DNS*  (RFC1035, 1987)
 .          [a-m] root-server
  net        [a-m] gtld-server
   spdf       ns1.he.net. / ns0.1984.is.
    A @
     Name:     spdf.net.
     Address:  49.12.255.141
     AAAA:     2a01:4f8:1c1e:89::1
    A www
     NXDOMAIN
 CAA   (RFC8659, 2019)
 DNSSEC
 DoT*  (RFC7858, 2016)
  DoH  (RFC8484, 2018)
   [Oblivious]  (RFC9230, 2022)


UDP  (RFC768, 1980)
 DHCP  (RFC2131, 1997)
 DNS
 LLMNR
 mDNS
 NTP*
 [QUIC]*
 RIP
 SNMP
 VxLAN
TCP  (RFC793, 1981)
                     DROP   80
                     LISTEN 443
                     LISTEN 12345
 SYN / SYN-SENT
                     SYN-ACK / SYN-RCVD
 ACK / ESTABLISHED
                     ESTABLISHED
 TCB
 ordered data transfer
 reliability
  sequence number
  checksums
  packet reordering
  packet loss
   time-based retransmission
   timestamps
   SACK
 flow control
  sliding window scaling
 congestion control
  [AQM]     (RFC2309, 1998)
  BBR*      (WiP draft)
  CUBIC     (RFC8312, 2018)
  ECN       (RFC3168, 2001)
   L4S      (RFC9330, 2023)
  FQ-CoDel  (RFC8290, 2018)
  PRR       (RFC6937, 2013)
  [RED]
[MPTCP]?  (RFC8684, 2020)


IPv4  (RFC791, 1981 + RFC894, 1984)
 protocol  (RFC5237, 2008 / RFC2780, 2000)
  [0x01 ICMP]    (RFC 792, 1981)
  0x04 IP-in-IP  (RFC2003, 1996)
  0x06 TCP
  0x08 EGP       (RFC 904, 1984)
  0x11 UDP
  0x29 IPv6*
  0x2F GRE       (RFC2784, 2000 / RFC1701, 1994)
  0x32 AH        (RFC4302, 2005 / RFC2402, 1998)
  0x33 ESP       (RFC4303, 2005 / RFC2406, 1998)
  0x70 VRRP      (RFC5798, 2010 / RFC3768, 2004)
 gateway
  ISP / Network carrier
   IANA  (RFC3232, 2002 / RFC1700, 1994)
    RIPE NCC 046/8
     inetnum:  46.226.46.224 - 46.226.46.232
     netname:  SPDF
     origin:   AS15699
     route:    46.226.46.0/24
[IPv6]*  (RFC2473, 1998)
 :)
IxP
 ASN adjacency  (RFC1930, 1996)
  AS0174 Cogent
  AS2914 NTT
  AS6939 HE
  AS8220 Colt
 Peering
  CATNIX  / Equinix BA1
  ESpanix / Interxion MAD
  DE-CIX Madrid
 Routing
  EGP
  BGP-4  (RFC4271, 2006 / RFC1105, 1989)
 Locations
  Sertram
  Adam Barcelona


IEEE 802
 MAC            EUI-48
 STP            802.1d
 LLC            802.2
 Ethernet (II)  802.3
  100 BASE-TX    802.3u
  1000BASE-T     802.3ab
  10G BASE-T     802.3an
  25G BASE-CR    802.3by
  40G BASE-CR4   802.3ba
  100GBASE-CR10  802.3bj
  EtherTypes
   0x0800 IPv4
   0x0806 ARP           (RFC826, 1982 + RFC903, 1984)
   0x8100 VLAN          (802.1q)
   0x86DD IPv6*
   0x8808 Flow control  (many)
   0x8870 Jumbo frames*
   0x88A8 Aggregation   (802.3ad, MLAG 802.1ax)
   0x88CC LLDP          (802.1ab)


fw
 bios
  [pxe nbp chain]
  mbr
   multi-stage boot loader
   LILO
 [coreboot]
 OpenBMC
 OVMF
 SeaBIOS
 TianoCore
 uefi
  SEC
  PEI
  DXE
  BDS
   CSM[E]
   [http boot]
   TSL
   esp
    shim / preloader
     [SBAT]
   grub2
    modules
    blscfg
 kernel
  initramfs / initrd
   microcode
 init
  SysV
   runlevel
  Upstart
  SystemD
   target


