<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>ComputerNetworks | Portfolio</title><link>https://ansangah.github.io/en/tags/computernetworks/</link><atom:link href="https://ansangah.github.io/en/tags/computernetworks/index.xml" rel="self" type="application/rss+xml"/><description>ComputerNetworks</description><generator>Hugo Blox Builder (https://hugoblox.com)</generator><language>en</language><lastBuildDate>Tue, 15 Apr 2025 00:00:00 +0000</lastBuildDate><image><url>https://ansangah.github.io/media/sharing.png</url><title>ComputerNetworks</title><link>https://ansangah.github.io/en/tags/computernetworks/</link></image><item><title>Computer Networks</title><link>https://ansangah.github.io/en/blog/subjects/cn/</link><pubDate>Tue, 15 Apr 2025 00:00:00 +0000</pubDate><guid>https://ansangah.github.io/en/blog/subjects/cn/</guid><description>&lt;h2 id="chapter-1-introduction"&gt;Chapter 1. Introduction&lt;/h2&gt;
&lt;h3 id="11-evolution-of-data-networks"&gt;1.1 Evolution of Data Networks&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Consider &lt;strong&gt;commercial viability&lt;/strong&gt;, &lt;strong&gt;line installation cost&lt;/strong&gt; (very high), and relatively cheaper equipment.&lt;/li&gt;
&lt;li&gt;Evaluate whether new technologies can reuse existing infrastructure.
&lt;ul&gt;
&lt;li&gt;Success: xDSL leveraged telephone lines for broadband.&lt;/li&gt;
&lt;li&gt;Failure: 1970s video phones—insufficient demand relative to infrastructure cost.&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;li&gt;Modems convert digital ↔ analogue signals so legacy phone lines can transport data.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3 id="12-development-path"&gt;1.2 Development Path&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Telcos gradually expanded data services while keeping the telephone backbone.&lt;/li&gt;
&lt;li&gt;Phone number ↔ IP mapping allowed voice-over-IP on regular lines, though with lower audio quality.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3 id="13-internet--isps"&gt;1.3 Internet &amp;amp; ISPs&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;ISPs&lt;/strong&gt; (e.g., KT, SKT) provide network access.&lt;/li&gt;
&lt;li&gt;Hierarchical topology: local ISPs → backbone ISPs → global backbones connected via peering/transit.&lt;/li&gt;
&lt;/ul&gt;
&lt;hr&gt;
&lt;h2 id="chapter-19-host-to-host-delivery"&gt;Chapter 19. Host-to-Host Delivery&lt;/h2&gt;
&lt;h3 id="21-osi-seven-layers-quick-review"&gt;2.1 OSI Seven Layers (Quick Review)&lt;/h3&gt;
&lt;ol&gt;
&lt;li&gt;&lt;strong&gt;Physical:&lt;/strong&gt; signal transmission.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Data Link:&lt;/strong&gt; MAC, error detection, hop-to-hop delivery.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Network:&lt;/strong&gt; routing, addressing, multicast, ARP.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Transport:&lt;/strong&gt; TCP/UDP for end-to-end reliability.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Session&lt;/strong&gt;&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Presentation&lt;/strong&gt;&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Application:&lt;/strong&gt; HTTP, DNS, etc. (Labs typically focus on layers 4–7.)&lt;/li&gt;
&lt;/ol&gt;
&lt;h3 id="22-network-layer-roles"&gt;2.2 Network Layer Roles&lt;/h3&gt;
&lt;ol&gt;
&lt;li&gt;&lt;strong&gt;Internetworking:&lt;/strong&gt; connects heterogeneous networks.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Addressing:&lt;/strong&gt; assigns globally unique identifiers.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Routing:&lt;/strong&gt; chooses optimal paths.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Packetizing:&lt;/strong&gt; encapsulates upper-layer data.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Fragmenting:&lt;/strong&gt; splits packets to respect MTU limits.&lt;/li&gt;
&lt;/ol&gt;
&lt;h3 id="23-switching"&gt;2.3 Switching&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Circuit switching:&lt;/strong&gt; dedicated path (telephone network).&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Packet switching:&lt;/strong&gt; best-effort, store-and-forward (Internet).&lt;/li&gt;
&lt;/ul&gt;
&lt;h3 id="24-datagram-service"&gt;2.4 Datagram Service&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Connectionless: each packet is routed independently.&lt;/li&gt;
&lt;li&gt;Packets may arrive out of order; TCP reorders and handles flow control.&lt;/li&gt;
&lt;/ul&gt;
&lt;hr&gt;
&lt;h2 id="chapter-19-ipv4-addressing-and-subnets"&gt;Chapter 19. IPv4 Addressing and Subnets&lt;/h2&gt;
&lt;h3 id="31-address-classes"&gt;3.1 Address Classes&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;32-bit addresses must be unique and universally routable.&lt;/li&gt;
&lt;li&gt;Classful ranges:
