Phase 01 — Foundations • Computer Networking & Web Architecture

Internet & Networking Basics for AI Engineers

A comprehensive mental model of global networking, addressing, transport protocols, security handshakes, and HTTP semantics. Master how computers talk across the wire—from URL input to DNS, TCP, TLS, and HTTP—and understand how modern AI systems, LLM APIs, RAG pipelines, and agent tools rely fundamentally on network resilience.

Estimated Study Time: 35 mins
Level: Foundational • Core Engineering
Architecture: OSI / TCP/IP Layers 3 to 7
Interactive Labs: 4 Real-Time Simulators Included
01

How the Internet Actually Works: Internet vs Web

Deconstructing the global network of networks and distinguishing physical infrastructure from application hypermedia.

To an AI engineer building cloud-connected models, the network often feels like magic: you invoke fetch("https://api.openai.com/v1/chat/completions") in Python or TypeScript, and tokens miraculously stream back. But underneath this high-level abstraction lies the most sophisticated engineering feat in human history.

Fundamental Architectural Distinction: Internet vs World Wide Web
The Internet (Physical & Routed Network Infrastructure)
A global, decentralized collection of interconnected autonomous networks (ISPs, Tier-1 backbones, undersea fiber cables, BGP routers). Governed by IP (Internet Protocol) and packet switching.
Underlying Highway
The World Wide Web (Application-Layer Information System)
An application system running ON TOP of the Internet. Invented by Tim Berners-Lee in 1989. Uses HTTP/HTTPS protocol, HTML documents, URIs, and REST APIs to exchange hypermedia.
Vehicles on Highway

The Web is not the only system that uses the Internet. Email (SMTP, IMAP), remote server management (SSH), file transfers (SFTP), game telemetry (UDP), and peer-to-peer torrents all run over the Internet without using the Web.

Mental Model for AI Engineers: Think of the Internet as the worldwide network of roads, highways, bridges, and intersections. The Web is one specific fleet of delivery trucks that speaks HTTP. When your AI agent calls an LLM endpoint, it is sending an HTTP cargo box across those roads.

The Modern Client-Server Model

In naive tutorials, a "server" is illustrated as a single desktop computer tower sitting under someone's desk. In production AI engineering, a Service Endpoint is an elastic distributed cloud architecture:

ComponentRole in ArchitectureReal-World Example in AI Pipelines
ClientInitiates outbound connection and requests computation or data.Browser React app, mobile app, or Python script calling an LLM API.
Edge CDN / AnycastTerminates TLS nearest to the user, caches static files, shields DDoS.Cloudflare, AWS CloudFront, Fastly (routing user traffic to nearest POP).
Load Balancer / Reverse ProxyDistributes incoming traffic across backend application worker pools.AWS ALB, Envoy Proxy, Nginx, Traefik (routes traffic to healthy nodes).
Application ServerExecutes business logic, authenticates JWTs, orchestrates models.FastAPI / Uvicorn, Next.js Node runtime, Go microservice.
Inference Engine / BackendHeavy computation cluster serving tensor math and KV-cache.vLLM, TensorRT-LLM, Ollama, Triton Inference Server on Nvidia GPUs.
02

IP Addresses, Ports & Network Identity

How packets identify target hosts and specific application processes across private and public subnets.

Every device connected to a network needs a standardized addressing mechanism so routers know where to forward raw packet frames. In the TCP/IP suite, two primary values define network identity:

IP Address vs Port: The Golden Rule
IP Address
Answers: "Which network host computer?"
Routes packets across internet backbones to the target machine's Network Interface Card (NIC).
Port Number (16-bit)
Answers: "Which process/service on that host?"
Multiplexes packets into the specific OS kernel socket bound by an application (e.g. Next.js on 3000).

IPv4 vs IPv6

IPv4 (32-bit): Written as 4 decimal octets separated by dots (e.g. 192.168.1.1 or 104.21.55.20). Provides 232 (~4.29 billion) total possible addresses. Because the world has billions of smartphones, servers, and smart devices, public IPv4 addresses are exhausted.