microprocessors
 OoO ILP SMT
 NUMA SMP / MMU-IMC
 Intel x86-64 ISA
  AES SSE4 SIMD, I/OAT & DDIO, VT-x / VT-d PI
  Broadwell-EP uArch
   QPI / dual-ring / 4ch
  Skylake-SP
   [AVX-512] / SGX / UPI / mesh / 6ch
  Ice Lake SP
   monolithic 40c / 8ch / 64L PCIe4 / TME
  Sapphire Rapids [Max]
   IoD / SdS
   4x 15c tile <-> EMIB
    [1:1 8H-HBM2e [DDR-less]]
   DDR5 / 80x PCIe5 / [CXL1.1]*
   [AMX] / DLB / DSA / [IAA] / [QAT]
  Emerald Rapids
   2x 32c tile / [CXL1.1] / [TDX]
  Sierra Forest
   1x ZCC / 2x IOC / 8ch DDR5 / 96L PCIe5, [64L CXL2]
  Granite Rapids
   [1P] / 3x Pc UCC / 2x IOC / 12ch DDR5 / [136L PCIe5]
  [Granite Rapids-D]
   1P / 1x HCC / 4ch DDR5 / ?L PCIe5 / 2x100GbE | 8x25GbE
 AMD amd64
  SME SEV AMD-v AMD-Vi
  Naples
  Rome
   9x die MCM SoC, single domain unified topology
   IFv2 <-> 8x CCD (2x quad core CCX)
   Quad I/O die: octa-channel PHY, 128L PCIe4
  Milan[-X]
   Unified 8c CCX / [AVX-512] (compatible) / SEV-ES + SNP / CET
   [V-Cache]
  Genoa
   12x CCX / 12ch DDR5 / 2x 32Gbps SerDes: IFv3-PCIe5-[CXL1.1]*
  Bergamo
   8x Zen4c CCD (2x octa-core CCX)
  Siena (SP6)
   1P / 4x Z4c / 6ch DDR5 / 96L PCIe5, [48L CXL]
  [Turin]
   16x Z5 / [AVX-512] (native) / [CXL2]
   12x Z5c


SDRAM
 burst length
 channel(s)
 clock
 [side-band ECC]*
 timings
  refresh
 width
 layout
  rank(s)
  die stack(s)
  banks
   row
    column / page
     word
 types
  DDR
   load-reduced / buffered
   [MCR]
   MR
    TFF
   registered
    [TSV 3DS]
  GDDR
  HBM
  LPDDR


[NVDIMM]
 [N]
 [P]


SSD
 controller
  caching
   front-layer  (pSLC)
   folding       (TLC)
  channels / banks
  ECC
  FDP
  form factor
  FTL-LBA-PBA
  GC
  HMB
  interface
  [OCP 2.0]
  OP
  protocol
  trim
  wear-leveling
 endurance
  DWPD TBW P/E
 V-NAND TSOP multi-die packages
  deck(s) / stacks / layers
   logic + data
    CuA / CoP / PuC / CBA
   planes
    2 / 4
  blocks  (erase)
   16 / 24 / 48 / 96 MiB
  pages   (write)
    4 /  8 / 16 / 64 KiB
   +checksum
  strings
  cells
   [SLC]  MLC [sic]  TLC  QLC  PLC


HDD
 actuator(s)
  [TSA]
 BLDC / rotational speed
 geometry
  heads
  platters
   recording
    PMR / TDMR
    [H-]SMR  (zoned)
     device / drive
     host
    EAMR (ePMR) / *-MAMR / HAMR
   sectors
    512e / 4kn
   tracks / cylinders
    TPI / BPI
 helium seal
 interface
 LBA
 [OptiNAND]
 protocol


Software-defined storage
 availability domains
 erasure coding
 load balancing
 [locality]*
  hyperconvergence
 read caching
 scrubbing
 thin replication
 tiering
 write journaling
 [distributed block store]
  [Ceph RBD]
  drbd9 3-way
  GlusterFS
  LINSTOR
  MooseFS
  SeaweedFS
  Sheepdog
 [distributed ~POSIX fs]*
  3FS*
  [CephFS]*
  CloudStore
   Quantcast
  CubeFS
  elmerfs
  Frangipani
  HDFS
  [JuiceFS]
  Lustre
  MooseFS
   LizardFS
  PFS
  SeaweedFS
  TiFS
 object  (~kv)
  Manta
  RADOS
  [S3 REST compatible]
   [Ceph RadosGW]*
   CubeFS
   LeoFS
   [MinIO]
   [NooBaa]
   OpenIO-SDS
   Riak CS
   SeaweedFS
  Swift
  YIG