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Class A:&lt;/strong&gt; 0xxxxxxx (0–127), NetID 7 bits, HostID 24 bits.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Class B:&lt;/strong&gt; 10xxxxxx (128–191), NetID 14 bits, HostID 16 bits.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Class C:&lt;/strong&gt; 110xxxxx (192–223), NetID 21 bits, HostID 8 bits.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Class D:&lt;/strong&gt; 1110xxxx (224–239), multicast.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Class E:&lt;/strong&gt; 1111xxxx (240–255), reserved for experiments.&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;li&gt;Special addresses: &lt;code&gt;-.0.0.0&lt;/code&gt; (network), &lt;code&gt;-.0.0.1&lt;/code&gt; (gateway), &lt;code&gt;-.255.255.255&lt;/code&gt; (broadcast).&lt;/li&gt;
&lt;/ul&gt;
&lt;h3 id="32-subnetting"&gt;3.2 Subnetting&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Partition large networks into manageable subnets to improve organisation and security.&lt;/li&gt;
&lt;li&gt;Use bitwise AND: IP &amp;amp; subnet mask = subnet address.&lt;/li&gt;
&lt;li&gt;CIDR enables flexible, classless allocation.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3 id="33-dhcp"&gt;3.3 DHCP&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Dynamically assigns IP configuration. Sequence: Discover → Offer → Request → ACK.&lt;/li&gt;
&lt;li&gt;Mitigates address exhaustion; well-suited for mobile devices.&lt;/li&gt;
&lt;li&gt;Combine with NAT to hide private addresses.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3 id="34-nat"&gt;3.4 NAT&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Translates private ↔ public addresses so many hosts share one public IP.&lt;/li&gt;
&lt;li&gt;PAT (port address translation) differentiates sessions.&lt;/li&gt;
&lt;li&gt;External access requires port forwarding or static public IPs.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3 id="35-ip-datagram"&gt;3.5 IP Datagram&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;TTL decrements at each router; packet discarded at zero to avoid loops.&lt;/li&gt;
&lt;li&gt;Fragmentation splits packets exceeding link MTU; reassembly happens at the final destination.&lt;/li&gt;
&lt;/ul&gt;
&lt;hr&gt;
&lt;h2 id="chapter-20-network-layer-protocols"&gt;Chapter 20. Network Layer Protocols&lt;/h2&gt;
&lt;h3 id="41-arp"&gt;4.1 ARP&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Resolves IP addresses to MAC addresses within the same subnet.&lt;/li&gt;
&lt;li&gt;Request sent via broadcast; reply delivered as unicast. Results cached.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3 id="42-ip"&gt;4.2 IP&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Minimum 20-byte header with version, header length, TTL, protocol, checksum, etc.&lt;/li&gt;
&lt;li&gt;Protocol field multiplexes upper-layer protocols (TCP=6, UDP=17, OSPF=89, &amp;hellip;).&lt;/li&gt;
&lt;/ul&gt;
&lt;h3 id="43-fragmentation--mtu"&gt;4.3 Fragmentation &amp;amp; MTU&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Routers split packets when downstream MTU is smaller.&lt;/li&gt;
&lt;li&gt;DF (Don’t Fragment) flag forbids splitting, prompting ICMP errors instead.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3 id="44-icmp"&gt;4.4 ICMP&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Reports network-layer errors and diagnostic information.&lt;/li&gt;
&lt;li&gt;Error messages: Destination Unreachable, (deprecated) Source Quench, Time Exceeded, Parameter Problem, Redirect.&lt;/li&gt;
&lt;li&gt;Query messages: Echo (ping), Timestamp, etc.&lt;/li&gt;
&lt;li&gt;ICMP only reports problems—flow and congestion control live elsewhere.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3 id="45-ipv6-overview"&gt;4.5 IPv6 Overview&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;128-bit address space, simplified header, richer QoS support.&lt;/li&gt;
&lt;li&gt;Address notation uses 16-bit hex blocks with &lt;code&gt;::&lt;/code&gt; compression.&lt;/li&gt;
&lt;li&gt;Transition strategies:
&lt;ol&gt;
&lt;li&gt;&lt;strong&gt;Dual Stack&lt;/strong&gt; (run IPv4 &amp;amp; IPv6 simultaneously).&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Tunnelling&lt;/strong&gt; (encapsulate IPv6 in IPv4).&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Header Translation&lt;/strong&gt; (convert headers; may lose info like flow labels).&lt;/li&gt;
&lt;/ol&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;hr&gt;
&lt;h2 id="chapter-21-unicast--multicast-routing"&gt;Chapter 21. Unicast &amp;amp; Multicast Routing&lt;/h2&gt;
&lt;h3 id="51-routing-types"&gt;5.1 Routing Types&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Unicast:&lt;/strong&gt; one-to-one (default Internet traffic).&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Multicast:&lt;/strong&gt; one-to-many (group members only).&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Broadcast:&lt;/strong&gt; one-to-all (limited in IPv4).&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Anycast:&lt;/strong&gt; one-to-nearest (e.g., DNS root replicas).&lt;/li&gt;
&lt;/ul&gt;
