The HTTPS Request Lifecycle — A Real-Life Guide (v1)

Contents

35 chapters, one page each. Prefer one long page? Read the whole book on one page.

1. What you will be able to do at the end1 min
2. How to use this guide1 min
3. Contents2 min
4. Part 0 — Start here
5. 0.1 Who this is for1 min
6. 0.2 The learning flow1 min
7. 0.3 The complete flow at a glance2 min
8. 0.4 How not to get stuck1 min
9. 0.5 The series: OS → networking → security → HTTPS2 min
10. 0.6 The Go labs: build the lifecycle yourself1 min
11. Part 1 — Addresses, packets, and names
12. Chapter 1 — How the Internet Works7 min
13. Chapter 2 — DNS: Finding the Address7 min
14. Part 2 — Getting there reliably and privately
15. Chapter 3 — TCP: Reliable Delivery7 min
16. Chapter 4 — TLS & HTTPS: The Encrypted Tunnel10 min
17. Part 3 — The conversation and the map
18. Chapter 5 — HTTP: The Conversation10 min
19. Chapter 6 — OSI Layers: The Network Stack9 min
20. Part 4 — Global traffic routing
21. Chapter 7 — NAT, VIP, BGP, Anycast & VRRP: Global Traffic Routing8 min
22. Part 5 — The infrastructure in between
23. Chapter 8 — Proxies: The Middlemen7 min
24. Chapter 9 — Load Balancers & Rate Limiting8 min
25. Chapter 10 — CDN: Content Near You6 min
26. Part 6 — From bytes to pixels
27. Chapter 11 — Browser Rendering: From Bytes to Pixels9 min
28. Part 7 — Keeping it safe and observable
29. Chapter 12 — Security: Protecting the Entire Lifecycle10 min
30. Chapter 13 — Traffic Direction: SLI & SLO6 min
31. Part 8 — Expert operations: running HTTPS in production
32. Chapter 14 — HTTP version negotiation: HTTP/1.1, HTTP/2, HTTP/3, Alt-Svc, and fallbacks7 min
33. Chapter 15 — Cache correctness: browser, CDN, proxy, and application caches10 min
34. Chapter 16 — Certificate and domain operations: ACME, rotation, CT monitoring, and emergency revocation9 min
35. Chapter 17 — Debugging the lifecycle: browser DevTools, curl, OpenSSL, packet capture, and logs7 min
36. Chapter 18 — Capstone: diagnose a slow, broken, or unsafe HTTPS request end to end3 min
37. Part 9 — Build the lifecycle in Go
38. Chapter 19 — A production HTTPS server in Go: TLS, timeouts, headers, and shutdown9 min
39. Chapter 20 — Reverse proxies in Go: the client's identity, framing, and request smuggling8 min
40. Chapter 21 — Resilience between services: rate limits, retries, idempotency, and circuit breakers9 min
41. Chapter 22 — Outbound requests: SSRF and safe HTTP clients6 min
42. Chapter 23 — SLIs, SLOs, and error budgets for HTTPS services8 min
43. Chapter 24 — Streaming over HTTP: Server-Sent Events, WebSockets, and long-lived connections6 min
44. Part 10 — The whole series in one request
45. Chapter 25 — One HTTPS request, every layer, every guide10 min
46. You've completed the series1 min
47. Appendix A — Glossary (plain language)
48. Appendix B — Further reading
49. Appendix C — Answers to "Check yourself" (Chapters 14–25)