IPv6 (128-bit): Written as 8 groups of 4 hexadecimal digits separated by colons (e.g. 2001:0db8:85a3:0000:0000:8a2e:0370:7334). Provides 2128 (~3.4 × 1038) addresses—enough to give every grain of sand on Earth millions of unique public addresses.

Public, Private, and Loopback IP Ranges

Address CategoryStandard Subnet RangesRoutable on Public Internet?Engineering Purpose
Public IPv4Globally registered (e.g. 8.8.8.8, 104.21.55.20)YESAssigned to public servers, cloud gateways, and CDN edge routers.
Private IPv4 (RFC 1918)10.0.0.0/8
172.16.0.0/12
192.168.0.0/16
NO (Dropped by ISP routers)Home Wi-Fi, office LANs, AWS VPCs, and Docker container subnets.
Loopback (Localhost)127.0.0.1 to 127.255.255.254 (and ::1 in IPv6)NO (Never leaves machine)Packets stay inside the OS kernel network stack. Used for local dev.
CRITICAL FOR BACKEND & AI ENGINEERS: When you start a local backend with uvicorn main:app --host 127.0.0.1 --port 8000, your server only binds to the loopback interface. It will never accept connections from other computers on your local Wi-Fi or from Docker containers! To accept traffic from outside the local machine, you must bind to all network interfaces using --host 0.0.0.0.

Standard Port Numbers in Developer Workflows

Port numbers range from 0 to 65,535 (16 bits). They are classified into 3 ranges:

  • Well-Known Ports (0 – 1023): Reserved for system and core protocols. Port 80 (HTTP), Port 443 (HTTPS), Port 22 (SSH), Port 53 (DNS). On Linux/macOS, binding to ports below 1024 requires root privileges.
  • Registered Developer Ports (1024 – 49151): Standard software services. Port 3000 (React / Next.js), Port 5000 (Flask), Port 8000 (FastAPI / Uvicorn), Port 5432 (PostgreSQL), Port 6379 (Redis), Port 11434 (Ollama local LLM server).
  • Dynamic / Ephemeral Ports (49152 – 65535): Assigned temporarily by the OS to your browser or client when you initiate an outbound connection.
03

DNS: How Domain Names Become IP Addresses

The phonebook of the Internet: recursive resolvers, root servers, authoritative zone records, and TTL caching.

Humans think in intuitive domain names like pathubs.com or api.openai.com. But IP routers only route packets based on numerical 32-bit or 128-bit destination headers. The Domain Name System (DNS) is a globally distributed, hierarchical database that resolves domain names into IP addresses in milliseconds.

The Step-by-Step Recursive DNS Resolution Chain
1. Browser & OS Cache Check
Browser checks in-memory DNS cache. If missed, queries OS resolver cache (and /etc/hosts). If found, returns immediately (0ms).
Tier 0 Cache
2. Recursive Resolver (ISP / Public 1.1.1.1 / 8.8.8.8)
If not cached locally, your computer asks its configured Recursive Resolver. The resolver acts as your concierge and conducts an iterative search.
Concierge
3. Root Nameserver (.)
Resolver contacts one of the 13 logical Root DNS server clusters worldwide. Root server responds: "I don't know api.pathubs.ai, but here is the .ai TLD Nameserver IP."
Root (.)
4. TLD Nameserver (.ai / .com / .org)
Resolver queries the TLD server. TLD responds: "Here is the Authoritative Nameserver IP managed by Cloudflare for pathubs.ai."
TLD Authority
5. Authoritative Nameserver (Source of Truth)
Resolver queries Authoritative server. It reads the official zone file and replies: "api.pathubs.ai is at 104.21.55.20 with TTL=300 seconds." Resolver caches it and returns it to your browser.
Final Answer

