Packet Flow Documentation

Network engineer view of traffic through the platform.

HTTP Packet Flow

Client ephemeral port
  -> destination 5.39.37.7:80
  -> VPS network interface
  -> Linux TCP/IP stack
  -> Nginx worker process
  -> local upstream 127.0.0.1:8080
  -> Docker port mapping
  -> container network namespace
  -> Flask dashboard application

HTTPS Packet Flow

Client starts TLS handshake
  -> Nginx presents certificate
  -> Browser verifies or warns
  -> Encrypted HTTP request is sent
  -> Nginx decrypts request
  -> Nginx proxies plain HTTP internally
  -> backend response returns through same path

Docker Network Flow

Container process
  -> container network namespace
  -> veth pair
  -> Docker bridge
  -> host namespace
  -> Nginx/public network

Future Kubernetes Flow

Ingress Controller
  -> Ingress rule by hostname
  -> Service virtual IP
  -> kube-proxy rules
  -> selected Pod IP
  -> container port