Advanced Networking Specialist

Hybrid and cloud networks at scale: routing, resilience, inspection, and the packets in between. Preparing for the Advanced Networking Specialty certification.

Exam Room · Advanced Networking Specialist

A Second Region and No Path Between Them

A clinical records platform loses most of a working day to a Region-wide impairment, and the review puts a second Region in the plan for the first time. The hub-and-spoke transit gateway has been clean for three years; now two Regions need a private path between them, and on-premises has to reach both. The topology drawing does not decide it. What decides it is which options still propagate routes and which ones hand you a static route table to maintain by hand.

Read article

Exam Room · Advanced Networking Specialist

Forty Ingresses and One Account Quota

Forty product teams, forty Ingress objects, forty Application Load Balancers, and an account quota of fifty. The pod subnets are a /22 with room for about a hundred more addresses. Consolidating the load balancers and fixing the address plan turn out to be the same decision.

Read article

Exam Room · Advanced Networking Specialist

Four Hundred Laptops and a Private Subnet

Three offices close and four hundred engineers become the network edge. They need six VPCs and two datacentre ranges from their kitchen tables, sixty of them are contractors who should see one application and nothing else, and nobody has the staff to inspect four hundred households' browsing. Full tunnel is the default, and it is the wrong default here.

Read article

Exam Room · Advanced Networking Specialist

Four Hundred VPCs and a Route Table Limit

Four hundred accounts, four hundred VPCs, and a peering ceiling that no quota increase will move. Three quarters of those VPCs hold one application that calls two shared services and nothing else. Replacing the mesh with a hub is the obvious move; the move that changes the arithmetic is noticing that most of those VPCs never needed to exist.

Read article

Exam Room · Advanced Networking Specialist

Four Protocols and One Front Door

Four workloads, one front door: an HTTP API with path and header rules, an MQTT broker fleet whose customers' firewalls allow-list IP addresses, a UDP telemetry collector, and six inspection appliances that only speak GENEVE. Standardising on a single load balancer type is the tempting move, and more of this turns on the target-group type than on the listener protocol.

Read article