Essential DNS Record Types for Developers

Record TypeValue FormatPractical Engineering Use Case
A RecordIPv4 address (e.g. 104.21.55.20)Points a domain or subdomain directly to an IPv4 server or load balancer.
AAAA RecordIPv6 address (e.g. 2606:4700::6815:3714)Points a domain to a modern IPv6-enabled host.
CNAME (Canonical Name)Alias domain (e.g. my-cluster.aws.elb.amazonaws.com)Aliases one hostname to another. Often used for cloud load balancers or Vercel.
TXT RecordArbitrary string textUsed for domain ownership verification (Google Search Console, Resend, SPF/DKIM).
What is TTL (Time To Live)? Every DNS response includes a TTL number (in seconds). It dictates how long recursive resolvers and browsers are allowed to cache the IP address before asking the authoritative server again. If you plan to migrate an AI server to a new IP, lower your TTL to 60seconds a day before the migration so clients don't get stuck with stale cached IPs.
04

Transport Protocols: TCP, UDP & Packet Switching

Why data is broken into packets, how TCP guarantees byte streams, and why UDP powers real-time media and QUIC.

When you download a 10 GB model weight file from Hugging Face, the Internet does not transmit it as one giant continuous block of data. Instead, it is chopped up into millions of small chunks called Packets (typically ~1500 bytes, determined by the Maximum Transmission Unit or MTU). Packetization ensures that if one router drops a packet, only that 1500-byte fragment is retransmitted—not the entire 10 GB file!

TCP vs UDP: The Complete Architectural Comparison

FeatureTCP (Transmission Control Protocol, RFC 9293)UDP (User Datagram Protocol, RFC 768)
Connection ModelConnection-oriented (Requires 3-Way Handshake)Connectionless (Fire-and-forget datagrams)
ReliabilityGuaranteed delivery. Lost packets are automatically retransmitted.No delivery guarantee. Lost packets are discarded.
Data OrderingStrict in-order byte stream (Packets reassembled by sequence number).No ordering guarantee. Datagrams can arrive out of order.
Congestion & Flow ControlBuilt-in (Slow start, CUBIC/BBR algorithms, receive windows).None. Application transmits at whatever rate it chooses.
Header Overhead20 to 60 bytes per packet.Minimal: exactly 8 bytes.
Primary Use CasesWeb browsing (HTTP/1.1, HTTP/2), REST APIs, model downloads, SSH, SQL DBs.DNS lookups, live video streaming, WebRTC voice agents, and HTTP/3 (via QUIC).
DEBUNKING POPULAR MYTHS:
• "TCP is always slow"— False! Modern TCP with BBR congestion control reaches line-rate 100 Gbps in cloud data centers.
• "UDP is always faster"— False! If your application requires reliability and you attempt to implement acknowledgments and retransmissions naively over UDP in user space, it is often significantly slower and buggier than the kernel's battle-tested TCP stack.

The TCP 3-Way Handshake

Before a single byte of HTTP data can be sent over TCP, client and server must synchronize sequence numbers:

TCP 3-Way Handshake Packet Sequence
1. Client ---> [SYN] (Seq=100)                ---> Server
2. Client <--- [SYN, ACK] (Seq=300, Ack=101)  <--- Server
3. Client ---> [ACK] (Seq=101, Ack=301)       ---> Server
--> Connection ESTABLISHED in 1 Round-Trip Time (RTT)!
05

HTTP & HTTPS: Application-Layer Protocol Semantics

Request methods, headers, status codes, and why HTTPS encrypts HTTP inside a TLS wrapper.

HyperText Transfer Protocol (HTTP) is the universal lingua franca of the Web and modern REST/JSON APIs. HTTP is a stateless request-response protocol governed by the IETF (RFC 9110).

