Tag
network-isolation
- Oct 6, 2025 Security Groups and the Stateful Connection Tracker How an interface-level firewall decides that a returning packet belongs to an existing flow, why there is no rule for replies, and what happens when the tracking table fills. cloud infrastructure
- May 1, 2025 VPC Address Space, Subnets, and the Implicit Router How a CIDR block becomes an isolated forwarding domain, where the router joining its subnets actually runs, and why several addresses in every subnet are never usable. cloud infrastructure
- Dec 15, 2024 Private Endpoint Services and the Reverse-Direction Connection How a service in one VPC becomes reachable from another through an address that lives in the consumer subnet, why the connection is accepted by the provider, and what the endpoint does not hide. cloud infrastructure
- Nov 29, 2024 Containment Through Network Isolation at the Packet Layer Why disabling an account does not stop an intrusion, and how switch port filters, ACLs, and quarantine VLANs differ in what they actually block. security