Master Linux networking from the ground up. This book is a practical, systems-first guide that equips you with the tools and expertise to design, build, and operate Linux-first network infrastructure with confidence. You will learn both the underlying principles and the hands-on implementations that make robust, scalable networks possible.
The book begins by establishing strong mental models: the OSI and TCP/IP stacks; IPv4/IPv6 addressing, subnetting, and CIDR; and the core protocols that underpin them (TCP, UDP, ICMP, and ARP). It then maps these concepts to Linux primitives—kernel networking, netdevices, network namespaces, netfilter, and conntrack—before moving into host-level implementations and foundational network services.  Troubleshooting and observability are treated as first-class skills, with a practical toolkit centered on tcpdump, tshark, ip, ss, mtr, netcat (nc), and nmap.
Security and routing form the heart of the book’s advanced material. The chapters cover host firewalls in depth, starting with iptables and progressing to modern, production-grade nftables. You will learn advanced routing techniques - policy-based routing (PBR) and Virtual Routing and Forwarding (VRF) - that turn a Linux host into a production-ready router.
The book then turns to dynamic routing, showing how Linux runs OSPF and BGP and participates in Internet-scale routing through the open-source FRR suite. Operational concerns in large networks are addressed with protocols and patterns such as BFD, ECMP, and VRRP. Finally, you will learn to secure connectivity, from VPN fundamentals to end-to-end guides for IPsec (strongSwan/Libreswan), OpenVPN, and WireGuard.
By the end, you will have a deep understanding of Linux networking internals and the practical skills to architect, harden, and operate complex networks across enterprise networks, data centers, and edge environments.

What You Will Learn

• Map core networking protocols (TCP/IP, OSI) directly to Linux kernel primitives, netdevices, and network namespaces
• Build a practical troubleshooting toolkit to diagnose tricky real-world behavior, connection tracking, and asymmetric routing
• Convert standard Linux hosts into enterprise-grade routers using the kernel’s routing subsystem, policy-based routing (PBR), and VRFs
• Operate Internet-scale networks by running OSPF and BGP via the open-source FRR suite
• Harden hosts with modern nftables firewalls and connect distributed sites using IPsec, OpenVPN, and WireGuard