • Network
    • TCP
      • TCP Windows
        • Understanding Throughput and TCP Windows
      • TCP Ephemeral port
        • How to stop running out of ephemeral ports and start to love long-lived connections
        • Ephemeral port exhaustion and how to avoid it
      • Challenge ACK
    • TLS
      • TLS Handshake
      • 测试工具
      • ALPN
      • Cipher Suite(密码套件)
        • key exchange algorithm(密钥交换算法)
      • TLS Close Alert: close_notify
      • boringssl
      • Dump TLS(TLS 抓包)
    • Troubleshooting Tools
      • tcpdump
      • Wireshark
        • 用 Wireshark 分析 TCP Segmentation Offload (TSO)
    • HTTP
      • http 1.1
        • HTTP/1.1 Connection
  • Service Mesh
    • Envoy
      • Taming a Network Filter
      • TCP Proxy
      • Envoy Socket backlog
    • Istio
      • Istio mTLS
        • Istio mTLS 自动识别说明(Smartness Explained)
        • Understanding Istio’s Secure Naming
      • Metadata Exchange
        • TCP MX
        • metadata exchange plugin
      • Istio ALPN
        • istio-alpn-upstream
        • Istio ALPN Issues
      • Istio Gateway TCP Keepalive
      • Understanding TCP telemetry collection
      • Access Log
  • c 语言
    • libc
      • Stream Buffer
        • libc Stdout Buffering
        • stdio_buffering
  • 数据库
    • Cassandra
      • The Cassandra Architecture
      • Cassandra’s Data Model
      • Writing
      • Reading
      • Thread Pool
      • Data Files
      • Metrics
      • Client Drivers
  • Ceph
    • ceph object 定位(重要)
    • data-striping(数据分片与IO并发)
    • RADOS
    • POOL
      • pool quotas
    • ceph Placement Group (PG)
    • CEPH BLOCK DEVICE
    • (CephFS) CEPH FILE SYSTEM
    • Bluestore
    • OSD
      • ceph 写流程
    • krbd
      • Deep Dive Into Ceph’s Kernel Client
    • observability
      • prometheus module
      • Rook prometheus monitoring
    • Rook
    • ceph-csi
  • 硬件
    • CPU
      • PMU counters and profiling basics
  • eBPF
    • libbpf
      • BPF 系统接口 与 libbpf minimal 示例分析 - eBPF基础知识
  • 悟
    • Career
      • Jerks
        • 从《Why I Left Facebook》扯到蘇東坡《卜算子》
  • basic theory
    • The matter of time()
  • 底层技术
    • Linux ELF
      • ELF 格式简述
  • JVM
    • Java Compiler
      • Java Compiler Tuning
    • JVM RAM
      • metaspace
    • Safe Point
      • reach-safepoint-latency.md
  • .md

TLS

目录

  • Library
  • Dump

TLS#

SSL/TLS 的历史

https://en.m.wikipedia.org/wiki/Transport_Layer_Security#Applications_and_adoption

Protocol

Published

Status

SSL 1.0

Unpublished

Unpublished

SSL 2.0

1995

Deprecated in 2011 (RFC 6176)

SSL 3.0

1996

Deprecated in 2015 (RFC 7568)

TLS 1.0

1999

Deprecated in 2021 (RFC 8996)[8][9][10]

TLS 1.1

2006

Deprecated in 2021 (RFC 8996)[8][9][10]

TLS 1.2

2008

In use since 2008[11][12]

TLS 1.3

2018

In use since 2018[12][13]

  • TLS Handshake
  • 测试工具
    • TESTSSL
  • ALPN
    • Use Case
      • ACME
  • Cipher Suite(密码套件)
    • 命名规范
      • IANA 格式
    • key exchange algorithm(密钥交换算法)
      • key exchange algorithm(密钥交换算法)
        • key exchange algorithm(密钥交换算法) 列举简介
          • Diffie–Hellman(DH) key exchange
          • Elliptic-curve Diffie–Hellman(ECDH)
        • key exchange algorithm 与 TLS 版本
        • forward secrecy(前向保密)
    • Data integrity(数据完整性校验)
  • TLS Close Alert: close_notify
    • Alert protocol

Library#

  • boringssl
    • Cipher Suite
    • Envoy 相关的 Github Issues
    • 错误码列表
    • 实现支持 Cipher Suites 列表

Dump#

  • Dump TLS(TLS 抓包)
    • SSLKEYLOGFILE
    • Using tshark to Decrypt SSL/TLS Packets

上一页

Challenge ACK

下一页

TLS Handshake

目录
  • Library
  • Dump

作者: Mark Zhu

© Copyright 2022, Mark Zhu.