SERIES_OVERVIEW // CURRICULUM_MAP

Learn Kubernetes Networking, Gateway API, Service Mesh, and Multi-Cluster Traffic Engineering

// Kaufman skill map dan operating model untuk menguasai Kubernetes networking tingkat advance sebagai traffic engineering discipline, bukan sekadar YAML dan template.

35 Lessons721 Min Total04 Phases

This overview is designed to help you choose the right entry point quickly. Follow the full track from lesson one, continue from your last checkpoint, or jump straight into a phase that matches what you need right now.

Start From First Lesson Open Curriculum Map

access-logsambient-mesharchitecturearchitecture-reviewauthorization+124 more

Phase 01 · Start Here Phase 02 · Build Core Phase 03 · Deepen Practice Phase 04 · Final Stretch

Curriculum Map

Navigate by phase, then choose the lesson that matches your current depth.

Kaufman Skill Map and Operating Model

24 min

Kaufman skill map dan operating model untuk menguasai Kubernetes networking tingkat advance sebagai traffic engineering discipline, bukan sekadar YAML dan template.

Kubernetes Networking Mental Model

23 min

Mental model teknis Kubernetes networking untuk memahami traffic path, control plane, data plane, service discovery, policy, identity, dan failure boundary sebelum masuk ke Gateway API dan service mesh.

Linux Networking Foundation for Kubernetes

20 min

Fondasi Linux networking untuk membaca packet path Kubernetes secara realistis: namespace, veth, bridge, routing, NAT, conntrack, MTU, TCP state, dan debugging workflow.

Pod Networking, CNI, and Node Data Plane

24 min

Pod networking, CNI contract, IPAM, overlay versus underlay, node dataplane, CNI responsibilities, cloud CNI, Calico, Cilium, Flannel, dan failure modelling.

Service Virtual IP, kube-proxy, and eBPF

26 min

Deep dive Service virtual IP, kube-proxy, iptables/IPVS, eBPF service load balancing, traffic policies, source IP preservation, and production failure modelling.

DNS, Service Discovery, and Identity Resolution

23 min

Deep dive DNS, CoreDNS, service discovery, Pod DNS policy, search domains, ndots, headless service resolution, NodeLocal DNSCache, caching behavior, and production DNS failure modelling.

Endpoints, EndpointSlices, and Readiness-Aware Routing

19 min

Endpoint, EndpointSlice, readiness-aware routing, terminating endpoint, topology-aware routing, dan bagaimana Kubernetes mengubah workload state menjadi traffic eligibility.

Load Balancing Models, NodePort, LoadBalancer, and External Traffic

22 min

Load balancing model Kubernetes untuk NodePort, LoadBalancer, external traffic, health check, source IP preservation, cloud load balancer, bare metal, dan failure mode produksi.

Ingress Model, Limitations, and Migration Pressure

19 min

Model Ingress Kubernetes, keterbatasan desainnya, annotation-driven extensibility, boundary multi-team, dan cara berpikir migrasi menuju Gateway API tanpa merusak traffic production.

Gateway API Core Model

15 min

Core model Gateway API: GatewayClass, Gateway, Listener, Route, BackendRef, ReferenceGrant, role-oriented design, attachment semantics, dan status conditions sebagai production contract.

GatewayClass, Gateway, Listener, and Route Attachment

19 min

Deep dive GatewayClass, Gateway, Listener, AllowedRoutes, ParentRef, sectionName, cross-namespace attachment, conflict resolution, status conditions, dan failure modelling untuk production Gateway API.

HTTPRoute, GRPCRoute, and Application Routing Semantics

18 min

Deep dive HTTPRoute dan GRPCRoute: hostname, path, header, method, query, gRPC service/method matching, filters, weighted backends, mirroring, rewriting, precedence, dan failure modelling.

TLS Termination, Passthrough, Certificates, and Trust Boundaries

17 min

Deep dive TLS termination, passthrough, certificate references, SNI, backend TLS, trust boundaries, rotation, and failure modelling in Kubernetes Gateway API.

TCP, UDP, and Non-HTTP Routing

17 min

Deep dive TCPRoute, UDPRoute, TLSRoute, Layer-4 routing, non-HTTP protocols, stateful connections, protocol timeouts, exposure patterns, and production failure modes.

ReferenceGrant, Cross-Namespace Routing, and Delegation

15 min

Deep dive ReferenceGrant, cross-namespace backend references, shared Gateway delegation, namespace ownership, route trust, and multi-tenant failure modelling in Gateway API.

Gateway API Policy Attachment and Platform Guardrails

19 min

Deep dive Gateway API policy attachment, direct and inherited policy, BackendTLSPolicy, timeouts, retries, rate limiting patterns, ownership, conflict handling, and platform guardrails.

Gateway API Conformance, Portability, and Controller Selection

21 min

Deep dive Gateway API conformance, portability, implementation selection, controller behavior, feature maturity, migration risk, and production decision framework.

