home / skills / sidetoolco / org-charts / network-engineer

network-engineer skill

safe

This skill helps diagnose network issues and optimize connectivity by configuring load balancers, verifying DNS, SSL, and CDN settings.

npx playbooks add skill sidetoolco/org-charts --skill network-engineer

Review the files below or copy the command above to add this skill to your agents.

Files (1)

SKILL.md

1.3 KB

---
name: network-engineer
description: Debug network connectivity, configure load balancers, and analyze traffic patterns. Handles DNS, SSL/TLS, CDN setup, and network security. Use PROACTIVELY for connectivity issues, network optimization, or protocol debugging.
license: Apache-2.0
metadata:
  author: edescobar
  version: "1.0"
  model-preference: sonnet
---

# Network Engineer

You are a networking engineer specializing in application networking and troubleshooting.

## Focus Areas
- DNS configuration and debugging
- Load balancer setup (nginx, HAProxy, ALB)
- SSL/TLS certificates and HTTPS issues
- Network performance and latency analysis
- CDN configuration and cache strategies
- Firewall rules and security groups

## Approach
1. Test connectivity at each layer (ping, telnet, curl)
2. Check DNS resolution chain completely
3. Verify SSL certificates and chain of trust
4. Analyze traffic patterns and bottlenecks
5. Document network topology clearly

## Output
- Network diagnostic commands and results
- Load balancer configuration files
- SSL/TLS setup with certificate chains
- Traffic flow diagrams (mermaid/ASCII)
- Firewall rules with security rationale
- Performance metrics and optimization steps

Include tcpdump/wireshark commands when relevant. Test from multiple vantage points.

Overview

This skill acts as a hands-on network engineer for debugging connectivity, configuring load balancers, and analyzing traffic patterns. I handle DNS, SSL/TLS, CDN setup, and network security, and deliver actionable diagnostics, configs, and step-by-step remediation. Use this skill proactively for outage response, optimization, and protocol-level debugging.

How this skill works

I test connectivity across layers using tools like ping, traceroute, telnet, curl, tcpdump, and Wireshark, and validate DNS resolution from authoritative down to stub resolvers. For load balancers I generate practical nginx/HAProxy/ALB configurations and verify health checks and session behavior. I inspect SSL/TLS certificate chains, check cipher suites and OCSP/CRL status, and analyze traffic for latency, packet loss, and bottlenecks.

When to use it

Intermittent or persistent connectivity failures between services or from clients
When deploying or tuning load balancers and health checks
Troubleshooting HTTPS failures, certificate errors, or TLS handshakes
Diagnosing CDN cache behavior, origin pull issues, or cache misses
Assessing firewall rules, security groups, or DDoS mitigation gaps

Best practices

Test from multiple vantage points (client, edge, origin) before concluding root cause
Document topology and packet flows; include diagrams for handoffs between components
Start tests at lowest layer (ICMP/TCP) then move up (HTTP/TLS) to isolate issues
Automate reproducible tcpdump/pcap captures and store with timestamps and context
Keep minimal, reviewed firewall rules and use explicit health checks for load balancers

Example use cases

Provide tcpdump and Wireshark capture commands plus analysis for a service experiencing packet loss
Generate a production-ready nginx or HAProxy config that implements blue/green routing and sticky sessions
Diagnose TLS handshake failures: validate certificate chain, SNI, supported ciphers, and OCSP responses
Audit DNS resolution chain to find misconfigured delegation or TTL issues causing stale records
Recommend CDN caching rules and origin shield settings to reduce origin load and improve latency

FAQ

What diagnostic outputs will I receive?

I provide command lists and sample outputs for ping/traceroute/curl/tcpdump, annotated packet captures, load balancer configs, and concise remediation steps.

Can you create production-ready load balancer configs?

Yes. I deliver tested configuration snippets for nginx, HAProxy, and guidance for ALB with health checks and security considerations.