networking-controls

Default-deny network policies block all traffic by default and explicitly allow only required connections. This Skill translates security guidelines into concrete policies for microservices, specifying which services communicate, required protocols like TLS, and segmentation boundaries to minimize attack surface across cloud and on-premises deployments.

Retry policies with exponential backoff and jitter prevent cascading failures by spacing retry attempts. This Skill provides guidance on implementing timeouts, circuit breakers, and backoff configurations to handle transient failures gracefully while protecting backend services from overload.

TLS secures data in transit between services; security headers enforce policies at the application layer. This Skill offers concrete configurations for enforcing TLS versions, certificate validation, and security headers to meet both functional and compliance requirements.

Health checks detect failed services; load balancers distribute traffic across healthy instances. This Skill provides configurations for health-check frequency, proxy setup, and load-balancing strategies to maintain availability and controlled outbound access.

Network monitoring tracks connectivity, latency, and policy violations to detect anomalies. This Skill includes comprehensive observability guidance for logging network events, measuring performance, and validating security posture across deployments.

Yes. This Skill applies network security principles to both cloud and on-premises deployments, translating segmentation, default-deny policies, and controlled access into actionable recommendations regardless of infrastructure type.