HTTP Request Structure

Every HTTP request consists of three distinct parts:

Standard Raw HTTP/1.1 Request Format
POST /v1/chat/completions HTTP/1.1      <-- 1. Request Line (Method, Path, Version)
Host: api.openai.com                    <-- 2. Request Headers (Key-Value Metadata)
User-Agent: PathubsAIClient/1.0
Authorization: Bearer sk-antigravity-...
Content-Type: application/json
Content-Length: 68
                                        <-- Empty Line separating headers & body
{                                       <-- 3. Optional Request Body (JSON payload)
  "model": "gpt-4o",
  "messages": [{"role": "user", "content": "Hello!"}]
}

Essential HTTP Status Codes for AI Systems

Code RangeCategoryCrucial Status Codes to Memorize
2xxSuccess200 OK (Standard success)
201 Created (Resource successfully created via POST)
204 No Content (Success with no payload returned, e.g. DELETE)
3xxRedirection301 Moved Permanently (Update bookmarks/links)
304 Not Modified (Client can reuse local cached copy)
4xxClient Errors (Client made a mistake)400 Bad Request (Malformed JSON or missing params)
401 Unauthorized (Missing or invalid API token)
403 Forbidden (Token is valid, but lacks permissions)
404 Not Found (Endpoint or resource ID does not exist)
429 Too Many Requests (Rate limit hit! Critical for AI APIs!)
5xxServer Errors (Server crashed or timed out)500 Internal Server Error (Unhandled exception or bug in code)
502 Bad Gateway (Reverse proxy cannot reach crashed backend)
503 Service Unavailable (Server overloaded or under maintenance)
504 Gateway Timeout (Upstream LLM/DB took too long to reply!)
HTTP vs HTTPS: HTTPS is not a separate protocol! It is simply regular HTTP wrapped inside an encrypted TLS (Transport Layer Security) session. In plain HTTP, any router or Wi-Fi eavesdropper between your laptop and the server can read your API keys, prompts, and cookies in plain text. In HTTPS, all data lines, headers, cookies, and payloads are cryptographically scrambled.
06

HTTP Evolution: HTTP/1.1 vs HTTP/2 vs HTTP/3 (QUIC)

From text-based pipelining to binary multiplexing and UDP-based QUIC transport.

HTTP semantics (methods, headers, status codes) have remained identical across all versions. However, the underlying transport framing and wire mechanics have evolved dramatically to solve performance bottlenecks on modern high-latency networks:

Protocol VersionTransport LayerFraming FormatMultiplexing MechanicsHead-of-Line (HoL) Blocking
HTTP/1.1 (1997)TCPPlain TextNo multiplexing. One request-response cycle per connection at a time. Browsers open 6 parallel TCP connections.Severe App-Level HoL Blocking (Slow response blocks next request).
HTTP/2 (2015)TCPBinary FramingFull multiplexing over a single TCP connection. Interleaves streams with HPACK header compression.TCP-Level HoL Blocking (One dropped TCP packet pauses ALL multiplexed streams!).
HTTP/3 (2022)QUIC over UDPBinary Framing (QPACK)True independent stream multiplexing. Built-in TLS 1.3 encryption by default.Zero HoL Blocking! (Loss on Stream A does not stall Stream B).
IMPORTANT NUANCE (RFC 9114): Do NOT say: "HTTP/3 is just HTTP over UDP." That is misleading! UDP alone has no connections, no encryption, and no reliability. HTTP/3 runs over QUIC, a state-of-the-art transport protocol that provides reliable streams, congestion control, connection migration (switching Wi-Fi to 5G without dropping downloads), and built-in TLS 1.3 encryption—using UDP merely as an OS packet multiplexer.
07

TLS & Transport Security: Encryption in Transit

How TLS 1.3 secures web connections in 1 RTT and where transport security stops.

When you navigate to https://api.pathubs.ai, TLS (Transport Layer Security, version 1.3 specified in RFC 8446) establishes a cryptographically secure session between your client and the server.