IaaS
 private
  AHV
  CloudStack
  [OpenStack]
   Virtuozzo
  vSphere
 public
  CPI  (K8s)
  hybrid


Host OS
 bare-metal VMM / hypervisor
  KVM
   kernel module
    SeaBIOS
    ballooning
    device drivers
    emulated hw
    hotplug
    ioctl
    migration
    vfio
    vhost
   sVirt
   userspace
    Cloud Hypervisor
     crosvm
     kata
     rust-vmm
    libvirt
    [libkrun]
    qemu
    virtual machine
     guest OS image
      virtio
  XCP-ng


IaC / IaD / IaT / [S]CM
 Ansible
 [Bottlerocket]
 CFEngine
 Chef
 cloud-init
  cloud-config / user-data
 Cobbler
 CoreOS
  Butane
   Ignition
  Cincinnati / Zincati
   fleetlock
  rpm-ostree
 [Crossplane]
 Crowbar
 [Dagger]
 [Flatcar]?
  ct
  FLUO
  Nebraska
  Torcx
 Flintlock
 footloose
 Foreman
 Habitat
 Harvester
 Helm
  Tiller
 [Incus]?
 Ironic
  metal3
  Sushy
 Juju
 k3OS
 kured*
 kustomize
 [LinuxKit]
 [MAAS]
 ManageIQ
 matchbox
 MicroOS
 [Mgmt]
 [nanocl]
 [netboot]*
  [pixiecore]
 [netboot.xyz]
 [NetBox]
 ONIE
 OpenQRM
 [Orb]
 [Packer]
 Pulumi
 Qovery
 RackHD
 Razor
  Puppet
 Rex
 [Salt]*
 Spacewalk
  Uyuni
 Talos*
  CAPI
  osctl
  Sidero
 tanka*
 [Terraform] / OpenTofu
  cdk*
  providers
   [Active Directory]
   assert
   cloudinit
   consul
   [Dell Redfish]*
   external
   GitLab
   helm
   [HPE GreenLake / OneView]*
   http
   ignition
   Kubernetes*  (control plane and KubeVirt only)
   libvirt
   local
   MAAS
   matchbox / ct
   OpenBao
   netbox
   null
   random
   shell
   template     (built-in)
   time
   tls
   [vSphere]
   Zitadel
 Tinkerbell
 [Warewulf]
 xCAT
  confluent


Linux
 bkl
 blk
  bcache
  dm
   cache
   crypt
    LUKS2 / XTS
   integrity
   lvm2
    lockd
    raid*  (md)
   mpio
   raid
   [sflc]
   stripe
   [thin]
   verity
   [vdo]
   [writeboost]*
   zoned
  md
  mq
  prio
 [bpf]
  [eBPF]
 cmdline
  apparmor
  init_on_alloc
  init_on_free
  iommu
  [ipv6.disable]
  lockdown
  [mce]
  mds
  [net.ifnames]
  [nordrand]
  nosmt
  [oops]
  page_poison
  pti
  randomize_kstack_offset
  slub_debug
  slub_nomerge
  vsyscall
 dbus
 fs
  AIO / DIO / [uring]
  [fscache]
  fuse
  jbd2
  netfs
  notify
  overlay
  quota
  stat
  xattr
  vfs
   buffered, epoll, multiplexing
   cache
    buffer
     block
    inode
     dentry
      directory
      file
    page
   fd
   locks
   mount
   sync / fsync / fdatasync
 ifs
 inetd / xinetd
 kernfs
 kexec
 kpatch
 lxc
 mm
  dma
  edac
  hugepages
   transparent
  kfree
  kmalloc
  ksm
  madvise
  mlock
  mmap
  numa
  oom
   _kill
   _reaper
  shm
  slab
  slub
   poisoning
   redzoning
   sanity checks
  sparsemem
  swap
  tlb
  vmalloc
  zram
   [zswap]
 net
  ethtool
  gro / gso / tso
  netfilter
   conntrack
   iptables
    x_tables
   lvs
    IPVS
    seesaw
   NAT  (RCF1631, 1994)
    DNAT + SNAT
    [STUN + TURN + ICE]
   nftables
  netlink
   rtnetlink
  netpoll
   NAPI
  ovs
  skb
   net_dev
   netif
   ip_rcv
   tcp_rcv
  strp
  [xdp]
 rcu
 sched
  clock
   quantum
  interrupt
   async
   coalescing/moderation
   exception
    abort
    fault
    trap
   irq
    affinity
    hotplug*
    masking
    pm
    timer-based
  pelt
  psi
  rr
  [rt]
 security*
  cet
   cfi
   ibt
   ss
  cgroups  (v2)
   controllers
    cpu / cpuset
    eBPF*
     dev / net
    freezer
     criu
    io
    memory / hugetlb
    perf
    pid
  chroot
  hw exploits
   bhi
   ibpb
   ibrs
   retpoline
   rsb filling
   ssbd
   stibp
  kasan
  kTLS
  lsm
   avc
   capabilities
   [IPE]
   [landlock]
   mac
    SELinux
     context labeling
     targeted policies
      confinement
    [yama]
  namespaces
   cgroup / IPC / mnt / net / PID / time / UID / UTS
  [obfuscation]
   aslr
    brk
    exec
    heap randomization
    kaslr
    stack
    vdso
   kpti
   PTE inversion
  seccomp
  smap
  UKI
 stalld
 stdio
 sudo
 time
 trace
 wireguard


