Module 11 · Internet layer · Drill
Internet layer drill
Scenario prompts that check whether internet layer is usable under pressure. Answer out loud, then compare.
0 of 4 graded
Prompt 1
Plan the IP addressing for a new production VPC in one region with three availability zones, a Kubernetes cluster that gives every pod a VPC IP (target 300 nodes at 30 pods each), managed databases, and public load balancers. The company also has a staging VPC and an office VPN that must both connect to production. Give CIDRs and justify the sizes.
Prompt 2
Workers in a private subnet call a payment provider's API through a NAT gateway with one public IP. At peak, about 4,000 new HTTPS connections per second are opened, and calls start failing with connection timeouts while workers are idle and the provider reports no errors. Diagnose and fix, then explain what the provider's IP allow-list needs.
Prompt 3
Customers in one country suddenly cannot reach your service, while everyone else can. Your servers and load balancers are healthy. Using routing knowledge, list the likely causes, the evidence you would gather, and the mitigations.
Prompt 4
A support engineer says: 'ping to the server works, traceroute shows stars at hop 6, so the network is broken there, but the app is unreachable on 443.' Correct the reasoning and give a step-by-step diagnosis.