North-South Traffic Engineering Patterns

18 min

Production-grade north-south traffic engineering patterns for Kubernetes: edge load balancers, Gateway API, TLS, WAF, CDN, routing, ownership, scaling, security, observability, and failure modelling.

East-West Traffic and Service-to-Service Routing

18 min

Deep dive east-west traffic and service-to-service routing in Kubernetes: ClusterIP, DNS, EndpointSlice, topology-aware routing, internal Gateway API, GAMMA, canary, mirroring, network policy, observability, and failure modelling.

Service Mesh Architecture: Control Plane, Data Plane, and Proxies

19 min

Deep architecture of service mesh: control plane, data plane, proxies, xDS, identity, certificate distribution, sidecar and sidecarless models, traffic interception, telemetry, policy, operational cost, and failure modelling.

Istio Sidecar Mode: Traffic, Security, and Telemetry

18 min

Deep guide to Istio sidecar mode: sidecar injection, request interception, VirtualService, DestinationRule, Gateway, ServiceEntry, PeerAuthentication, AuthorizationPolicy, RequestAuthentication, telemetry, sidecar scoping, upgrade risk, and production failure modelling.

Istio Ambient Mesh: ztunnel, Waypoint, and L4/L7 Split

17 min

Deep guide to Istio ambient mesh: sidecarless service mesh architecture, ztunnel, waypoint proxy, HBONE, L4/L7 split, workload enrollment, Gateway API integration, identity, policy placement, telemetry, migration from sidecar mode, and production failure modelling.

Linkerd, Cilium, and Sidecarless Mesh Trade-offs

21 min

Deep guide to Linkerd, Cilium Service Mesh, and sidecarless service mesh trade-offs: architecture, data plane choices, eBPF, Envoy, identity, policy, observability, Gateway API, performance, failure modes, and production decision framework.

mTLS, SPIFFE, Identity, and Zero-Trust Service Networking

16 min

Deep guide to mTLS, SPIFFE, SPIRE, workload identity, SVIDs, trust domains, certificate rotation, identity-based authorization, and zero-trust service networking for Kubernetes and service mesh platforms.

Traffic Shaping, Canary, Blue-Green, Mirroring, and Failover

20 min

Deep guide to production traffic shaping patterns in Kubernetes using Gateway API, service mesh, canary, blue-green, request mirroring, shadow traffic, dark launch, and failover semantics.

Resilience, Timeouts, Retries, Circuit Breaking, and Load Shedding

19 min

Deep guide to Kubernetes and service mesh resilience engineering using timeouts, retries, circuit breaking, outlier detection, load shedding, backpressure, and failure budget alignment.

Observability, Access Logs, Metrics, Traces, and Flow Visibility

29 min

Deep guide to Kubernetes traffic observability using status conditions, events, metrics, access logs, distributed traces, DNS telemetry, Envoy/Istio telemetry, and CNI flow visibility.

NetworkPolicy, CNI Policy, and Microsegmentation

20 min

Deep guide to Kubernetes NetworkPolicy, CNI-specific policy, microsegmentation, default deny, egress controls, identity-aware network policy, and policy failure modelling.

Egress Control, NAT, Firewalls, Proxies, and Private Connectivity

25 min

Deep guide to Kubernetes egress control, NAT, firewall allowlisting, egress gateways, proxies, DNS-based control, private connectivity, auditability, and exfiltration failure modelling.

Multi-Cluster Networking Foundation

19 min

Deep foundation for multi-cluster Kubernetes networking: cluster boundaries, topology, identity, CIDR planning, service discovery, routing, latency, failure domains, and governance.

Multi-Cluster Services API and Service Export/Import

23 min

Deep dive into Kubernetes Multi-Cluster Services API: ServiceExport, ServiceImport, ClusterSet, namespace sameness, clusterset DNS, endpoint aggregation, conflict handling, locality, readiness, and production failure modelling.

Multi-Cluster Gateway, Mesh, and Global Traffic Routing

24 min

Advanced multi-cluster Gateway, service mesh, global routing, regional ingress, east-west gateways, active-active/active-passive design, locality, failover, DNS/GSLB, and production traffic engineering failure models.

Failure Models, Chaos Testing, and Debugging Playbooks

21 min

Production-grade failure models, chaos testing, incident triage, packet-path debugging, Gateway API status analysis, mesh failure isolation, DNS/CNI/policy diagnosis, and reusable Kubernetes networking debugging playbooks.

Production Architecture Review and Decision Framework

22 min

Production architecture review and decision framework for Kubernetes networking platforms, including CNI, Gateway API, ingress, service mesh, mTLS, egress, multi-cluster, observability, cost, ownership, migration, risk, and regulatory defensibility.

Capstone Design - Top 1 Percent Kubernetes Networking Handbook

31 min

Capstone production design handbook for Kubernetes networking, Gateway API, service mesh, mTLS, egress governance, observability, failure modelling, and multi-cluster traffic engineering.