The Life of an Internet Request
Follow a browser request through names, routes, encrypted connections, edge decisions, and origin work.
URL to address: recursive and authoritative DNS
Distinguish recursive and authoritative DNS
Transport: TCP, UDP, and QUIC
Separate IP, transport, and HTTP responsibilities
TLS and HTTP across two trust boundaries
Explain TLS authentication separately from HTTP
Reverse proxies, forward proxies, and cache decisions
Distinguish forward and reverse proxy roles
Anycast, origin work, and latency evidence
Decompose end-to-end latency
Trace a request and isolate failures
A customer reports that https://shop.example.test is intermittently unavailable. Build a request-path investigation without changing production.
Work through the problem
- Draw browser, resolver, authoritative DNS, edge, and origin.
- Place DNS, connection, TLS, HTTP, cache, and application failures on the path.
- Define one discriminating observation at each boundary.
- Explain what a successful test rules out and what remains unknown.
Deliverables
- Annotated request flow
- Diagnostic matrix
- A two-minute customer update
Self-review rubric
- Separates DNS from application processing
- Distinguishes both TLS connections
- Uses timestamps and identifiers
- Does not infer server health from ping alone
Compare with the worked approach
A defensible sequence is: establish affected users and time; inspect DNS answers and proxy status; compare transport and TLS handshakes; capture HTTP status and request identifiers; inspect cache status; correlate origin logs and dependencies. A valid DNS answer only proves name resolution. A successful edge TLS handshake does not prove origin TLS or application health.
Sources and context
- RFC 1034: Domain names concepts
- Cloudflare DNS and proxy model
- RFC 8767 — DNS serve-stale and TTL expiry
- curl manual — --resolve and request timing
- RFC 9000: QUIC
- RFC 9293: TCP
- RFC 8446: TLS 1.3
- Cloudflare SSL/TLS concepts
- OpenSSL s_client — hostname and certificate verification
- Cloudflare Cache
- RFC 9111: HTTP Caching
- RFC 4786: Anycast services
- Cloudflare traffic flow