The 3 Pillars of TLS Protection

1. Confidentiality (Encryption)
All packets are scrambled using high-speed symmetric ciphers (AES-GCM or ChaCha20). Eavesdroppers on coffee shop Wi-Fi or ISP taps see only indecipherable random noise.
2. Data Integrity (Anti-Tampering)
Every message includes an authenticated checksum (AEAD). If a rogue router alters even a single bit of your prompt or response in transit, the client detects tampering immediately and drops the connection.
3. Server Authentication
The server presents an X.509 SSL certificate digitally signed by a trusted Certificate Authority (e.g. Let's Encrypt). This guarantees you are talking to the real pathubs.ai, not an imposter.
CRITICAL DISTINCTION FOR AI ENGINEERS:
HTTPS/TLS protects data strictly in transit across the physical wire.
It does NOT protect:
• The server database from being hacked or SQL-injected.
• Your LLM from being tricked via Prompt Injection attacks.
• An unauthorized user from calling your API if you forget to check their JWT authorization header!
08

Routers, NAT, Firewalls, Reverse Proxies & Load Balancers

The intermediate infrastructure governing packet forwarding, address translation, traffic filtering, and cloud distribution.

Device / NodeOSI LayerCore MechanismSignificance to Production AI Systems
RouterLayer 3 (Network)Inspects destination IP headers and routes packets across subnet boundaries using routing tables.Directs traffic between your corporate office VPC and AWS / Azure cloud clusters.
NAT (Network Address Translation)Layer 3 / 4Translates internal private subnet IPs (e.g. 192.168.1.50) to a single shared public IP.Allows 1,000 developer laptops in an office to share one public IP when pulling Hugging Face models.
Firewall / Security GroupLayers 3 to 7Stateful packet filter that permits or denies traffic based on IP, port, and connection state rules.Prevents the public Internet from accessing internal vector DBs on port 6333 or Postgres on port 5432.
Reverse ProxyLayer 7 (Application)Accepts public HTTPS traffic on port 443, terminates TLS, and forwards requests internally to apps.Nginx or Envoy sitting in front of a Python FastAPI app to compress responses and manage SSL certs.
Load BalancerLayer 4 / 7Distributes incoming API traffic across a pool of redundant backend server instances.Distributes heavy LLM generation requests across 16 GPU inference nodes (Round Robin / Least Connections).
Interactive Lab 1 • Network Journey Simulator
Educational Simulation Model

From URL to Response: Real-Time Network Packet Journey

Trace how a request travels through all 10 network layers from your client browser to DNS, TCP, TLS, Edge Proxies, and GPU backend workers. Inject failures to observe diagnostics.

Choose Scenario:
Inject Failure Mode:
STEP 1
Parse URL & Scheme
STEP 2
Recursive DNS Lookup
STEP 3
IP & Port Selection
STEP 4
Router & NAT Traversal
STEP 5
TCP 3-Way Handshake
STEP 6
TLS 1.3 Handshake
STEP 7
HTTP Request Transmission
STEP 8
Edge Proxy & Ingress
STEP 9
Backend AI Engine Processing
STEP 10
Response Streaming & Render
Application / Browser

1. Parse URL & Scheme

Parsing "https://api.pathubs.example/v1/chat/completions". Protocol identified as HTTPS (Port 443). Host: "api.pathubs.example". Path: "/v1/chat/completions".

PACKET / HEADER TELEMETRY
SCHEME: https
DEFAULT_PORT: 443
HOSTNAME: api.pathubs.example
PATH: /v1/chat/completions
FAILURE IMPACT & DIAGNOSIS
Malformed URLs or illegal protocol schemes cause client-side abort before any network packet is created.
Interactive Lab 2 • DNS Resolution Explorer & Fault Simulator
Simulated Recursive Hierarchy

DNS Resolution Explorer & Troubleshooting Playground

Explore how domain names traverse the Root, TLD, and Authoritative servers. Experiment with caching, TTL countdowns, and deliberate DNS misconfigurations.

