Index

Symbols

/proc filesystem

4-tuple flow hashing

A

ACCEPT AIOps Alerting Alertmanager Anomaly detection API Server Application layer

Apriori, [1] Architecture (Kubernetes) ARP arp ARP lookup Association rule mining Asymmetric routing path Attachment points

B

BGP, [1], [2] Borg (Google) BPF ring buffer delivery

bpftrace Bridge plugin, [1] Broadcast (ARP requests)

C

Calico, [1], [2], [3] Canonical Name Certificate Authority (CA) Cgroup namespaces, [1] cgroup.procs Cgroups (control groups) Cilium Classifiers, [1] cloud-init cluster networking Clustering ClusterIP, [1], [2] CNAME record mapping CNCF, [1] CNI, [1], [2] CNI Bash plugin CNI configuration CNI debugging logging CNI environment variables CNI network configuration CNI plugins CNI specification standard Confidence

ConfigMaps Conntrack Container Network Interface, [1] (CNI), [1] Container networking Container Runtime containerd CRI-O Container runtime interface Container runtimes containerd containerd CLI (ctr) Control groups, [1] Control plane, [1] Controller Manager Controllers control loop Deployment ReplicaSet StatefulSet CoreDNS, [1], [2], [3] CRI CRI-O, [1] curl

D

Dashboarding Data preprocessing de-NAT Deployment Destination NAT destination NAT (DNAT) Destination Net Unreachable DHCP plugin, [1] dig Discretization discretization DNAT DNS CNAME dnsmasq, [1] Docker Docker architecture Docker bridge network Docker CLI

Docker client Docker commands container network Docker daemon Docker engine components Docker host network Docker images Docker macvlan network Docker network drivers Docker networking Docker overlay network Docker runtime Dockershim DPDK flow caching Duplicate ACK triggers Dynamic kernel hooks dynamic routing protocols Dynamic symbol inspection

E

eBPF, [1] eBPF bytecode eBPF C code eBPF data paths eBPF maps ECLAT

encapsulation protocol etcd, [1] Execution protocol eXpress Data Path Extended Berkeley Packet Filter External traffic ingress ExternalName, [1], [2]

F

Failure prediction Fast Retransmit, [1] Fault isolation Feature engineering, [1] Firewall rules Flannel, [1]

flat networking model flow FORWARD, [1], [2] FP-Growth, [1] Frequent itemsets frequent itemsets

G

Grafana

H

Hairpin NAT

Headless Service Horizontal Pod Autoscaling

I

Ingress routing INPUT, [1] Inter-pod communication Intra-pod wiring IP address IP address management (IPAM) IP forwarding, [1] IP layer IP masquerading, [1] ip neighbor ip netns command

ip netns exec ip route, [1] IP-in-IP ip_rcv() ip_route_input() IPC namespaces, [1] iproute2 iptables, [1], [2] iptables chains iptables-legacy iptables-nft IPVS

K

Keepalived Kernel instrumentation Kernel networking layers kind kprobe attachment kprobes kube-apiserver kube-controller-manager kube-dns, [1] kube-proxy, [1], [2]

kube-scheduler kubectl commands Deployment rollouts Pod administration ReplicaSet scaling Service discovery StatefulSet management kubelet Kubernetes history KUBERNETES-SERVICES

L

L2-in-L3 encapsulation L3 routing Layer 2 data link segment Layer 2 forwarding Lift Linux Bridge, [1] Linux Bridge CNI, [1] Linux namespaces IPC namespace Network namespace PID namespace UTS namespace

Linux network namespaces Linux network stack, [1] Linux packet flow Linux packet processing Linux primitives, [1] LoadBalancer, [1], [2] Localhost communication (containers) Log analysis Loopback interface (lo)

M

MAC Address Table MAC-in-UDP tunnel Machine learning MASQUERADE, [1] MASQUERADE rule

MetalLB Minikube, [1] Mount namespaces, [1] Moving averages Multipass

N

Namespace isolation NAT, [1] Natural Language Processing nc netcat netem Netfilter netstat Network Address Translation Network diagnostic utilities Network Emulator Network isolation Docker network namespace routing Network namespaces, [1], [2]

Network observability Network stacks Network tap Network tunnel Networking layers Cluster network Pod network Service network Next-hop gateway discovery NF_HOOK() NLP nmap Node ports NodePort, [1], [2] nslookup

O

Observability systems Omega project (Google) Open vSwitch, [1], [2] openssl OpenStack, [1] Openstack OpenStack Neutron

OSI Layer mapping OSPF OUTPUT, [1] overlay network Overlay networks, [1] OVN-Kubernetes, [1] OVS, [1], [2]

P

Packet encapsulation packet filtering Packet forwarding packet forwarding Pause container (Pod sandbox) Percentiles PersistentVolume (PV) PersistentVolumeClaim (PVC) ping Pod logging Pod subnets POD_CIDR

Pods, [1] Port forwarding, [1] POSTROUTING, [1], [2] POSTROUTING chain PREROUTING, [1] PREROUTING chain Probabilistic load balancing Process isolation, [1] Process namespaces, [1] Programmable data planes PromQL PromQL engine Pseudo-Pod

Q

Queries

R

RCA ReplicaSet Resource limits Retransmission timeout (RTO) Retransmissions, [1]

RIP Root cause analysis Routable IP addresses Routing, [1] Routing table, [1] Rule mining metrics

S

Sandbox (pause container) Scaling deployments Scheduler Scraping metrics Sequential data Service (Abstraction) service networking Service ports Service types ClusterIP, [1] ExternalName LoadBalancer, [1] NodePort, [1] Services Shared namespace, [1] Shared network namespace Sidecar pattern SNAT, [1] Socket layer Software-Defined Networking (SDN)

Source NAT, [1] (SNAT) ss SSH tunnel StatefulSet Static port allocation static route configuration Static route table entries Static thresholds Static tracepoints Statistical analysis Storage Cloud Provider EmptyDir HostPath NFS struct sock Supervised learning, [1] Support systemd-resolved, [1]

T

table lookup TAP (Network Tap) TC tc tcp_retransmit_skb, [1] tcpdump telnet Threshold-based alerting Time namespaces, [1]

Time series analysis Time-series metrics tracepoints traceroute Traffic Control, [1] traffic flow Traffic sniffer tools Transport layer TSDB storage TUN (Network Tunnel)

U

Underlay network Unsupervised learning

User namespaces, [1] UTS namespaces, [1]

V

veth (Virtual Ethernet Device) VIP Virtual Ethernet (veth) pair (veth) Virtual Ethernet device Virtual IP, [1] (VIP), [1]

Virtual network bridges Virtual switching, [1] Visualization VTEP network, [1] VXLAN, [1] VXLAN tunnel VXLAN Tunnel Endpoint, [1] VXLAN tunneling

W

wget wireshark

Worker node Worker nodes

X

XDP

Z

Z-score