SystemD
 components
  boot
  coredump
  journald
  networkd
  notify
  nspawn
  oomd
  resolved
  run
  timesyncd
  udevd


POSIX  (partial, 1996 edition - IEEE Std 1003.1-1988)
 acl
 C api  ([glibc]*)
  ipc
   messages
   pipes
   rpc
   semaphores
   signals
   sockets
  pthreads
   atomic
   partitioning
    fork
   safety*
    deadlock
    membarrier
    mutex
     futex
     race condition
    spinlock
   syncing
    cond vars
    shared memory
     pointer passing
  syscalls
 dac
 portability
  [musl]
 regex
 shell
  cli
  env
  exit status
  std streams


LSB  (Linux Foundation - 5.0 spec, 2015 - 1.0 spec, 2001)
 elf
 fhs
  pseudo vfs
   dev
   proc
   run
   sys
    debug
    tracing
   tmp
 [libc]*
 rpm


OS
 [KataOS]
  seL4
 [Redox]
 UNIX
  *-BSD
   Mac
  Linux
   Alpine
    [postmarketOS]
   [AOSP]
    Android-x86
    CyanogenMod
     [LineageOS]
    GrapheneOS
   Arch
    [SteamOS]
    SystemRescue
   [Azure / CBL-Mariner]
   [Buildroot]
   Clear
   Debian
    Devuan
    [Kali]
    Knoppix
    Tails
    Ubuntu
   Fedora
    fcos
    Red Hat
     Aliyun
     [Alma]
     Amazon
     CentOS
      Stream
     Oracle
     Rocky
   Gentoo
    Chromium OS
     ChromeOS
     COS
   [LFS]
   openSUSE
   Photon OS
   Slackware
   [Yocto]
 [Windows]
  [Server]


Filesystems
 Bcachefs
 [btrfs]*
 ext4
  block groups
   checksum
   superblock
   block bitmap
   inode bitmap
   inode table
    mode, owner, size, timestamps, gid, counts, flags
    block maps / extent trees
     direct / indirect
    checksum
  special inodes
   defective blocks
   journal, optionally external and checksummed
   quotas
  extensions / features:
   bigalloc, dir_index, ext_attr, flex_bg, has_journal, inline_data, meta_bg,
    metadata_csum, sparse_super(v2), ...
   multi-block allocator
 [f2fs]
 OpenZFS
 [xfs]
  allocation groups
  dump / restore
  log device, separate
  reorganizer, [online defrag]
  repair, [online]
  [reverse space mapping]*  (experimental)
   deduplication
   scrubbing, [online]
   snapshots
    CoW
     reflinks
    online read-only mount
  shrinking!
  stripe unit
  variable
   block size
   extent length


