DoorDash Engineering

JANUARY 16, 2024

Custom multi-cluster service discovery: Our custom service discovery solution, DoorDash data center Service Discovery, or DDSD, provides a custom DNS domain to support multi-cluster communication. Clients leverage DNS names to dynamically discover all pod IP addresses of desired services.

Cloud 84

Cloud IP Address DNS Routers 84

Kentik

SEPTEMBER 20, 2021

After the DNS lookup and the ARP, the host reaches out to the IP address of the destination using a SYN in order to open a connection. Example of Kentik Synthetics’ performance mesh user interface that can report latency continuously, even in complex mesh topologies. Below is the beginning of a TCP handshake.

TCP 116

TCP Routers Bandwidth IP Address 116

Kentik

APRIL 4, 2023

Network reliability engineers (NREs) The scale, transient nature of resources and topology, and extensive network boundaries make delivering on network reliability a complex and specialized task. Additionally, monitoring becomes critical for network optimizations by identifying areas where resources are under or overutilized.

Cloud 104

Cloud Networking Network Bandwidth 104

Rule 11

JUNE 21, 2024

Topology Aware Routing is a feature of Kubernetes that prevents cluster traffic within one availability zone from crossing to another availability zone. TL;DR: AES-GCM is great, as long as every nonce (mnemonic: number used once) is truly unique. Once a nonce is reused, AES-GCM completely falls apart.

Energy 40

Energy Routers Topology DNS 40

Kentik

APRIL 5, 2023

Well, that depends on the network topology of the network but also on which CDN and how that CDN maps the end users to a cluster. Movie Open Connect is unique among the CDNs since they do not rely on the DNS system to direct the end user to the suitable cache. The typical DNS-based flow for a content server by a CDN looks like this: 1.

Networking 52

Networking Network DNS IP Address 52

Kentik

DECEMBER 18, 2019

These include SNMP, DNS, RADIUS and streaming telemetry. While we were able to scale connections and achieved a mostly uniform distribution among the peering nodes (example below), our setup was still not really IPv6 ready and needed full exaBGP restarts upon any topology modification, resulting in BGP flaps for customers.

Server 13

Server Topology TCP Networking 13

Kentik

JUNE 14, 2023

An engineer standing in front of a console today stares at the traffic moving from their on-prem data center up and out to a CASB, receiving DNS responses from a cloud-provided DNS service, and then on through an ephemeral microservices architecture in a public cloud. And this, of course, is just to reach the front end.

WAN 59

WAN Data Centers DNS Internet 59

Kentik

MARCH 15, 2023

Cyberthreat strategies have evolved in step with modern cloud networks, often using cheap, virtualized cloud resources to exploit the threat surface topology I briefly described above. The attacker can spoof IP addresses, DNS, HTTPS headers, and more to deceive users into interacting with compromised applications.

Networking 94

Networking Network Protocol IP Address 94

CATO Networks

APRIL 20, 2022

Employees constantly complain about performance While traditional hub-and-spoke networking topology comes with its advantages, when users backhaul to the data center they clog the network with bandwidth-heavy applications like VOIP and file transfer.

MPLS 52

MPLS WAN SASE Networking 52

Kentik

JUNE 5, 2023

Large-scale origination leaks like these have become less frequent in recent years due to increases in the automation of router configuration in topologically-central networks. In 2018, attackers employed a BGP hijack that redirected traffic to Amazon’s authoritative DNS service.

IP Address 145

IP Address DNS Internet Routers 145