Inject DNS Fault:
Interactive Lab 3 • HTTP Request Builder & Header Inspector
Controlled Sandbox Sandbox

HTTP Request Builder & Header Inspector

Construct live HTTP requests, test API header semantics, experiment with JSON payloads, and inspect status codes returned by a controlled sandbox backend.

Simulate Backend Condition:
REQUEST HEADERS
REQUEST BODY (JSON Payload for POST/PUT)
Interactive Lab 4 • Transport Layer Playground (TCP vs UDP)
Controlled Packet Simulation

Transport Layer Playground: TCP Retransmission vs UDP Datagrams

Observe how TCP detects dropped packets, halts processing, and retransmits missing segments—compared to UDP's low-overhead fire-and-forget datagram streaming.

Packets to Send: 6
Simulated Packet Loss: 25%
One-Way Network Latency: 50ms
13

The AI Engineering Connection: Networking in Production AI

Deconstructing LLM API latency, multi-hop RAG network hops, and agent tool failure modes.

Modern AI systems are distributed networked systems. When an AI engineer writes a script that interacts with models, embeddings, and vector databases, every single step is fundamentally a series of network socket round-trips.

1. Deconstructing LLM API Latency

When a user waits for an LLM response, the perceived delay is not just model inference time. It is a compound sum of network layers:

Total LLM Request Latency Breakdown
DNS Lookup: 15ms – 60ms (Skipped if cached)
Network Layer
TCP / QUIC Handshake: 25ms – 80ms (1 RTT across continents)
Transport Layer
TLS 1.3 Negotiation: 25ms – 80ms (1 RTT cryptographic key agreement)
Security Layer
Time To First Token (TTFT): 200ms – 1500ms (GPU prefill and prompt evaluation)
Inference Engine
Token Streaming Generation: 20 – 80 tokens/sec streamed via HTTP/2 or SSE frames
Streaming Chunks
AI Production Optimization: By enabling HTTP Keep-Alive (Connection Pooling) in your Python or Node.js API client (e.g. using httpx.Client or requests.Session instead of bare requests.post), you reuse the established TCP and TLS socket! This immediately eliminates the DNS, TCP, and TLS handshakes on all subsequent calls, shaving 100ms to 250ms off every single prompt!

2. Cascading Latency in RAG (Retrieval-Augmented Generation)

Consider a standard production RAG pipeline answering a user query:

  1. Hop 1: User Browser → Web Application Backend (over public Internet HTTPS, ~40ms)
  2. Hop 2: Web Backend → Embedding API (e.g. text-embedding-3-small, ~70ms)
  3. Hop 3: Web Backend → Cloud Vector Database (Qdrant / Pinecone / pgvector, ~35ms)
  4. Hop 4: Web Backend → LLM Inference API (OpenAI / Anthropic / Groq, ~600ms)
  5. Hop 5: Web Backend → User Browser (Streaming SSE token chunks back, ~40ms)

If your web server, embedding service, and vector DB are located in different cloud regions (e.g. backend in Virginia us-east-1, vector DB in Frankfurt eu-central-1), physical speed-of-light propagation latency alone will add 300ms+ of dead wait time to every question!

3. AI Agent Tool Execution & Network Fault Tolerance

Autonomous AI agents (such as AutoGen, LangGraph, or CrewAI) execute sequential tool calls: web scraping, SQL queries, calculator tools, and CRM integrations. If Tool #3 hits a 429 Rate Limit or a transient 504 Gateway Timeout, an unhandled network error will crash the entire multi-step reasoning agent.

