【AI 자막】 네트워크 엔지니어링 (Network Engineering) 마스터하기!

List of private ip addresses https://en.wikipedia.org/wiki/Private_network

RFC 1918 that defines the private IP addresses https://www.rfc-editor.org/rfc/pdfrfc/rfc1918.txt.pdf (also attached)

Now that you know IP, TCP and UDP. Any other protocol must be built on top of these three.

TLS or Transport Layer security is a protocol used to encrypt the communication between two hosts. This lecture describes an overview of the protocol. RFCs attached and can be retrieved here.

https://www.rfc-editor.org/rfc/pdfrfc/rfc8446.txt.pdf

https://www.rfc-editor.org/rfc/pdfrfc/rfc5246.txt.pdf

John Nagle developed this algorithm to ensure efficient bandwidth, however it harmed performance in certain cases, let us discuss this. Download the full RFC from here. https://www.rfc-editor.org/rfc/pdfrfc/rfc896.txt.pdf, I also included it in this lecture as a downloadable.

As described in RFC 1122, the delayed acknowledgment algorithm can delay ACKs by up to half a second which  in combination with Nagle algorithm it can have devestating performance on communication

Download RFC 1122 here https://www.rfc-editor.org/rfc/pdfrfc/rfc1122.txt.pdf, I also included it as a downloadable on this lecture for more reading

Postgres Access Control https://www.postgresql.org/docs/current/auth-pg-hba-conf.html

In this video I learned how to decrypt TLS traffic with Wireshark so we can look at the traffic. Then took a look at how HTTP/2 streams are formed. The Magic HTTP/2 Stream is for sure interesting and the odd stream Ids are too!

HTTP/2 RFC

https://tools.ietf.org/html/rfc7540#section-3.5

https://http2.github.io/http2-spec/#SETTINGS_MAX_CONCURRENT_STREAMS

Connection Preface

HTTP/2 connections are opened with the preface '0x505249202a20485454502f322e300d0a0d0a534d0d0a0d0a', or "PRI * HTTP/2.0\r\n\r\nSM\r\n\r\n". The preface is designed to avoid the processing of frames by servers and intermediaries which support earlier versions of HTTP but not 2.0.

connection preface

Note: The client connection preface is selected so that a large

proportion of HTTP/1.1 or HTTP/1.0 servers and intermediaries do

not attempt to process further frames. Note that this does not

address the concerns raised in [TALKING].

export SSLKEYLOGFILE=/Users/HusseinNasser/tempkeys/key

:30 protocol ossifcations

13-30 http smuggling

From RFC (we discovered this in the video)

5.1.1 Stream Identifiers

Streams are identified with an unsigned 31-bit integer. Streams initiated by a client MUST use odd-numbered stream identifiers; those initiated by the server MUST use even-numbered stream identifiers. A stream identifier of zero (0x0) is used for connection control messages; the stream identifier of zero cannot be used to establish a new stream.

In this lecture I wireshark MongoDB and describe how it works in the wire. We will be Decrypting TLS traffic, showing the mongo protocol, cursors and more

Source code for MongoDB source code here https://github.com/hnasr/javascript_playground/blob/master/mongodb-js/test.js

Source Code

https://github.com/hnasr/javascript_playground/tree/master/server-sent-events