&lt;h3 id="52-overlay-networks"&gt;5.2 Overlay Networks&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Logical networks built atop the physical Internet (e.g., CDNs).&lt;/li&gt;
&lt;li&gt;Reduce load when delivering identical media streams.&lt;/li&gt;
&lt;li&gt;New services must weigh overlay benefits against cost.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3 id="53-unicast-protocols"&gt;5.3 Unicast Protocols&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;RIP:&lt;/strong&gt; distance vector, hop-count metric—small networks.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;OSPF:&lt;/strong&gt; link-state—large enterprise networks.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;BGP:&lt;/strong&gt; path vector—inter-AS routing on the global Internet.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3 id="54-multicast-routing"&gt;5.4 Multicast Routing&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Hosts join/leave groups via IGMP.&lt;/li&gt;
&lt;li&gt;Routers build multicast trees to forward only along necessary links.&lt;/li&gt;
&lt;li&gt;Protocols include PIM (protocol-independent multicast) variants.&lt;/li&gt;
&lt;/ul&gt;
&lt;hr&gt;
&lt;h2 id="chapter-22-security-fundamentals"&gt;Chapter 22. Security Fundamentals&lt;/h2&gt;
&lt;h3 id="61-http-security"&gt;6.1 HTTP Security&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Basic auth:&lt;/strong&gt; Base64 username/password—susceptible to eavesdropping.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Digest auth:&lt;/strong&gt; adds hashing yet still vulnerable (no server authentication, MITM).&lt;/li&gt;
&lt;li&gt;Real-world solution: HTTPS via SSL/TLS to encrypt the transport layer.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3 id="62-secure-email"&gt;6.2 Secure Email&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Requirements: &lt;strong&gt;confidentiality&lt;/strong&gt;, &lt;strong&gt;authentication&lt;/strong&gt;, &lt;strong&gt;integrity&lt;/strong&gt;, &lt;strong&gt;non-repudiation&lt;/strong&gt;.&lt;/li&gt;
&lt;li&gt;Encryption approaches:
&lt;ul&gt;
&lt;li&gt;Symmetric keys (fast but key distribution is hard).&lt;/li&gt;
&lt;li&gt;Public/private keys (PGP combines both).&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;li&gt;Strong passphrases should be long, unpredictable, yet memorable.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3 id="63-public-key-validation"&gt;6.3 Public-Key Validation&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Certificate Authorities (CA):&lt;/strong&gt; trusted third parties issue certificates binding public keys to identities. Certificates include serials, subject/issuer info, validity, signatures.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;PGP Web of Trust:&lt;/strong&gt; decentralised—users vouch for one another; keys have validity and trust scores.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3 id="64-transport-layer-security"&gt;6.4 Transport-Layer Security&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;SSL/TLS:&lt;/strong&gt; negotiate session keys, encrypt data, authenticate endpoints. HTTPS = HTTP over TLS.&lt;/li&gt;
&lt;li&gt;Drawback: handshake incurs public-key operations and latency.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3 id="65-network-layer-security-ipsec"&gt;6.5 Network-Layer Security (IPsec)&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Provides tunnelling, encryption, and integrity between routers or hosts.&lt;/li&gt;
&lt;li&gt;Protocols: &lt;strong&gt;ESP&lt;/strong&gt; (encryption + authentication) and &lt;strong&gt;AH&lt;/strong&gt; (authentication + integrity only).&lt;/li&gt;
&lt;li&gt;Modes: transport (end-to-end) and tunnel (network-to-network).&lt;/li&gt;
&lt;/ul&gt;
&lt;h3 id="66-vpn"&gt;6.6 VPN&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Emulates a private network over the public Internet.&lt;/li&gt;
&lt;li&gt;Comparison:
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Leased line:&lt;/strong&gt; secure but expensive.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Hybrid:&lt;/strong&gt; mix of private lines and Internet.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;VPN:&lt;/strong&gt; IPsec tunnel mode balances cost and security.&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;hr&gt;
&lt;h2 id="7-summary--study-tips"&gt;7. Summary &amp;amp; Study Tips&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Analyse cost vs. benefit when reusing existing infrastructure versus deploying new tech.&lt;/li&gt;
&lt;li&gt;Practise subnetting and CIDR to design addressing plans.&lt;/li&gt;
&lt;li&gt;Compare routing protocols (RIP/OSPF/BGP) and match them to network scale.&lt;/li&gt;
&lt;li&gt;Security spans multiple layers: application (HTTPS) → transport (TLS) → network (IPsec).&lt;/li&gt;
&lt;li&gt;Use packet-analyser tools (Wireshark) to observe ARP, ICMP, DHCP, TLS handshakes and solidify understanding.&lt;/li&gt;
&lt;/ul&gt;</description></item></channel></rss>