Distributed systems  (replicated state machines)
 bft  (blockchain)
  consensus
   PoC
   [PoDA]
   [PoR]
   PoRep + PoSt
   [PoS]*
   PoW*
    [AuxPoW]*
  features
   [DeApps]
   domain names
   [DeFi]
   [DID]
   [fungible tokens]
   [L2]*
   [NFT]*
   [oracle(s)]
   [runtime vm]
   [smart contracts]
   [Web3]
   ZK
  implementations
   Ecash / B-money / Bit gold / Hashcash / RPOW
    BTC
     NMC / MSC / SYS / BCH / LN
   enebrix / LTC / DOGE / DGB
   ETH*
    [ETC]
    USDT / USDC
    SOL
   FIL
    BURST / AR / [XCH]
   PPC
   QRK / DASH / XZC
    ZEC / XMR / XVG / [ZEN] / RVN
   XRP
    [XLM]
   Babble
   [Concord]
   Hyperledger Fabric
   Ouroboros
    [ADA]
   Snow
   [Substrate]?
    [DOT]
   Tendermint
    Cosmos
     Akash?
     ATOM?
    BNB / LUNA
   [TON]
 strong consistency  (byzantine-intolerant fault-tolerant [sic])
  paxos*  (any variant)
   Borg
   Cassandra  (LWT [sic])
    Grakn
   Ceph
   Chubby
    Bigtable
   [CURP]
    [Xline]
   Doozerd
   FoundationDB*
   Frangipani
   Neo4j
   Neon
   OceanBase
   Riak KV
   ScyllaDB   (LWT [sic])
   Spanner
   XtreemFS
  rrraft
   distributed consensus
    heartbeats
    persistence
    replicated append-only immutable WAL
    state machine safety
    store snapshots
    leader
     followers member list
     log replication
      confirmation
       apply state  (committed)
     failure flow
      reelection
       randomized timeout
       candidate
       majority
       quorum met
      consistency sync
       index term log-matching
       replay
       state restored
   implementations
    ArangoDB
    braft
     brpc
    [DAOS]
    Dqlite
    etcd
     [APISIX]
     Cloud Foundry
     [Fluvio]
     JunoDB
     kube-vip
     Kubernetes
     [OpenObserve]
     [OpenStack]
     Patroni
     PD
      TiDB
     Rook
     Sensu Go
     Stolon
     Traefik
     [Vault]
      OpenBao
     Vitess
     Vulcand
    go-raft
     SeaweedFS
    hashicorp/raft[-*]
     Consul  (server side, consistent mode)
     Dkron
     Juju
     Liftbridge
     NATS Streaming
     [Nomad]
     rqlite
     Vault
    Hazelcast  (CP)
    InfluxDB v2
    IPFS
    KRaft
    Kudu
    LizardFS
    LogCabin
     RAMCloud
    MicroRaft
    MongoDB
    Nexus
    [NuRaft]
    OpenNebula
    [Openraft]
     CnosDB
     Databend
     Helyim
    [Qdrant]
    Ra
     RabbitMQ QQ
     Khepri
    RedisRaft
    RethinkDB
    SwarmKit
     Docker
    Tarantool
    [TDengine]
    Typesense
    async-raft
     tokio
      [terminus]
    [Little Raft]
     [ChiselStore]
    multi-group  (hash sharding)
     CockroachDB
     CubeFS
     Dgraph
     DocDB
     Dragonboat
     [NATS JetStream]
     NebulaGraph
     [openGemini]
     raft-engine
      TiKV
     raft-rs
     Ratis
      IoTDB
      Ozone
     Redpanda
     ScyllaDB
    [parallel]?
     PFS
 best-effort/causal/eventual/lazy/weak consistency
  CRDT
   AntidoteDB
   IPFS
   LWW
    Riak
   Roshi
    Redis
   Venice
  DHT / gossip
   Aerospike
   Couchbase
   CouchDB
   Dynamo
    Cassandra
    Riak
   Elasticsearch  (ZenDiscovery)
   GlusterFS
   Hazelcast
   Dat / hypercore
   Kademlia
    Ethereum
    Gnutella
    Kad
    libp2p
    Mainline
   KeyDB
   Rapid
   Redis Sentinel
    Codis
    Kvrocks
     rocksplicator
   ScyllaDB
   SWIM
    memberlist
     Alertmanager
     Cortex
     Loki
     [MetalLB L2/ARP]
     Mimir
     PureLB
     Serf
      [Consul]  (default/stale read mode)
       Ambassador
       confd
       Consul-Terraform-Sync
       ContainerPilot
       Traefik
       Vault
      [Nomad]
  ring
   Totem
    Corosync
     Pacemaker
      PAF
     Proxmox
     Sheepdog
  Linux-HA
   Heartbeat
   ldirectord
   Piranha
  UCARP
  Viewstamped
   revisited
    [TigerBeetle]?
  VRRP
   Keepalived
  ZAB
   ZooKeeper
    ActiveMQ
    BookKeeper
     Pulsar
    ClickHouse
    Contrail
    Druid
    HBase
     GeoMesa
     Impala
     Janus
     OpenTSDB
     Phoenix
    Helix
    Ignite
    LogScale
    Marathon
     Mesos
    Sensei


Container orchestration
 Docker Swarm
  Docker Engine
   dockerd
    containerd
     shim
      runC  (libcontainer)
    proxy
   gRPC
   moby
    BuildKit
    libnetwork  (CNM)
   OpenAPI
  multi-node
   manager consensus
   overlay ingress
    load balancing
    routing mesh
   rolling updates
  secrets
  service discovery
  stack  (compose)


Kubernetes
 distributions  (self-hosted)
  bootkube
  Canonical
  Cisco
  k3s*
   k3d
   k8e
   vcluster
  Karbon
  [kubeadm]
   preflight
   kubelet
   pull
   [generate] & upload
    certs / config
   control plane
    datastore
    [static pod(s)]
   [self-managed HA API]*
   token
    bootstrap / csr / join
   cert-rotation
   upgrade
   implementations
    Deckhouse
    kind
     Karmada
    KubeKey
     KubeSphere
    Kubespray
    kURL
    minikube
  Kubic
  Magnum
  [MetalK8s]
  Mirantis
   k0s
  NKP
  OpenShift
  Rancher
   cattle
   hyperkube
   [NeuVector]?
   RKE2
  Tanzu
  [Typhoon]
   Lokomotive
  Zarf
 extend
  CAPI
   KubeVirt
   MAAS
   [nested]
   [OpenStack]
   Sidero
   Tinkerbell
   [Virtink]
  kcp
  Kine
  meta
   CRD / KRM
   metacontroller
   mutating webhook
   [operator]
  observe
  police
  scan
  test
 patterns
  batch / grid / hpc / shm
   [Kueue]* / [Volcano]*
  build / CI / pipeline / workflow
  CD / event-driven / scheduled / sub
  distributed* / mesh / multi-cluster / multi-version
  [edge]* / embedded / IoT / p2p
  fault-tolerant / load-balanced / self-healing / shared-nothing*
  H2
   API: gRPC, OAS, [REST[ful]], ... / CDN*, gateway, reverse proxy / WebRTC* / wss, [wt]
  HFT / latency-sensitive / NFV* / rtc
  [in-memory] / message / pub / queue / RPC / service-oriented / transient
   [v6d]
  [persistent] / [transactional]*
   [ceph-csi] / Kanister
  your old app


CNI
 libcni
  ADD / CHECK / DEL
 mode
 plugins
  ipam
   whereabouts
  macvlan
  meta
   LB
    kube-vip
    MetalLB
    OpenELB
    PureLB
   [multus]
   portmap
   sbr
 policies / rules
  drop all / least privilege
 implementations
  BGP  (~VRF)
   Calico*
   [Cilium]
   kube-router*
  DPDK
  Geneve
   ambient
  GRE
  IPIP
  IPsec
  IPVS
  MPLS
   Tungsten Fabric
  OvS
   antrea
   *-OVN-*
   weave
  SR-IOV
  VPP
  VxLAN
  wg
   [Calico]*
   Cilium
   [flannel]


[SMI]
 implementations
  [Cilium]*
  [Istio]*
  kuma
  [Linkerd]
  [NSM]?
  OSM
  [Traefik]


CRI
 gRPC / protobuf
 implementations
  containerd
  cri-dockerd
  cri-o
  dockershim
  frakti
  pouch


Container runtime  (OCI runtime-spec)
 monitor
  conmon[-rs]
 runtime
  apptainer
  crun
  lxd
  railcar
  rkt
  runC
  [youki]
 sandbox/virtual
  [ACRN]
  clear
  rust-vmm
   Dragonball
    kata
   Firecracker
    Ignite
  runnc
  runV
  runsc
   gVisor


Container image    (OCI image-spec)
 Containerfile(s)
  build
   from [scratch]
   multi-stage
   stateless / templated
   ephemeral [intermediate] container(s)
    image layer(s) / stages
   [encrypt]
    ocicrypt
  bundle
   final image
    [single self-contained binary]
   config
    annotations
    [healthcheck]
    hostname
    hooks
    linux-specific
    mount(s)
    process
    root
 sign
  cosign
 push              (OCI distribution-spec)
  skopeo


CSI
 implementations
  BeeGFS
  Carina
  ceph
  ChubaoFS
  Curve
  Diamanti
  DirectPV
  HwameiStor
  Infinidat
  IOMesh
  Isilon / PowerScale
  [JuiceFS]
  Lightbits
  LINSTOR
  Longhorn
  Ondat / StorageOS
  OpenEBS?
   cStor
   Jiva
   Mayastor?
  Portworx / stork
  REX-Ray
  Robin
  [SPDK]*
  StorPool
  Trident
  VAST
  WekaFS


