Tag
firewalls
- Oct 20, 2026 Network ACLs and Stateless Filtering at the Subnet Boundary Why an ordered, stateless rule list needs an explicit rule for return traffic, how ephemeral port ranges make that rule hard to write, and where the ACL is evaluated relative to the interface. cloud infrastructure
- Oct 6, 2025 Security Groups and the Stateful Connection Tracker How an interface-level firewall decides that a returning packet belongs to an existing flow, why there is no rule for replies, and what happens when the tracking table fills. cloud infrastructure
- Apr 23, 2023 How a Stateful Firewall Matches a Packet The order in which a packet filter evaluates rules, how the connection-tracking table overrides the rule set, and where the model breaks under fragmentation and asymmetric routing. security