Books

BGP security is more than a set of filters and policies. This book takes a practical, systems-level look at securing routing infrastructure, from RPKI and route filtering to monitoring, automation and incident response, with real configurations, code examples and lessons from incidents that have shaped how the Internet is secured.

Go beyond the basics of Tor and learn how to build private, resilient services on the dark web. From onion routing and v3 onion services to real-world threats and secure deployment, this book gives you the technical knowledge and practical skills to host privacy-critical services without exposing where they live.

Build Linux from the ground up and see what really happens under the hood. From firmware and bootloader to kernel, libc, init, networking and security, this book strips the system down to its essentials while explaining why every piece exists, what depends on it and how far you can push minimalism.

"Ever wondered how example.com becomes 192.0.2.1? Dive into DNS Demystified—your quick, no-nonsense guide to the internet’s invisible phonebook!"

324 pages on the whole of the SSCA 300-740 v2.0 blueprint — zero trust, identity, policy, Cisco Secure Access and security operations — taught from first principles, with 260 practice questions and 48 diagrams.

Build real-time data systems that can keep up with the demands of production. Streaming at Scale takes you under the hood of Apache Flink, covering state, event time, exactly-once processing, performance, Kubernetes and more. With runnable examples and practical lessons, it shows how to build systems that are fast, reliable and ready to scale.

Security is no longer something you add after a system is built. It must be designed from the beginning.Security by Design explores how modern digital systems can be built to reduce risk, limit unauthorized access, protect sensitive data, detect threats, contain failures, and recover from attacks.From secure architecture and cybersecurity foundations to privacy, cloud security, DevSecOps, AI security, and digital resilience, this book provides a practical foundation for building systems that remain secure in an increasingly connected and AI-powered world.

A practical look at how the modern Internet edge really works. Explore DNS, BGP, TLS, HTTP/3 and the architecture behind content delivery, then apply that knowledge to building, securing and optimizing Cloudflare in production. No marketing fluff, just the engineering behind the edge.

Take your IPv6 skills beyond the basics. Advanced IPv6 Engineering covers real-world network design, routing, security, automation and operations at scale, with practical examples for Linux, enterprise networks, cloud, containers and Kubernetes. Built for engineers who need to deploy, secure and manage IPv6 with confidence.

A brilliant engineer with no evidence is reduced to guessing, while an ordinary engineer with good evidence looks like a genius. Everything in this book is an attempt to get you to think differently. You don't need a huge team to do this. You don't need to get anyone's approval for a budget, and you don't have to rewrite any services. What you need is a system that tells you the truth about itself, and you need it before the incident rather than during it.As a team, we'll build that system together on one small storefront, and we'll do it the way real teams build, which is to say not perfectly but in order.

When a 2,048-GPU training cluster running a 400-billion-parameter model sees its iteration time double without triggering a single alert, firing a CPU panic, or dropping a single packet, you don't have a machine health problem : you have a coordination failure. Beyond Uptime is the definitive field guide for Site Reliability Engineers, platform leads, and cloud architects tasked with keeping frontier AI compute running at peak efficiency. Moving beyond deceptive "GPU Utilization" charts, this book uncovers the hidden mechanics of barrier synchronization, lossless network congestion cascades (PFC/ECN), silent PCIe downtraining, and Silent Data Corruption (SDC). Packed with eBPF tracing methods, streaming gNMI telemetry rules, statistical tail analytics (MAD/CUSUM), and dynamic circuit-breaker strategies, Beyond Uptime gives you the battle-tested framework needed to isolate stragglers in minutes rather than days. Stop paying the silent tax on your AI infrastructure!

Whenever I've worked on a service, there's always been a morning when it stops being a demo. Then traffic arrives from somewhere nobody planned for, a nightly job overruns into the working day, and a number somebody chose months ago turns out to be wrong. That morning was a different story, though. The thing that separates a survival program from one that doesn't is a set of habits, and those habits can be learned. So, this second edition is organised around them rather than around syntax.

In this book, we plan before we act, we preview before we commit, we gate on evidence rather than on hope, and we write the recovery before we take the risk. By the time you get to the last chapter, you'll be familiar with the switches over NETCONF, server provisioning, building overlays, traffic inspection, cloud network provisioning, Kubernetes resource application, RDMA fabric validation, inference traffic routing, and reporting your findings through an interface that an assistant can query.

Take control of your storage with FreeCORE: The Complete Guide. From your first installation to advanced ZFS management, network shares, security, backups and performance tuning, this practical guide shows you how to build, manage and troubleshoot a reliable NAS with confidence, whether you are running a home lab or a production environment.

Eight domains, 63 sub-sections, 260 questions with full explanations, and ten investigations drawn from real branch and campus networks. This guide covers every topic on the WLSI 300-120 v1.2 blueprint, built throughout on the Catalyst 9800 running IOS XE, with complete configurations you can read as you would type them and verification commands beside every one. Written for engineers who want the material to still be useful the week after the exam.