Nodes spreading a piece of news by telling random neighbors each round.

Gossip protocols converge eventually

Peers keep exchanging and forwarding state with random partners. The system ends up consistent and tolerates messages being dropped along the way. Everyone tells someone Each round a node picks a random peer and exchanges state, so a single fact spreads by repetition rather than by a single authoritative hop. Because the partner changes each round, information fans out geometrically: each round roughly doubles the nodes that know, which is why a new membership entry can reach a large cluster in a handful of rounds. The exchange is usually symmetrical, both sides learning from each other in one message pair, which keeps the network cheap and symmetric. It trades the guarantee of a single message delivered in order for a high, self-healing probability that the state eventually arrives. ...

September 20, 2027 · 5 min · XB Field Notes
A client can enter ESTABLISHED while a filtered acknowledgment leaves the server in SYN-RECV.

The TCP handshake establishes sequence spaces, not synchronized clocks

The TCP three-way handshake establishes the two directions of a byte stream. Each endpoint supplies an initial sequence number and acknowledges the other endpoint’s number. Those are independent sequence spaces, not a shared wall clock. Applications do not need synchronized machine clocks to connect. Later sequence numbers identify bytes and support ordering, duplicate handling, acknowledgments, and retransmission within that connection. ...

September 10, 2027 · 6 min · XB Field Notes
Observe, decide, and act panels for validating a well-known endpoint.

Well-known endpoints provide a discovery convention

A well-known URI gives software a conventional place to discover information associated with an origin. The reserved /.well-known/ prefix reduces collisions between independently designed protocols, and registered suffixes identify their defining specifications. The prefix is a naming mechanism, not an implementation or a guarantee of trustworthy content. A server must still route the selected endpoint correctly, and a client must interpret the response according to that endpoint’s own contract. ...

June 22, 2027 · 5 min · XB Field Notes
The TC flag marks an incomplete answer; the corresponding TCP exchange retrieves the complete records.

DNS needs a working TCP path when a UDP answer is truncated

DNS supports both UDP and TCP. A server sets the TC flag when a response is truncated for the available message space. A client receiving that flag must handle the incomplete result, commonly by retrying over TCP. This is about the DNS response limit in use, not proof that the physical network cannot carry any larger UDP datagram. ...

November 19, 2026 · 6 min · XB Field Notes
Blocking IPv6 neighbor advertisements leaves the destination unresolved even when its TCP service is listening.

IPv6 resolves neighbors with ICMPv6 before the TCP connection can work

An IPv6 host on an Ethernet link needs a link-layer destination before it can send a frame to a neighbor. Neighbor Discovery performs that address-resolution work using ICMPv6 Neighbor Solicitation and Neighbor Advertisement messages. It also covers functions beyond IPv4 ARP, including router discovery and neighbor reachability detection. Calling it merely “ARP with longer addresses” hides dependencies that matter when configuring an IPv6 network. ...

November 16, 2026 · 6 min · XB Field Notes
Datagram boundaries survive delivery, but missing, repeated or reordered messages need application-defined handling.

UDP preserves datagrams; recovery and timing belong to the application

UDP carries discrete datagrams between transport endpoints. Its eight-byte header contains source port, destination port, length, and checksum fields. The protocol does not add TCP’s reliable ordered byte stream or its congestion-control behavior. This gives applications room to choose their own delivery policy, but it does not promise lower latency for every workload. A missing datagram can be more costly than a handshake when the application needs its contents. ...

November 11, 2026 · 5 min · XB Field Notes
An OPT record permits larger UDP answers, while server limits and network delivery still constrain the exchange.

EDNS advertises UDP capacity without guaranteeing path delivery

EDNS extends DNS through an OPT pseudo-record. Among other information, a request can advertise the UDP payload size its sender is prepared to receive. This allows answers beyond the traditional 512-byte DNS limit. It is an advertisement within a DNS exchange, not a network path-MTU discovery protocol or a promise that every intervening device will deliver a datagram of that size. ...

October 28, 2026 · 6 min · XB Field Notes
Observe-decide-act boxes beside the message: Multiplex streams, TCP still orders.

HTTP/2 fixes head-of-line blocking at the connection

Here, removing head-of-line blocking means removing HTTP response-order constraints on a shared connection. HTTP/2 does not remove TCP head-of-line blocking. A later response can finish while an earlier handler waits, but shared transport capacity, connection-level flow control, and application bottlenecks can still couple the streams. ...

September 15, 2026 · 6 min · XB Field Notes