COSI
 ceph
 MinIO
 [NooBaa]


Pod
 container(s)
  cgroups (v2) limits
  [command / ENTRYPOINT]
   [args / CMD]
  [env]
  [ephemeral]
  namespaces
   [host]*
   shared
    net
     pause container
  restricted / sandboxed
   minimal capabilities
   rootless / fakeroot
  requests
  [volume mount(s)]
   bind   (Docker)
   links  (Docker)
   [tmpfs(s)]
 [port(s)]
 [probes]
 volume(s)
  overlay
  base underlying image
   thin layer
    [force ro]
  [ephemeral]
   [projected]
  [persistent]  (CSI)
 implementations
  libpod
   podman
    desktop


Data stores  (databases)
 document  (JSON)
  ArangoDB
  [Bluge]
   ZincSearch
  Couchbase
  CouchDB
  Lucene
   CrateDB
  Meilisearch
  MongoDB
   [FerretDB]
   PoloDB
  RethinkDB
  ScyllaDB  (DynamoDB Alternator)
  [Tantivy]
   Quickwit
  Typesense
  YugabyteDB
 graph
  key-value
   ArangoDB
   [Dgraph]
   Grakn
   Janus
   memgraph?
   [NebulaGraph]
   Neo4j
   [RageDB]
   RedisGraph
  RDF triple store
   OrientDB
   [TerminusDB]
   Virtuoso
 in-memory
  Aerospike
  [cachegrand]
  [Dragonfly]
  Memcached
  Redis
   Ardb
   [KeyDB]
   [KrakenD]
   [Pika]
    Codis
   Redict
   [Tyk]
   Valkey
  Tarantool
 key-value
  BadgerDB
   Dgraph
   Dkron
   FluxCD
   immudb
   Jaeger
   Pyroscope
  Berkeley DB
   [LMDB]
    bolt
     [bbolt]
      Consul
      etcd
      InfluxDB v2
      [NATS]
      SeaweedFS
       [Helyim]
     [jammdb]
   RPM
  Bitcask
  Dynamo
  ForestDB
  [FoundationDB]
   3FS*
   [mvSQLite]
    [sqld]
  JetStream
  LevelDB
   Bitcoin
   Chromium*  ungoogled
    Bromite
    [Vanadium]
    [Thorium]
   FileStore
   Riak
   RocketMQ
   [RocksDB]
    ArangoDB
    ceph-mon
    ceph-osd
    [DocDB]
    Flink
    JunoDB
    Kafka
    Kvrocks
    MyRocks
    NebulaGraph
    [Pebble]
     CockroachDB
    [Qdrant]
    Rocksplicator
    [Speedb]
    [TerarkDB]
    TiKV
     [SurrealDB]
     Titan
   SeaweedFS
  PerconaFT
  [redb]
  [Skytable]*
  [sled]*
   OpenObserve
  Sophia
  WiredTiger
 relational
  row
   [SQL Server]
   SQLite
    Firefox
     [LibreWolf]
     [Mercury]
     [Waterfox]
    libSQL*
    [Limbo]*
    rqlite
   TiDB
   [YDB]
   YugabyteDB
  column
   Cassandra
   ClickHouse
   DuckDB
   HBase
   Hypertable
   Parquet
   ScyllaDB
   YugabyteDB
  multidimensional
   Tera
  sharded
 stream / queue  (~kv)
  ActiveMQ
  [Fluvio]
  Kafka
   [Redpanda]
  [NATS JetStream]
   [OpenObserve]
  NSQ
  Pravega
  Pulsar
  RabbitMQ
  Redis
 ts
  [cachegrand]
  [CnosDB]
  [GreptimeDB]
  [HoraeDB]
  InfluxDB (v2 v3?)
  Kdb+
  MongoDB
  [openGemini]
  [Prometheus]
   [Cortex]
    [Mimir]
   M3
   Thanos
   VictoriaMetrics
  QuestDB
  RRDtool
   Cacti
   collectd
   Ganglia
   MRTG
   Munin
   Nagios
   OpenNMS
  Riak TS
  [TDengine]
  TSDB
   [Loki]
  Whisper
   Graphite
    carbon
    Metrictank
 vector
  Epsilla
  Milvus
  [Qdrant]
  Weaviate


TLS 1.3  (RFC8446, 2018 / TLS 1.2 RFC5246, 2008 / TLS 1.0 RFC2246, 1999)
 ClientHello       ServerHello
                    X.509 PKI certificate [authentication]  (RFC2459, 1999)
                     ISRG X2  (ECC)
                      Root YE  (P-384/SHA384)
                       Let's Encrypt YE2
                        DNS.1: spdf.net
                        IP.1:  49.12.255.141
                        IP.2:  2a01:4f8:1c1e:89::1
                    TLS12 | TLS13
                     Key exchange      ECDHE
                     Algorithm type    ECDSA
                     Supported groups  x25519, x448, secp384r1
                     Extensions        ALPN | NPN
                     TLS13 cipher suites
                      CHACHA20-POLY1305 / AES-256-GCM
                     TLS12 suites  (AEAD only)
 ClientKeyExchange
 PFS ephemeral key
 0-RTT / early data
 Certificate Transparency  (RFC6962)
  embedded logs
   [Cloudflare]    / [DigiCert]         / [Google]
   [Let's Encrypt] / [Sectigo (Comodo)] / [TrustAsia]
 TLS-SNI  (RFC3546, 2003)
  [ECH]  (draft-ietf-tls-esni-18, 2024)
 OCSP  (must-staple, RFC7633)

HTTP/1.1  (RFC2068, 1999 / HTTP 1.0 RFC1945, 1996)
HTTP/2    (RFC7540, 2015)
 binary  (h2)
 compression
  brotli  (RFC7932, 2016)
  HPACK   (RFC7541, 2015)
 Server Push  (RFC8030)
[HTTP/3]*  (RFC9114, 2022)
 [QUIC]  (RFC9000, 2021)
 QPACK   (RFC9204, 2022)
 [WebTransport]  (WiP draft)
[WebSocket]  (WHATWG Living Standard / [RFC9220, 2022]* / RFC8441, 2018 / RFC6455, 2011)


Compilers
 [GCC]*
  optimizations
   gold linker*
   link-time
   native tuned instruction set
   [pgo]*
   even more
   yet  more
  protections
   control-flow
   fortify
   heap areas
   no-execute bit / DEP
   no rpath / runpath
   no symbols
   pointer obfuscation
   position-independent
    code
    execution
   read-only relocations  (full)
   sections
   stack
    all
    canary
    clash mitigation
   strip-all
   unitialized
   warn all/extra
   zero'ing used registers
  sanitizers
   address
   concurrency
   leak
   thread
   undefined
 LLVM
  Carbon
  Clang C*
   Emscripten
   [OpenCL]
   [OpenMP]
  [Go]*
  Rust
  [WebAssembly]
  [Zig]


WAF  (nginX*)
 headers
  cache
  cookies
  Cross-Origin
   CORS
   EP / OP / RP
  CSP
  Expect-CT
  [HPKP]  (deprecated)
  HSTS    (preloaded)
  Permissions-Policy  (missing disable all and sane defaults)
  XSS
 modules
  compile time
   [modsecurity]
    inbound & outbound
    [OWASP] crs
   [OpenSSL]
  dynamic
   brotli  (dynamic)
   nginx-ct  (broken)


CSS   ([CSS3]* - W3C CSS 2.1, 2011 - CSS level 1, 1996)
HTML  (WHATWG Living Standard / W3C HTML5, 2014 / RFC1866, 1995)
XML
 XHTML


Encoding
 ASCII    (RFC  20, 1969)
 Unicode  (ISO/IEC 10646, 1993)
  UTF-8     (RFC2044, 1996)
  [UTF-16]  (RFC2781, 2000)


vcs
 RCS
  CVS
 git
 mercurial
 [Pijul]
 svn
 [TFVC]


CI / pipeline
 [trigger]
 source(s)
  pinned
  shallow
  dependencies
   audit
   [licensing]
    Apache / BSD / [A]GPL* / MIT
    [BSL] / [CC]* / [SSPL] / [WTFPL]
   scan
  [linting]
  static analysis
 artifact(s)
  build
  test  (lots)
  sign
 release
  tag
  distribute
[No CI]





history  (html lines)
  143 20170716.spdf
  188 20170719.spdf
  172 20171010.spdf
  193 20180905.spdf
  209 20190826.spdf
  222 20191117.spdf
  387 20200323.spdf
  603 20200709.spdf
  741 20210217.spdf
 1072 20210903.spdf
 1328 20220505.spdf
 1629 20231214.spdf
 1817 20241210.spdf