Production AI agents must implement:

  • Exponential Backoff with Jitter: When receiving HTTP 429, wait 2^attempt + random_jitter seconds before retrying to prevent the "thundering herd" problem.
  • Strict Request Timeouts: Never allow an HTTP request to hang indefinitely; configure strict socket timeouts (e.g. 10s for tools, 60s for LLM inference).
  • Circuit Breakers: If an external API returns 500/502 errors 5 times consecutively, trip the circuit and route fallback prompts immediately without hammering the dead server.
Production Incident Scenario • Systematic Network Diagnostics

Production Debugging Challenge: The "Works Locally, Fails in Production" Outage

Scenario: A junior AI engineer built a Next.js web application and a Python FastAPI backend that serves an Ollama LLM. On their MacBook, everything runs flawlessly on http://localhost:3000 talking to http://localhost:8000.

They deploy the FastAPI backend to an Ubuntu cloud server (AWS EC2 / DigitalOcean) at IP 54.210.12.8 and set up a DNS A record api.ai-company.com → 54.210.12.8.

However, when the production Vercel frontend attempts to call https://api.ai-company.com:8000/v1/chat, the browser console explodes with:
net::ERR_CONNECTION_REFUSED to https://api.ai-company.com:8000/v1/chat

Uvicorn Start Command
uvicorn main:app --host 127.0.0.1 --port 8000
Cloud Firewall Rules
Port 80 (Open), Port 443 (Open), Port 22 (Open)
Domain DNS Record
api.ai-company.com → 54.210.12.8 (A Record)
Client Call Scheme
HTTPS to Port 8000
As the Lead AI Systems Engineer, what are the primary root causes of this network failure?
15

Golden Rules & Mental Models Cheat Sheet

Core principles every software and AI engineer should internalize.

1. The Layer Isolation Rule

Never guess when debugging! Is it Layer 3 (IP/DNS)? Then the hostname won't resolve. Is it Layer 4 (TCP)? Then the connection is refused or timed out. Is it Layer 7 (HTTP)? Then the server replied with 4xx or 5xx. Isolate the layer first.

2. The 127.0.0.1 vs 0.0.0.0 Rule

127.0.0.1 means: "Listen only on the loopback card of this physical computer." 0.0.0.0 means: "Listen on all network interface cards, including Wi-Fi, Ethernet, and Docker virtual bridges."

3. The HTTP Status Responsibility Rule

4xx = Client Problem (You sent bad JSON, missed auth token, or hit a 429 rate limit). 5xx = Server Problem (The server crashed, timed out on model inference, or the reverse proxy died).

4. The Connection Reuse Rule

Establishing a new TCP socket and TLS 1.3 session takes 2 round-trips (~100ms across oceans). In AI backends calling LLMs or vector stores, always reuse persistent HTTP connections via connection pools.

What You Should Know Now (Competency Checklist)

Check off each competency as you master it. Aim for 8 out of 8 before progressing to Version Control with Git & GitHub:

Distinguish between the physical routed Internet (Layer 3/4) and the World Wide Web (Layer 7 application system).
Explain the difference between IPv4 (32-bit), IPv6 (128-bit), Public routable IPs, Private RFC 1918 subnets, and Loopback (127.0.0.1).
Understand why a Port Number is required alongside an IP address to route traffic to specific application processes (e.g. 3000 vs 8000).
Trace iterative DNS resolution from browser cache to Recursive Resolver, Root (.), TLD, and Authoritative Nameserver.
Compare TCP (reliable, ordered, connection-oriented) with UDP (connectionless, lightweight, low-overhead datagrams).
Explain the architectural evolution from HTTP/1.1 (HoL blocking) to HTTP/2 (multiplexing) and HTTP/3 (QUIC over UDP).
Describe the 3 security pillars of TLS 1.3 (Confidentiality, Integrity, Authenticity) and recognize its security boundaries.
Diagnose real-world AI networking issues: host binding (127.0.0.1 vs 0.0.0.0), reverse proxies, rate limiting (429), and RAG latency.
Competencies Mastered: 0 of 8
Comprehensive Knowledge AssessmentQuestion 1 of 8

What is the precise architectural distinction between 'the Internet' and 'the World Wide Web'?

Current Score: 0