# conntrack

Published articles for conntrack.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Networking Concepts Every DevOps Engineer Needs to Know

DevFeed: [Networking Concepts Every DevOps Engineer Needs to Know](<https://devfeed.tech/articles/networking-concepts-every-devops-engineer-needs-to-know-17488.md>)

Original publisher: [Read original article](<https://kodekloud.com/blog/networking-concepts-every-devops-engineer-needs/>)

Author: Pramodh Kumar M

Published: 2026-08-14T17:14:08Z

Content type: tutorial

Language: en

Sources: [Kubernetes - KodeKloud Blog | DevOps, Cloud, Kubernetes, AI Tutorials & More](<https://devfeed.tech/sources/kubernetes-kodekloud-blog-devops-cloud-kubernetes-ai-tutorials-more.md>)

Topics: [networking](<https://devfeed.tech/topics/networking.md>), [DevOps](<https://devfeed.tech/topics/devops.md>), [browser](<https://devfeed.tech/topics/browser.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>)

Tags: [browser](<https://devfeed.tech/tags/browser.md>), [cidr-and-subnets](<https://devfeed.tech/tags/cidr-and-subnets.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [conntrack](<https://devfeed.tech/tags/conntrack.md>), [devops](<https://devfeed.tech/tags/devops.md>), [dns](<https://devfeed.tech/tags/dns.md>), [ephemeral-ports](<https://devfeed.tech/tags/ephemeral-ports.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-networking](<https://devfeed.tech/tags/kubernetes-networking.md>), [linux](<https://devfeed.tech/tags/linux.md>), [mtu-mismatch](<https://devfeed.tech/tags/mtu-mismatch.md>), [nat-and-snat](<https://devfeed.tech/tags/nat-and-snat.md>), [network](<https://devfeed.tech/tags/network.md>), [network-troubleshooting-commands](<https://devfeed.tech/tags/network-troubleshooting-commands.md>), [networking](<https://devfeed.tech/tags/networking.md>), [networking-concepts-for-devops](<https://devfeed.tech/tags/networking-concepts-for-devops.md>), [osi-model-for-devops](<https://devfeed.tech/tags/osi-model-for-devops.md>), [platform-engineering](<https://devfeed.tech/tags/platform-engineering.md>), [proxy](<https://devfeed.tech/tags/proxy.md>), [routing](<https://devfeed.tech/tags/routing.md>), [tcp](<https://devfeed.tech/tags/tcp.md>), [tcp-handshake](<https://devfeed.tech/tags/tcp-handshake.md>), [timeout](<https://devfeed.tech/tags/timeout.md>), [tls-handshake](<https://devfeed.tech/tags/tls-handshake.md>), [vpn](<https://devfeed.tech/tags/vpn.md>)

### AI overview

A tutorial follows a request from a browser to a container to explain networking concepts relevant to DevOps engineers. It maps symptoms such as connection refusal, timeouts, resets, and packet-size-related hangs to network layers and discusses diagnosis across VPN gateways, Kubernetes, and other infrastructure.

### Source excerpt

Follow one request from a browser to a container and back. Every networking concept you actually need shows up on that path, in order, and so does every place it breaks.

## Preparing a Web Front Server for DoS Attacks Using Cloudflare-Inspired Techniques

DevFeed: [Preparing a Web Front Server for DoS Attacks Using Cloudflare-Inspired Techniques](<https://devfeed.tech/articles/prepare-for-dos-like-cloudflare-do-27646.md>)

Original publisher: [Read original article](<https://gagor.pro/2016/02/prepare-for-dos-like-cloudflare-do/>)

Author: Tom

Published: 2016-02-05T00:00:00Z

Content type: tutorial

Language: en

Sources: [Tomasz Gągor](<https://devfeed.tech/sources/tomasz-gagor.md>)

Topics: [DDoS](<https://devfeed.tech/topics/ddos.md>), [Cloudflare](<https://devfeed.tech/topics/cloudflare.md>), [conntrack](<https://devfeed.tech/topics/conntrack.md>), [Kernel](<https://devfeed.tech/topics/kernel.md>), [servers](<https://devfeed.tech/topics/servers.md>)

Tags: [cloudflare](<https://devfeed.tech/tags/cloudflare.md>), [conntrack](<https://devfeed.tech/tags/conntrack.md>), [ddos](<https://devfeed.tech/tags/ddos.md>), [http-server](<https://devfeed.tech/tags/http-server.md>), [kernel](<https://devfeed.tech/tags/kernel.md>), [performance](<https://devfeed.tech/tags/performance.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

This tutorial adapts general techniques from a presentation about Cloudflare's DoS protection for typical web front servers. It covers ACK/FIN/RST/X-mas floods, SYN floods, botnet attacks, conntrack, syncookies, rate limiting, IP blacklisting, and related kernel and network tuning.

### Source excerpt

I watched nice presentation about how Cloudflare protects itself against DoS. Most of us are not able to do that exactly like them but some of tips were general enough to be used on typical web front server. I took notes from this presentation and presented here. Thanks to Marek agreement I also reposted all examples (in easier to copy paste way). Howto prepare against ACK/FIN/RST/X-mas flood Use conntrack rule: