Network icons

The 82 network icons in Cloud, described

A recorda-record

An A record — the name pointed straight at an address.

Active-activeactive-active

Active-active — both sites serving all the time, live in parallel.

Active-passiveactive-passive

Active-passive — one site serves while the other waits its turn as a spare.

ALPNalpn

ALPN — the two ends choosing which protocol to speak while they are already shaking hands.

Anycastanycast

Anycast — one address answered by whichever location is nearest.

Bandwidth capbandwidth-cap

A bandwidth cap — the ceiling above which nothing more is carried.

BGPbgp

BGP — the networks telling each other which routes they will carry.

Broadcast domainbroadcast-net

A broadcast domain — the stretch of network where a shout reaches everyone.

Cache hitcache-hit

A cache hit — found it without asking anyone, served fast from the cache.

Cache misscache-miss

A cache miss — not here, go and ask the origin, the slow path.

Certificate expirycertificate-expiry

Certificate expiry — the date after which nothing will trust it.

Certificate rotationcertificate-rotate

Certificate rotation — the old one replaced before anything notices.

Cipher suitecipher-suite

A cipher suite — the set of algorithms the two ends agreed to use.

CNAME recordcname-record

A CNAME — a name that means another name, which is looked up in turn.

CORScors

CORS — the header that says which other origins the browser may hand this to.

CSRFcsrf

CSRF — a request the browser sends with your session that you never asked for.

Dead letterdead-letter-cloud

A dead letter — a message delivered nowhere, kept anyway for inspection.

DNSdns

DNS — which domain name points where, the records that resolve names to addresses.

DNS recorddns-record

A DNS record — one line of the answer a resolver gives back.

DNS TTLdns-ttl

A DNS TTL — how long a resolver may keep the answer before asking again.

Dual stackdual-stack

Dual stack — the same host reachable over IPv4 and IPv6 at once.

Egressegress

Egress — traffic leaving a network, the outbound direction that is often billed.

Ethernetethernet

An RJ45 plug with its clip and pins — a wired network connection.

Event busevent-bus

An event bus — one rail that every service taps into for events.

Failover regionfailover-region

A failover region — the standby that answers when the home region does not.

Forward proxyforward-proxy

A forward proxy — many clients leaving through one door on the way out.

Gatewaygateway

A gateway — the one way in, the entry point through which requests pass.

Geo filtergeo-filter

A location pin with a funnel in its head — traffic filtered by where it comes from.

Handshakehandshake

A handshake — the back and forth before a single byte of the message moves.

Health probehealth-probe

A health probe — the service poked on schedule, and it answered that it is alive.

HTTP/2 streamhttp2-stream

An HTTP/2 stream — one of many requests sharing a single connection.

HTTP/3http3

HTTP/3 — the same requests, carried over QUIC instead of TCP.

Ingress trafficingress-traffic

Ingress — everything arriving from outside the boundary.

Jumbo framejumbo-frame

A jumbo frame — a packet far larger than the default, for links that can take it.

Keep-alivekeep-alive

Keep-alive — the connection held open so the next request costs nothing to start.

Load balancerload-balancer

A load balancer — one address spreading traffic across many machines.

Long pollinglong-polling

Long polling — the request held open until there is something to answer with.

Mutual TLSmtls

Mutual TLS — both ends prove who they are, not just the server.

MTUmtu

MTU — the largest packet a link will carry without breaking it up.

Multicastmulticast

Multicast — sent once and delivered to everyone who asked for it.

NATnat

NAT — many private addresses leaving under one public one.

NAT gatewaynat-gw

A NAT gateway — everyone leaves the network wearing the same public address.

Networknetwork

A network — machines connected so they can reach each other, nodes in a topology.

Network policynetwork-policy

A network policy — which workloads may talk to which, written down and enforced.

Origin shieldorigin-shield

An origin shield — one more caching wall before any request reaches the origin.

Overlay networkoverlay-network

An overlay network — a network drawn on top of another one that knows nothing about it.

Peeringpeering

Peering — two networks joined directly to each other, a VPC link.

Pilot lightpilot-light

Pilot light — almost everything off in the standby region, just a spark kept alive.

Pingping-host

Ping — a packet sent only to see whether anything answers, and how fast.

Portport

A port — the numbered door on a host that a connection arrives at.

Port forwardport-forward

A port forward — traffic arriving on one port carried straight through to another.

Private endpointprivate-endpoint

A private endpoint — the route ends inside the VPC at a lock, never on the public internet.

Private linkprivate-link

A private link — a connection between services that never leaves the private network.

Purge cachepurge-cache

Purge cache — everything flushed out on purpose so it is fetched fresh.

Quality of serviceqos

Quality of service — the traffic that matters goes first when the link is full.

QUICquic

QUIC — many streams over one UDP connection, so one lost packet stalls only its own.

Region pairregion-pair

A region pair — two homes for the same service for geographic redundancy.

REST endpointrest-endpoint

A REST endpoint — a path and a verb that together name one thing to do.

Reverse proxyreverse-proxy

A reverse proxy — one address in front of many servers, chosen per request.

Routerrouter

A router with two aerials — the box a local network runs through.

Satellitesatellite

A dish on its mount — a satellite link, the ground station end of it.

Service endpointservice-endpoint

A service endpoint — the socket in the private wall a service is reached through.

Sidecar proxysidecar-proxy

A sidecar proxy — the proxy that ships beside the workload, in the same pod.

SNIsni

SNI — the name the client asks for, sent in the open before the tunnel exists.

SOAP endpointsoap-endpoint

A SOAP endpoint — the envelope, the header and the body, all in XML.

Socket closesocket-close

A socket closed — the connection torn down at both ends.

Socket opensocket-open

A socket open — the connection established and holding.

Socket timeoutsocket-timeout

A socket timeout — the far end never answered and the wait was given up.

Subnetsubnet

A subnet — a fenced-off slice of a network with its own address range.

TCPtcp

TCP — every packet acknowledged, in order, or sent again.

Throttlethrottle-network

Throttling — traffic deliberately slowed so the link stays usable.

TLS terminationtls-terminate

TLS termination — the encrypted leg ends here and the plain one begins.

Traceroutetraceroute

Traceroute — every hop between here and there, and what each one cost.

Transit gatewaytransit-gateway

A transit gateway — every network's traffic routed through one hub.

UDPudp

UDP — packets sent and not asked after, which is why it is fast.

Unicastunicast

Unicast — one sender, one receiver, and nobody else on the line.

VLANvlan

A VLAN — one wire carrying networks that cannot see each other.

VPCvpc

A VPC — your own private corner of the provider's network, walled off.

VPC peeringvpc-peering

VPC peering — two private networks joined by one quiet corridor.

Warm standbywarm-standby

Warm standby — half awake so the wake-up is short when failover comes.

WebSocket closewebsocket-close

A WebSocket closed — the two-way channel shut, with a code saying why.

Zone spreadzone-spread

Zone spread — not all the eggs in one rack, workloads scattered across zones.

In code, each is one import — import { ARecord } from "@iconmind/react/icons/a-record" — and the same name in Vue, Svelte, Solid, Preact, React Native, Astro, Blade and Flutter.

Narrow it by tag